US sanctions operators of “free VPN” that routed crime traffic through user PCs

911 S5 residential proxy service was comprised of 19 million IP addresses.

US sanctions operators of “free VPN” that routed crime traffic through user PCs

Enlarge (credit: Getty Images)

The US Treasury Department has sanctioned three Chinese nationals for their involvement in a VPN-powered botnet with more than 19 million residential IP addresses they rented out to cybercriminals to obfuscate their illegal activities, including COVID-19 aid scams and bomb threats.

The criminal enterprise, the Treasury Department said Tuesday, was a residential proxy service known as 911 S5. Such services provide a bank of IP addresses belonging to everyday home users for customers to route Internet connections through. When accessing a website or other Internet service, the connection appears to originate with the home user.

In 2022, researchers at the University of Sherbrooke profiled 911[.]re, a service that appears to be an earlier version of 911 S5. At the time, its infrastructure comprised 120,000 residential IP addresses. This pool was created using one of two free VPNs—MaskVPN and DewVPN—marketed to end users. Besides acting as a legitimate VPN, the software also operated as a botnet that covertly turned users’ devices into a proxy server. The complex structure was designed with the intent of making the botnet hard to reverse engineer.

Read 9 remaining paragraphs | Comments

Bentley is replacing its W12 engine with a plug-in hybrid—and let us try it

Plug-in hybrid powertrain perfectly suits Bentley’s next Continental GT Speed.

A Bentley Continental GT Speed wearing a camouflage wrap, in the pit lane of a race track

Enlarge / After building almost 100,000 W12-powered Bentley Continental GTs, the brand is moving to a plug-in powertrain. (credit: Jonathan Gitlin)

BARCELONA—The days of big engines are numbered, even for big spenders. Owning a GT that lets you drive across Europe in a day in cosseted luxury means very little if you're not allowed to drive it into the city you're meant to be visiting, after all. Low emissions zones are either a fact of life or on the way in many of the more desirable urban post codes, and even here in the US we're about to start getting quite tough on fuel efficiency. Which is why Bentley is saying goodbye to its W12-powered Continental GT Speed and replacing it with a new plug-in hybrid instead.

The W12 engine has become something of a trademark for Bentley in the 21st century. For many years, Bentleys were essentially just badge-engineered Rolls-Royces, while both companies were owned by the aircraft maker Vickers. But VW group took control of Bentley in 1998—BMW got Rolls-Royce—and it was time for something fresh.

Originally developed within parent company Volkswagen Group for use in the all-aluminum Audi A8, the W12 design essentially mated together a pair of narrow-angle V6 engines as used in the Golf VR6 to create a compact and powerful multi-cylinder engine for those customers looking for a powertrain a bit less common than a V8.

Read 12 remaining paragraphs | Comments

Neuralink rival sets brain-chip record with 4,096 electrodes on human brain

Precision expects its minimally invasive brain implant to hit the market next year.

Each of Precision's microelectrode arrays comprises 1,024 electrodes ranging in diameter from 50 to 380 microns, connected to a customized hardware interface.

Enlarge / Each of Precision's microelectrode arrays comprises 1,024 electrodes ranging in diameter from 50 to 380 microns, connected to a customized hardware interface. (credit: Precision)

Brain-computer interface company Precision Neuroscience says that it has set a new world record for the number of neuron-tapping electrodes placed on a living human's brain—4,096, surpassing the previous record of 2,048 set last year, according to an announcement from the company on Tuesday.

The high density of electrodes allows neuroscientists to map the activity of neurons at unprecedented resolution, which will ultimately help them to better decode thoughts into intended actions.

Precision, like many of its rivals, has the preliminary goal of using its brain-computer interface (BCI) to restore speech and movement in patients, particularly those who have suffered a stroke or spinal cord injury. But Precision stands out from its competitors due to a notable split from one of the most high-profile BCI companies, Neuralink, owned by controversial billionaire Elon Musk.

