Dead Boy Detectives turns Neil Gaiman’s ghostly duo into “Hardy Boys on acid”

Supernatural horror detective series has witches, demons, and a charming Cat King.

Edwin (George Rexstrew) and Charles (Jayden Revri) are the Dead Boy Detectives, ghosts who solve paranormal mysteries.

Enlarge / Edwin (George Rexstrew) and Charles (Jayden Revri) are the Dead Boy Detectives, ghosts who solve paranormal mysteries. (credit: Netflix )

For those eagerly anticipating the second season of Netflix's stellar adaption of Neil Gaiman's Sandman graphic novels, Dead Boy Detectives—the streaming plaform's new supernatural horror detective series—is a welcome return to that weird magical world. Co-showrunner Steve Yockey (Supernatural), who created the series, aptly describes it as "the Hardy Boys on acid." You've got vengeful witches, demons, psychic mediums, cursed masks, foul-mouthed parasitic sprites, talking cats—and, of course, the titular ghostly detectives, intent on spending their afterlife cracking all manner of mysterious paranormal cases.

(Some spoilers below, but no major reveals.)

Sandman fans first encountered the Dead Boys in the "Seasons of Mist" storyline, in which the ghost Edwin Paine and Charles Rowland meet for the first time in 1990. Edwin had been murdered at his boarding school in 1916 and spent decades in Hell. When Lucifer abandoned his domain, Hell was emptied, and Edwin was among the souls who returned to that boarding school. Charles was a living student whom Edwin tried to protect. Charles ultimately died and chose to join Edwin in his afterlife adventures. The characters reappeared in the Children's Crusade crossover series, in which they decided to become detectives.

Read 12 remaining paragraphs | Comments

Critics question tech-heavy lineup of new Homeland Security AI safety board

CEO-heavy board to tackle elusive AI safety concept and apply it to US infrastructure.

A modified photo of a 1956 scientist carefully bottling

Enlarge (credit: Benj Edwards | Getty Images)

On Friday, the US Department of Homeland Security announced the formation of an Artificial Intelligence Safety and Security Board that consists of 22 members pulled from the tech industry, government, academia, and civil rights organizations. But given the nebulous nature of the term "AI," which can apply to a broad spectrum of computer technology, it's unclear if this group will even be able to agree on what exactly they are safeguarding us from.

President Biden directed DHS Secretary Alejandro Mayorkas to establish the board, which will meet for the first time in early May and subsequently on a quarterly basis.

The fundamental assumption posed by the board's existence, and reflected in Biden's AI executive order from October, is that AI is an inherently risky technology and that American citizens and businesses need to be protected from its misuse. Along those lines, the goal of the group is to help guard against foreign adversaries using AI to disrupt US infrastructure; develop recommendations to ensure the safe adoption of AI tech into transportation, energy, and Internet services; foster cross-sector collaboration between government and businesses; and create a forum where AI leaders to share information on AI security risks with the DHS.

Read 13 remaining paragraphs | Comments

Apple will bring sideloading and other EU-mandated changes to iPadOS this fall

Company also updates fee policy for devs who don’t use Apple’s App Store.

Apple will bring sideloading and other EU-mandated changes to iPadOS this fall

Enlarge (credit: Andrew Cunningham)

Starting in March with the release of iOS 17.4, iPhones in the European Union have been subject to the EU's Digital Markets Act (DMA), a batch of regulations that (among other things) forced Apple to support alternate app stores, app sideloading, and third-party browser engines in iOS for the first time. This week, EU regulators announced that they are also categorizing Apple's iPadOS as a "gatekeeper," meaning that the iPad will soon be subject to the same regulations as the iPhone.

In a developer blog post released today, Apple said that it would comply with the EU's regulations "later this fall, as required." All changes that Apple has made to iOS on European iPhones to comply with the DMA will be implemented in the same way on the iPad, though it's not clear whether these changes will be brought to iPadOS 17 or if they'll just be a part of the upcoming iPacOS 18 update.

