Month: June 2025

I did not expect to feature NASA astronaut Nichole Ayers in the Tuesday Telescope so soon, but a recent photo she shared is just sublime. (In case you missed it, we wrote about her photo of lightning from space about a month ago.)

This week Ayers has a time-lapse sequence she captured from the Cupola as the International Space Station soared near Central and South America.

"Soooooo much going on in this picture," Ayers wrote on the social media site X. "You can see Nicaragua, Costa Rica, and Panama, with South America off in the distance."

Read full article

Comments

Smartphones von Apple erfreuen sich großer Beliebtheit. Seit diesem Jahr ist mit dem iPhone 16e auch ein günstiges Modell auf dem Markt. (iPhone 16, iPhone)

Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered. Google says it's investigating the abuse, which allows Meta and Yandex to convert ephemeral web identifiers into persistent mobile app user identities.

The covert tracking—implemented in the Meta Pixel and Yandex Metrica trackers—allows Meta and Yandex to bypass core security and privacy protections provided by both the Android operating system and browsers that run on it. Android sandboxing, for instance, isolates processes to prevent them from interacting with the OS and any other app installed on the device, cutting off access to sensitive data or privileged system resources. Defenses such as state partitioning and storage partitioning, which are built into all major browsers, store site cookies and other data associated with a website in containers that are unique to every top-level website domain to ensure they're off-limits for every other site.

A blatant violation

“One of the fundamental security principles that exists in the web, as well as the mobile system, is called sandboxing,” Narseo Vallina-Rodriguez, one of the researchers behind the discovery, said in an interview. “You run everything in a sandbox, and there is no interaction within different elements running on it. What this attack vector allows is to break the sandbox that exists between the mobile context and the web context. The channel that exists allowed the Android system to communicate what happens in the browser with the identity running in the mobile app.”

Read full article

Comments

Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered. Google says it's investigating the abuse, which allows Meta and Yandex to convert ephemeral web identifiers into persistent mobile app user identities.

The covert tracking—implemented in the Meta Pixel and Yandex Metrica trackers—allows Meta and Yandex to bypass core security and privacy protections provided by both the Android operating system and browsers that run on it. Android sandboxing, for instance, isolates processes to prevent them from interacting with the OS and any other app installed on the device, cutting off access to sensitive data or privileged system resources. Defenses such as state partitioning and storage partitioning, which are built into all major browsers, store site cookies and other data associated with a website in containers that are unique to every top-level website domain to ensure they're off-limits for every other site.

A blatant violation

“One of the fundamental security principles that exists in the web, as well as the mobile system, is called sandboxing,” Narseo Vallina-Rodriguez, one of the researchers behind the discovery, said in an interview. “You run everything in a sandbox, and there is no interaction within different elements running on it. What this attack vector allows is to break the sandbox that exists between the mobile context and the web context. The channel that exists allowed the Android system to communicate what happens in the browser with the identity running in the mobile app.”

Read full article

Comments

Künftig sollen Standard-Browser auch wirklich zum Standard für weit mehr Dateitypen werden. Zudem können sie Edge für PDFs leicht wechseln. (Windows 11, Microsoft)

In-Ear-Kopfhörer von Soundcore by Anker mit adaptiver Geräuschunterdrückung und langer Spielzeit gibt es bei Amazon zum Aktionspreis. (Kopfhörer, Audio/Video)

Gut, aber nicht perfekt ist Razers erste vertikale Maus. Das liegt nicht nur an der unübersichtlichen Software. Ein Test von Ingo Pakalski (Razer, Test)

Die Telekom meldet gerne ihren FTTH-Ausbau bis zum Bordstein. Erstmals kommt daran deutliche Kritik von der Bundesnetzagentur. (Anga Com, Telekom)

Der Galaxy SmartTag 2 von Samsung hilft dabei, Alltagsgegenstände schnell wiederzufinden, bevor langes Suchen beginnt. (Technik/Hardware, Samsung)

Der Glaube, KI sei gut, wenn man sie korrekt einsetze, ist unter US-Studenten weit verbreitet. Das gefährdet den Eintritt ins Berufsleben. (KI, Wissenschaft)