Read 8 remaining paragraphs | Comments

Cox Appeals Billion Dollar Piracy Verdict Over ‘Concealed Evidence’

Cox Communications has filed its opening brief in a new appeal of the $1 billion piracy case. A jury previously held the Internet provider liable for the music piracy activities of its subscribers. After the trial, Cox learned that the music companies ‘concealed’ key information about ‘destroyed’ piracy evidence; this allegedly damaged the foundation of the landmark lawsuit.

From: TF, for the latest news on copyright battles, piracy and more.

pirate-flagLate 2019, Internet provider Cox Communications lost its legal battle against a group of major record labels, including Sony and Universal.

Following a two-week trial, a Virginia jury held Cox liable for its pirating subscribers. The ISP failed to disconnect repeat infringers and was ordered to pay $1 billion in damages.

Cox challenged the verdict through several routes and, earlier this year, booked a partial victory. The Fourth Circuit Court of Appeals confirmed that the ISP was contributorily liable for pirating subscribers, but reversed the vicarious copyright infringement finding. A new trial will determine the appropriate damages amount given these new conclusions.

Meanwhile, Cox has another angle to work at. This week, the company filed its opening brief, appealing the District Court’s denial of its relief from judgement (Rule 60[b]) motion, as well as the court’s conclusion that Cox’s defense wasn’t hampered by the music companies ‘concealment’ of evidence.

Rehashed Infringements?

The alleged misconduct refers to evidence that, according to Cox, was held back intentionally. Specifically, it relates to the piracy tracking system, operated by MarkMonitor, which formed the basis for the lawsuit through hundreds of thousands of copyright infringement notices.

MarkMonitor was hired by the music labels to track the pirated files being shared by Cox subscribers through BitTorrent. To confirm that these files were indeed pirated, they were downloaded and verified using Audible Magic’s fingerprinting technology.

Evidence pertaining to these allegedly pirated files was central to proving direct copyright infringement. During the Cox trial, the music companies presented a hard drive that contained the files, suggesting that those were the original songs that were pirated between 2012 and 2014.

However, based on information that surfaced in the music companies’ lawsuits against Internet providers Charter and Bright House, Cox later learned that this evidence was recreated at a later date, using hash values supplied by record labels.

Cox brought this up at the district court in 2022 and submitted a motion for relief from judgment, requesting a do-over. However, the court denied the request which led to the current appeal after a two-year pause.

Cox Appeals Over ‘Concealed’ Evidence

In its opening motion before the Fourth Circuit Court of Appeals, Cox stresses that the MarkMonitor evidence is of key importance. Any concerns should not be brushed away or hidden.

“Needless to say, the reliability of MarkMonitor’s system was all important, and Cox had every interest in attacking it. But Cox was deprived of the opportunity to scrutinize MarkMonitor’s system fully, something it would learn only after judgment was entered.”

“The truth came out when district courts in cases Plaintiffs brought against other ISPs forced Plaintiffs to turn over evidence Plaintiffs had deliberately concealed from Cox,” the ISP adds.

The district court previously acknowledged that some evidence was not disclosed by MarkMonitor at the time. However, the court believes that the ‘recreated’ evidence doesn’t change anything materially.

According to the court, it doesn’t matter whether the infringing files were verified before or after the fact. The verification process is based on file hashes, which don’t change over time.

Smoking ‘Hashes’ Gun?

Cox clearly believes that something is not right, however, and points to information showing that, while recreating evidence, MarkMonitor allegedly failed to find new music files for some of the provided hash values.

These unconfirmed hashes were discovered in the record labels’ lawsuit against Charter, which first uncovered the recreated evidence. This could have turned the case upside down, but the lawsuit was settled before trial.

“And lo and behold, the Charter evidence ultimately revealed that the 2016 project failed to confirm some of the original entries in the MarkMonitor database,” Cox notes.

