Security

Adobe Patches Flash Zero-Day Exploited By Magnitude Exploit Kit (securityweek.com) 69

wiredmikey writes: Adobe released a Flash Player update on Thursday night to patch a zero-day vulnerability that has been leveraged by cybercriminals to deliver malware via the Magnitude exploit kit. The vulnerability [CVE-2016-1019], a memory corruption that can be exploited for remote code execution, was discovered after, on April 2, security researcher Kafeine of Proofpoint noticed a change in the Magnitude exploit kit. The sample was then investigated by FireEye, which determined that Magnitude EK had been exploiting a previously unknown vulnerability in Flash Player."Despite the fact that this new exploit could potentially work on any version of Adobe Flash, including a fully patched instance of Flash, the threat actors implemented it in a manner that only targeted older versions of Flash. In other words, equipped with a weapon that could pierce even the latest armor, they only used it against old armor, and in doing so exposed to security researchers a previously unreported vulnerability," Proofpoint said in a blog post.
Android

Google Launches Android Studio 2.0 With Instant Run, Faster Android Emulator, and Cloud Test Lab (venturebeat.com) 58

An anonymous reader quotes a report from VentureBeat: Google today launched Android Studio 2.0, the latest version of its integrated development environment (IDE), with a long list of new features. You can download the new version for Windows, Mac, and Linux now directly from Android.com/SDK. In November, Google unveiled Android Studio 2.0, the second major version of its IDE. Version 2.0 brings a slew of improvements, including Instant Run, a faster Android emulator, and app indexing improvements. Google released a beta in February, though it didn't say when the final version would be ready ([VentureBeat] speculated in time for its I/O developer conference in May, and the company debuted with a month to spare). The full feature list includes Instant Run, Android Emulator, Cloud Test Lab, App Indexing, and GPU Debugger Preview.
Cloud

Blizzard Shuts Down Popular Fan-run 'Pirate' Server For Classic WoW (arstechnica.com) 266

An anonymous reader writes: Blizzard is threatening legal action against the popular "pirate" servers for World of Warcraft. The Nostalrius servers have been operating for nearly a year, running version 1.12 of the original World of Warcraft as it existed in 2006. Admins say that 800K registered accounts and 150K active players were working through quest progressions reproduced to precisely match the game of a decade ago. Nostalrius' team says its French hosting provider has been issued a formal letter asking it to shut down the servers or face a potential copyright infringement lawsuit as hosting private servers is explicitly against Blizzard's Terms of Use. Blizzard says the rule "isn't an issue because of 'lost' subscription fees from players choosing these illegitimate servers over the real WoW servers -- it simply boils down to the fact that private servers are illegal, and that's that." Nostalrius' servers will be shut down on April 10, but the team says it "will still be publicly providing everything needed in order to setup your own 'Nostalrius' if you are willing to."
Cloud

OpenStack Mitaka Aimed at Simplifying Cloud Operations (eweek.com) 20

darthcamaro writes: The 13th release of OpenStack, codenamed Mitaka is now generally available with updates across all major projects. Among the biggest new capabilities in OpenStack Mitaka however isn't a new project or a new feature in a single existing project, but rather the official debut of the OpenStack Client, which creates for the first time a unified command line interface to control the cloud.

According to eWEEK: "The OpenStack client is a command line client that unifies access across all the main projects," Jonathan Bryce, executive director of the OpenStack Foundation, told eWEEK. So if an administrator wants to create a user, a block storage device or a virtual server, or attach to a network, all those functions are now enabled in the single tool that is the OpenStack client. The OpenStack client provides a standardized set of commands, whereas previously, each project had its own command line client, Bryce said. He added that the OpenStack client can be run locally or in the cloud, and can be configured to control multiple OpenStack clouds.

AI

Mapping The Brain To Build Better Machines (quantamagazine.org) 110

An anonymous reader quotes a report from Quanta Magazine: An ambitious new program, funded by the federal government's intelligence arm, aims to bring artificial intelligence more in line with our own mental powers. Three teams composed of neuroscientists and computer scientists will attempt to figure out how the brain performs these feats of visual identification, then make machines that do the same. "Today's machine learning fails where humans excel," said Jacob Vogelstein, who heads the program at the Intelligence Advanced Research Projects Activity (IARPA). "We want to revolutionize machine learning by reverse engineering the algorithms and computations of the brain." By the end of the five-year IARPA project, dubbed Machine Intelligence from Cortical Networks (Microns), researchers aim to map a cubic millimeter of cortex. That tiny portion houses about 100,000 neurons, 3 to 15 million neuronal connections, or synapses, and enough neural wiring to span the width of Manhattan, were it all untangled and laid end-to-end.
AI

