Anzeige: SC-900 bestehen? So geht Security, Compliance und Identity

Die Workshops der Golem Karrierewelt bieten fundierte Anleitungen für die effektive Anwendung von Microsoft 365 im Unternehmenskontext, inklusive Administration, Intune Device Management und Teams. (Golem Karrierewelt, Microsoft)

Die Workshops der Golem Karrierewelt bieten fundierte Anleitungen für die effektive Anwendung von Microsoft 365 im Unternehmenskontext, inklusive Administration, Intune Device Management und Teams. (Golem Karrierewelt, Microsoft)

NASA cancels a multibillion-dollar satellite servicing demo mission

Congress kept throwing money at the OSAM-1 mission, but it faced continual delays.

Artist's illustration of the OSAM-1 spacecraft (bottom) linking up with the Landsat 7 satellite (top) in orbit.

Enlarge / Artist's illustration of the OSAM-1 spacecraft (bottom) linking up with the Landsat 7 satellite (top) in orbit. (credit: NASA)

NASA has canceled an over-budget, behind-schedule mission to demonstrate robotic satellite servicing technology in orbit, pulling the plug on a project that has cost $1.5 billion and probably would have cost nearly $1 billion more to get to the launch pad.

The On-orbit Servicing, Assembly, and Manufacturing 1 mission, known as OSAM-1, would have grappled an aging Landsat satellite in orbit and attempted to refuel it, while also demonstrating how a robotic arm could construct an antenna in space. The spacecraft for the OSAM-1 mission is partially built, but NASA announced Friday that officials decided to cancel the project "following an in-depth, independent project review."

The space agency cited "continued technical, cost, and schedule challenges" for the decision to cancel OSAM-1.

Read 20 remaining paragraphs | Comments

This rare 11th century Islamic astrolabe is one of the oldest yet discovered

“A powerful record of scientific exchange between Arabs, Jews, & Christians over 100s of years.”

Close up of the Verona astrolabe showing Hebrew inscribed (top left) above Arabic inscriptions

Enlarge / Close up of the 11th century Verona astrolabe showing Hebrew (top left) and Arabic inscriptions. (credit: Federica Gigante)

Cambridge University historian Federica Gigante is an expert on Islamic astrolabes. So naturally she was intrigued when the Fondazione Museo Miniscalchi-Erizzo in Verona, Italy, uploaded an image of just such an astrolabe to its website. The museum thought it might be a fake, but when Gigante visited to see the astrolabe firsthand, she realized it was not only an authentic 11th century instrument—one of the oldest yet discovered—it had engravings in both Arabic and Hebrew.

“This isn’t just an incredibly rare object. It’s a powerful record of scientific exchange between Arabs, Jews, and Christians over hundreds of years,” Gigante said. “The Verona astrolabe underwent many modifications, additions, and adaptations as it changed hands. At least three separate users felt the need to add translations and corrections to this object, two using Hebrew and one using a Western language.” She described her findings in a new paper published in the journal Nuncius.

As previously reported, astrolabes are actually very ancient instruments—possibly dating as far back as the second century BCE—for determining the time and position of the stars in the sky by measuring a celestial body's altitude above the horizon. Before the emergence of the sextant, astrolabes were mostly used for astronomical and astrological studies, although they also proved useful for navigation on land, as well as for tracking the seasons, tide tables, and time of day. The latter was especially useful for religious functions, such as tracking daily Islamic prayer times, the direction of Mecca, or the feast of Ramadan, among others.

Read 7 remaining paragraphs | Comments

Hackers exploited Windows 0-day for 6 months after Microsoft knew of it

Technically, Microsoft doesn’t consider such bugs as vulnerabilities. It patched it anyway.

The word ZERO-DAY is hidden amidst a screen filled with ones and zeroes.

Enlarge (credit: Getty Images)

Hackers backed by the North Korean government gained a major win when Microsoft left a Windows zero-day unpatched for six months after learning it was under active exploitation.

