Researchers find backdoor lurking in WordPress plugin used by schools

If you’ve used School Management Pro, it’s time to check your site, stat.

A cartoon door leads to a wall of computer code.

Enlarge (credit: BeeBright / Getty Images / iStockphoto)

Researchers said on Friday that they found a malicious backdoor in a WordPress plugin that gave attackers full control of websites that used the package, which is marketed to schools.

The premium version of School Management, a plugin schools use to operate and manage their websites, has contained the backdoor since at least version 8.9, researchers at website security service JetPack said in a blog post without ruling out that it had been present in earlier versions. This page from a third-party site shows that version 8.9 was released last August.

Obvious backdoor

Jetpack said it discovered the backdoor after support team members at WordPress.com reported finding heavily obfuscated code on several sites that used School Management Pro. After deobfuscating it, they realized that the code, stashed in the license-checking part of the plugin, was intentionally placed there with the goal of giving outsiders the ability to take control of sites.

Read 8 remaining paragraphs | Comments

Sixth child in US dies of unexplained hepatitis as global cases top 600

There are now over 600 cases worldwide and 15 deaths, but still no firm answers.

Liver lesions in patient with chronic active hepatitis C.

Enlarge / Liver lesions in patient with chronic active hepatitis C. (credit: Getty | BSIP)

A sixth child has died in the United States from puzzling liver inflammation—aka hepatitis—and the number of unexplained cases has risen to 180 across 36 states, according to the Centers for Disease Control and Prevention.

The latest death was announced in a press briefing Friday, led by CDC Deputy Director for Infectious Diseases Jay Butler, who said it was reported to the agency Thursday. He did not indicate in which state the death occurred.

In addition to the deaths, 15 of the 180 cases required liver transplants, Butler reported. The cases all occurred in children under the age of 10 but skewed to preschool-age children, with the median age being around 2 years.

Read 16 remaining paragraphs | Comments

"Die Friedensbewegung schwört nicht ab"

Ein Friedenskongress steht kritisch zur Nato und erntet dafür wegen des Kriegs in der Ukraine viel Kritik. Ein Gespräch mit der Publizistin und Friedensaktivistin Christiane Reymann.

Ein Friedenskongress steht kritisch zur Nato und erntet dafür wegen des Kriegs in der Ukraine viel Kritik. Ein Gespräch mit der Publizistin und Friedensaktivistin Christiane Reymann.

Analysis of prehistoric feces shows Stonehenge people had parasites

Fossilized fecal analysis sheds light on prehistoric dietary habits and social behavior.

The prehistoric monument of Stonehenge in Wiltshire, UK. A large Neolithic settlement known as Durrington Walls is less than two miles away and is believed to be where the people who built the famous site camped during the main stage of construction.

Enlarge / The prehistoric monument of Stonehenge in Wiltshire, UK. A large Neolithic settlement known as Durrington Walls is less than two miles away and is believed to be where the people who built the famous site camped during the main stage of construction. (credit: Adam Stanford)

Nearly two miles away from Stonehenge, there is a large Neolithic settlement known as Durrington Walls, believed to be where the people who built the famous site camped during the main stage of construction. British archaeologists have analyzed fossilized fecal matter collected at the site and found that it contained the eggs of parasitic worms, according to a new paper published in the journal Parasitology. The preserved feces belonged to both dogs and humans, indicating that people brought dogs to the site with them for winter feasts and likely shared the scraps with the canines.

“This is the first time intestinal parasites have been recovered from Neolithic Britain, and to find them in the environment of Stonehenge is really something,” said co-author Piers Mitchell, an archaeologist at the University of Cambridge. “The type of parasites we find are compatible with previous evidence for winter feasting on animals during the building of Stonehenge.”

For archaeologists keen on learning more about the health and diet of past populations—as well as how certain parasites evolved over the evolutionary history of the microbiome—preserved samples of ancient poo can be a veritable goldmine of information. For instance, ancient Iron Age miners in what is now Austria were quite fond of beer and blue cheese, according to a 2021 analysis of preserved paleo-poop excavated from the prehistoric underground salt mines of Hallstatt-Dachstein/Salzkammergut, a UNESCO World Heritage site. Fecal samples are usually found in dry caves, desert areas, frozen areas, or waterlogged environments (like bogs), where desiccation, freezing, and similar processes preserve the fecal matter for posterity.

