Newegg’s unique NAS configurator is a handy, but limited, shopping tool

You can only shop Newegg inventory, but it gets the ball rolling.

Newegg’s unique NAS configurator is a handy, but limited, shopping tool

Enlarge (credit: Newegg)

Newegg has a quick and dirty way to pick a new NAS device and the drives that'll go in it. Announced today, the NAS Builder provides a unique, clean interface for perusing the retailer's available NAS enclosures and picking compatible HDDs or SSDs within the selected NAS device's capabilities. You're limited to Newegg's selection, and not all NAS, HDD, or SSD specs and features are disclosed through the shopping tool. But used with its limits in mind, the builder looks like a helpful starting point for NAS newcomers or even advanced users seeking a basic comparison tool.

Anyone who has shopped for tech components, be it for NAS, PC building, or a maker's project, knows how tedious, unorganized, and unreliable relevant commerce sites can be. That's why Newegg's NAS Builder initially piqued my interest.

Opening the website prompts you to pick your total capacity requirements, up to "144TB & Above," and from there, it shows you the relevant NAS devices that Newegg carries. All the expected sorting tools are there, so you can sort by price or for products with the most reviews (on Newegg), for example. Like Newegg's regular site, you can add filters like bay count and RJ-45 specs, but the NAS Builder's appearance is much cleaner with a more stripped-down set of filters than the rest of Newegg, as well as other sites NAS shoppers might frequent. Unlike NAS configurators from NAS vendors, Newegg's is more brand agnostic.

Read 12 remaining paragraphs | Comments

Hackers drain bitcoin ATMs of $1.5 million by exploiting 0-day bug

Don’t store digital coins in hot wallets! It’s great advice but can’t always be followed.

A BATM sold by General Bytes.

Enlarge / A BATM sold by General Bytes. (credit: General Bytes)

Hackers drained millions of dollars in digital coins from cryptocurrency ATMs by exploiting a zero-day vulnerability, leaving customers on the hook for losses that can’t be reversed, the kiosk manufacturer has revealed.

The heist targeted ATMs sold by General Bytes, a company with multiple locations throughout the world. These BATMs, short for bitcoin ATMs, can be set up in convenience stores and other businesses to allow people to exchange bitcoin for other currencies and vice versa. Customers connect the BATMs to a crypto application server (CAS) that they can manage or, until now, that General Bytes could manage for them. For reasons that aren’t entirely clear, the BATMs offer an option that allows customers to upload videos from the terminal to the CAS using a mechanism known as the master server interface.

Going, going, gone

Over the weekend, General Bytes revealed that more than $1.5 million worth of bitcoin had been drained from CASes operated by the company and by customers. To pull off the heist, an unknown threat actor exploited a previously unknown vulnerability that allowed it to use this interface to upload and execute a malicious Java application. The actor then drained various hot wallets of about 56 BTC, worth roughly $1.5 million. General Bytes patched the vulnerability 15 hours after learning of it, but due to the way cryptocurrencies work, the losses were unrecoverable.

Read 7 remaining paragraphs | Comments

RIAA Hunts Pre-Release Music Pirates Behind UnreleasedSounds.gg

Music streaming apps like Spotify offer more than 100 million tracks but for some, nothing sounds better than leaked, unreleased music. ‘Unreleased Sounds’ is a site dedicated to this type of content and already linked to many high-profile leaks. After an artist, linked to Avicii, asked fans not to buy “stolen” music last year, the RIAA now wants to know who’s behind the site.

From: TF, for the latest news on copyright battles, piracy and more.

unreleasedsounds-gg-bsHuman beings have a tendency to want things they can’t have. A modest interest in a particular item or activity can inexplicably soar when it’s recognized as rare or unavailable. When strictly forbidden, even regular fruit can prove irresistible.

Spotify offers 100 million tracks to hear right now, including the vast majority of the greatest pieces of music ever written. Yet for some, the lure of an unreleased track can outweigh every single one of them; unattainable, forbidden and rare is a potent mix and may explain why pirates are paying silly money for leaked, pirated music.

Dozens of Avicii Leaks

When producer Tim Bergling passed away in 2018, the prospect of never hearing a new Avicii track was suddenly very real. Two albums and various tracks were eventually released, but then – PAB happened.