“With this laid bare, Plaintiffs in Charter were forced to develop an entirely new approach to proving the system’s reliability and, thus, direct infringement; they hired a gaggle of new experts, then settled before trial could test this new method.”

lo and behold cox appeal

Cox argues that the unseen evidence would have squarely undermined the reliability of the MarkMonitor notice system and the entire direct copyright infringement claim by extension.

And there’s more. In the record labels’ lawsuit against another ISP, Bright House, the music companies admitted that they failed to disclose key aspects of MarkMonitor’s source code.

It’s unclear what was held back but, since that lawsuit was settled at the eleventh hour, Cox believes that it could be quite important.

“Cox still does not know precisely what this code does. But public documents from Charter and Bright House indicate that the code governs, at least, the process by which MarkMonitor supposedly verified that files it found on peer-to-peer networks matched copyrighted works,” the ISP informs the court.

“The district court in Bright House was determined to get to the bottom of this. It summoned MarkMonitor’s corporate representative to appear in court and explicitly commanded that ‘Plaintiffs’ counsel SHALL NOT coach [him] in advance.’ Plaintiffs settled the day before that appearance.”

All in all, Cox believes that a new trial is warranted, so the evidence can be tested and scrutinized properly. Reopening the case makes more sense now, it argues, as the earlier appeal also reopened several key questions.

“This Court should therefore reverse the denial of Cox’s Rule 60 motions or, at a minimum, vacate the district court’s decision and direct the court to permit Cox its requested discovery, followed by appropriate motion practice. The fairness and integrity of any result in this case depends on it,” Cox concludes.

A copy of Cox’s ‘page proof’ opening brief, submitted at the Fourth Circuit Court of Appeals, is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Bungie wins landmark suit against Destiny 2 cheat-maker AimJunkies

Three-year suit had claims of hidden crypto, fake Ukrainians, counter-hacking.

Destiny 2 key art showing characters aiming purple-light pointers at targets in a bot-filled environment.

Enlarge (credit: Bungie)

They wanted to make money by selling cheating tools to Destiny 2 players. They may have ended up setting US legal precedent.

After a trial in federal court in Seattle last week, a jury found cheat-seller AimJunkies, along with its parent company Phoenix Digital and four of its employees and contractors, liable for copyright infringement and assigned damages to each of them. The jury split $63,210 in damages, with $20,000 to Phoenix Digital itself and just under $11,000 each to the four individuals. That's just under the $65,000 revenue the defendants claimed to have generated from 1,400 copies of its Destiny 2 cheats.

Bungie's case appears to have gone further than any other game-cheating suit has made it in the US court system. Because cheating at an online game is not, in itself, illegal, game firms typically lean on the anti-circumvention aspects of the 1998 Digital Millenium Copyright Act (DMCA). That's how the makers of Grand Theft Auto V, Overwatch, Rainbow Six, and Fortnite have pursued their cheat-making antagonists. Bungie, in taking their claim past settlement and then winning a copyright claim from a jury, has perhaps provided game makers a case to point to in future proceedings, and perhaps more incentive.

Read 10 remaining paragraphs | Comments

Nvidia denies pirate e-book sites are “shadow libraries” to shut down lawsuit

Will quibbling over the meaning of “shadow libraries” help Nvidia’s case?

Nvidia denies pirate e-book sites are “shadow libraries” to shut down lawsuit

Enlarge (credit: Westend61 | Westend61)

Some of the most infamous so-called shadow libraries have increasingly faced legal pressure to either stop pirating books or risk being shut down or driven to the dark web. Among the biggest targets are Z-Library, which the US Department of Justice has charged with criminal copyright infringement, and Library Genesis (Libgen), which was sued by textbook publishers last fall for allegedly distributing digital copies of copyrighted works "on a massive scale in willful violation" of copyright laws.

But now these shadow libraries and others accused of spurning copyrights have seemingly found an unlikely defender in Nvidia, the AI chipmaker among those profiting most from the recent AI boom.

Nvidia seemed to defend the shadow libraries as a valid source of information online when responding to a lawsuit from book authors over the list of data repositories that were scraped to create the Books3 dataset used to train Nvidia's AI platform NeMo.

