Month: May 2025

Ein Fotomodus ohne störendes Spiel, dazu lustige Abenteuer im Agentenmilieu mit Skin Deep und gelungener Grusel: Es gibt tolle neue Indiegames. Von Rainer Sigl (Indiegames, Spieletest)

Zentrale Gerätekontrolle, sichere Konfiguration und Compliance-Umsetzung: In diesem E-Learning-Paket lernen IT-Admins, wie Microsoft Intune professionell eingesetzt wird - mit 11 Stunden Videomaterial. (Golem Karrierewelt, Betriebssysteme)

The latest Mac Mini is a remarkably small computer with a powerful processor, multiple Thunderbolt ports, and HDMI and Ethernet jacks. But that doesn’t mean it couldn’t have more I/O capalities. The Acasis Workstation for Mac Mini M4 is a docking station that gives the little computer two DisplayPort outputs, three USB Type-A ports, SD […]

The post Lilbits: A Mac Mini dock that looks like a Mac Pro, Shuttle’s new mini PCs, and Fairphone 4 skips Android 14 (in favor of Android 15) appeared first on Liliputing.

The hacker ecosystem in Russia, more than perhaps anywhere else in the world, has long blurred the lines between cybercrime, state-sponsored cyberwarfare, and espionage. Now an indictment of a group of Russian nationals and the takedown of their sprawling botnet offers the clearest example in years of how a single malware operation allegedly enabled hacking operations as varied as ransomware, wartime cyberattacks in Ukraine, and spying against foreign governments.

The US Department of Justice today announced criminal charges today against 16 individuals law enforcement authorities have linked to a malware operation known as DanaBot, which according to a complaint infected at least 300,000 machines around the world. The DOJ’s announcement of the charges describes the group as “Russia-based,” and names two of the suspects, Aleksandr Stepanov and Artem Aleksandrovich Kalinkin, as living in Novosibirsk, Russia. Five other suspects are named in the indictment, while another nine are identified only by their pseudonyms. In addition to those charges, the Justice Department says the Defense Criminal Investigative Service (DCIS)—a criminal investigation arm of the Department of Defense—carried out seizures of DanaBot infrastructure around the world, including in the US.

Aside from alleging how DanaBot was used in for-profit criminal hacking, the indictment also makes a rarer claim—it describes how a second variant of the malware it says was used in espionage against military, government, and NGO targets. “Pervasive malware like DanaBot harms hundreds of thousands of victims around the world, including sensitive military, diplomatic, and government entities, and causes many millions of dollars in losses,” US attorney Bill Essayli wrote in a statement.

Read full article

Comments

Don't worry about the "mission-driven not-for-profit" College Board—it's drowning in cash. The US group, which administers the SAT and AP tests to college-bound students, paid its CEO $2.38 million in total compensation in 2023 (the most recent year data is available). The senior VP in charge of AP programs made $694,662 in total compensation, while the senior VP for Technology Strategy made $765,267 in total compensation.

Given such eye-popping numbers, one would have expected the College Board's transition to digital exams to go smoothly, but it continues to have issues.

Just last week, the group's AP Psychology exam was disrupted nationally when the required "Bluebook" testing app couldn't be accessed by many students. Because the College Board shifted to digital-only exams for 28 of its 36 AP courses beginning this year, no paper-based backup options were available. The only "solution" was to wait quietly in a freezing gymnasium, surrounded by a hundred other stressed-out students, to see if College Board could get its digital act together.

Read full article

Comments

Marketers promote AI-assisted developer tools as workhorses that are essential for today’s software engineer. Developer platform GitLab, for instance, claims its Duo chatbot can “instantly generate a to-do list” that eliminates the burden of “wading through weeks of commits.” What these companies don’t say is that these tools are, by temperament if not default, easily tricked by malicious actors into performing hostile actions against their users.

Researchers from security firm Legit on Thursday demonstrated an attack that induced Duo into inserting malicious code into a script it had been instructed to write. The attack could also leak private code and confidential issue data, such as zero-day vulnerability details. All that’s required is for the user to instruct the chatbot to interact with a merge request or similar content from an outside source.

