By Owais Sultan

In the dynamic world of business, the ability to make data-driven decisions is essential for organizations seeking a

This is a post from HackRead.com Read the original post: Strategy Reporting Essentials: A Guide to Efficient Data Collection

With Firefox 112 now released, Mozilla has promoted Firefox 113 to beta...

Intel processors should have any CPU microcode updates loaded early during the Linux boot process to avoid various known issues. When "late loading" CPU microcode after the system is up and running, various issues can happen on Intel processors that led them to mark the Linux kernel as tainted under such conditions. Tainting the kernel also happened when late-loading microcode on AMD CPUs but now that's been deemed unnecessary and late-loading CPU microcode on AMD processors is reportedly safe...

Who pays for these promotional buses/trains?

But what does the company actually do?

Summary: There are many so-called news sites that operate similarly but arent ever telling this to their audience (readers are the real product, sold to the real clients, who are the marketers and lobbyists); this silent takeover by Public Relations (PR) nonsense or even disinformation campaigns has become rampant in todays World Wide Web; the Linux Foundation funds some of these sites

The latest release of FreeBSD, version 13.2, has been released. It contains lots of package upgrades including to OpenSSH 9.2p1, OpenSSL 1.1.1t, and OpenZFS 2.1.9. Other new features include upgrading the bhyve hypervisor to now support more than 16 virtual CPUs in a guest, a WireGuard VPN driver, netlink for network configuration, and lots more. See the release notes for more information.

Two months ago: MIT Technology Review is Run by Microsoft India

This week:

Summary: Over the past couple of months MIT Technology Review ran endless Microsoft puff pieces (weve attempted never to link to them; this was a daily occurrence, sometimes the majority of all new content), but the sponsorship isnt so easy to hide anymore and it brings us back to the days MIT took bribes from Bill Gates via his close friend Jeffrey Epstein

You might think assembly language on a PC is passe. After all, we have a host of efficient high-level languages and plenty of resources. But there are times you want to use assembly for some reason. Even if you dont, the art of writing assembly language is very satisfying for some people like an intricate logic puzzle. Getting your assembly language fix on a microcontroller is usually pretty simple, but on a PC there are a lot of hoops to jump. So why not use your browser? Thats the point of this snazzy 8086 assembler and emulator that runs in your browser. Actually, it is not native to the browser, but thanks to WebAssembly, it works fine there, too.

No need to set up strange operating system environments or link to an executable file format. Just write some code, watch it run, and examine all the resulting registers. You can do things using BIOS interrupts, though, so if you want to write to the screen or whatnot, you can do that, too.

The emulation isnt very fast, but if you are single-stepping or watching, thats not a bad thing. It does mean you may want to adjust your timing loops, though. We didnt test our theory, but we expect this is only real mode 8086 emulation because we dont see any protected mode registers. Thats not a problem, though. For a learning tool, youd probably want to stick with real mode, anyway. The...

For those making use of Mesa's single-file on-disk shader cache, with the upcoming Mesa 23.1 release there will be increased space savings with the Radeon Vulkan (RADV) driver...

An illustrated mid-career monograph exploring the 30-year creative journey of the 8-time Academy Award-nominated writer and director

Paul Thomas Anderson has been described as one of American films modern masters and the foremost filmmaking talent of his generation. Andersons lms have received 25 Academy Award nominations, and he has worked closely with many of the most accomplished actors of our time, including Lesley Ann Manville, Julianne Moore, Daniel Day-Lewis, Joaquin Phoenix, and Philip Seymour Homan. In Paul Thomas Anderson: Masterworks, Andersons entire careerfrom Hard Eight (1996), Boogie Nights (1997), Magnolia (1999), Punch Drunk Love (2002), There Will Be Blood (2007), The Master (2012), Inherent Vice (2014), and Phantom Thread (2017) to his music videos for Radiohead to his early short lmsis examined in illustrated detail for the rst time.

Andersons inuences, his style, and the recurring themes of alienation, reinvention, ambition, and destiny that course through his movies are analyzed and supplemented by rsthand interviews with Andersons closest collaboratorsincluding producer JoAnne Sellar, actor Vicky Krieps, and composer Jonny Greenwoodand illuminated by lm stills, archival photos, original illustrations, and an appropriately psychedelic design aesthetic. Masterworks is a tribute to the dreamers, drifters, and evil dentists who populate his world.

