Russia Prepares RuStore VPN Ban After Declaring RuStore Installation Mandatory

Russia’s incremental moves to eliminate online privacy regularly target VPNs. To ‘free’ itself from Google and Apple, in 2022 Russia launched its very own app store, which ironically offers dozens of VPNs. After the government recently announced the mandatory pre-installation of RuStore on tech gadgets, a draft law will outlaw censorship-circumventing VPNs on RuStore.

From: TF, for the latest news on copyright battles, piracy and more.

digital-prison-sRussia has been tightening the noose on VPN services for years. Many non-compliant foreign companies exited Russia when faced with a choice; compromise your customers’ privacy, or else.

Any that remained were required to submit to state regulation, cooperate fully with the authorities, while ensuring that a massive list of domains and URLs censored by the state could not be accessed.

How that has played out on the ground in practical terms isn’t clear, but everything now points to a worsening situation that will almost certainly lead to even more censorship.

Google Play and Apple’s App Store ‘Replaced’ By RuStore

As Russia’s three-day ‘special military operation’ in Ukraine enters its 588th day, everything is going in accordance with the Kremlin’s plan. Indeed, even small inconveniences linked to sanctions and other minor irritants are being transformed into new opportunities for the Russian people.

Limited access to Google Play and Apple’s App Store, for example, prompted the launch of an all-new, independent Russian app store in May 2022.

RuStore Splash

As the image above shows, ‘guaranteed secure access to applications’ is delivered under the watchful eye of the Ministry of Digital Development. So whether people are influencing on Rossgram, meeting like-minded people on Topface, or doing their thing on InTokRUS, government support shouldn’t be too far behind.

A Multitude of VPNs Just a Click Away

Another great feature of RuStore is its comprehensive VPN app collection. While telecoms regulator Roscomnadzor continues to send a stream of legal requests to Google that have already disappeared hundreds of thousands of VPN-related URLs, RuStore currently offers a few dozen VPN apps.

Somehow those apps include VyprVPN, which was reportedly banned from Russia in 2021, and VPN Hub, which doesn’t work in Russia according to the reviews, but does contain a “bonus battery booster.”

Drop in a round, spin the cylinder, hope to get luckyRuStore

RuStore is reportedly doing well. In March, Prime Minister Mikhail Mishustin said that RuStore was installed by more than eight million users in its first year online, with people enjoying banking apps, games, and online stores. Such was the success of the store, the government soon instructed phone importers to ensure the app was preinstalled; in the event, it was left to retailers to install the app before phones were handed to customers.

About those VPN Apps…

Russia’s Ministry of Digital Development seems proud with RuStore and its achievements since launching last year. Now, however, Senator Artem Sheikin, Member of the Federation Council Committee on Constitutional Legislation and State Building, wants the Ministry of Digital Development to take a much closer look at RuStore’s VPNs.

Given that RuStore is positioned as a Russian platform for mobile devices, Sheikin wants the Ministry of Digital Development to conduct a review to discover the capabilities of the existing VPNs, and then establish criteria for allowing others into the store in the future.

“It seems that one of the most important criteria for their placement should be compliance with the legislation of the Russian Federation regarding non-provision of access to the register of prohibited information,” Sheikin wrote in an appeal to Maxut Shadayev, Minister of Digital Development, Communications and Mass Media.

Ball Already Rolling

While Shadayev may find himself reviewing VPNs for some time, TASS reports that Roscomnadzor has already prepared a draft order detailing the criterion for disqualifying VPNs from inclusion on RuStore.

Predictably, VPN apps must not facilitate access to sites that appear on the Unified Register, Russia’s blacklist for sites carrying whatever the state decides is “prohibited information.”

Russia’s Unified Register (here)Unified Register

As previously reported, Russia is in the process of outlawing “the availability of information that provides the opportunity of gaining access, including by downloading programs for electronic computers, to information resources and (or) information and telecommunication networks, access to which is limited on the territory of the Russian Federation.”

In short, if VPNs unblock blocked sites, they too will be rendered illegal. Providing information that allows people to unblock blocked sites is also set to become a crime, most likely on March 1, 2024. That includes “extremist platforms” such as Facebook and Instagram.

“I would like to note that it is especially important to limit citizens’ access to the products of Meta, which is recognized as an extremist organization,” Sheikin clarified.

A lack of encryption served with a side dish of state interference produces a VPN app so undesirable that not even two bonus battery boosters should be able to gloss things over. In reality, people will simply download them, or download others from elsewhere that may or may not contain something much, much worse.

