Chatkontrolle: Ein totalitärer Missbrauch von Technik

Chatkontrolle gibt es nicht einmal in Russland oder China: Die anlass- und verdachtslose Durchleuchtung sämtlicher Kommunikation ist einer Demokratie unwürdig. Ein IMHO von Friedhelm Greis (Chatkontrolle, Google)

Chatkontrolle gibt es nicht einmal in Russland oder China: Die anlass- und verdachtslose Durchleuchtung sämtlicher Kommunikation ist einer Demokratie unwürdig. Ein IMHO von Friedhelm Greis (Chatkontrolle, Google)

USA: Hilfspaket von über 50 Milliarden US-Dollar an die Ukraine

Der Senat muss noch abstimmen, eine Überraschung wird nicht erwartet. Die Kosten-Nutzen-Rechnungen laufen auf eine Verlängerung des Ukraine-Kriegs hinaus

Der Senat muss noch abstimmen, eine Überraschung wird nicht erwartet. Die Kosten-Nutzen-Rechnungen laufen auf eine Verlängerung des Ukraine-Kriegs hinaus

Blu-ray, 4K Ultra HD Blu-ray sales stats for the week ending April 30, 2022

The results and analysis for DVD, Blu-ray and Ultra HD Blu-ray sales for the week ending April 30, 2022, are in. A most prolific director with his end-of-the-world movies is back with another one, and it was the top-selling new release for the week. Find out what movie it was in our weekly DVD, Blu-ray and Ultra HD Blu-ray sales stats and analysis feature.



The results and analysis for DVD, Blu-ray and Ultra HD Blu-ray sales for the week ending April 30, 2022, are in. A most prolific director with his end-of-the-world movies is back with another one, and it was the top-selling new release for the week. Find out what movie it was in our weekly DVD, Blu-ray and Ultra HD Blu-ray sales stats and analysis feature.

Pixel Buds Pro: Googles erste Bluetooth-Hörstöpsel haben ANC-Technik

Googles neue Hörstöpsel Pixel Buds Pro bieten ANC sowie Bluetooth-Multipoint und nutzen beliebte Sonderfunktionen der bisherigen Pixel-Buds-Modelle. (Bluetooth-Hörstöpsel, Google)

Googles neue Hörstöpsel Pixel Buds Pro bieten ANC sowie Bluetooth-Multipoint und nutzen beliebte Sonderfunktionen der bisherigen Pixel-Buds-Modelle. (Bluetooth-Hörstöpsel, Google)

Baby formula shortage worsens as national out-of-stock rate hits 43%

Supply chain issues, recalls, and inflation have all contributed to the shortage.

A nearly empty baby formula display shelf is seen at a Walgreens pharmacy on May 9, 2022 in New York City.

Enlarge / A nearly empty baby formula display shelf is seen at a Walgreens pharmacy on May 9, 2022 in New York City. (credit: Getty | China News Service)

Shortages of infant and specialty formulas continue to worsen in the US, with the national out-of-stock rate hitting a high of 43 percent in the first week of May, according to data released this week from Datasembly, which tracks retail information.

With bare shelves in stores, purchase limits, and online price gouging and scams, parents across the country are struggling to feed formula-fed babies and children with medical conditions that necessitate specialized formulas. News reports are filled with parents driving hours to search stores for formula or posting pleas online. Some are even watering down formula or turning to recalled batches contaminated with dangerous bacteria.

The dire shortage is due to a combination of factors, including pandemic-related supply chain issues, product recalls, and inflation, according to Datasembly CEO Ben Reich.

Read 9 remaining paragraphs | Comments

Backdoor in public repository used new form of attack to target big firms

Dependency confusion attacks exploit our trust in public code repositories.

Skull and crossbones in binary code

Enlarge (credit: Getty Images)

A backdoor that researchers found hiding inside open source code targeting four German companies was the work of a professional penetration tester. The tester was checking clients’ resilience against a new class of attacks that exploits public repositories used by millions of software projects worldwide. But it could have been bad. Very bad.

Dependency confusion is a new form of supply-chain attack that came to the forefront in March 2021, when a researcher demonstrated he could use it to execute unauthorized code of his choice on networks belonging to Apple, Microsoft, and 33 other companies. The researcher, Alex Birsan, received $130,000 in bug bounties and credit for developing the new attack form.

A few weeks later, a different researcher uncovered evidence that showed that Amazon, Slack, Lyft, Zillow, and other companies had been targeted in attacks that used the same technique. The release of more than 200 malicious packages into the wild indicated the attack Birsan devised appealed to real-world threat actors.

Read 14 remaining paragraphs | Comments