The EU began investigating whether iPadOS would qualify as a gatekeeper in September 2023, the same day it decided that iOS, the Safari browser, and the App Store were all gatekeepers.

Read 9 remaining paragraphs | Comments

FCC fines big three carriers $196M for selling users’ real-time location data

FCC finalizes $196M penalties for location-data sales revealed in 2018.

Illustration with a Verizon logo displayed on a smartphone in front of stock market percentages in the background.

Enlarge (credit: Getty Images | SOPA Images )

The Federal Communications Commission today said it fined T-Mobile, AT&T, and Verizon $196 million "for illegally sharing access to customers' location information without consent and without taking reasonable measures to protect that information against unauthorized disclosure."

The fines relate to sharing of real-time location data that was revealed in 2018. The FCC proposed the fines in 2020, when the commission had a Republican majority, and finalized them today.

All three major carriers vowed to appeal the fines after they were announced today. The three carriers also said they discontinued the data-sharing programs that the fines relate to.

Read 15 remaining paragraphs | Comments

DISH Sued Two IPTV Resellers: First Case Dismissed, Second Owes $30m

Most civil lawsuits against alleged IPTV pirates end badly for the defendants, something easily predicted after a single read of the initial complaint. Two separate lawsuits filed by DISH against two IPTV resellers in recent months were classic examples, at least until they weren’t. One reseller has just been ordered to pay damages of $30m. The second, a reseller in the astrology business, just had his case suddenly dismissed. Nobody could’ve predicted that.

From: TF, for the latest news on copyright battles, piracy and more.

tv future-sLast November, IPTV subscription resellers operating from channels4cheap.com (C4C) and purchase-iptv.com found themselves being sued by broadcaster DISH Network.

After what appears to have been a handful of trouble-free years of trading, the lawsuit named Texas residents John Gwaka Magembe and Joyce Berry as the alleged operators of the C4C website.

The decision to sell packages branded as Beast TV, a service that was taken down three years earlier by several Hollywood studios, Netflix, and Canada’s Bell Media, may have been a ploy to exploit existing brand awareness among pirates. The obvious downside was awareness among rightsholders.

DISH Was More Aware Than Expected

“Defendants are trafficking in the Beast TV internet streaming television service a/k/a Channels4Cheap through their websites located at www.channels4cheap.com and its sister website www.purchase-iptv.com,” the company wrote in its complaint.

“Defendants sell Device Codes [subscriptions] to the Service on the C4C Website for $2 for a forty eight hour trial; $15 for one month; $40 for three months; $70 for six months; and $120 for twelve months, depending on the option selected by the user.”

And then came the body blow. DISH produced a screenshot to show that a person, also called John Magembe, was among the top 10 resellers of Beast TV subscriptions when the platform was in full swing.

In common with many other lawsuits of this type, this seemed destined for a predictable outcome. The final judgment would be months in the making so, in the interim, DISH took on another reseller.

IPTV and Astrology Align

In a complaint filed at a California court in February, DISH and Sling described Mr.Sharma of Sharma IPTV, and his company Astro Vastu Solutions (AVS), as traffickers of an illegal streaming service. Flyers distributed in the Bay Area advertising the service had led to DISH investigators handing over $135 for a subscription test purchase.

sharma iptv

Payment for the alleged 10,000 channel service was made to Astro Vastu Solutions LLC. DISH and Sling alleged that this was to separate the name Sharma IPTV from transactions, with users asked to disguise their payments as something unrelated, such as an astrology consultation. Evidence presented in court reveals that the DISH test purchase was recorded as a “3 month warranty” (pdf).

Other documents filed in the lawsuit reveal that a cease-and-desist notice sent to Sharma IPTV last September contained an offer to settle the case. DISH and NagraStar cited similar cases where failing to settle ended up costing a lot more, the $100m+ judgment against Nitro TV, for example.

