Month: June 2024

Enlarge / Rocket Lab CEO Peter Beck speaks during the opening of the new Rocket Lab factory on October 12, 2018, in Auckland, New Zealand. (credit: Phil Walter/Getty Images)

Peter Beck has been having a pretty great June. Earlier this month, he was made a Knight Companion of the New Zealand Order of Merit. Then, Sir Peter Beck presided as Rocket Lab launched its 50th Electron rocket, becoming the fastest company to launch its 50th privately developed booster.

Finally, last week, Rocket Lab revealed that it had signed its largest launch contract ever: 10 flights for the Japanese Earth-observation company Synspective. Ars caught up with Beck while he was in Tokyo for the announcement. What follows is a lightly edited transcript of our conversation, which touches on a variety of launch-related issues.

Ars Technica: Hi Pete. We've talked about competition in small launch for years. But when I tally up the record of some of your US competitors—Firefly, Astra, Relativity Space, Virgin Orbit, and ABL—they're 7-for-21 on launch attempts. And if you remove the now-retired rockets, it's 1-for-6. Some of these competitors have, or did, exist for a decade. What does this say about the launch business?

Enlarge (credit: Getty Images)

WordPress plugins running on as many as 36,000 websites have been backdoored in a supply-chain attack with unknown origins, security researchers said on Monday.

So far, five plugins are known to be affected in the campaign, which was active as recently as Monday morning, researchers from security firm Wordfence reported. Over the past week, unknown threat actors have added malicious functions to updates available for the plugins on WordPress.org, the official site for the open source WordPress CMS software. When installed, the updates automatically create an attacker-controlled administrative account that provides full control over the compromised site. The updates also add content designed to goose search results.

Poisoning the well

“The injected malicious code is not very sophisticated or heavily obfuscated and contains comments throughout making it easy to follow,” the researchers wrote. “The earliest injection appears to date back to June 21st, 2024, and the threat actor was still actively making updates to plugins as recently as 5 hours ago.”

Enlarge (credit: Getty Images)

WordPress plugins running on as many as 36,000 websites have been backdoored in a supply-chain attack with unknown origins, security researchers said on Monday.

So far, five plugins are known to be affected in the campaign, which was active as recently as Monday morning, researchers from security firm Wordfence reported. Over the past week, unknown threat actors have added malicious functions to updates available for the plugins on WordPress.org, the official site for the open source WordPress CMS software. When installed, the updates automatically create an attacker-controlled administrative account that provides full control over the compromised site. The updates also add content designed to goose search results.

Poisoning the well

“The injected malicious code is not very sophisticated or heavily obfuscated and contains comments throughout making it easy to follow,” the researchers wrote. “The earliest injection appears to date back to June 21st, 2024, and the threat actor was still actively making updates to plugins as recently as 5 hours ago.”

Enlarge / The 2024 iPad Pro. (credit: Samuel Axon)

Apple has added the ability to format external drives in iOS 18 and iPadOS 18, the major software updates for iPhones and iPads due later this year.

While the feature likely won't be tapped by all that many users, its inclusion is fascinating in that it shows just how far Apple has moved away from its original sensibilities with the iPhone and the iPad.

The feature was discovered in the iPadOS 18 beta by artist and developer Kaleb Cadle, who posted about it to his Substack ByteBits a couple of days ago. It was later found in iOS 18 as well.

Enlarge / A PC running Windows 11. (credit: Microsoft)

One of Windows 11's more contentious changes is that, by default, both the Home and Pro editions of the operating system require users to sign in with a Microsoft account during setup. Signing in with an account does get you some benefits, at least if you're a regular user of other Microsoft products like OneDrive, GamePass, or Microsoft 365 (aka Office). But if you don't use those services, a lot of what a Microsoft account gets you in Windows 11 is repeated ads and reminders about signing up for those services. Using Windows with a traditional local account is still extremely possible, but it does require a small amount of know-how beyond just clicking the right buttons.

On the know-how front, Microsoft has taken one more minor, but nevertheless irritating, step away from allowing users to sign in with local accounts. This official Microsoft support page walks users with local accounts through the process of signing in to a Microsoft account. As recently as June 12, that page also included instructions for converting a Microsoft account into a local account. But according to Tom's Hardware and the Internet Wayback Machine, those instructions disappeared on or around June 17 and haven't been seen since.

Despite the documentation change, most of the workarounds for creating a local account still work in both Windows 11 23H2 (the publicly available version of Windows 11 for most PCs) and 24H2 (available now on Copilot+ PCs, later this fall for everyone else). The easiest way to do it on a PC you just took out of the box is to press Shift+F10 during the setup process to bring up a command prompt window, typing OOBE\BYPASSNRO, rebooting, and then clicking the "I don't have Internet" button when asked to connect to a Wi-Fi network.