Even after Microsoft patched the vulnerability last month, the company made no mention that the North Korean threat group Lazarus had been using the vulnerability since at least August to install a stealthy rootkit on vulnerable computers. The vulnerability provided an easy and stealthy means for malware that had already gained administrative system rights to interact with the Windows kernel. Lazarus used the vulnerability for just that. Even so, Microsoft has long said that such admin-to-kernel elevations don’t represent the crossing of a security boundary, a possible explanation for the time Microsoft took to fix the vulnerability.

A rootkit “holy grail”

“When it comes to Windows security, there is a thin line between admin and kernel,” Jan Vojtěšek, a researcher with security firm Avast explained last week. “Microsoft’s security servicing criteria have long asserted that ‘[a]dministrator-to-kernel is not a security boundary,’ meaning that Microsoft reserves the right to patch admin-to-kernel vulnerabilities at its own discretion. As a result, the Windows security model does not guarantee that it will prevent an admin-level attacker from directly accessing the kernel.”

Read 11 remaining paragraphs | Comments

European crash tester says carmakers must bring back physical controls

In 2026, Euro NCAP points will be deducted if some controls aren’t physical.

man pushing red triangle warning car button

Enlarge / A car's hazard warning lights will need a physical control to get a five-star EuroNCAP score in 2026.

Some progress in the automotive industry is laudable. Cars are safer than ever and more efficient, too. But there are other changes we'd happily leave by the side of the road. That glossy "piano black" trim that's been overused the last few years, for starters. And the industry's overreliance on touchscreens for functions that used to be discrete controls. Well, the automotive safety organization European New Car Assessment Programme (Euro NCAP) feels the same way about that last one, and it says the controls ought to change in 2026.

"The overuse of touchscreens is an industry-wide problem, with almost every vehicle-maker moving key controls onto central touchscreens, obliging drivers to take their eyes off the road and raising the risk of distraction crashes," said Matthew Avery, Euro NCAP's director of strategic development.

"New Euro NCAP tests due in 2026 will encourage manufacturers to use separate, physical controls for basic functions in an intuitive manner, limiting eyes-off-road time and therefore promoting safer driving," he said.

Read 3 remaining paragraphs | Comments

Wistron’s Dynamic airflow laptop concept could bring enhanced cooling to gaming laptops

Taiwanese electronics manufacturer Wistron has designed a “Dynamic airflow” laptop that has a mechanical system that extends the back of the laptop outward when the lid is open, revealing additional vents and providing more room for the la…

Taiwanese electronics manufacturer Wistron has designed a “Dynamic airflow” laptop that has a mechanical system that extends the back of the laptop outward when the lid is open, revealing additional vents and providing more room for the laptop to circulate air in order to keep the insides of the notebook cool. It’s unclear if this […]

The post Wistron’s Dynamic airflow laptop concept could bring enhanced cooling to gaming laptops appeared first on Liliputing.

The AI wars heat up with Claude 3, claimed to have “near-human” abilities

Willison: “No model has beaten GPT-4 on a range of widely used benchmarks like this.”

The Anthropic Claude 3 logo.

Enlarge / The Anthropic Claude 3 logo. (credit: Anthropic)

On Monday, Anthropic released Claude 3, a family of three AI language models similar to those that power ChatGPT. Anthropic claims the models set new industry benchmarks across a range of cognitive tasks, even approaching "near-human" capability in some cases. It's available now through Anthropic's website, with the most powerful model being subscription-only. It's also available via API for developers.

Claude 3's three models represent increasing complexity and parameter count: Claude 3 Haiku, Claude 3 Sonnet, and Claude 3 Opus. Sonnet powers the Claude.ai chatbot now for free with an email sign-in. But as mentioned above, Opus is only available through Anthropic's web chat interface if you pay $20 a month for "Claude Pro," a subscription service offered through the Anthropic website. All three feature a 200,000-token context window. (The context window is the number of tokens—fragments of a word—that an AI language model can process at once.)

We covered the launch of Claude in March 2023 and Claude 2 in July of last year. Each of those times, Anthropic fell slightly behind OpenAI's best models in capability while surpassing them in terms of context window length. With Claude 3, Anthropic has perhaps finally caught up with OpenAI's released models in terms of performance, although there is no consensus among experts yet—and the presentation of AI benchmarks is notoriously prone to cherry-picking.

