Security researcher successfully jailbreaks an Apple AirTag

Successful jailbreak increases existing AirTag security and privacy concerns.

This weekend, German security researcher stacksmashing declared success at breaking into, dumping, and reflashing the microcontroller of Apple's new AirTag object-location product.

Breaking into the microcontroller essentially meant being able both to research how the devices function (by analyzing the dumped firmware) and to reprogram them to do unexpected things. Stacksmashing demonstrated this by reprogramming an AirTag to pass a non-Apple URL while in Lost Mode.

Lost Mode gets a little more lost

When an AirTag is set to Lost Mode, tapping any NFC-enabled smartphone to the tag brings up a notification with a link to found.apple.com. The link allows whoever found the lost object to contact its owner, hopefully resulting in the lost object finding its way home.

Read 7 remaining paragraphs | Comments

Google foils Roku’s YouTube TV ban, adds service to the main YouTube app

Google sidesteps the YouTube TV ban, threatens to send free devices to customers.

Google tells users where they can find YouTube TV now: inside the regular YouTube app.

Enlarge / Google tells users where they can find YouTube TV now: inside the regular YouTube app. (credit: Google)

Previously on Google versus Roku: Roku and Google needed to renew the contract for YouTube TV, Google's $65-per-month cable TV replacement, on Roku's TV platform. The two companies weren't able to come to an agreement on the new contract, resulting in YouTube TV being pulled from the Roku store. Oh no! While existing customers could still use the YouTube TV app they had already installed, new users couldn't sign up. Will the two companies ever be able to settle their differences, or is their friendship ruined forever?

The next exciting episode in this saga aired on Friday, when Google announced in a blog post that it was just going to run an end-around on Roku and stick the YouTube TV app in the YouTube app. YouTube and YouTube TV exist as separate apps, and while the YouTube TV contract expired and the app was taken off the Roku store, the YouTube contract does not expire until December.

Since the YouTube app is still running, Google was able to quickly shove YouTube TV functionality into it. On the side navigation menu, the last link in the list reads, "Go to YouTube TV." This is not unprecedented—it's actually the way YouTube Music works, too, with a sort of app-within-an-app interface.

Read 6 remaining paragraphs | Comments

AstraZeneca’s troubled vaccine not renewed in EU; Pfizer gets big, new deal

Meanwhile, China’s Sinopharm vaccine—79% efficacy, easy to store—authorized by WHO.

Vials with COVID-19 Vaccine labels showing logos of pharmaceutical company Pfizer and German biotechnology company BioNTech.

Enlarge / Vials with COVID-19 Vaccine labels showing logos of pharmaceutical company Pfizer and German biotechnology company BioNTech. (credit: Getty | Photonews)

The European Union has declined to renew orders for AstraZeneca’s COVID-19 vaccine, an EU official said Sunday. The decision comes after a series of production and safety troubles with AstraZeneca’s vaccine—and news on Saturday that the EU signed a deal to have Pfizer and BioNTech provide up to 1.8 billion doses of their vaccine between 2021 and 2023.

Last month, the EU took legal action against AstraZeneca, alleging that the company had failed to live up to its contract to supply the bloc with doses. The contract ends in June.

"We did not renew the order after June,” European Internal Market Commissioner Thierry Breton said in a Sunday French radio interview, which was reported by Reuters. “We’ll see what happens," he added, leaving open the possibility of future orders.

Read 12 remaining paragraphs | Comments

Major ransomware attack cripples gas pipeline on US East Coast

The attack paralyzed a pipeline that moves 2.5 million barrels per day.

Problems with Colonial Pipeline's distribution system tend to lead to gasoline runs and price increases across the US Southeast and Eastern seaboard. In this September 2016 photo, a man prepared to refuel his vehicle after a Colonial leak in Alabama.

Enlarge / Problems with Colonial Pipeline's distribution system tend to lead to gasoline runs and price increases across the US Southeast and Eastern seaboard. In this September 2016 photo, a man prepared to refuel his vehicle after a Colonial leak in Alabama. (credit: Luke Sharrett via Getty Images)

On Friday, Colonial Pipeline took many of its systems offline in the wake of a ransomware attack. With systems offline to contain the threat, the company's pipeline system is inoperative. The system delivers approximately 45% of the East Coast's petroleum products, including gasoline, diesel fuel, and jet fuel.

Colonial Pipeline issued a statement Sunday saying that the US Department of Energy is leading the US federal government response to the attack. "[L]eading, third-party cybersecurity experts" engaged by Colonial Pipeline itself are also on the case. The company's four main pipelines are still down, but it has begun restoring service to smaller lateral lines between terminals and delivery points as it determines how to safely restart its systems and restore full functionality.

Colonial Pipeline has not publicly said what was demanded of it or how the demand was made.

Read 10 remaining paragraphs | Comments

Private-equity firm revives zombie fossil-fuel power plant to mine bitcoin

Power plant was left for dead until the cryptocurrency boom came along.

Private-equity firm revives zombie fossil-fuel power plant to mine bitcoin

Enlarge (credit: Aurich Lawson / Getty)

Few bitcoin projects illustrate the cryptocurrency’s enormous climate impact better than the Greenidge power plant in upstate New York. The once-abandoned power plant was bought by private equity firm Atlas Holdings and retasked. A significant portion of Greenidge's electricity no longer powers nearby homes or businesses; rather, the plant's smokestacks are increasingly pouring pollutants into the atmosphere in the service of mining bitcoin.