Computer Created A 'New Rembrandt' After Analyzing Paintings (bbc.com) 115

TechnoidNash quotes a report from Techie News: Rembrandt van Rijn was one of the most influential classical painters, and the world lost his amazing talent when he died nearly four centuries ago. And yet his newest masterpiece was unveiled only yesterday. How? By scanning and analyzing Rembrandt's works, a computer was able to create a new painting in near-perfect mimicry of Rembrandt's style. It has been named, appropriately, "The Next Rembrandt." The computer used machine-learning algorithms to create the portrait, which was then 3D-printed to give it the same texture as an oil painting. "The Next Rembrant," was a collaboration between Microsoft, ING, Delft University of Technology and two Dutch art museums -- Mauritshuis and Rembrandthuis.
HP

HP Says It Made the World's Thinnest Laptop (time.com) 166

An anonymous reader writes: HP claims that its Spectre laptop, unveiled April 5, is the world's thinnest laptop. It measures 10.4mm thick or 0.41 inches. That would mean that it's slimmer than the 12-inch MacBook (0.52), MacBook Air (0.68 inches) and Dell XPS 13 (0.59 inches) at their thickest points. It's also thinner than the 0.52-inch Razer Blade Stealth. The new notebook is equipped with an advertised nine-hour battery life, 13-inch HD 1920 x 1080 resolution display, and sixth generation Intel Core i5 or i7 processor. The Spectre will be available for pre-order on April 25 for $1,169.99 before it hits Best Buy stores on May 22 for $1,249.99.
Businesses

Samsung Starts Mass Producing Industry's First 10-Nanometer Class DRAM (engadget.com) 43

An anonymous reader writes: Samsung is now mass producing the industry's first 10-nanometer class, 8Gb DDR4 DRAM chips, ahead of competitors SK Hynix and Micron. It will produce 10nm-class DDR4 DRAM modules this year varying from 4GB for laptops and up to 128GB for enterprise servers. Samsung also promised to reveal 10-nanometer-class mobile DRAM "in the near future." The announcement marks a big milestone for the company after it first mass produced 20-nanometer-class 4GB DDR3 DRAM chips in 2014. "Samsung's 10nm-class DRAM will enable the highest level of investment efficiency in IT systems, thereby becoming a new growth engine for the global memory industry," said Young-Hyun Jun, President of Memory Business, Samsung Electronics. "In the near future, we will also launch next-generation, 10nm-class mobile DRAM products with high densities to help mobile manufacturers develop even more innovative products that add to the convenience of mobile device users."
Intel

Intel Buys Yogitech, Aims To Improve Safety of Autonomous Cars and IoT Systems (pcworld.com) 17

An anonymous reader writes: Intel has acquired the Italian company Yogitech to improve upon Internet of Things (IoT) security and Advanced Driver Assistance Systems. Yogitech's flagship technology known as faultRobust is designed to keep circuits functional and prevent device failure. Since Intel provides chips for IoT devices, it makes sense for the company to be interested expanding that effort with Yogitech's technology. Intel's Atom and Quark chips are used in IoT devices, and it bundles hardware- and software- based security and networking layers in with those chips. The most obvious use for Yogitech's technology is with autonomous vehicles, where the circuitry can be used to reduce errors related to braking and identification of objects. It may also be used in industrial machines, where the chances of equipment hurting the process or a worker could be reduced. According to Intel, 30 percent of the IoT market will require functional safety systems. Intel didn't comment how much they paid to buy the company.
The Military

US Army Hopes To Outfit Soldiers With Tiny Drones By 2018 (engadget.com) 101

An anonymous reader quotes a report from Engadget: The U.S. Army has requested industry information on the feasibility of making tiny drones that would help infantry gather intelligence on a small scale, such as peeping over a hill or around a building. its dream recon machine would weigh no more than a third of a pound, launch within one minute and fly for at least 15 minutes. Ideally, the drones would be in service as soon as 2018. "[A nano-drone] will send real-time video back to the operator to give them real-time situational awareness of what's in the immediate vicinity," says Phil Cheatham, the deputy branch chief for electronics at the Army's Maneuvers Center for Excellence (MCOE). Cheatham says he and his team want something cheap enough to deploy with every squad, noting the Army already uses satellite imagery and larger drones to provide broader battlefield intelligence.
Communications

Massachusetts AG Sues ITT Tech For Exploiting Computer Network Students (networkworld.com) 135

alphadogg quotes a report from Networkworld: Browsing through the latest news releases from ITT Technical Institute you'd never think the for-profit school would be capable of the things that Massachusetts Attorney General Maura Healey says the state is suing it for. The school, which boasts of over 130 locations in 38 states, touts its efforts for women in STEM, its donation of laptops to public schools in Indiana and its record giving for United Way. But AG Healey is suing ITT Tech "for engaging in unfair and harassing sales tactics and misleading students about the quality of its Computer Network Systems program, and the success of the program's graduates in finding jobs." ITT Educational Services, however, rejected the AG office's claims and lashed out at the office for the manner in which it has brought the suit. ITT's statement reads in part: "The litigation follows the Office's wide-ranging fishing expedition that lasted for more than three years..." If the state wins, the school could be forced to reimburse students for tuition and fees, though ITT says it will defend itself against the charges.
Government