Never listen to anyone who says the big questions have already been answered. We still have plenty to learn about extending our lifespans.

<p><img src= "https://spectrum.ieee.org/media-library/an-electronic-radar-echo-generator-from-rohde-schwarz-the-size-of-shoebox-with-buttons-and-an-lcd-screen-sit-on-the-floor-next.jpg?id=33346301&width=1245&height=700&coordinates=0%2C406%2C0%2C407"><br> <br></p> <p><em>This is a sponsored article brought to you by <a href= "https://www.rohde-schwarz.com/" rel="noopener noreferrer" target= "_blank">Rohde & Schwarz.

Homologation and validation of new vehicle models today require millions of test kilometers to be driven under different environmental conditions, on different types of roads in various countries around the world.

Due to the increased complexity of automated driving (AD) and advanced driver-assistance systems (ADAS) functions, and new developments in radar technology, testing efforts expand very quickly. Just relying on road testing is no longer practical.

The Rohde & Schwarz radar test system opens a completely new field of possibilities for testing radar-based ADAS and AD features to ensure correct operation in hardware-in-the-loop (HiL) and vehicle-in-the-loop (ViL) testbeds.

In addition, scenario testing of autonomous driving functions on the public roads can be dangerous, and under conditions that are not easily reproducible.

As a result, hardware-in-the-loop (HiL) and vehicle-in-the-loop (ViL) scenario testing of automotive radar is gaining importance.

Your challenges:

• End-to-end verification, validation, calibration or homologation of AD/ADAS functions at component and full-vehicle level
• Reproducing complex traffic scenarios, automotive radar object simulation over-the-air
• Ensuring the radar target generation test equipment is scalable and has the technical specifications to cover the increasing number of targets, and future complex scenarios
• Meeting the increased test-complexity requirements of ADAS target simulation while minimizing costs and accelerating time-to-market

RTS features:

• Automotive radar target simulator for driving scenario testing that can be easily defined and executed with the highest reproducibility
• Complex automotive radar object simulations including multiple sensors, over-the-air
• Increased accuracy and repeatability from fully-electronic antenna arrays
• Fully scalable, covering all use cases from R&D to production, easily upgradable to cover future requirements</li> </ul> <p><a href= "https://www.rohde-schwarz.com/solutions/test-and-measurement/automotive/automotive-radar/automotive-radar-object-simulation-for-validation/automotive-radar-object-simulation-for-validation_231760.html?mid=15168" rel="orange_button" target="_blank">Find out more </a></p>

upstart writes:

Routing 4G cellular data to a BSD network using bridge mode on the RUT-240:

The RUT-240 from Teltonika networks is a small and fairly inexpensive 4G router which is commonly used to provide internet connectivity for remote devices that are either in locations without regular fixed-line broadband, or where high availability is required. Think smart meters, monitoring systems, and so on.

In the case of high availability, the RUT-240 is connected in line with a conventional internet router, and it's own cellular connection is only used when a lack of connectivity is detected. Both of these configurations often involve the use of a special SIM card, to which the cellular operator has provisioned a static, public IP address, thus allowing inbound connections to the connected remote devices, (as well as access to the router itself for configuration and admin purposes).

[...T]oday we're going to use our RUT-240 for a completely different purpose. No special SIM required, and we're not going to be travelling out in to the wilds either. Just a regular pre-paid SIM, and the normal office surroundings.

Instead, we'll be exploring the use of this router as a backup connection for an existing OpenBSD-based router, or even - within limits - as a replacement for fixed line broadband. This latter option might make sense on a short term basis in a new office that hasn't been fully connected yet, or in a temporary office in an awkward location where DSL or fibre isn't available. Attending a conference, but all the decent hotels are fully booked? Stuck on a boat in dry dock? Not a problem!

Read more of this story at SoylentNews.

Via: ZeroHedge: Its yet another story of a major company leaving a U.S. city: this time, its a Whole Foods in San Francisco that is closing after barely being open for a year. The location in question is a 64,000 flagship Whole Foods store that you just know the company wouldnt be closing down unless []

Thinking about the ice giants, as I have been doing recently in our look at fast mission concepts, reminds me of the diamond rain notion that has grown out of research into experiments with the temperatures and pressures found inside worlds like Uranus and Neptune. The concept isnt new, but I noted some months ago that scientists at the Department of Energys SLAC National Accelerator Laboratory had been studying diamond formation in such worlds in the presence of oxygen. Oxygen, it turns out, makes it more likely that diamonds form that may grow to extreme sizes.