Now, Greenidge is on the verge of ramping up its bitcoin ambitions. By the end of this year, it plans to have 18,000 specialized machines mining bitcoin, and with the recent approval of its data center expansion plans, it will add 10,500 more. When the project is complete, the miners will be using 79 percent of the power plant’s capacity, or 85 MW. 

“No direct competitor currently owns and operates its own power plant for the purpose of bitcoin mining,” the company wrote in its recent S-4 filing with the SEC. “No other bitcoin-mining operation of this scale in the United States currently uses power generated from its own power plant.” The filings came as a result of Greenidge's recent merger with Support.com.

Read 6 remaining paragraphs | Comments

ONEXPLAYER handheld gaming PC review (8.4 inch display, Intel Tiger Lake, and built-in controllers)

One Netbook’s ONEXPLAYER is a handheld computer designed for gaming. It’s the latest in a line of small computers from One Netbook, but up until now the Chinese company had focused on mini-laptops, tiny clamshell-style computers with built…

One Netbook’s ONEXPLAYER is a handheld computer designed for gaming. It’s the latest in a line of small computers from One Netbook, but up until now the Chinese company had focused on mini-laptops, tiny clamshell-style computers with built-in keyboards. The ONEXPLAYER swaps the integrated keyboard for built-in game controllers on either side of its 8.4 inch […]

The post ONEXPLAYER handheld gaming PC review (8.4 inch display, Intel Tiger Lake, and built-in controllers) appeared first on Liliputing.

Ford picks a name for its electric pickup truck: The F-150 Lightning

The SVT F-150 Lightning was a factory hot rod pickup in the 1990s.

If you thought Ford would find it hard to resist reviving the Lightning brand for its electric F-150 pickup, you'd be right.

Enlarge / If you thought Ford would find it hard to resist reviving the Lightning brand for its electric F-150 pickup, you'd be right. (credit: Ford Motor Company)

As many have predicted, Ford will revive the "Lightning" nameplate for the battery-electric version of its F-150 pickup truck. The formal reveal of the electric F-150 is scheduled to take place in Michigan on May 19, at which point we hope to get more information about this hotly anticipated electric vehicle. For now, Ford is keeping details like the vehicle's range and battery capacity to itself.

Like the Rivian that we just wrote about or the hybrid F-150s that are already on sale, it sounds like the F-150 Lightning will come with on-board AC power outlets. "America's favorite vehicle for nearly half a century is going digital and fully electric. F-150 Lightning can power your home during an outage," said Ford President and CEO Jim Farley in a statement sent to Ars.

The original F-150 Lightning was a product of Ford's Special Vehicle Team. It debuted in 1993 as a high-performance variant of the F-150 pickup, which was offered until 1995. Then in 1999, a second F-150 Lightning arrived, this time based on the 10th-generation F-150.

Read 2 remaining paragraphs | Comments

BKA: Mehr Cybercrime mit Interesse an Impfstoff

Im vergangen Jahr haben die Angriffe auf IT-Systeme weiter zugenommen, berichtet das BKA. Ein Ziel seien dabei die Impfstoff-Produzenten. (BKA, Virus)

Im vergangen Jahr haben die Angriffe auf IT-Systeme weiter zugenommen, berichtet das BKA. Ein Ziel seien dabei die Impfstoff-Produzenten. (BKA, Virus)

Xiaomi’s PC Mode turns Android into a desktop OS on the Mi Mix Fold

Android is an operating system designed for smartphones and tablets, but over the years we’ve seen multiple attempts to turn it into a desktop operating system with custom Launcher apps, custom ROMs, or features like Samsung’s DeX, which g…

Android is an operating system designed for smartphones and tablets, but over the years we’ve seen multiple attempts to turn it into a desktop operating system with custom Launcher apps, custom ROMs, or features like Samsung’s DeX, which gives Android a taskbar, start menu, and multi-window app support when you connect a keyboard and/or display. […]

The post Xiaomi’s PC Mode turns Android into a desktop OS on the Mi Mix Fold appeared first on Liliputing.

Sony says PS5 could be difficult to find into 2022

Healthy demand, semiconductor shortage combine to keep the system hard to find.

This Sony engineer can get a PS5, but millions of others can't, thanks to short supplies that are likely to continue.

Enlarge / This Sony engineer can get a PS5, but millions of others can't, thanks to short supplies that are likely to continue.

Sony thinks demand could continue to outstrip supply of the PlayStation 5 into 2022. That's according to a Bloomberg report citing a number of unnamed analysts who listened in on an explanatory call following Sony's recent earnings report.

"I don’t think demand is calming down this year, and even if we secure a lot more devices and produce many more units of the PlayStation 5 next year, our supply wouldn’t be able to catch up with demand," Sony CFO Hiroki Totoki reportedly said.

Sony has been warning for months that worldwide shortages of semiconductors and other components have made it hard to increase production for the PS5. But this is the most direct sign that those shortages will extend past this year and into the next.

Read 6 remaining paragraphs | Comments