With the $1m settlement offer attracting no interest, the companies ultimately sued for willful violations of 17 U.S.C. § 1201(a)(2) and 17 U.S.C. § 1201(b)(1) when the defendants manufactured, offered to the public, provided, or otherwise trafficked in their infringing IPTV service. DISH and Sling also demanded an injunction under 17 U.S.C. § 1203(b)(1) plus actual or statutory damages of up to $2,500 for each infringement under § 1201.

On February 20, 2024, DISH and Sling filed their motion for preliminary injunction but were unable to personally serve the defendants until early March, leading to a request to continue the hearing on May 30, 2024, around a month from now.

Then, seemingly out of the blue, a note appeared on the docket last week. It revealed that since the owner of Sharma IPTV was representing himself, he would appreciate some help from the clerk of the court “to process and serve documents to other parties.”

sharma-note

Exactly what that note means in the context of the lawsuit, which started with a rejected $1m settlement offer and escalated from there, isn’t made clear from the docket.

What is clear, however, is that the very next day DISH and Sling dismissed all of their claims in the lawsuit.

dismissed-1

An accompanying note states that the notice of dismissal was served on the defendants at their last known addresses. Beyond that, there’s no additional information to explain why such a serious matter suddenly ended with no mention of a settlement.

Contrasting Fortunes

For channels4cheap.com (C4C) and purchase-iptv.com operators John Gwaka Magembe and Joyce Berry, their fates diverged considerably, even from each other. It transpired that Berry is Magembe’s mother and the reason she appeared as a defendant in the lawsuit was her son’s unauthorized use of her bank account to receive payments for IPTV subscriptions. Berry was dismissed from the case, Magembe was left to face the music alone.

In a judgment handed down April 26, 2024, District Judge Mark T. Pittman noted that the plaintiffs had filed a well-pleaded complaint but the defendants’ failure to defend the claims against them had “brought the adversarial process to a halt, causing substantial prejudice to Plaintiffs.”

Based on this and other factors, a default judgment was warranted (1,2). On top of a broad injunction to restrain any similar conduct, Judge Pittman said that Magembe must pay damages totaling over $30 million in connection with the sale of at least 12,000 ‘device codes’ (subscriptions).

dish damages

The conclusions of these cases couldn’t have been more different, despite being about broadly the same thing: reselling IPTV subscriptions to services operated by people other than the defendants in these cases.

Predictions sometimes miss the mark but for those who like a wager, it’s more than likely that new information will play a role when DISH moves on to its next targets. And the targets after those.

From: TF, for the latest news on copyright battles, piracy and more.

Connected devices with awful default passwords now illegal in UK

The law aims to prevent global-scale botnet attacks.

A group of Black Friday online shopping purchases photographed in delivery boxes filled with polystyrene packing pellets, taken on September 13, 2019. (Photo by Neil Godwin/Future Publishing via Getty Images)

Enlarge / A group of Black Friday online shopping purchases photographed in delivery boxes filled with polystyrene packing pellets, taken on September 13, 2019. (Photo by Neil Godwin/Future Publishing via Getty Images) (credit: Getty Images)

If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password "password." In fact, you're not supposed to have default passwords at all.

A new version of the 2022 Product Security and Telecommunications Infrastructure Act (PTSI) is now in effect, covering just about everything that a consumer can buy that connects to the web. Under the guidelines, even the tiniest Wi-Fi board must either have a randomized password or else generate a password upon initialization (through a smartphone app or other means). This password can't be incremental ("password1," "password54"), and it can't be "related in an obvious way to public information," such as MAC addresses or Wi-Fi network names. A device should be sufficiently strong against brute-force access attacks, including credential stuffing, and should have a "simple mechanism" for changing the password.

There's more, and it's just as head-noddingly obvious. Software components, where reasonable, "should be securely updateable," should actually check for updates, and should update either automatically or in a way  "simple for the user to apply." Perhaps most importantly, device owners can report security issues and expect to hear back about how that report is being handled.

Read 3 remaining paragraphs | Comments

Account compromise of “unprecedented scale” uses everyday home devices

Credential-stuffing attack uses proxies to hide bad behavior.