So let me turn back the clock for a moment to last fall, when news emerged about this exotic precipitation indicating that it may be more common than we had thought. Using a material called PET (polyethylene terephthalate), the SLAC researchers created shock waves within the material and analyzed the result with X-ray pulses. The scientists used PET because of its balance between carbon, hydrogen and oxygen, components more closely mimicking the chemical composition of Neptune and Uranus.

While earlier experiments had used a plastic material made from hydrogen and carbon, the addition of oxygen made the formation of diamonds more likely, and apparently allowed them to grow at lower temperatures and pressures than previously thought possible. The team, led by Dominik Kraus (SLAC/University of Rostock), suggests that such diamonds under actual ice giant conditions might reach millions of carats in weight, forming a layer around the planetary core. Silvia Pandolfi, a SLAC scientist involved in this work, was quoted in a SLAC news release last September:

We know that Earths core is predominantly made of iron, but many experiments are still investigating how the presence of lighter elements can change the conditions of melting and phase transitions. Our experiment demonstrates how these elements can change the conditions in which diamonds are forming on ice giants. If we want to accurately model planets, then we need to get as close as we can to the actual composition of the planetary interior.

Image: Studying a material that even more closely resembles the composition of ice giants, researchers found that oxygen boost...

Via: The Last American Vagabond: Despite legal threats from the U.S. government, Mexicos government plans to go forward with a partial ban on imports of genetically modified corn. On Wednesday Mexicos National Council for Science and Technology (CONACYT) hosted an online webinar laying out the science behind the nations decision to ban imports of Genetically []

Posted by Charles Zhang on Apr 11

Severity: important

Description:

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software
Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType"
parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username
of the   user with ID 1 from the...

A draft updated trademark policy for the Rust language is being circulated for comments. It is not a short read.

RS can be used freely and without permission to indicate that software or a project is derived from or based on Rust, compatible with Rust, inspired by Rust, or can be used for the same purpose as Rust. We recommend using RS instead of Rust if you have any concerns about your use falling outside of this policy, for example, naming your crate foo-rs instead of rust-foo.

Some discussion can be found in this Reddit post.

Yum! Brands, the company that owns the KFC, Pizza Hut, and Taco Bell brands, disclosed a data breach after the January ransomware attack.

On January 13, 2023, Yum! Brands suffered a cyberattack that forced the company to take its systems offline closing roughly 300 restaurants in the UK for one day.

Now the company, which owns the KFC, Pizza Hut, and Taco Bell brands, disclosed a data breach and revealed that ransomware actors have stolen personally identifiable information (PII) of an unspecified number of individuals.

The data breach notification letter sent to potentially impacted individuals states that personal information was exposed, including names, drivers license numbers, Non-Driver Identification Card Number, and other types of personal identifiers.

Yum! Brands pointed out that they have no evidence of identity theft or fraud involving exposed data.

As we announced publicly in mid-January, Yum! experienced a cybersecurity incident involving unauthorized access to certain of our systems on or around January 13, 2023. Upon discovery, we took steps to lock down impacted systems, notified federal law enforcement authorities, worked with leading digital forensics and restoration teams to investigate and recover from the incident, and deployed enhanced 24/7 detection and monitoring technology. reads the data breach notification letter. Our review determined that the exposed files contained some of your personal information.

The company investigated the security breach with the help of third-party cybersecurity experts, to identify the scope of the incident.

At this time, Yum! Brands has yet to determine the exact number of impacted individuals.

The company is also providing complimentary credit monitoring and identity protection services for two years via IDX.

Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 VOTE FOR YOUR WINNERS
Vote for me in the sections:

• The Teacher Most Educational Blog
• The Entertainer Most Entertaining Blog
• The Tech Whizz Best Technical Blog
• Best Social Media Account to Follow (@securityaffairs)

Please nominate Security Affairs as your favorite blog.

Nominate here: ...