Read 17 remaining paragraphs | Comments

Publishers Target LibGen Domains, IPFS Gateways, Plus $30m in Piracy Damages

Several prominent textbook publishers including Cengage, Macmillan Learning , and Pearson Education, are seeking $30 million in piracy damages from the operators of shadow library, LibGen. Collecting payment from the unknown defendants will be complicated, but the terms of a proposed injunction reveal that the publishers aim to target the site’s domain names and proxy services, even third-party IPFS gateways.

From: TF, for the latest news on copyright battles, piracy and more.

libraryLibrary Genesis (LibGen) is one of the oldest shadow libraries on the Internet, offering free access to millions of books and academic papers people otherwise have to pay for.

The site’s origins reportedly trace back to the Soviet Union’s underground publishing culture ‘samizdat,’ which was used to bypass state censorship in the last century.

LibGen launched around 2008 as a digital version of the same concept. In addition to bypassing censorship, it’s widely used to circumvent the paywalls of major international publishing companies, serving as a popular ‘pirate’ site for books and academic works.

In recent years, rightsholders have made several attempts to shut the site down. Through court orders, LibGen is now blocked in several countries but taking the operation permanently offline has proven quite the challenge, not least since the identities of its operators are unknown.

In 2017, Elsevier won a court case against LibGen and Sci-Hub in a New York federal court, which awarded the publisher $15 million in damages. However, both shadow libraries remained online and continue to operate to this day.

Publishers vs. LibGen

Hoping for a better outcome, textbook publishers Cengage, Bedford, Macmillan Learning, McGraw Hill, and Pearson Education filed a similar copyright infringement lawsuit against LibGen last year. According to the plaintiffs, LibGen is responsible for “staggering” levels of copyright infringement.

libgen

Months have passed since the complaint was filed but LibGen’s anonymous operators did not respond. This prompted the textbook publishers to move ahead and request a default judgment in their favor.

According to the rightsholders, LibGen distributes at least 20,000 of their copyrighted works without permission. The site is designed to be user-friendly while remaining resilient to enforcement measures.

For example, LibGen can easily switch domain names, and relies on censorship-resistant decentralized technologies such as the InterPlanetary File System (IPFS), the publishers write.

By making textbooks available to students for free, rightsholders are losing revenue, which leads to lower payments for authors and devalues the market as a whole, the publishers complain.

$30 Million in Damages

With a default judgment, the textbook publishers hope to obtain an injunction that will limit LibGen’s ability to operate. The plaintiffs also request compensation for the damage suffered thus far.

The rightsholders propose maximum statutory damages of $150,000 for 200 copyrighted works, arriving at a total damages claim of $30 million. Since this amount represents just a small subset of all infringements, the request is reasonable, the publishers note.

“This damages award is a fraction of what it could be if this case were litigated and the full scope of Defendants’ infringement revealed,” the publishers note.

30 million

In addition to financial compensation, the damages award should also be sufficient to act as a deterrent to others. LibGen has a dedicated following and an eventual order should provide a clear signal to those people too.

“Defendants are among the worst offenders in a growing online piracy crisis affecting publishers. Thus, a significant damage award is needed to deter Defendants and others who are engaged in the commission and facilitation of digital piracy,” the publishers write.

Compel IPFS Gateways

Even if the court grants the damages award, collecting money from LibGen’s unidentified operators will be a challenge. For this reason, the publishers are also asking the court to issue an injunction that will compel others to stop providing services to LibGen.

The plaintiffs describe this aspect as “critical” and specifically mention IPFS in the context. IPFS files can be accessed through various means, including dedicated gateways, which are offered by external companies such as Protocol Labs, Pinata Technologies, and Cloudflare.

The first two gateway providers have disabled URLs in response to takedown requests, but Cloudflare allegedly failed to take action.

“Cloudflare did not disable the gateway URLs in Plaintiffs’ notice, prompting Plaintiffs to send additional notices in September 2023 and January 2024, on which Cloudflare still has not acted, resulting in Libgen users’ continued ability to access the infringing URLs,” the publishers write.

Broad ‘Non-party’ Injunction

If the court issues a broad injunction that applies to non-party services such as Cloudflare, the plaintiffs believe that will limit the illicit distribution of its copyrighted works.