TSA Paid $1.4 Million For Randomizer App That Chooses Left Or Right (geek.com) 334

An anonymous reader writes: For those of you who have traveled through U.S. airports in recent years, you may have noticed the Transport Security Administration (TSA) use a Randomizer app to randomly search travelers in the Pre-Check lane. The app randomly chooses whether travelers go left or right in the Pre-Check lane so they can't predict which lane each person is assigned to and can't figure out how to avoid the random checks. Developer Kevin Burke submitted a Freedom of Information Act request asking for details about the app. The documents he received reveals the TSA purchased the Randomizer iPad app for $336,413.59. That's $336,413.59 for an app, which is incredibly simple to make as most programming languages of choice have a randomizing function available to use. What may be even more intriguing is that the contract for the TSA Randomizer app was won by IBM. The total amount paid for the project is actually $1.4 million, but the cost is not broken down in Burke's documents. It's possible IBM supplied all the iPads and training in addition to the app itself.
Privacy

There Are Some Super Shady Things In Oculus Rift's Terms of Service (gizmodo.com) 186

An anonymous reader quotes a report from Gizmodo: While the [Oculus Rift] is cool, like any interesting gadget, it's worth looking through the Terms of Service, because there are some worrisome things included. Quite a few of the items in the document are pretty typical in any sort of Terms of Service agreement. These include details like waiving your right to a juried trial and agreeing to go into arbitration instead. Oculus can also terminate your service for myriad reasons, and third parties can collect information on you. However, there are some even more devilish details in the Rift's full Terms of Service. If you create something with the Rift, the Terms of Service say that you surrender all rights to that work and that Oculus can use it whenever it wants, for whatever purposes. Basically, if you create something using the device, Oculus can't own it, but the company can use it -- and they don't have to pay you for for using it. Oculus can use it even if you don't agree with its use. Oculus can collect data from you while you're using the device. Furthermore, the information that they collect can be used to directly market products to you. As UploadVR noted, the Oculus Rift is a device that is always on (much like Microsoft's Xbox One Kinect feature) which leads to further concerns about when the information will be collected.
Earth

Lasers Could Hide Us From Evil Aliens (washingtonpost.com) 218

An anonymous reader quotes a report from Washington Post: Most of the time when we talk about silly scientific papers related to alien life, we're talking about crazy ideas for how to find aliens. But a new study in the Monthly Notices of the Royal Astronomical Society proposes a way of hiding from aliens. Humans are so fickle. A lot of our search for Earth-like planets (and, by extension, for life as we know it) hinges on transiting planets. These are planets that pass in front of their host star in such a way that the transit is visible from our perspective. The movement of the planet in front of the host star makes the light from that star dim or flicker, and we can use that to determine all sorts of things about distant worlds -- including how suitable they may be for life. Professor David Kipping and graduate student Alex Teachey, both of Columbia University, determined how much laser light it would take to mask the dimming caused by our planet transiting the sun, or cloak the atmospheric signatures associated with biological activity, [such as oxygen, which is achievable with a peak laser power of just 160 kW per transit]. From the report: "According to their math, it would take 10 continuous hours of shining a 30 MW laser once a year to eliminate the transit signal in visible light. Actually replicating every wavelength of light emitted by the sun would take about 250 MW of power."
Microsoft

Head of Oracle Linux Moves To Microsoft (zdnet.com) 95

An anonymous reader writes: Wim Coekaerts, formerly Oracle's Senior VP of Linux and Virtualization Engineering, has left Oracle for Microsoft. Many of you may know of Coekaerts as "Mr. Linux" as he delivered the first Linux products, transitioned Oracle's programming staff from Windows to Linux desktops, and turned Oracle into a Linux distributor with the launch of its Red Hat Enterprise Linux (RHEL) clone, Oracle Linux. Mike Neil, Microsoft's Corporate Vice President of the Enterprise Cloud, told ZDNet, "Wim Coekaerts has joined Microsoft as Corp VP of Open Source in our Enterprise Cloud Group. As we continue to deepen our commitment to open source, Wim will focus on deepening our engagement, contributions and innovation to the open-source community."
Robotics

Futuristic Suit Lets You Feel What It's Like To Be An Old Man 222

HughPickens.com writes: Andy Newman writes at the New York Times about an exhibit at Liberty Science Center in Jersey City that lets users walk a proverbial mile in their elders' orthopedic shoes and experience the stooped shuffle, the halting speech, and the dimming senses of an 85-year old man. It is not a very pleasant experience. An attendant cranks up a fader and your vision dissolves into melty, grayed-out blobs, like a memorably unvivid psychedelic experience, more knobs twiddle, and your hearing is subsumed in a fog of tinnitus, muffling and distortion. Loaded with hardware and a computer, the suit itself weighs 40 pounds, distributed as uncomfortably as possible. "It's going to get much worse," promises Bran Ferren, the suit's inventor. "You haven't lived."