Read 9 remaining paragraphs | Comments

U.S. Megaupload Judge Was Replaced Due to Disney Stake, Dotcom Says

Following the civil lawsuits against Megaupload in the US, the criminal case has been reassigned to a new judge as well. According to Kim Dotcom, District Court Judge Liam O’Grady was replaced after the defense complained about his financial ties to Disney, which is listed as a victim of Megaupload’s alleged crimes.

From: TF, for the latest news on copyright battles, piracy and more.

megauploadMore than ten years after the shutdown of Megaupload, there have been some major developments relating to the criminal prosecution recently.

Two of the three remaining defendants, Mathias Ortmann and Bram van der Kolk, signed an agreement with authorities to be charged in New Zealand instead of the United States.

Megaupload founder Kim Dotcom wasn’t offered such a deal and is still wanted for extradition by the US Department of Justice. The U.S. prosecution has been on hold for years but there’s some movement on that front as well now.

Judge O’Grady is Replaced

Last month we already reported that Virginia District Court Judge Liam O’Grady was replaced in the civil lawsuits filed by the RIAA and MPA against the site. At the time, Megaupload’s team suggested that it would make sense to do the same in the criminal case.

“Although both civil copyright actions are stayed at this time, the rulings in one action may affect or control issues in the other when active litigation resumes; therefore, the Court has prudently assigned them a single District Judge to preside over both,” Megaupload’s lawyers wrote.

o'grady

The request was honored this week with Judge O’Grady being replaced by District Judge Anthony J. Trenga. The court docket doesn’t reveal the reason for this reassignment but, according to Dotcom, it came at the request of his legal team.

Disney Stake

Megaupload’s founder says that Judge O’Grady previously worked at Disney and still has stock in the entertainment giant, suggesting that there could be a financial conflict of interest.

“Judge Liam O’Grady was removed from my criminal copyright case in the US which was initiated by the Hollywood studios, including Disney. We complained to the Court because we discovered that our Judge used to work for Disney and owned Disney stock while active on my cases.

“Judge O’Grady never disclosed his conflict of interest. He destroyed Megaupload without any hearing,” Dotcom says.

Disney Enterprises is a plaintiff in the movie industry’s civil case against Megaupload and is also listed as one of the victims in the criminal matter. This means that if the judge has a stake in the company, it could cause issues as the cases progress.

Financial Ties are Not Allowed

In the United States, federal judges are not allowed to preside over cases in which they have a financial interest. This was also highlighted by the WSJ, which revealed last year that Judge O’Grady handled more than 60 cases that were mentioned on his financial disclosure forms.

The court didn’t clarify whether Megaupload’s complaints played a role in the decision to replace the judge but since it happened soon after the Disney stake was pointed out, it’s a plausible explanation.

The Megaupload case is not the only major copyright lawsuit Judge O’Grady has been involved in. He also presided over the legal battle between the music industry and Cox Communications, which resulted in a billion-dollar judgment against the ISP. Disney was not involved in that case.

New Judge With a History

Going forward, Megaupload’s lawsuits will all be handled by District Judge Anthony Trenga, who previously presided over the case against the popular pirate site NinjaVideo. In that case, several people were convicted of criminal copyright infringement, including the site’s founder Hana Beshara who was sentenced to 22 months in prison.

Intriguingly, Megaupload also played a role in the NinjaVideo prosecution, and vice versa.

In 2010, the FBI served Dotcom’s platform with a search warrant targeting files uploaded by NinjaVideo’s staff. Megaupload kept the file on its servers, assuming that it was supposed to do so. This decision later backfired as the NinjaVideo files were used as evidence against Megaupload in their criminal prosecution.

From: TF, for the latest news on copyright battles, piracy and more.

Review: New Chip ‘N Dale movie hilariously spoofs classic games, cartoons

A Shrek for a new era, as Disney lets Lonely Island go nuts (in PG fashion).

When there's danger!

Enlarge / When there's danger! (credit: Disney)

Traditionally, when Disney films skip theaters and go straight to video, it's not a good sign. That's changed somewhat now that the Disney+ content beast needs to be fed, yet the company still differentiates between "triple-A television" like The Mandalorian and "cheap, kid-friendly movies" like the Air Bud series.

Hence, today's Disney+ premiere of Chip 'N Dale: Rescue Rangersa PG-rated reboot with little in the way of advance press screenings—had us assuming the worst, despite of its comedy pedigree. The Lonely Island ("Lazy Sunday," "Mother Lover") is all over the film's credits, but how much of the group's boundary-pushing Saturday Night Live work could survive the family-friendly demands of a straight-to-Disney+ launch?