The request isn’t limited to IPFS gateways, of course. The proposed injunction also mentions hosting services, search engines, proxy services, CDNs, donation platforms, browser extensions, social media, payment providers, and advertising services, among others.

None of these services should be allowed to “enable, facilitate, permit, assist, solicit, encourage, induce, participate with, or act in concert with” the infringement of the publishers’ copyrighted works.

order

Finally, the proposed injunction would also require domain registries and domain registrars to suspend and hand over all infringing domains to the textbook publishers. This applies to all existing domains, but also new ones that may pop up later.

LibGen Troubles?

Needless to say, LibGen’s ability to operate will be seriously hampered if the court agrees to issue the proposed order and injunction. It directly puts domain names at risk, especially those that are connected to U.S.-based registrars or registries.

While LibGen remains online today, the site appears to have some internal struggles. The person in charge of the site’s coding has reportedly been missing in action for a while, which resulted in broken functionality.

For example, there are various upload-related troubles, and searching the database regularly results in errors too. In addition, new torrents were not added regularly for a while.

Whether LibGen can solve all these issues is unclear, but the recent legal trouble will only make the site’s future more uncertain.

A copy of the publishers’ proposed order and injunction is available here (pdf) and the associated memorandum can be found here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Apple’s M3 MacBook Pro is, belatedly, fixing its one-external-display limitation

You’ll need to have the lid closed, but it’s a welcome upgrade over the M1/M2.

Apple's M3 MacBook Pro should be able to drive a pair of external displays soon, as long as the lid is closed.

Enlarge / Apple's M3 MacBook Pro should be able to drive a pair of external displays soon, as long as the lid is closed. (credit: Apple)

One longstanding limitation of Apple's most basic Mac chips—the no-adjective M1, M2, and M3—has been their inability to work with more than a single external monitor at a time. This was one of the only ways in which the Apple Silicon era has been a step back from the Intel era, where most Macs supported at least two external displays, plus the screen built into the MacBook Air or Pro you were using. (Would an integrated Intel GPU actually work well with that many screens connected? Usually not. But at least you could try.)

When Apple launched the M3 version of the MacBook Pro last fall, the one-external-display limitation was still in place. But today's announcement of the M3 MacBook Air came with a small but pleasant surprise for anyone who wants their Mac to do double-duty as a laptop and a desktop—if the laptop's lid is closed, the M3 can now run a pair of external displays over its Thunderbolt ports. And Apple confirmed to 9to5Mac that the 14-inch M3 MacBook Pro would have the same functionality enabled via a future macOS update (we've asked Apple to verify whether it's coming in the imminent macOS 14.4 update or at some future date).

Apple's spec sheets say that the M3 can drive one 6K display at 60 Hz and one additional 5K display at 60 Hz when your laptop's lid is closed. The M3 MacBook Pro's spec sheet still hasn't been updated as of this writing, but we would expect it to be at some point after the relevant software update is released.

Read 2 remaining paragraphs | Comments

Discord leaker Jack Teixeira pleads guilty, seeks light 11-year sentence

Jack Teixeira avoids spy charges, reduces sentence from up to 60 years.

This photo illustration created on April 13, 2023, shows the Discord logo and the suspect, national guardsman Jack Teixeira, reflected in an image of the Pentagon in Washington, DC.

Enlarge / This photo illustration created on April 13, 2023, shows the Discord logo and the suspect, national guardsman Jack Teixeira, reflected in an image of the Pentagon in Washington, DC. (credit: STEFANI REYNOLDS / Contributor | AFP)

Jack Teixeira, the National Guard airman who leaked confidential military documents on Discord, agreed Monday to plead guilty, promising to cooperate with officials attempting to trace the full extent of government secrets leaked.

Under the plea deal, Teixeira will serve a much-reduced sentence, The Boston Globe reported, recommended between 11 years and 16 years and eight months.

Previously, Teixeira had pleaded not guilty to six counts of “willful retention and transmission of national defense information," potentially facing up to 10 years per count. During a pretrial hearing, prosecutors suggested he could face up to 25 years, The Globe reported.

Read 17 remaining paragraphs | Comments