By Habiba Rashid

Shevlyakov obtained delicate electronic equipment from American manufacturers for the use of Russian end-users, such as defence contractors and other government agencies

This is a post from HackRead.com Read the original post: Estonian Arrested: Accused of Supplying Hacking Tools to Russia

Its difficult to watch, but Tysons spectacular self immolation does produce warm, glowing schadenfreude. Via: Peak Prosperity: Related: Neil deGrasse Tyson on The Highwire

Last time Hackaday went hands on with a product from German company MNT, it was the Reform laptop; a full size computer with a full feature set and fully open source design. Now theyre back with the same value proposition and feature set crammed into a much more adorable (and colorful!) package with the MNT Pocket Reform. If you want the big Reforms open source philosophy in a body fit for a coat pocket, this might be the computing device for you.

To refresh your memory, MNT is a company that specializes in open source hardware and the software to support it. They are probably best known for the Reform, their first laptop. Its marquis feature is a fully open design, from the mechanical components (designed with OSS tools) to the PCBAs (designed with KiCad) to the software (designed with, uh, software). When originally shipped that product packed a DIMM-style System On Module (SOM) with a default configuration containing a quad core NXP i.MX8M Quad and 4GB of RAM, as well as mini PCIe Card and M key m.2 2280 slots on the motherboard for storage and connectivity. That computer was designed to be easily serviceable and included a plethora of full sized ports along with easy to source cylindrical battery cells. The Pocket Reform takes the same intent and channels it into a much smaller package.

Speeds and Feeds

...

BigID launched ML-powered solution for finding duplicate and similar data content. The innovative technology uses AI to locate both similar and duplicate data on any data set, enabling organizations to identify duplicate data as well as redundant, obsolete, or trivial (ROT) data. These transformative capabilities mean that organizations can reduce their storage cost, accelerate compliance, and improve cybersecurity across their environment. Duplicate and redundant data are a treasure trove for cybercriminals exponentially increasing the More

The post BigIDs data minimization capabilities enable organizations to identify duplicate data appeared first on Help Net Security.

Sextortion victims are already in a vulnerable position, and shady companies are taking advantage of this vulnerability to offer sextortion assistance services for huge sums services that they may be unable to render or that wont help the victims in any way. The rise of the sextortion assistance scam In December, 2022, the FBI warned about the increasing number of sextortion attacks against children and teens. Over 7,000 cases of online financial sextortion of More

The post Beware of companies offering paid sextortion assistance appeared first on Help Net Security.

Mmm hmm. Via: Fox:

Security updates have been issued by Debian (keepalived and lldpd), Oracle (kernel), and SUSE (kernel, podman, seamonkey, and upx).

ThreatX has unveiled ThreatX Runtime API & Application Protection (RAAP). This patent-pending capability goes beyond basic observability to extend threat detection, tracking and blocking to customers

The Cubic Emergency Lunar Vehicle of China can be folded and tucked into the back of a regular roving vehicle and when in use can travel up to 10km/h on the moons surface, say researchers.

Consider the variables when planning and executing your AAP or Tower upgrade and learn what makes sense for your scenario.

Read More at Enable Sysadmin

The post How to upgrade Red Hat Ansible Automation Platform appeared first on Linux.com.

A "by-design flaw" uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code. "It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions to steal access-tokens of higher privilege identities, move laterally, potentially access critical business assets, and

Syxsense has released new updates to the Syxsense product suite designed to extend automated workflow capabilities, improve usability, and enhance overall platform security. Key to this release is the introduction of Cortex Sequences, which uses the power of automation to chain together workflows or playbooks, further enabling Syxsense customers to have intelligent endpoints that can simplify endpoint security and management. With todays complex digital infrastructure and cybersecurity landscape, organizations are increasingly relying on automation to More

The post Syxsense platform updates simplify endpoint security and management appeared first on Help Net Security.

Posted by Sevan Janiyan on Apr 11

Hi,
CVE-2017-11164 landed some years back[1] for PCRE 8.x and is marked
up with a high base score on the article[2], yet no fix was ever listed
and is still commonly packaged, so I asked Philip Hazel (the PCRE
maintainer) regarding the issue, and this is what Philip said

"Stack exhaustion is a FEP (frequently encountered problem) in PCRE1
(the 8.xx series). There are various limiting options that the user can
apply to limit stack usage....

