Red Hat and CentOS systems aren’t booting due to BootHole patches

Well, you can’t be vulnerable to BootHole if you can’t boot your system.

A cartoon worm erupts from a computer chip.

Enlarge / Security updates intended to patch the BootHole UEFI vulnerability are rendering some Linux systems unable to boot at all. (credit: Aurich Lawson)

Early this morning, an urgent bug showed up at Red Hat's bugzilla bug tracker—a user discovered that the RHSA_2020:3216 grub2 security update and RHSA-2020:3218 kernel security update rendered an RHEL 8.2 system unbootable. The bug was reported as reproducible on any clean minimal install of Red Hat Enterprise Linux 8.2.

The patches were intended to close a newly discovered vulnerability in the GRUB2 boot manager called BootHole. The vulnerability itself left a method for system attackers to potentially install "bootkit" malware on a Linux system despite that system being protected with UEFI Secure Boot.

RHEL and CentOS

Unfortunately, Red Hat's patch to GRUB2 and the kernel, once applied, are leaving patched systems unbootable. The issue is confirmed to affect RHEL 7.8 and RHEL 8.2, and it may affect RHEL 8.1 and 7.9 as well. RHEL-derivative distribution CentOS is also affected.

Read 6 remaining paragraphs | Comments

Florida teen arrested, charged with being “mastermind” of Twitter hack

The 17-year-old is facing 30 felony fraud charges.

Extreme close-up image of the Twitter logo on the screen of a smartphone.

Enlarge (credit: Tom Raftery / Flickr)

Authorities on Friday charged three people with orchestrating this month's epic hack of Twitter and using it to generate more than $100,000 in a bitcoin scam promoted by hijacked accounts of politicians, executives, and celebrities.

Federal prosecutors in San Francisco charged Mason Sheppard, 19, Nima Fazeli, 22, and an unnamed juvenile in the July 15 breach. Prosecutors in Florida, where the juvenile defendant lives, identified him as 17-year-old Graham Ivan Clark and charged him with 30 felony charges. Federal prosecutors said that Sheppard resided in the UK town of Bognor Regis, while Fazeli was from Orlando, Florida.

The three suspects stand accused of using social engineering and other techniques to gain access to internal Twitter systems. They then allegedly used their control to take over what Twitter has said were 130 accounts. A small sampling of the account holders included former Vice President Joe Biden, Tesla founder Elon Musk, pop star Kanye West, and philanthropist and Microsoft founder, former CEO, and Chairman Bill Gates.

Read 10 remaining paragraphs | Comments

Florida teen arrested, charged with being “mastermind” of Twitter hack

The 17-year-old is facing 30 felony fraud charges.

Extreme close-up image of the Twitter logo on the screen of a smartphone.

Enlarge (credit: Tom Raftery / Flickr)

A Florida teen has been arrested and charged with 30 felony counts related to the high-profile hijacking of more than 100 Twitter accounts earlier this month.

Federal law enforcement arrested Graham Ivan Clark, 17, in Tampa earlier today, the Office of Hillsborough State Attorney Andrew Warren said. The arrest followed an investigation spearheaded by the Federal Bureau of Investigation and the Justice Department.

"These crimes were perpetrated using the names of famous people and celebrities, but they're not the primary victims here," said Warren. "This 'Bit-Con' was designed to steal money from regular Americans from all over the country, including here in Florida. This massive fraud was orchestrated right here in our backyard, and we will not stand for that."

Read 4 remaining paragraphs | Comments

Microsoft is pulling the plug on Cortana for Android, iOS, and the Harman Kardon Invoke smart speaker

Microsoft’s Cortana virtual assistant software isn’t exactly dead, but it’s not exactly living its best life either. Earlier this year Microsoft announced that it was killing off some key features including support for third-party Co…

Harman Kardon Invoke smart speaker

Microsoft’s Cortana virtual assistant software isn’t exactly dead, but it’s not exactly living its best life either. Earlier this year Microsoft announced that it was killing off some key features including support for third-party Cortana skills and support for using Cortana to control music playback and smart home devices. Now Microsoft has confirmed that all […]

The post Microsoft is pulling the plug on Cortana for Android, iOS, and the Harman Kardon Invoke smart speaker appeared first on Liliputing.

Human sperm swim more like otters than eels, study finds

The previously observed eel-like motion is an optical illusion due to 2D microscopes.

For more than 300 years, most scientists have assumed that sperm "swim" through fluids by wriggling their tails back and forth like eels to propel themselves forward. But according to a new paper in Science Advances, this is actually an optical illusion—the result of viewing the creatures from above with 2D microscopes. New observations with 3D microscopy have revealed that human sperm actually roll as they swim, like otters, essentially corkscrewing themselves forward.

"With over half of infertility caused by male factors, understanding the human sperm tail is fundamental to developing future diagnostic tools to identify unhealthy sperm," said co-author Hermes Gadelha from the University of Bristol.

The honor of directly observing the first sperm rests with Antonie van Leeuwenhoek, a 17th-century Dutch draper with a side interest in science—specifically, building microscopes and coming up with innovative manufacturing methods to make better lenses for said microscopes. Only a few of his microscopes have survived, but they are capable of magnifying small objects up to 275 times, and historians believe some of his instruments could have achieved magnifications as high as 500 times.

Read 9 remaining paragraphs | Comments

Human sperm swim more like otters than eels, study finds

The previously observed eel-like motion is an optical illusion due to 2D microscopes.