Account compromise of “unprecedented scale” uses everyday home devices

Enlarge (credit: Getty Images)

Authentication service Okta is warning about the “unprecedented scale” of an ongoing campaign that routes fraudulent login requests through the mobile devices and browsers of everyday users in an attempt to conceal the malicious behavior.

The attack, Okta said, uses other means to camouflage the login attempts as well, including the TOR network and so-called proxy services from providers such as NSOCKS, Luminati, and DataImpulse, which can also harness users’ devices without their knowledge. In some cases, the affected mobile devices are running malicious apps. In other cases, users have enrolled their devices in proxy services in exchange for various incentives.

Unidentified adversaries then use these devices in credential-stuffing attacks, which use large lists of login credentials obtained from previous data breaches in an attempt to access online accounts. Because the requests come from IP addresses and devices with good reputations, network security devices don’t give them the same level of scrutiny as logins from virtual private servers (VPS) that come from hosting services threat actors have used for years.

Read 6 remaining paragraphs | Comments

FTC orders Razer to refund customers who bought its Zephyr face mask

Remember when gaming hardware company Razer decided it was a good idea to launch a face mask with RGB lighting effects, a clear window that let people see your face while you talk, and “N95 grade filters?” And remember how it turned out th…

Remember when gaming hardware company Razer decided it was a good idea to launch a face mask with RGB lighting effects, a clear window that let people see your face while you talk, and “N95 grade filters?” And remember how it turned out the Razer Zephyr face mask didn’t actually filter out 95% of airborne […]

The post FTC orders Razer to refund customers who bought its Zephyr face mask appeared first on Liliputing.

Customers say Meta’s ad-buying AI blows through budgets in a matter of hours

Based on your point of view, the AI either doesn’t work or works too well.

AI is here to terminate your bank account.

Enlarge / AI is here to terminate your bank account. (credit: Carolco Pictures)

Give the AI access to your credit card, they said. It'll be fine, they said. Users of Meta's ad platform who followed that advice have been getting burned by an AI-powered ad purchasing system, according to The Verge. The idea was to use a Meta-developed AI to automatically set up ads and spend your ad budget, saving you the hassle of making decisions about your ad campaign. Apparently, the AI funnels money to Meta a little too well: Customers say it burns, though, what should be daily ad budgets in a matter of hours, and costs are inflated as much as 10-fold.

The AI-powered software in question is the "Advantage+ Shopping Campaign." The system is supposed to automate a lot of ad setup for you, mixing and matching various creative elements and audience targets. The power of AI-powered advertising (Google has a similar product) is that the ad platform can get instant feedback on its generated ads via click-through rates. You give it a few guard rails, and it can try hundreds or thousands of combinations to find the most clickable ad at a speed and efficiency no human could match. That's the theory, anyway.

The Verge spoke to "several marketers and businesses" with similar stories of being hit by an AI-powered spending spree once they let Meta's system take over a campaign. The description of one account says the AI "had blown through roughly 75 percent of the daily ad budgets for both clients in under a couple of hours" and that "the ads’ CPMs, or cost per impressions, were roughly 10 times higher than normal." Meanwhile, the revenue earned from those AI-powered ads was "nearly zero." The report says, "Small businesses have seen their ad dollars get wiped out and wasted as a result, and some have said the bouts of overspending are driving them from Meta’s platforms."

Read 3 remaining paragraphs | Comments

ADAC-Pannenstatistik 2024: Junge Elektroautos weniger pannenanfällig als Verbrenner

Für eine Langzeitanalyse reicht es noch nicht. Doch bislang schneiden Elektroautos in der Pannenstatistik besser ab als Verbrenner desselben Baujahrs. (Elektroauto, Technologie)

Für eine Langzeitanalyse reicht es noch nicht. Doch bislang schneiden Elektroautos in der Pannenstatistik besser ab als Verbrenner desselben Baujahrs. (Elektroauto, Technologie)