Going back to 2020 Intel's open-source engineers have been working on Key Locker support for Linux for that hardware feature introduced with Tigerlake CPUs. The Key Locker Linux support has been worked on now for nearly three years and finally after a significant performance issue now being addressed with forthcoming firmware...

Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to $20,000 as a way to evade Google Play Store defenses. "The most popular application categories to hide malware and unwanted software include cryptocurrency trackers, financial apps, QR-code scanners, and even dating apps," Kaspersky said in a new report based on messages

upstart writes:

Now We Know How a Solar Storm Took Out a Fleet of Starlinks:

On March 23rd, sky observers marvelled at a gorgeous display of northern and southern lights. It was reminder that when our Sun gets active, it can spark a phenomenon called "space weather." Aurorae are among the most benign effects of this phenomenon.

At the other end of the space weather spectrum are solar storms that can knock out satellites. The folks at Starlink found that out the hard way in February 2022. On January 29th that year, the Sun belched out a class M 1.1 flare and related coronal mass ejection. Material from the Sun traveled out on the solar wind and arrived at Earth a few days later. On February 3, Starlink launched a group of 49 satellites to an altitude only 130 miles above Earth's surface. They didn't last long, and now solar physicists know why.

A group of researchers from NASA Goddard Space Flight Center and the Catholic University of America took a closer look at the specifics of that storm. Their analysis identified a mass of plasma that impacted our planet's magnetosphere. The actual event was a halo coronal mass ejection from an active region in the northeast quadrant of the Sun.

The material traveled out at around 690 kilometers per second as a shock-driving magnetic cloud. Think of it as a long ropy mass of material writhing its way through space. As it traveled, it expanded and at solar-facing satellitesincluding STEREO-A, which took a direct hit from itmade observations. Eventually, the cloud smacked into Earth's magnetosphere creating a geomagnetic storm.

One of the side effects of space weather that can affect satellites is warming in a region called the "thermosphere". That increased the density of the upper atmosphere over a short amount of time and caused it to swell up. A denser atmosphere causes a phenomenon called "atmospheric drag". Essentially, the thicker atmosphere slows down anything moving through. It also heats things up.

Read more of this story at SoylentNews.

Contents

• GNU/Linux
  • Instructionals/Technical
  • Desktop Environments/WMs
    • K Desktop Environment/KDE SC/Qt
• Distributions and Operating Systems
  • New Releases
  • BSD
  • Canonical/Ubuntu Family
  • Devices/Embedded
  • Open Hardware/Modding
  • Mobile Systems/Mobile Applications
• Free, Libre, and Open Source Software
  • Events
  • GNU Projects
  • Programming/Development
    • Perl / Raku
    • Python
    • Shell/Bash/Zsh/Ksh
  • Standards/Consortia
• Leftovers
  • Science
  • Hardware
  • Health/Nutrition/Agriculture
  • Proprietary
  • Security
    • Privacy/Surveillance
  • Defence/Aggression
  • Transparency/Investigative Reporting
  • Environment
    • Energy/Transportation
    • Wildlife/Nature
  • Finance
  • ...

In today's perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including ransomware, phishing, attacks on infrastructure, supply chain breaches, malicious insiders, and much more. Yet at the same time, security leaders are also under tremendous pressure to reduce costs and invest wisely.  One of the most effective ways for CISOs and

IBMs Selectric line of typewriters were quite popular in the 1960s, thanks in part to an innovation called the typeball which allowed for easy font changes on a single machine. Unfortunately, as if often the case when specialized components are involved, its an idea that hasnt aged particularly well. The Selectric typewriters are now around 60 years old and since IBM isnt making replacement parts, those restoring these machines have had to get somewhat creative like using a 3D printer to build new typeballs.

...

AMD and their partners continue working on bringing up Coreboot for the Ryzen Mobile 7040 Series "Phoenix" support for those very interesting forthcoming mobile processors with Zen 4 CPU cores and RDNA3 graphics...

VPN providers with any infrastructure in Russia have experienced problems for years.

Todays bottom line for anonymizing privacy services is that they must comply with Russias site-blocking demands and open up themselves up to scrutiny. Since the alternative is to break the law and face the consequences, many providers have pulled out of Russia completely.

In the wake of Russias invasion of Ukraine in February 2022, telecoms watchdog Rozkomnadzor stepped up its campaign against search engines. Demands to delist hundreds of thousands of VPN-related URLs from search results run alongside questionable requests to remove other content.