According to Newman, in just 10 minutes, the aging suit induced a remarkable amount of frustration, depression and hopelessness. There are entire realms of wretchedness attendant upon owning and operating an 85-year-old body that the exhibit does not even touch upon. Comprehensive sagging, internal and external. Pain in places you did not know could hurt. Difficulty urinating. Difficulty not urinating. Watching your friends die off. Watching yourself become irrelevant, an object of pity or puzzlement if acknowledged at all. By allowing a younger generation to feel the effects of aging firsthand, the suit provides a newfound perspective that hopefully inspires a conversation with loved ones about getting older so, collectively, family and friends can better prepare for the future. If doing even the most basic tasks of daily living is this much trouble, you wonder, why bother? But it also makes you a little less likely to lose patience and a little more likely to feel empathy with the older people in your life. "My father, Aaron Newman, happens to be 85," says Newman. "I called him up. I described the treadmill experience and asked if that sounded about right." "No," he said. "It's much worse."
Robotics

Man Builds 'Scarlett Johansson' Robot From Scratch (mirror.co.uk) 158

An anonymous reader writes: 42-year-old product and graphic designer Ricky Ma has spent more than $50,000 building a replica Scarlett Johansson robot from scratch. The robot, named Mark 1, responds to a set of programmed verbal commands spoken into a microphone and has moving facial expressions. Ricky said, "When I was a child, I liked robots. Why? Because I liked watching animation. All children loved it. There were Transformers, cartoons about robots fighting each other and games about robots. After I grew up, I wanted to make one. But during this process, a lot of people would say things like, 'Are you stupid? This takes a lot of money. Do you even know how to do it? It's really hard.'" Ricky has dressed Mark 1 in a crop top and grey skirt. A 3D-printed skeleton lies beneath Mark 1's silicone skin, covering its mechanical and electronic interior.
Android

Windows 10 Anniversary Update Will Bring Android Notifications To Your PC (winbeta.org) 35

An anonymous reader writes: In an Anniversary Update scheduled to launch this summer, Microsoft is bringing a new Action Center UI to Windows 10 PCs and Windows 10 Mobile. [According to WinBeta.org,] the new Action Center will sync up to to the cloud, allowing users to dismiss a notification on more than one device. For example, users will be able to dismiss a text message on their PC, and have that same notification be dismissed on their phone. Android users will be happy to know that this functionality is coming to Android via the Cortana app. Android users will be able to see and dismiss notifications that appear on their PC, and vice-versa. Developers will be able to create widgets and tiles for the new Action Center as well.
China

DJI Files Patent Lawsuit Against Yuneec, Marking Industry's First Legal Fight (theverge.com) 33

An anonymous reader writes: The world's most successful consumer drone manufacturer, DJI, has filed a lawsuit in California claiming Yuneec has infringed on two of its patents. The claim centers on "systems and methods for target tracking," and "interchangeable mounting platform." They're asking the court to halt the sale of the infringing Yuneec products and systems. The case marks the first legal battle in the consumer drone industry. "DJI welcomes competition, but is committed to protecting its intellectual property," a press release on the filing stated. "Friday's filing is a response to safeguard that investment, to protect customers and partners and to promote genuine innovation in this promising area." Last year, Yuneec launched the 4K Typhoon drone to compete with DJI's Phantom 3 Professional drone. It also announced the Typhoon H at CES, which is equipped with an Intel RealSense camera.
Bug

Steam Hacker Says More Vulnerabilities Will Be Found (arstechnica.com) 37

An anonymous reader shares an article on Ars Technica: The teenager who grabbed headlines earlier this week for hacking a fake game listing on to Valve's Steam store says there are "definitely" more vulnerabilities to be found in the popular game distribution service. But he won't be the one to find them, thanks to what he sees as Valve "giv[ing] so little of a shit about people's [security] findings." Ruby Nealon, a 16-year-old university student from England, says that probing various corporate servers for vulnerabilities has been a hobby of his since the age of 11. His efforts came to the attention of Valve (and the wider world) after an HTML-based hack let him post a game called "Watch paint dry" on Steam without Valve's approval over the weekend."It looks like their website hasn't been updated for years," Nealon told Ars. "Compared to even other smaller Web startups, they're really lacking. This stuff was like the lowest of the lowest hanging fruit."

Slashdot Top Deals