In 2022 the Public Avicii Buy Server (PAB) channel on Discord became a hot location for unreleased Avicii tracks. Faced with having to pay for them, fans worked to ‘groupbuy’ a long list of Avicii tracks including ‘Let’s Roll’ and ‘Lethal Drug V2’ which featured Chris Martin & SZA.

Sources Unknown But Some Files Were Apparently Stolen

How the music was obtained isn’t clear; some believed the PAB seller bought the tracks and then sold them to fellow Avicii fans at cost price. Others spoke of hacked accounts and big profits. Late 2022, after another ‘PAB’ release (‘Island’) appeared online, a Reddit user jumped in to comment

“Hey guys! My name is Jonas Wallin and my alias is The High,” the music producer posted on Reddit.

“I wrote Island and it’s coming out soon in fact. The leaked vocals are mine, my vocal stems. It’s the same with Loving Feeling. I would recommend you to not pay someone for these files since they were stolen from me. Thanks.”

RIAA Investigates Unreleased Sounds

According to various sources, the track made its way to PAB via a private leak site called Unreleased Sounds. It’s unclear whether the RIAA’s member labels have any interests in the dozens of Avicii tracks leaked so far, but they do want to know who runs the 15/16 month-old site.

Citing three previously leaked tracks – ‘Hot Saturn’ by Lil Nas X, ‘Rockstar Status’ by Juice WRLD, and PnB Rock’s ‘I Know They Mad’ — on March 13 the RIAA filed an application for a DMCA subpoena at a district court in Columbia, Washington.

“The purpose for which this subpoena is sought is to obtain the identities of the individuals assigned to these websites who have reproduced and have offered for distribution our members’ copyrighted sound recordings without their authorization,” the application reads.

In a letter to Cloudflare, the service targeted in the subpoena, the RIAA requests several pieces of information.

“As is stated in the attached subpoena, you are required to disclose to the RIAA information sufficient to identify the infringers. This would include the individuals’ names, physical addresses, IP addresses, telephone numbers, e-mail addresses, payment information, account updates and account history, as available.”

riaa-cloudflare

The DMCA subpoena, which also references two additional platforms (NoTube.net and Aonode.com), has now been issued so it’s likely Cloudflare will hand over the information in the coming days, if it hasn’t already.

Unreleased Sounds

It’s not difficult to find reports of unreleased tracks being leaked by Unreleased Sounds. Operating from at least two domains – unreleasedsounds.gg and unreleased.gg – the platform became a members-only service last October, meaning that today’s prospective members need an invite code to sign up.

“Our website is now a closed/invite only marketplace,” the site’s operator wrote.

unreleasedsounds-ss

The screenshot above reveals Kanye West and Avicii as featured artists on Unreleased Sounds. While that doesn’t provide hard evidence that the platform was the source of previous Avicii leaks, comments from the site’s operator suggest that if fans have the money, more Avicii music is indeed available.

unreleased-nov22-1

The DMCA subpoena also covers Aonode.com and NoTube.net, a stream-ripping platform with tens of millions of monthly visits.

DMCA Subpoenas and Links to Infringing Content

The RIAA previously sent DMCA takedown notices to Cloudflare asking for the allegedly infringing content to be removed. How Cloudflare responded to those notices is unclear but in one case, it may have been difficult to know exactly what to take down.

dmca-unreleased

Unlike the URLs for the other sites, the three Unreleased Sounds links appear to be artist categories rather than links to specific content. Given the overall nature of the platform, that’s not particularly unreasonable, but it does raise the question of why the direct links were left out.

One possibility is that the links were external and carried the domain of a far less interesting hosting site. Another is that artist page URLs are much easier to guess from outside once the general format is known. But whatever the reason, RIAA subpoenas are relatively rare and being featured in one rarely ends well.

The RIAA’s DMCA subpoena application can be found here (1,2,3,4, pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Judge dismisses gamers’ claims that Microsoft/Activision merger will spoil gaming

Gamers have 20 days to supply more evidence showing the merger would harm them.