Image credit: tweetyspics/pixabay

From: TF, for the latest news on copyright battles, piracy and more.

Spieleindustrie: Unity oder Godot: Wer gewinnt das Engine-Duell?

Unitys undurchsichtige Preispolitik hat Kunden nachhaltig verschreckt. Ein Open-Source-Projekt schickt sich nun an, der Profi-Engine Konkurrenz zu machen. Von Florian Zandt (Unity, Spiele)

Unitys undurchsichtige Preispolitik hat Kunden nachhaltig verschreckt. Ein Open-Source-Projekt schickt sich nun an, der Profi-Engine Konkurrenz zu machen. Von Florian Zandt (Unity, Spiele)

It’s crunch time for companies building NASA’s commercial lunar landers

Big tests loom in the months ahead for NASA’s lander fleet.

Astrobotic's first lunar lander, named Peregrine, is complete and ready for shipment to the launch site at Cape Canaveral, Florida.

Enlarge / Astrobotic's first lunar lander, named Peregrine, is complete and ready for shipment to the launch site at Cape Canaveral, Florida. (credit: Astrobotic)

Within a few months, NASA may celebrate the first successful landing of an American spacecraft on the Moon in more than 50 years. This would be an immense confidence boost for commercial startups with an eye on the nascent market for lunar missions. It would also signal to NASA that it can rely on commercial companies for foundational elements of the agency's Artemis program to return humans to the Moon.

Realistically, there's also a chance that the first two commercial robotic lunar landing missions may miss the mark. One or both could crash on the lunar surface or otherwise falter along the journey from the Earth to the Moon. This wouldn't be a disaster. NASA officials have smartly set low expectations for these early commercial lunar missions, but these first landers are several years late, and a series of failures would inevitably raise questions about the program's future.

Five years after NASA started the Commercial Lunar Payload Services (CLPS) program, two companies finally have lunar landers ready for final launch preparations. Astrobotic's robotic Moon lander, Peregrine, has been in storage since March at the company's headquarters in Pittsburgh. This week, Intuitive Machines showed off its completed Nova-C lander to Ars in Houston.

Read 46 remaining paragraphs | Comments

It’s crunch time for companies building NASA’s commercial lunar landers

Big tests loom in the months ahead for NASA’s lander fleet.

Astrobotic's first lunar lander, named Peregrine, is complete and ready for shipment to the launch site at Cape Canaveral, Florida.

Enlarge / Astrobotic's first lunar lander, named Peregrine, is complete and ready for shipment to the launch site at Cape Canaveral, Florida. (credit: Astrobotic)

Within a few months, NASA may celebrate the first successful landing of an American spacecraft on the Moon in more than 50 years. This would be an immense confidence boost for commercial startups with an eye on the nascent market for lunar missions. It would also signal to NASA that it can rely on commercial companies for foundational elements of the agency's Artemis program to return humans to the Moon.

Realistically, there's also a chance that the first two commercial robotic lunar landing missions may miss the mark. One or both could crash on the lunar surface or otherwise falter along the journey from the Earth to the Moon. This wouldn't be a disaster. NASA officials have smartly set low expectations for these early commercial lunar missions, but these first landers are several years late, and a series of failures would inevitably raise questions about the program's future.

Five years after NASA started the Commercial Lunar Payload Services (CLPS) program, two companies finally have lunar landers ready for final launch preparations. Astrobotic's robotic Moon lander, Peregrine, has been in storage since March at the company's headquarters in Pittsburgh. This week, Intuitive Machines showed off its completed Nova-C lander to Ars in Houston.

Read 46 remaining paragraphs | Comments

Dealmaster: Early Amazon Prime Big Deal Days sales heat up, Apple deals, and more

Get sweet discounts on Apple tech and home gear ahead of Amazon’s Big Deal Days.

Dealmaster: Early Amazon Prime Big Deal Days sales heat up, Apple deals, and more

The Amazon Prime Big Deal Days event is creeping ever closer. For early shoppers, there are plenty of excellent tech deals available today from Amazon and competing retailers. Our curated Dealmaster comes with savings on Sony's wildly popular WF-1000XM4 noise-canceling earbuds, serious sales on Apple gear (including the AirPods Pro and the still-excellent Apple Watch Series 8), as well as deals on a bevy of home and office gear.

Whatever you're into, you'll likely find a great deal or three below. So, why wait for the big sale when it's already here?