Despite renewed crackdowns on VPNs and Tor, it seems likely that Russia understands that short of blocking everything, blocking every VPN service and thousands of apps that constantly surface is impossible. As such, other methods are being explored.

Anti-VPN Scare Campaign

Public Service Announcements (PSA) have been deployed to nudge citizens in the right direction on genuine issues of public welfare for decades. Theyre also used to direct behavior in a way that benefits governments and corporations while making it appear that the interests of citizens are paramount.

Currently being spread via social media, the general premise of Russias anti-VPN campaign is that since no VPN service can be trusted with users private data, using a VPN is worse for privacy than not using a VPN at all.

The campaign is the work of ROCIT, which describes itself as a public organization that unites active Internet users in Russia. Funded by the Ministry of Digital Development, Communications and Mass Media (Minkomsvyaz), ROCIT issues advice on piracy, net neutrality and other internet-related issues, in line with government policy.

Campaign Videos

PSA 1: Your Data Can Be Leaked Online Due to VPN

ROCIT advice: VPN services accumulate a huge amount of personal data, including information about bank cards and personal documents o...

Apple released updates to backport patches addressing two actively exploited zero-day vulnerabilities in older iPhones, iPads, and Macs.

Apple has released emergency updates to backport security patches that address two actively exploited zero-day flaws also affecting older iPhones, iPads, and Macs.

On April 7, 2023, Apple has released emergency security updates to address two actively exploited zero-day vulnerabilities, tracked as CVE-2023-28205 and CVE-2023-28206, impacting iPhones, Macs, and iPads.

Impacted devices include:

• iPhone 8 and later,
• iPad Pro (all models),
• iPad Air 3rd generation and later,
• iPad 5th generation and later,
• iPad mini 5th generation and later,
• and Macs running macOS Ventura.

The zero-day CVE-2023-28205 is a use after free issue that resides in the WebKit, its exploitation may lead to arbitrary code execution. An attacker can trigger the flaw by tricking the victims into loading maliciously crafted web pages. The IT giant addressed the flaw with improved memory management.

The zero-day CVE-2023-28206 is an out-of-bounds write issue that resides in the IOSurfaceAccelerator. The company addressed the flaw with improved input validation.

Apple addressed the zero-day issue with the release of macOS Ventura 13.3.1, iOS 16.4.1, iPadOS 16.4.1, and Safari 16.4.1.

Both vulnerabilities were reported by Clment Lecigne of Googles Threat Analysis Group and Donncha Cearbhaill of Amnesty Internationals Security Lab.

On April 10, 2023, US Cybersecurity and Infrastructure Security Agency (CISA) added the two vulnerabilities to its Known Exploited Vulnerabilities catalog.

Today, Apple extended the security updates to the following devices with the release of iOS 15.7.5 and iPadOS 15.7.5, macOS Monterey 12.6.5, and macOS Big Sur 11.7.6:

• iPhone 6s (all models),
• iPhone 7 (all models),
• iPhone SE (1st generation),
• iPad Air 2,
• iPad mini (4th generation),
• iPod touch (7th generation),
• and Macs running macOS Monterey and Big Sur.

Please vote for Security Affairs (...

For more than one year and now up to thirteen rounds of patch review, the AMD Pensando Elba SoC support continues in its trek toward the mainline Linux kernel...

The CentOS Project has sent out a reminder of end-of-life dates for CentOS Linux 7 and CentOS Stream 8...

Following some minor delays due to additional release candidates, FreeBSD 13.2-RELEASE is now officially available as this latest FreeBSD operating system update ahead of FreeBSD 14.0 debuting this summer...

Apple has pushed out security updates that fix two actively exploited zero-day vulnerabilities (CVE-2023-28205, CVE-2023-28206) in macOS, iOS and iPadOS. Reported by researchers Clment Lecigne of Googles Threat Analysis Group (TAG) and Donncha Cearbhaill, the head of Amnesty Internationals Security Lab, the vulnerabilities have been exploited in tandem to achieve full device compromise with the likely (though not confirmed) goal to install spyware on target devices. About the vulnerabilities CVE-2023-28205 is a use More

The post Apple rushes fixes for exploited zero-days in iPhones and Macs (CVE-2023-28205, CVE-2023-28206) appeared first on Help Net Security.

canopic jug writes:

Democracy Now has a brief interview with a representative from Reporters Without Borders (RSF) on their latest attempt to meet Julian Assange inside Belmarsh high-security prison in the UK. Despite being granted approval, the RSF secretary-general and executive director Christophe Deloire and the others with him were denied entry. No other non-governmental agency has been able to meet with Assange in the last four years either.