Judge dismisses gamers’ claims that Microsoft/Activision merger will spoil gaming

Enlarge (credit: INA FASSBENDER / Contributor | AFP)

Last December, Call of Duty gamers sued Microsoft, seeking to block its merger with Activision, partly because they alleged that the merger would set up Microsoft to dominate industry rivals, drive up prices, and reduce consumer choice. Yesterday, a California judge, Jacqueline Corley, granted Microsoft’s motion to dismiss the suit, saying that the gamers didn’t “plausibly allege” that the merger “creates a reasonable probability of anticompetitive effects in any relevant market.”

Gamers suing don’t plan to give up this fight that easily, though. They have 20 days to amend their complaint to include more evidence that demonstrates those anticompetitive effects are likely to harm them personally.

The gamers' lawyer, Joseph Alioto, told Ars that he believes they have ample evidence to satisfy the judge in this case. He confirmed that gamers intend to file their amended complaint as soon as possible. Rather than being discouraged by the judge’s dismissal, Alioto told Ars that the gamers were pleased by Corley’s order.

Read 10 remaining paragraphs | Comments

New VLT data reveals more about aftermath of DART vs. asteroid collision

Two new papers shed light on debris cloud, altered surface of Dimorphos asteroid.

Artist’s illustration shows the ejection of a cloud of debris after NASA’s DART spacecraft collided with the asteroid Dimorphos.

Enlarge / Artist’s illustration shows the ejection of a cloud of debris after NASA’s DART spacecraft collided with the asteroid Dimorphos. (credit: ESO/M. Kornmesser)

Last September, the Double Asteroid Redirect Test, or DART, smashed a spacecraft into a small binary asteroid called Dimorphos, successfully altering its orbit around a larger companion. We're now learning more about the aftermath of that collision, thanks to two new papers reporting on data collected by the European Southern Observatory's Very Large Telescope. The first, published in the journal Astronomy and Astrophysics, examined the debris from the collision to learn more about the asteroid's composition. The second, published in the Astrophysical Journal Letters, reported on how the impact changed the asteroid's surface.

As we've reported previously, Dimorphos is less than 200 meters across and cannot be resolved from Earth. Instead, the binary asteroid looks like a single object from here, with most of the light reflecting off the far larger Didymos. What we can see, however, is that the Didymos system sporadically darkens. Most of the time, the two asteroids are arranged so that Earth receives light reflected off both. But Dimorphos' orbit sporadically takes it behind Didymos from Earth's perspective, meaning that we only receive light reflected off one of the two bodies—this causes the darkening. By measuring the darkening's time periods, we can work out how long it takes Dimorphos to orbit and thus how far apart the two asteroids are.

Before DART, Dimorphos' orbit took 11 hours and 55 minutes; post-impact, it's down to 11 hours and 23 minutes. For those averse to math, that's 32 minutes shorter (about 4 percent). NASA estimates that the orbit is now "tens of meters" closer to Didymos. This orbital shift was confirmed by radar imaging. Earlier this month, Nature published five papers that collectively reconstructed the impact and its aftermath to explain how DART's collision had an outsize effect. Those results indicated that impactors like DART could be a viable means of protecting the planet from small asteroids.

Read 12 remaining paragraphs | Comments

New VLT data reveals more about aftermath of DART vs. asteroid collision

Two new papers shed light on debris cloud, altered surface of Dimorphos asteroid.

Artist’s illustration shows the ejection of a cloud of debris after NASA’s DART spacecraft collided with the asteroid Dimorphos.

Enlarge / Artist’s illustration shows the ejection of a cloud of debris after NASA’s DART spacecraft collided with the asteroid Dimorphos. (credit: ESO/M. Kornmesser)

Last September, the Double Asteroid Redirect Test, or DART, smashed a spacecraft into a small binary asteroid called Dimorphos, successfully altering its orbit around a larger companion. We're now learning more about the aftermath of that collision, thanks to two new papers reporting on data collected by the European Southern Observatory's Very Large Telescope. The first, published in the journal Astronomy and Astrophysics, examined the debris from the collision to learn more about the asteroid's composition. The second, published in the Astrophysical Journal Letters, reported on how the impact changed the asteroid's surface.