Early Amazon Prime Big Deal Days sales

  • Amazon Echo Buds with Active Noise Cancellation (2021 release) for $65 (was $120) at Amazon
  • Made for Amazon Kids Bluetooth Headset for $16 (was $39) at Amazon
  • Amazon Kindle Paperwhite Signature Edition Essentials Bundle for $194 (was $258) at Amazon
  • Amazon Kindle Scribe Essentials Bundle for $382 (was $520) at Amazon
  • Amazon Kindle Kids Essentials Bundle for $113 (was $153) at Amazon
  • Amazon Echo Dot (5th gen) for $23 (was $50) at Amazon
  • Amazon Echo Studio for $155 (was $200) at Amazon
  • Amazon Echo Dot with Clock (5th gen) for $45 (was $60) at Amazon
  • Amazon Echo Pop for $18 (was $40) at Amazon
  • TCL 65-inch Q6 QLED 4K Smart TV with Fire TV for $550 (was $700) at Amazon
  • TCL 65-inch Class S4 4K LED Smart TV with Fire TV for $400 (was $530) at Amazon
  • Amazon Eero 6E Mesh Wi-Fi Router for $180 (was $250) at Amazon
  • Amazon Eero 6+ Mesh Wi-Fi System for $195 (was $300) at Amazon
  • Amazon Eero Pro 6E Mesh Wi-Fi system for $400 (was $550) at Amazon
  • Hamilton Beach The Scoop Single Serve Coffee Maker for $60 (was $70) at Amazon
  • Samsung Galaxy Watch 5 40mm LTE Smartwatch for $300 (was $330) at Amazon
  • Dyson Outsize Cordless Vacuum Cleaner for $449 (was $530) at Amazon
  • Dyson V11 Cordless Stick Vaccum, Large for $460 (was $570) at Amazon
  • Amazon Fire TV Stick 4K (previous gen) for $23 (was $50) at Amazon
  • Amazon Fire TV Cube for $110 (was $140) at Amazon
  • Amazon Fire TV Stick Lite for $18 (was $30) at Amazon
  • Amazon Fire TV Stick with Alexa Voice Remote for $20 (was $40) at Amazon
  • Sony HTX8500 2.1ch Dolby Atmos/DTS:X Soundbar for $198 with Amazon Prime reservation (was $400) at Amazon
  • Amazon Fire HD 10 Kids Pro tablet for $120 (was $200) at Amazon
  • Amazon Fire TV 32-inch 2-Series 720p HD smart TV for $110 (was $200) at Amazon
  • Amazon Fire TV 40-inch 2-Series 1080p HD smart TV for $180 (was $250) at Amazon
  • Philips Sparkling Water Maker Soda Maker Soda Streaming Machine for $56 (was $80) at Amazon
  • SodaStream Art Sparkling Water Maker Bundle for $110 with Amazon Prime reservation (was $200) at Amazon
  • Citizen Men's Promaster Dive Automatic Watch for $200 with Amazon Prime reservation (was $475) at Amazon
  • Philips 3000 Series Air Fryer Essential Compact with Rapid Air Technology for $80 with Amazon Prime reservation (was $180) at Amazon

Apple AirPods, Macbook, iPad, and more

  • Apple AirPods Pro (2nd Generation, Lightning) Wireless Earbuds for $199 (was $249) at Amazon
  • Apple AirPods (3rd Generation, Lightning) Wireless Earbuds for $150 (was $170) at Amazon
  • Apple AirPods Max Wireless Over-Ear Headphones for $479 (was $549) at Amazon
  • Apple MacBook Air 13.3-inch Laptop M1 for $899 (was $999) at Amazon
  • Apple iPad Air (5th Generation) for $500 (was $599) at Amazon
  • Apple iPad (9th Generation) for $270 (was $329) at Amazon
  • Apple iPad Mini (6th Generation) for $469 (was $499) at Amazon
  • Apple iPad Pro 12.9-inch (6th Generation) for $1,049 (was $1,099) at Amazon
  • Apple AirTag 4 Pack for $89 (was $99) at Amazon
  • Apple Watch Series 8 (GPS and Cellular, 45mm) for $429 (was $529) at Amazon
  • Apple Watch Series 8 (GPS only, 41mm) for $320 (was $400) at Amazon

