news.buyenne.com

(credit: Check Point Software)

eBay has no plans to fix a "severe" vulnerability that allows attackers to use the company's trusted website to distribute malicious code and phishing pages, researchers from security firm Check Point Software said.

The vulnerability allows attackers to bypass a key restriction that prevents user posts from hosting JavaScript code that gets executed on end-user devices. eBay has long enforced the limitation to prevent scammers from creating auction pages that execute dangerous code or content when they're viewed by unsuspecting users. Using a highly specialized coding technique known as JSFUCK, hackers can work around this safeguard. The technique allows eBay users to insert JavaScript into their posts that will call a variety of different payloads that can be tailored to the specific browser and device of the visitor.

"An attacker could target eBay users by sending them a legitimate page that contains malicious code," Check Point researcher Oded Vanunu wrote in a blog post published Tuesday. "Customers can be tricked into opening the page, and the code will then be executed by the user's browser or mobile app, leading to multiple ominous scenarios that range from phishing to binary download."

The Unha-3 rocket, the platform for North Korea's (sort of) successful satellite launch in 2012. Another launch has been announced for February.

Watch the skies. In an alert filed with the United Nations' International Maritime Organization, the government of the Democratic People's Republic of Korea (otherwise known as North Korea) announced plans to launch a satellite sometime in February. The nation also provided warnings for the areas where its boost stages might plummet back to the surface. Japan's Ministry of Defense has since announced that Japan will shoot down the rocket if it flies toward Japan.

The launch, from North Korea's western coast near its border with China, will likely be the latest version of North Korea's Kwangmyŏngsŏng ("Bright Star") satellite series, aboard the latest version of the Unha ("Galaxy") rocket. The splash locations given by North Korea for the launch—the first stage landing in the Yellow Sea between South Korea and China and the second in the Philippine Sea east of the Philippines—are nearly identical to those of North Korea's last orbital effort.

The launch announcement comes just a month after a surprise nuclear weapons test in which the regime of Kim Jong-un claimed to have detonated a thermonuclear bomb. North Korea also claims to have developed a miniaturized nuclear warhead that could be placed atop a ballistic missile, though US intelligence officials have downplayed those reports.

(credit: Fitbit)

Fitbit isn't starting off 2016 slowly. The company announced the new Blaze fitness watch at CES last month, and another device is coming from the king of the activity-tracker world. Today Fitbit announced the $129 Alta, a slender activity tracker with customizable bands meant to appeal to those who don't want to be identified as "that person wearing a tracker on their wrist."

Let's examine the Alta in comparison to its price twin, the $129 Fitbit Charge. First and most important is the difference in design. While the Charge's plastic band comes in various bright colors, the Alta comes with a few colored plastic options, but you can buy $99 metal and $59 leather accessories as well. The Charge has a small digital display and companion button for scrolling through time, activity progress, and call alerts. The Alta is Fitbit's first lower-cost tracker with a full OLED touchscreen that you can tap to see similar information. The Alta will also show you a few more notifications, including text and calendar alerts, which are synced from your smartphone.

In terms of what they track, the Alta and the Charge are nearly identical. They both monitor steps, workouts, and sleep, although the Alta will send you inactivity alerts. The Alta also has the Smart Track feature, which will automatically recognize when you're doing a specific activity like running, cycling, playing soccer or basketball, and more. Interestingly, the Charge lists an altimeter in its spec list, which helps it track stairs climbed, while the Alta does not. Also, the Alta has a slightly shorter battery life compared to the Charge—just five days compared to seven to 10 days—but that can likely be attributed to its full touchscreen.

If I seem a little obsessed with dark matter at the moment, it's only because there is so much interesting stuff going on right now. But I can give it up any time—really! As I reported last month, there has been a lot of excitement among astrophysicists and cosmologists because there seems to be more gamma rays than expected coming from various places, including near the center of the Milky Way and other galaxies. Unfortunately, as I also reported, it seems very difficult to absolutely rule out other possible sources for these extra gamma rays. In particular, there is the problem of unresolved sources. These could be gas clouds or other emitters that we simply haven't spotted in other observations.

The obvious solution is to simply keep looking, using other telescopes that look at the sky at other parts of the electromagnetic spectrum to rule out each and every possible source. Some new research tells us how the gamma ray signal may hold much of the evidence already, however. We just need to look closely.

Watching matter move

The idea comes down to how matter moves. The fact that dark matter doesn't really do anything but suck, gravitationally speaking, means that it doesn't really follow the cool kids around, either. When ordinary matter gets close to another bit of ordinary matter, it says hello. It does the equivalent of standing in the middle of the supermarket aisle having a long conversation about the health and happiness of both parties' electrons. Along with gravity, this meeting doesn't just cause matter to clump together, it also causes it to move together. So in our spiral galaxy, it isn't just the stars that rotate around a common center of mass. All the ordinary matter rotates around that common center of mass, too.