I'm here with surprisingly good news. Chip 'N Dale is a self-aware comedy romp that families will appreciate. What's more, it knows exactly when and how to toy with '80s and '90s gaming, cartoon, and pop-culture references without losing character development and physical comedy.

Read 12 remaining paragraphs | Comments

Lilbits: OSOM V1 will be Snapdragon 8+ Gen 1 powered, ONEXPLAYER working on a handheld with Ryzen 6000U

Qualcomm’s new Snapdragon 8+ Gen 1 processor is expected to bring a 10% boost in CPU and graphics performance and a 20% improvement in AI performance when compared with the Snapdragon 8 Gen 1, while also lowing power consumption by as much as 30%…

Qualcomm’s new Snapdragon 8+ Gen 1 processor is expected to bring a 10% boost in CPU and graphics performance and a 20% improvement in AI performance when compared with the Snapdragon 8 Gen 1, while also lowing power consumption by as much as 30%. So it’s no surprise that a bunch of phone makers plan […]

The post Lilbits: OSOM V1 will be Snapdragon 8+ Gen 1 powered, ONEXPLAYER working on a handheld with Ryzen 6000U appeared first on Liliputing.

Microsoft is bringing Android 12.1 to the Windows Subsystem for Android for Windows 11

The Windows Subsystem for Android is an optional component of Windows 11 that allows you to run Android apps on a Windows PC. Basically Microsoft achieves this by installing a complete Android operating system in a virtual machine and configuring it s…

The Windows Subsystem for Android is an optional component of Windows 11 that allows you to run Android apps on a Windows PC. Basically Microsoft achieves this by installing a complete Android operating system in a virtual machine and configuring it so that Android you can launch and use Android apps almost as if they […]

The post Microsoft is bringing Android 12.1 to the Windows Subsystem for Android for Windows 11 appeared first on Liliputing.

Qualcomm’s Snapdragon “8+ Gen 1” salvage operation moves the chip to TSMC

After missing performance estimates, Qualcomm is dumping Samsung mid-cycle.

Qualcomm’s Snapdragon “8+ Gen 1” salvage operation moves the chip to TSMC

Enlarge (credit: Qualcomm)

Qualcomm's mid-cycle "plus" chip refresh—the Snapdragon 8+ Gen 1—has been announced. As usual, Qualcomm is promising some modest improvements over the existing 8 Gen 1 chip. The company said the chip will provide "10 percent faster CPU performance," thanks to a 200 MHz peak CPU boost (up to 3.2 GHz now) and a 10 percent faster GPU. The real shocker is a "30 percent improved power efficiency" claim for the CPU and GPU.

For the Snapdragon 8 Gen 1 Plus, Qualcomm is moving the chip from Samsung Foundry to TSMC, which is apparently where the power improvements are coming from. That's a serious slam against Samsung's 4 nm process versus TSMC's 4 nm process, but it lines up with earlier reports of troubles at Samsung Foundry.

Swapping foundries as part of a mid-cycle upgrade is not normal, and it seems that Qualcomm has a bit of a salvage operation on its hands with the Snapdragon 8 Gen 1. The chip has not fared very well in the real world, with the CPU regularly turning in lower benchmark scores than 2021's flagship Snapdragon 888.

Read 1 remaining paragraphs | Comments

New USB-C dock triples M1 Mac external monitor support, Anker says

Limiting 4K to 30 Hz will be a deal-breaker for some.

Anker 563 USB-C dock

Enlarge (credit: Anker/YouTube)

If you have an M1-based Mac, Apple says you're limited to just one external monitor. But Anker, which makes power banks, chargers, docks, and other accessories, this week released a dock that it says will boost your M1 Mac's max monitor count to three.

The 4250 Anker 563 USB-C docking station, spotted by MacRumors, connects to a USB-C port on your computer (which doesn't have to be a Mac) and can also charge a laptop at up to 100 W. Of course, you'll also need to plug in the dock's 180 W power adapter. Once connected, the dock adds the following ports to your setup:

  • 2x HDMI (version not specified)
  • 1x USB-C (3.1 Gen 1): charges devices at up to 30 W
  • 1x USB-A (3.1 Gen 1): charges devices at up to 7.5 W
  • 2x USB-A (2.0)
  • 1x 3.5 mm headphone jack
  • 1x Ethernet

You'll need the two HDMI ports and DisplayPort to add three monitors to an M1 MacBook. There are some notable limitations, though.

Read 9 remaining paragraphs | Comments