Headphones

  • Beats Solo3 Wireless On-Ear Headphones for $129 (was $200) at Amazon
  • Bose Headphones 700 Wireless Noise Cancelling Over-the-Ear Headphones for $299 (was $379) at Best Buy
  • Sony WF-1000XM4 True Wireless Noise Canceling Earbuds for $223 (was $280) at Amazon
  • Poly Voyager 4320 Wireless Noise Cancelling Stereo Headset with mic for $158 (was $170) at Best Buy
  • Jabra Elite 10 Dolby Atmos True Wireless In-ear Headphones for $225 (was $250) at Best Buy
  • Jabra Elite 7 Active True Wireless for $80 with Amazon Prime reservation (was $180) at Amazon
  • Samsung Galaxy Buds 2 Pro True Wireless Earbuds for $190 (was $230) at Best Buy

Home, office, and personal care

  • Shark AV993 IQ Robot Vacuum with Self Cleaning Brushroll for $200 (was $300) at Amazon
  • Shark HV322 Rocke Deluxe Pro Corded Stick Vacuum for $120 (was $250) at Amazon
  • INIU Wireless Charger 15W for $16 (was $27) at Amazon
  • Hypervolt 2 Pro Heat Pack (new launch) for $358 (was $388) at Hyperice
  • Beurer Bluetooth Wrist Blood Pressure Monitor for $35 (was $60) at Best Buy
  • Beurer Upper Arm Blood Pressure Monitor for $25 (was $35) at Best Buy
  • Beurer Abdominal Muscle EMS Belt for $46 (was $60) at Best Buy
  • Beurer Pulse Oximeter for $31 (was $40) at Best Buy
  • Beurer Bluetooth Body Fat Scale for Full Body Analysis for $44 (was $50) at Best Buy
  • Theragun PRO 4th Generation for $499 (was $599) at Therabody
  • Therabody RecoveryAir JetBoots Medium for $799 (was $899) at Best Buy

AirTag, iPhone, and laptop chargers, cables, and accessories

  • Apple MagSafe Charger for $33 (was $39) at Amazon
  • ESR for iPhone 15 Plus Case, Compatible with MagSafe for $19 (was $25) at Amazon
  • Spigen Ultra Hybrid Designed for iPhone 15 case for $15 (was $35) at Amazon
  • Spigen Tempered Glass Screen Protector [GlasTR EZ FIT] designed for iPhone 15 Pro for $17 (was $35) at Amazon
  • Spigen Tempered Glass Screen Protector [GlasTR EZ FIT] designed for Apple Watch Ultra 2 (49 mm) for $16 (was $25) at Amazon
  • Pebblebee Clip 4-pack for $100 (was $120) at Pebblebee
  • Pebblebee Card & Clip Multi-pack for $100 (was $120) at Pebblebee
  • Apple AirTag 4 Pack for $89 (was $99) at Amazon
  • 2 Pack Waterproof Air Tag Keychain Case for $7 (was $11) at Amazon
  • Belkin Apple AirTag Secure Holder with Key Ring for $12 (was $13) at Amazon
  • Case-Mate AirTag Holder 4 Pack for $33 (was $40) at Amazon
  • GRIIID AirTag Wallet for $30 (was $40) at Amazon
  • Card Case for AirTag Tag Card 2 Pack for $12 (was $20) at Amazon
  • Anker Nano II 30W Fast GaN II Compact Charger for $24 (was $34) at Amazon
  • 192 PCS Cable Management Kit for $14 (was $20) at Amazon
  • INIU braided USB-C to USB-C Cable, 100 W [2-Pack 6.6ft] PD 5A Fast Charging Cable for $13 (was $16) at Amazon
  • 100 PCS Reusable Cable Ties for $7 (was $14) at Amazon

DeWalt and Greenworks tools

  • DeWalt 20V Max XR Multi-Tool Kit for $165 (was $269) at Amazon
  • DeWalt 20V Max Cordless Impact Wrench with Brushless Motor for $269 (was $349) at Amazon
  • DeWalt 20V Max XR Drill/Driver for $139 (was $169) at Amazon
  • DeWalt 20V Max XR Hammer Drill Kit for $319 (was $399) at Amazon
  • DeWalt 20V Max Cordless Drill / Driver Kit for $99 (was $179) at Amazon
  • DeWalt 20V Max Cordless Drill and Impact Driver for $140 (was $239) at Amazon
  • DeWalt 20V Max XR Impact Driver, Brushless for $95 (was $149) at Amazon
  • DeWalt 20V Max Cordless Impact Wrench for $187 (was $279) at Amazon
  • DeWalt 20V Max Cordless Drill Combo Kit for $163 (was $271) at Amazon
  • DeWalt Atomic 20V Max* Cordless Drill, 1/2-Inch, Tool Only for $70 (was $110) at Amazon
  • DeWalt Xtreme 12V Max* Impact Driver Kit, 1/4-Inch for $106 (was $159) at Amazon
  • Greenworks 10-inch 80 Volt Cultivator/Tiller for $340 (was $400) at Best Buy
  • Greenworks 24-Volt 22-Inch Cordless Hedge Trimmer for $130 (was $150) at Best Buy
  • Greenworks Pro Electric Pressure Washer up to 3000 PSI at 2.0 GPM for $380 (was $430) at Best Buy
  • Greenworks 80 Volt 2Ah Battery for $129 (was $150) at Best Buy
  • Greenworks 24 Volt 2000 Lumen LED Work Light AC/DC for $62 (was $70) at Best Buy
  • Greenworks TORQDRIVE 24-Volt 12-Inch Cutting Diameter Straight Shaft Grass Trimmer and Edger for $120 (was $130) at Best Buy