For more than 300 years, most scientists have assumed that sperm "swim" through fluids by wriggling their tails back and forth like eels to propel themselves forward. But according to a new paper in Science Advances, this is actually an optical illusion—the result of viewing the creatures from above with 2D microscopes. New observations with 3D microscopy have revealed that human sperm actually roll as they swim, like otters, essentially corkscrewing themselves forward.

"With over half of infertility caused by male factors, understanding the human sperm tail is fundamental to developing future diagnostic tools to identify unhealthy sperm," said co-author Hermes Gadelha from the University of Bristol.

The honor of directly observing the first sperm rests with Antonie van Leeuwenhoek, a 17th-century Dutch draper with a side interest in science—specifically, building microscopes and coming up with innovative manufacturing methods to make better lenses for said microscopes. Only a few of his microscopes have survived, but they are capable of magnifying small objects up to 275 times, and historians believe some of his instruments could have achieved magnifications as high as 500 times.

Read 9 remaining paragraphs | Comments

GM teams up with EVgo to deploy more than 2,700 new DC fast chargers

The five-year rollout begins in 2021.

Two masked, socially distanced people charge their electric cars.

Enlarge / The new EVgo stations will be available to drivers starting in early 2021 and located in cities and suburbs. The chargers will be powered 100 percent by renewable energy and located in highly visible areas. (credit: General Motors)

On Friday, General Motors and the electric vehicle charging company EVgo announced they are partnering to beef up the nation's DC fast charging infrastructure. The plan is to deploy more than 2,700 DC fast chargers, capable of charging at 100-350kW, with at least four chargers per station. The rollout will begin in 2021 and should be complete by 2025.

GM is about to put into production a new battery EV architecture called BEV3 and a new battery pack design called Ultium. The company also has plans for multiple new BEVs built on these flexible underpinnings.

The first of these will be an SUV, the Cadillac Lyriq, which is being officially unveiled on August 7; next after that should be an electric GMC Hummer, which may well pack a 200kWh battery and an 800V architecture (which would therefore benefit from a 350kW charger).

Read 3 remaining paragraphs | Comments

Daily Deals (7-31-2020)

The Samsung Galaxy Tab S6 Lite is an Android tablet with a 10.4 inch, 2000 x 1200 pixel LCD display, a Samsung Exynos 9610 octa-core processor, 4GB of RAM, at least 64GB of storage, and support for Samsung’s pressure-sensitive S-Pen, which you c…

The Samsung Galaxy Tab S6 Lite is an Android tablet with a 10.4 inch, 2000 x 1200 pixel LCD display, a Samsung Exynos 9610 octa-core processor, 4GB of RAM, at least 64GB of storage, and support for Samsung’s pressure-sensitive S-Pen, which you can use for handwritten notes or to draw on the tablet. The tablet […]

The post Daily Deals (7-31-2020) appeared first on Liliputing.

Steam’s Beefed-Up VPN Ban is Anti-Competitive & Could Even Encourage Piracy

Steam has implemented new measures to prevent VPN users from spoofing their locations to buy games at cheaper prices available in other regions. While that’s Steam’s choice, it’s an anti-consumer move that has the potential to increase piracy – or worse.

From: TF, for the latest news on copyright battles, piracy and more.

steamSteam is the world’s most popular gaming platform for good reason. It does its best to provide users with the best possible experience coupled with broadly reasonable pricing.

However, in common with many online services, it is possible to buy content from Steam for less than the locally advertised prices. All users need is a VPN that makes it appear they’re in a country where the prices are set lower and they can save money.

How many people exploit this method is unclear but this week Steam Database reported that Steam has taken new measures to outlaw the practice.

To be clear, Steam has had a VPN ban in place for years, with its terms of service requiring users to agree that they “will not use IP proxying or other methods to disguise the place of your residence, whether to circumvent geographical restrictions on game content, to purchase at pricing not applicable to your geography, or for any other purpose.”

Nevertheless, some users have obviously been ignoring the rules so Steam has decided to take additional measures to close the loophole. It’s Steam’s business and Steam’s decision but from a customer perspective in a global digital trading environment, it feels somewhat anti-consumer.

Any big business involved in international trade could explain in precise detail why it’s entirely reasonable to charge people in different countries more or less for exactly the same product. Sadly for them, most customers simply do not care and may even feel insulted when they learn that they’re a victim of geo-discrimination.

Imagine being in a regular shop where products have multiple price tags that get progressively more expensive depending on where you live and how much you potentially earn. In common with Steam’s restrictions, people would look to circumvent that system. And why not, doesn’t everyone enjoy getting a bargain and saving money?

The interesting thing here is that the average person probably doesn’t know about the VPN ‘trick’, so it’s much more likely to be exploited by tech-savvy users. Indeed, it’s not uncommon to hear these kinds of tips being shared on piracy sites, where people can easily get games for free but are actually prepared to buy them when the ‘VPN discount’ is applied.

The big question is how many of these people could turn to piracy when they are forced to pay full price for their games again. It’s impossible to say with any accuracy but price is a major issue for many people, as Steam itself recognizes when it gives lower prices and offers to residents of countries where it believes it can’t charge more.

Interestingly, there is another trick to get cheap games from Steam and elsewhere which, according to game developers themselves, is actually worse than piracy. So-called ‘key resellers’ are widely hated by devs, with some saying they’d prefer it if people pirated their content instead.

Given a choice between a ‘VPN discount’ and a key reseller, many price-sensitive users would choose the former. Following Steam’s new measures, there’s much less choice.

From: TF, for the latest news on copyright battles, piracy and more.