Anonymes Dokument: Angriffe auf den FreeBSD-Update-Prozess

Ein anonymes Dokument beschreibt detailliert Sicherheitslücken im FreeBSD-Update-System. Betroffen sind Portsnap, Libarchive und Bspatch. Fixes gibt es bislang nur für wenige der Bugs. Möglicherweise existieren ähnliche Angriffe auch auf Linux-Systemen. (FreeBSD, Linux)

Ein anonymes Dokument beschreibt detailliert Sicherheitslücken im FreeBSD-Update-System. Betroffen sind Portsnap, Libarchive und Bspatch. Fixes gibt es bislang nur für wenige der Bugs. Möglicherweise existieren ähnliche Angriffe auch auf Linux-Systemen. (FreeBSD, Linux)

Crowdfunding: AR-Motorradhelm Skully ist gescheitert

Die Unterstützer des Motorradhelms Skully AR-1, der Zweiradfahrer mit Augmented Reality unterstützen sollte, verlieren ihr Geld. Auf der Crowdfunding-Plattform Indiegogo ist das Ende des Projekts, das 2,5 Millionen US-Dollar einsammelte, bekanntgegeben worden. (Indiegogo, Display)

Die Unterstützer des Motorradhelms Skully AR-1, der Zweiradfahrer mit Augmented Reality unterstützen sollte, verlieren ihr Geld. Auf der Crowdfunding-Plattform Indiegogo ist das Ende des Projekts, das 2,5 Millionen US-Dollar einsammelte, bekanntgegeben worden. (Indiegogo, Display)

Smartwatch: Apple Watch 2 angeblich mit GPS und Barometer

Die nächste Smartwatch von Apple soll mit einem eingebauten GPS-Empfänger, einem Barometer und einem größeren Akku ausgerüstet sein. Der Generationenwechsel soll jedoch kein neues Design mit sich bringen. (Apple Watch, TSMC)

Die nächste Smartwatch von Apple soll mit einem eingebauten GPS-Empfänger, einem Barometer und einem größeren Akku ausgerüstet sein. Der Generationenwechsel soll jedoch kein neues Design mit sich bringen. (Apple Watch, TSMC)

Flashtec: Microsemi kündigt SSD-Controller mit 4 bis 32 Kanälen an

Mehr geht nicht: Die Flashtec-Controller für schnelle Enterprise-SSDs unterstützen bis zu 20 TByte Kapazität und DDR4-Arbeitsspeicher als Puffer. Zwei der vier Controller sind neu, die beiden anderen befinden sich mittlerweile in der Serienproduktion. (Solid State Drive, Speichermedien)

Mehr geht nicht: Die Flashtec-Controller für schnelle Enterprise-SSDs unterstützen bis zu 20 TByte Kapazität und DDR4-Arbeitsspeicher als Puffer. Zwei der vier Controller sind neu, die beiden anderen befinden sich mittlerweile in der Serienproduktion. (Solid State Drive, Speichermedien)

Raven Ridge: AMDs nächste APU soll 50 Prozent mehr Shader bekommen

Raven Ridge für Desktops und Notebooks sieht vielversprechend aus, selbst die Core M sollen attackiert werden. Auch zu Summit Ridge, den kommenden FX-Prozessoren mit Zen-Kernen, gibt es Neuigkeiten. (AMD Zen, Prozessor)

Raven Ridge für Desktops und Notebooks sieht vielversprechend aus, selbst die Core M sollen attackiert werden. Auch zu Summit Ridge, den kommenden FX-Prozessoren mit Zen-Kernen, gibt es Neuigkeiten. (AMD Zen, Prozessor)

“Clock boy” Ahmed Mohamed sues Irving schools, police for wrongful arrest

No bomb, no hoax, and no family present while he was interrogated.

Ahmed Mohamed, on a family visit to Sudan in October 2015. (credit: ASHRAF SHAZLY/AFP/Getty Images)

Ahmed Mohamed, who was arrested last year after showing a home-made clock to a teacher at his high school, has filed a lawsuit against his former school district, its principal, and the city of Irving, Texas.

Mohamed's lawsuit (PDF), filed earlier today, claims that the school district has a history of racial discrimination, and that the treatment he received violated both US civil rights laws and his 14th Amendment right to equal treatment under the law.

The suit begins by reprinting in full "The New Colossus," the Emma Lazarus poem inscribed on the Statute of Liberty. The suit goes on to describe the history of discrimination against immigrants in the US, dating back to the 17th century.

Read 5 remaining paragraphs | Comments

Researchers crack open unusually advanced malware that hid for 5 years

Espionage platform with more than 50 modules was almost certainly state sponsored.

The name "Project Sauron" came from code contained in one of the malware's configuration files. (credit: Kaspersky Lab)

Security experts have discovered a malware platform that's so advanced in its design and execution that it could probably have been developed only with the active support of a nation state.