Ars Technica may earn compensation for sales from links on this post through affiliate programs.

Read on Ars Technica | Comments

They have begun: Attacks exploiting vulnerability carry maximum 10 severity rating

Will attacks be as big as those targeting MOVEit? Maybe not, but they still can be plenty bad.

They have begun: Attacks exploiting vulnerability carry maximum 10 severity rating

Enlarge (credit: Getty Images)

Ransomware hackers have started exploiting one or more recently fixed vulnerabilities that pose a grave threat to enterprise networks around the world, researchers said.

One of the vulnerabilities has a severity rating of 10 out of a possible 10 and another 9.9. They reside in WS_FTP Server, a file-sharing app made by Progress Software. Progress Software is the maker of MOVEit, another piece of file-transfer software that was recently hit by a critical zero-day vulnerability that has led to the compromise of more than 2,300 organizations and the data of more than 23 million people, according to security firm Emsisoft. Victims include Shell, British Airways, the US Department of Energy, and Ontario’s government birth registry, BORN Ontario, the latter of which led to the compromise of information for 3.4 million people.

About as bad as it gets

CVE-2023-40044, as the vulnerability in WS_FTP Server is tracked, and a separate vulnerability tracked as CVE-2023-42657 that was patched in the same October 28 update from Progress Software, are both about as critical as vulnerabilities come. With a severity rating of 10, CVE-2023-40044 allows attackers to execute malicious code with high system privileges with no authentication required. CVE-2023-42657, which has a severity rating of 9.9, also allows for remote code execution but requires the hacker to first be authenticated to the vulnerable system.

Read 11 remaining paragraphs | Comments

Probiotic bacterium kills preterm infant; FDA blasts supplement maker

Genomic sequencing matched baby’s fatal sepsis case to bacteria in Evivo with MCT Oil.

A premature baby in the neonatal intensive care unit at University of Iowa Stead Family Children's Hospital in Iowa City, Iowa on August 13, 2021. The baby was born two days earlier at 22 weeks and at birth weighed just 1 lb., 0.1 oz.

Enlarge / A premature baby in the neonatal intensive care unit at University of Iowa Stead Family Children's Hospital in Iowa City, Iowa on August 13, 2021. The baby was born two days earlier at 22 weeks and at birth weighed just 1 lb., 0.1 oz. (credit: Getty | Michael S. Williamson/The Washington Post)

The Food and Drug Administration is warning health care providers not to use probiotics containing live bacteria or yeast in preterm infants after the agency began investigating the July death of a preterm, low-weight infant given such a product in an unnamed hospital.

The infant developed sepsis from the bacterium in the probiotic product—Evivo with MCT Oil made by Infinant Health—and subsequently died.

In a statement to Ars, the FDA said it quickly investigated the death after receiving an initial report on July 31. "Infant deaths are especially tragic and determining causality of preterm infant death can be particularly complicated," an agency spokesperson said. The agency reviewed medical records and laboratory tests from the case and collected clinical samples and product samples for analysis.

Read 17 remaining paragraphs | Comments

Ars takes a close-up look at the first US lunar lander in half a century

“Our strategy is being there and being ready to go.”

Photograph of the IM Nova-C lander

Enlarge / The Nova-C lander is seen at Intuitive Machines' facility in Houston, Texas. (credit: Lee Hutchinson)

HOUSTON—It has been 18,558 days since the United States landed a spacecraft on the Moon.

And counting.

NASA has not sent a spacecraft to make a soft landing on the Moon since the Apollo 17 mission in December 1972. Since that time, the Soviet Union, China, and India have successfully landed there, but the United States has gone elsewhere. There are various reasons for this, including a sharp focus by NASA on exploration of Mars. But now that is finally about to change.

Read 15 remaining paragraphs | Comments