Read 12 remaining paragraphs | Comments

iFixit ends Samsung deal as oppressive repair shop requirements come to light

iFixit says “flashy press releases don’t mean much without follow-through.”

iFixit ends Samsung deal as oppressive repair shop requirements come to light

Enlarge (credit: Samsung)

IFixit and Samsung were once leading the charge in device repair, but iFixit says it's ending its repair partnership with Samsung because it feels Samsung just isn't participating in good faith. iFixit says the two companies "have not been able to deliver" on the promise of a viable repair ecosystem, so it would rather shut the project down than continue. The repair site says "flashy press releases and ambitious initiatives don’t mean much without follow-through."

iFixit's Scott Head explains: "As we tried to build this ecosystem we consistently faced obstacles that made us doubt Samsung’s commitment to making repair more accessible. We couldn’t get parts to local repair shops at prices and quantities that made business sense. The part prices were so costly that many consumers opted to replace their devices rather than repair them. And the design of Samsung’s Galaxy devices remained frustratingly glued together, forcing us to sell batteries and screens in pre-glued bundles that increased the cost."

A good example of Samsung's parts bundling is this Galaxy S22 Ultra "screen" part for $233. The screen is the most common part to break, but rather than just sell a screen, Samsung makes you buy the screen, a new phone frame, a battery, and new side buttons and switches. As we said when this was announced, that's like half of the total parts in an entire phone. This isn't a perfect metric, but the Samsung/iFixit parts store only offers three parts for the S22 Ultra, while the Pixel 8 Pro store has 10 parts, and the iPhone 14 Pro Max store has 23 parts.

Read 5 remaining paragraphs | Comments

BoostR is yet another compact Radeon RX 7600M XT eGPU dock (crowdfunding)

The BoostR eGPU is a small graphics dock that lets you add an AMD Radeon RX 7600M XT discrete GPU to a wide range of PCs including handhelds, laptops, or mini PCs. It has the same GPU and connectivity options as the ONEXGPU, GPD G1, and AYANEO AG01, b…

The BoostR eGPU is a small graphics dock that lets you add an AMD Radeon RX 7600M XT discrete GPU to a wide range of PCs including handhelds, laptops, or mini PCs. It has the same GPU and connectivity options as the ONEXGPU, GPD G1, and AYANEO AG01, but the BoostR has at least one thing […]

The post BoostR is yet another compact Radeon RX 7600M XT eGPU dock (crowdfunding) appeared first on Liliputing.

Dinosaurs needed to be cold enough that being warm-blooded mattered

Two groups of dinosaurs moved to cooler climes during a period of climate change.

Image of a feathered dinosaur against a white background.

Enlarge / Later theropods had multiple adaptations to varied temperatures. (credit: SCIEPRO/SCIENCE PHOTO LIBRARY)

Dinosaurs were once assumed to have been ectothermic, or cold-blooded, an idea that makes sense given that they were reptiles. While scientists had previously discovered evidence of dinosaur species that were warm-blooded, though what could have triggered this adaptation remained unknown. A team of researchers now think that dinosaurs that already had some cold tolerance evolved endothermy, or warm-bloodedness, to adapt when they migrated to regions with cooler temperatures. They also think they’ve found a possible reason for the trek.

Using the Mesozoic fossil record, evolutionary trees, climate models, and geography, plus factoring in a drastic climate change event that caused global warming, the team found that theropods (predators and bird ancestors such as velociraptor and T. rex) and ornithischians (such as triceratops and stegosaurus) must have made their way to colder regions during the Early Jurassic. Lower temperatures are thought to have selected for species that were partly adapted to endothermy.

“The early invasion of cool niches… [suggests] an early attainment of homeothermic (possibly endothermic) physiology in [certain species], enabling them to colonize and persist in even extreme latitudes since the Early Jurassic,” the researchers said in a study recently published in Current Biology.

Read 10 remaining paragraphs | Comments