The malware—known alternatively as "ProjectSauron" by researchers from Kaspersky Lab and "Remsec" by their counterparts from Symantec—has been active since at least 2011 and has been discovered on 30 or so targets. Its ability to operate undetected for five years is a testament to its creators, who clearly studied other state-sponsored hacking groups in an attempt to replicate their advances and avoid their mistakes. State-sponsored groups have been responsible for malware like the Stuxnet- or National Security Agency-linked Flame, Duqu, and Regin. Much of ProjectSauron resides solely in computer memory and was written in the form of Binary Large Objects, making it hard to detect using antivirus.

Because of the way the software was written, clues left behind by ProjectSauron in so-called software artifacts are unique to each of its targets. That means that clues collected from one infection don't help researchers uncover new infections. Unlike many malware operations that reuse servers, domain names, or IP addresses for command and control channels, the people behind ProjectSauron chose a different one for almost every target.

Read 8 remaining paragraphs | Comments

Nexus rumor roundup: The “Nexus Launcher” and other exclusive features

And get ready for something newer than “Android 7.0″—Some Google apps target “API 25.”

Android Police's mockup of the new Nexus devices, based on inside information. (credit: Android Police)

With Android 7.0 Nougat and the new Nexus devices fast approaching, Google is no doubt hard at work developing and testing the latest wave of features coming to the Android ecosystem. The Android N Developer Preview has given us a look at the Android Open Source Project (AOSP) side of things, and it looks like the coming Nexus devices will be the launch point for the proprietary "Google" side of Android.

These could trickle down to other devices someday, but for now it seems like Google is developing a suite of Nexus-exclusive features to further differentiate the Nexus line from regular phones. There has been a never-ending string of rumors and reports about the new Nexus devices and their accompanying software, so here's a roundup of the latest rumors we're monitoring from reliable sources.

The Nexus Launcher and Google Wallpapers

Google's current home screen is the "Google Now Launcher," which started as an exclusive Nexus feature and eventually made its way to the Play Store. For 2016, there is apparently a new Google home screen called the "Nexus Launcher," which re-imagines what an Android home screen should look like. We've actually heard about this app from two different sources: the app's existence was first revealed by Android Police and then a full APK was later leaked by Nate Benis.

Read 24 remaining paragraphs | Comments

Anti-cheat technology stopped Pokémon Go hackers… for four days

Decrypted authentication hash again opens up unauthorized apps.

HACK THE POKE-PLANET! Oh, wait, wrong meme... (credit: Aurich vs GITS vs Pokémon)

When we first wrote about the world of automated Pokémon Go-playing "bot" programs a few weeks ago, we predicted a brewing technological war. Developer Niantic was inevitably going to deploy cheat-detection technology, and hackers would subsequently work to break through that detection. Last week, we saw the first battle in that war, and so far it seems like the hackers are winning handily.

After largely ignoring the growing issues of bots (and related mapping hacks) for weeks, Pokémon Go developer Niantic rolled out a mandatory game update last Wednesday focused on cutting off server access for such unofficial apps. In a blog post last Thursday, Niantic cited "aggressive efforts by third parties to access our servers outside of the Pokémon Go game client and our terms of service." The developer argued these hacks were overloading its servers and its employees, slowing efforts to improve the game and bring it to new markets.

"Developers have to spend time controlling this problem vs. building new features," Niantic wrote. "It’s worth noting that some of the tools used to access servers to scrape data have also served as platforms for bots and cheating which negatively impact all Trainers. There is a range of motives here from blatant commercial ventures to enthusiastic fans but the negative impact on game resources is the same."

Read 13 remaining paragraphs | Comments

Lockheed Martin and NASA finalize deal for tiny Moon satellite

NASA hopes to add some science to its inaugural SLS launch with CubeSat payloads.

SkyFire’s new infrared technology is intended to capture high-resolution images of the lunar surface. (credit: Lockheed Martin)

The maiden launch of NASA's Space Launch System, likely in late 2018 or early 2019, will primarily serve to demonstrate that the massive rocket is capable of delivering a sizable payload—the Orion spacecraft—into a lunar orbit. However, amid the launch fireworks and shakedown mission for the uncrewed Orion spacecraft, NASA will also manage to do a little science.

The adapter ring that connects Orion to the rocket will include 13 bays for CubeSats, shoe-box sized payloads that until now haven't been delivered in significant numbers into deep space. Each of those payload operators is working to finalize contracts with NASA for the ride into space, and on Monday, Lockheed Martin announced a few details of its 6U CubeSat, called SkyFire. Lockheed's payload will capture high-quality images of the Moon. And in exchange for the ride into deep space, NASA will receive data from the mission.

“The CubeSat will look for specific lunar characteristics like solar illumination areas,” James Russell, Lockheed Martin SkyFire principal investigator, said in a news release. “We’ll be able to see new things with sensors that are less costly to make and send to space.”

Read 2 remaining paragraphs | Comments