AI assistants’ double-edged blade

The mechanism for triggering the attacks is, of course, prompt injections. Among the most common forms of chatbot exploits, prompt injections are embedded into content a chatbot is asked to work with, such as an email to be answered, a calendar to consult, or a webpage to summarize. Large language model-based assistants are so eager to follow instructions that they’ll take orders from just about anywhere, including sources that can be controlled by malicious actors.

Read full article

Comments

As Google moves the last remaining Nest devices into the Home app, it's also looking at ways to make this smart home hub easier to use. Naturally, Google is doing that by ramping up Gemini integration. The company has announced new automation capabilities with generative AI, as well as better support for third-party devices via the Home API. Google AI will also plug into a new Android widget that can keep you updated on what the smart parts of your home are up to.

The Google Home app is where you interact with all of Google's smart home gadgets, like cameras, thermostats, and smoke detectors—some of which have been discontinued, but that's another story. It also accommodates smart home devices from other companies, which can make managing a mixed setup feasible if not exactly intuitive. A dash of AI might actually help here.

Google began testing Gemini integrations in Home last year, and now it's opening that up to third-party devices via the Home API. Google has worked with a few partners on API integrations before general availability. The previously announced First Alert smoke/carbon monoxide detector and Yale smart lock that are replacing Google's Nest devices are among the first, along with Cync lighting, Motorola Tags, and iRobot vacuums.

Read full article

Comments

NASA's Apollo missions brought back moon rock samples for scientists to study. We've learned a great deal over the ensuing decades, but one enduring mystery remains. Many of those lunar samples show signs of exposure to strong magnetic fields comparable to Earth's, yet the Moon doesn't have such a field today. So, how did the moon rocks get their magnetism?

There have been many attempts to explain this anomaly. The latest comes from MIT scientists, who argue in a new paper published in the journal Science Advances that a large asteroid impact briefly boosted the Moon's early weak magnetic field—and that this spike is what is recorded in some lunar samples.

Evidence gleaned from orbiting spacecraft observations, as well as results announced earlier this year from China's Chang'e 5 and Chang'e 6 missions, is largely consistent with the existence of at least a weak magnetic field on the early Moon. But where did this field come from? These usually form in planetary bodies as a result of a dynamo, in which molten metals in the core start to convect thanks to slowly dissipating heat. The problem is that the early Moon's small core had a mantle that wasn't much cooler than its core, so there would not have been significant convection to produce a sufficiently strong dynamo.

Read full article

Comments

On Tuesday, Google launched Veo 3, a new AI video synthesis model that can do something no major AI video generator has been able to do before: create a synchronized audio track. While from 2022 to 2024, we saw early steps in AI video generation, each video was silent and usually very short in duration. Now you can hear voices, dialog, and sound effects in eight-second high-definition video clips.

Shortly after the new launch, people began asking the most obvious benchmarking question: How good is Veo 3 at faking Oscar-winning actor Will Smith at eating spaghetti?

First, a brief recap. The spaghetti benchmark in AI video traces its origins back to March 2023, when we first covered an early example of horrific AI-generated video using an open source video synthesis model called ModelScope. The spaghetti example later became well-known enough that Smith parodied it almost a year later in February 2024.

Read full article

Comments

Is it weird to have nostalgia for an operating system? I don't mean missing a particular feature that's been removed from modern versions or a specific productivity setting that's no longer supported. I mean a sense of longing for the vibes of the computer interface you grew up with, an ache for the aesthetics of user interfaces past.

I would have thought I was immune to this particular brand of nostalgia. Then I happened upon Desktop Survivors 98, a new Vampire Survivors-style "bullet heaven" autoshooter that leans hard into the aesthetics of the late '90s Windows machines I grew up with. And while that low-res, 256-color presentation is what drew me in, it was the intriguing mouse-controlled gameplay underneath that has kept me coming back for more retro-styled action all week.

Start me up

When it comes to capturing the feel of the '90s computer environment, Desktop Survivors 98 gets everything just right. This is in large part due to rampant theft of familiar old-school icons; items like My Computer, Calculator, Minesweeper, Search, and more look like they were taken directly from a classic Microsoft tile set. The game's low-res desktop backgrounds and Windows also look like they came out of a years-old Microsoft style book.

Read full article

Comments