CHRISTOPHE DELOIRE: So, what happened is that in the past years we requested to be able to visit Julian in his jail. We got an approval recently, which was confirmed on March 21st with a number, an official number, for myself and my colleague, Rebecca Vincent, and we were invited to come to the prison.

And when we just arrived, the guy at the desk, when he saw my passport, he suddenly was very stressed, and that taking a paper on his office on his desk, and that read it, saying, "According to Article" I do not remember the number of the article, but according to this article, "you are not allowed to visit Julian Assange. This is a decision that has been made by the governor of the Belmarsh prison, based on intelligence that we had" I quote him "that you are journalists."

And it doesn't make sense at all, first, because, personally, I've been a journalist since 1996, and we were vetted, so it was never a mystery that I was a journalist, never a secret. Second, my colleague wasn't a journalist herself. And we came here not as journalists, but as representatives of an international NGO with a constitutive status in many international organizations. So it was really as Reporters Without Borders representatives, not as reporters covering the case. So, it doesn't make sense for this second reason. And there is a third reason for which it doesn't make sense, is that already two journalists, at least, have been able to visit him in jail in the past four years. So

Previously:
(2022) Biden Faces Growing Pressure to Drop Charges Against Julian Assange
(2022) Assange Lawyers Sue CIA for Spying on Them
(2022) Julian Assange's Extradition to the US Approved by UK Home Secretary
(2021) Key Witness in Assange Case Jailed in Iceland After Admitting to Lies and Ongoing Crime Spree
(2019) Top Assange Defense Account Suspended By Twitter
(2019)...

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

Colin Percival has announced the release of FreeBSD 13.2, the that focuses on features, speed and stability: "The FreeBSD Release Engineering team is pleased to announce the availability of FreeBSD 13.2-RELEASE. This is the third release of the stable/13....

Who says you cant teach an old robot new tricks? Nobody, actually. That saying is about dogs. But it applies to robots too, at least judging by the way this late-90s industrial beast was put to use in a way it was never intended: as a giant CNC router.

The machine in question is an ABB IRB6400, a six-axis, floor-mounted industrial machine that had a long career welding at a Eurorail factory in Austria before [Brian Brocken] made its acquaintance. He procured the non-working machine no word on what he paid for it and moved the 2-ton paperweight into his shop, itself a non-trivial endeavor. After a good scrubbing, [Brian] tried to get the machine started up. An error prevented the robot controller from booting; luckily, theres a large community of ABB users, and [Brian] learned that one of the modules in the controller needed replacement.

After fixing that and swapping out the controllers long-dead backup batteries, plus replacing the original 1.44 MB floppy drive with a USB drive he was able to bring the machine back to life. Unfortunately, the limited amount of internal memory made it difficult to use for anything complicated, so [Brian] came up with...

A cyber attack paralyzed the water controllers for irrigating fields in the Jordan Valley that are operated by the Galil Sewage Corporation.

A cyberattack blocked several controllers for irrigating fields in the Jordan Valley. The systems operated by the Galil Sewage Corporation monitor the irrigation process and wastewater treatment in the Jordan Valley.

The company experts spent the entire day recovering the operations, at this time the source of the attack is still unclear.

The management for both major systems was pushing all of Sunday morning to work through the issue and bring the systems back into full operation. reported the Jerusalem Post.

Local authorities were aware of the risk of a cyberattack and informed farmers in the region. Some of the farmers disconnected their irrigation systems from the Internet and switched them to manual operation.

The National Cyber Organization warned of the risk of cyber attacks that anti-Israeli hackers can carry out against national infrastructure during the month of Ramadan.

During the last week, private and government organizations in Israel were hit by massive cyber attacks that were part of the #OPIsrael campaign launched by hacktivists against Israeli critical infrastructure.

In November 2022, Ariel Stern, a former Israeli Air Force captain, warned that the US and Israel are still unprepared to defeat a cyber attack against the water sector that could be orchestrated by enemy states like Iran.