As we've reported previously, Dimorphos is less than 200 meters across and cannot be resolved from Earth. Instead, the binary asteroid looks like a single object from here, with most of the light reflecting off the far larger Didymos. What we can see, however, is that the Didymos system sporadically darkens. Most of the time, the two asteroids are arranged so that Earth receives light reflected off both. But Dimorphos' orbit sporadically takes it behind Didymos from Earth's perspective, meaning that we only receive light reflected off one of the two bodies—this causes the darkening. By measuring the darkening's time periods, we can work out how long it takes Dimorphos to orbit and thus how far apart the two asteroids are.

Before DART, Dimorphos' orbit took 11 hours and 55 minutes; post-impact, it's down to 11 hours and 23 minutes. For those averse to math, that's 32 minutes shorter (about 4 percent). NASA estimates that the orbit is now "tens of meters" closer to Didymos. This orbital shift was confirmed by radar imaging. Earlier this month, Nature published five papers that collectively reconstructed the impact and its aftermath to explain how DART's collision had an outsize effect. Those results indicated that impactors like DART could be a viable means of protecting the planet from small asteroids.

Read 12 remaining paragraphs | Comments

Amazon layoffs will shut down camera review site DPReview.com after 25 years

Updates stop on April 10, site will be available for “a limited period” after.

Amazon layoffs will shut down camera review site DPReview.com after 25 years

Enlarge (credit: Nikon)

Amazon has plans to lay off at least 27,000 workers this year, including 9,000 that were announced in an internal email yesterday morning. One unexpected casualty: Digital Photography Review, also known as DPReview, is losing its entire editorial staff, and the site will stop publishing on April 10.

The announcement post, written by DPReview General Manager Scott Everett, says that new pieces will continue to be posted through April 10, and "the site will be locked" afterward. It's unclear what will happen to the site's content afterward—the post promises only that the site's articles "will be available in read-only mode for a limited period afterwards." Any photos and text that readers have uploaded to their accounts can be requested and downloaded until April 6, "after which we will not be able to complete the request."

Former site editor Gannon Burgett said on Twitter that the decision to lay off the staff was announced in January and that "Amazon hasn't yet come up with an archival plan" for the site. Cameras, even digital ones, tend to have a pretty long shelf life, and there's an active used market for lenses and camera bodies—if DPReview.com goes offline entirely, that would be a huge blow to anyone trying to research older products.

Read 1 remaining paragraphs | Comments

Lenovo Tab Extreme launches in China as the Legion Y900 tablet

The Lenovo Tab Extreme is a high-end Android tablet with a 14.5 inch, 3000 x 1876 pixel OLED display featuring a 120 Hz refresh rate, a MediaTek Dimensity 9000 processor, 12GB of RAM and 256GB of storage. First announced at CES in January, the tablet …

The Lenovo Tab Extreme is a high-end Android tablet with a 14.5 inch, 3000 x 1876 pixel OLED display featuring a 120 Hz refresh rate, a MediaTek Dimensity 9000 processor, 12GB of RAM and 256GB of storage. First announced at CES in January, the tablet is expected to go on sale in the US later this […]

The post Lenovo Tab Extreme launches in China as the Legion Y900 tablet appeared first on Liliputing.

Google defends auto-deletion of chats after US alleged it destroyed evidence

Despite deleted chats, Google says US wasn’t denied access to “material” info.

A lanyard with the Google logo

Enlarge (credit: Getty Images | picture alliance )

Google defended its use of "history-off chats" for many internal communications, denying the US government's allegation that it intentionally destroyed evidence needed in an antitrust case. The history-off setting causes messages to be automatically deleted within 24 hours.

The US government and 21 states last month asked a court to sanction Google for allegedly using the auto-delete function on chats to destroy evidence and accused Google of falsely telling the government that it suspended its auto-deletion practices on chats subject to a legal hold. Google opposed the motion for sanctions on Friday in a filing in US District Court for the District of Columbia.

Google said it uses a "tiered approach" for preserving chats. "When there is litigation, Google instructs employees on legal hold not to use messaging apps like Google Chat to discuss the subjects at issue in the litigation and, if they must, to switch their settings to 'history on' for chats regarding the subjects at issue in the litigation, so that any such messages are preserved," the Google filing said.

Read 11 remaining paragraphs | Comments