Stern highlighted the dangers for providers of critical infrastructure and issued his warning following the ransomware attack that in august disrupted the IT operations of South Staffordshire Water, a UK company supplying drinking water to 1.6M consumers daily.

The intelligence officer pointed out that nations like Russia, Iran, North Korea, and China have the capabilities to hit the water sector with dramatic consequences.

Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 VOTE FOR YOUR WINNERS
Vote for me in the sections:

• The Teacher Most Educational Blog
• The Entertainer Most...

Also available via the Gemini protocol at:

• gemini://gemini.techrights.org/irc-gmi/irc-log-techrights-100423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-100423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-social-100423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-techbytes-100423.gmi

Over HTTP:

#techrights log as HTML5	#boycottnovell log as HTML5
#boycottnovell-social log as HTML5	#techbytes log as HTML5
#techrights log as text	...

We are getting various related effects that we do not expect and whose biological pathways are obscure.  They are at least rare enough.  Still seriously unwelcome to encounter.

Video download link | md5sum 819584aa5aa6510b785e6a76e1fcbbf7
Sirius Victims Out the Woodwork
Creative Commons Attribution-No Derivative Works 4.0

Summary: Were learning or becoming informed of some more crimes of Sirius Open Source (a company we left over 4 months ago); the video above explains that the company or its boosters (maybe shills) resort to intimidation tactics and threats (familiar tactics), having not just lost key staff (including the CEO) but also found itself unable to recruit

NOW that people are speaking out about what the company did to them even a decade ago I thought Id mention a bunch of old stories about what the company did to staff, clients, and suppliers.

The company may not last much longer (maybe weeks or months), pension providers have resorted to stalling tactics and lies (covering their own behinds), but we need to properly explain what happened, more so after Bill Gates had passed some money to the CEO under an NDA.

Whether Sirius was sabotaged or simply sabotaged itself is something for historians to decide. NDAs make its exceptionally hard to figure out what really happened.

Video download link | md5sum 819584aa5aa6510b785e6a76e1fcbbf7
Sirius Victims Out the Woodwork
Creative Commons Attribution-No Derivative Works 4.0

Summary: Were learning or becoming informed of some more crimes of Sirius Open Source (a company we left over 4 months ago); the video above explains that the company or its boosters (maybe shills) resort to intimidation tactics and threats (familiar tactics), having not just lost key staff (including the CEO) but also found itself unable to recruit

NOW that people are speaking out about what the company did to them even a decade ago I thought Id mention a bunch of old stories about what the company did to staff, clients, and suppliers.

Whether Sirius was sabotaged or simply sabotaged itself is something for historians to decide.The company may not last much longer (maybe weeks or months), pension providers have resorted to stalling tactics and lies (covering their own behinds), but we need to properly explain what happened, more so after Bill Gates had passed some money to the CEO under an NDA.

Whether Sirius...

upstart writes:

Inside the bitter campus privacy battle over smart building sensors:

"The initial step was to ... see how these things behave," says Herbsleb, comparing the Mites sensors to motion detectors that people might want to test out. "It's purely just, 'How well does it work as a motion detector?' And, you know, nobody's asked to consent. It's just trying out a piece of hardware."

Of course, the system's advanced capabilities meant that Mites were not just motion detectorsand other department members saw things differently. "It's a lot to ask of people to have a sensor with a microphone that is running in their office," says Jonathan Aldrich, a computer science professor,  even if "I trust my coworkers as a general principle and I believe they deserve that trust." He adds, "Trusting someone to be a good colleague is not the same as giving them a key to your office or having them install something in your office that can record private things." Allowing someone else to control a microphone in your office, he says, is "very much like giving someone else a key."

As the debate built over the next year, it pitted students against their advisors and academic heroes as wellalthough many objected in private, fearing the consequences of speaking out against a well-funded, university-backed project.

In the video recording of the town hall obtained by MIT Technology Review, attendees asked how researchers planned to notify building occupants and visitors about data collection. Jessica Colnago, then a PhD student, was concerned about how the Mites' mere presence would affect studies she was conducting on privacy. "As a privacy researcher, I would feel morally obligated to tell my participant about the technology in the room," she said in the meeting. While "we are all colleagues here" and "trust each other," she added, "outside participants might not."

Read more of this story at SoylentNews.