Team Browserling keeps shipping!

Last week we added 20 new time tools and and today we just added 10 new tools to our Online List Tools collection.

I've done my job and now it's Google's job to index them and rank them well.

Here are the new list tools.

• Color List Items
• Create a Custom List
• Create a Random List
• Find Certain List Items
• Replace Certain List Items
• Delete Certain List Items
• Delete Repeating List Items
• Remove List Item Bullets
• Change the Length of a List
• Append Items to a List
• Left-pad a List
• Right-pad a List

Next week we'll add even more tools. See you then!

Team Browserling keeps shipping!

Last week we added 20 new time tool.

And today we just added another 20 tools to our Online Time Tools collection.

I've done my job and now it's Google's job to index them and rank them well.

Here are the new time tools.

• Add Fuzziness To Clock Times
• Add Fuzziness to Calendar Dates
• Find Day of the Week by Date
• Find Date by Day of the Year
• Calculate Clock Hand Angle
• Set Clock Hand Angle
• Find a Specific Day
• Find Friday the 13th
• Find Day of the Week for July 4th
• Find Day of the Week for Christmas Day
• Find Day of the Week for New Year's Day
• Find Dates of Thanksgiving
• Analyze a Clock Time
• Analyze a Calendar Date
• Visualize Time Intervals
• Visualize Date Intervals
• Split Time into Intervals
• Split Date into Intervals
• Mirror a Clock Time
• Convert Time Between Timezones
• Convert Time Between Countries
• Find Season by Date

Next week we'll add even more tools. See you then!

Posted by Cathy Hu on May 09

Publishing to oss-security as our agreed maximum embargo date has
passed now

Summary
=======

distribution/distribution
(https://github.com/distribution/distribution) is the Open Source
Registry implementation for storing and distributing container images
using the OCI Distribution Specification.

Systems that run distribution/distribution on memory-restricted
environments can suffer from denial of service by a crafted malicious
/v2/_catalog API...

Two members of the Faster CPython team, which was put together at Microsoft at the behest of Guido van Rossum to work on major performance improvements for CPython, came to PyCon 2023 to report on what the team has been working onand its plans for the future. PEP 659 ("Specializing Adaptive Interpreter") describes the foundation of the current work, some of which has already been released as part of Python 3.11. Brandt Bucher, who gave a popular talk on structural pattern matching at last year's PyCon, was up first, with a talk on what "adaptive" and "specializing" mean in the context of Python, which we cover here in part one. Mark Shannon, whose proposed plan for performance improvements in 2020 was a major impetus for this work, presented on the past, present, and future of the Python performance enhancements, which will be covered in part two.

Around the Hackaday bunker, any plant other than a cactus has a real chance of expiring due to thirst. Perhaps we should build some of [MakersFunDuck]s Moisture Duck boards. As you can see in the video below, the simple PCB with an ATtiny13A tells you when it is time to water the plants. The video also covers several exotic methods of determining the watering status, some of which are pretty complex.

The board is simple because the operation of the device is simple. A fixed resistor creates a voltage divider with the soil, and dry soil has higher resistance than moist soil. A pot sets a threshold, and the microcontroller measures the voltages.

Of course, if you cant remember to water the plants, you probably cant remember to change batteries either. So the device sleeps most of the time, and only wakes up every eight seconds to conserve battery. It would be nice to alarm on a low battery, and, honestly, we would probably have made the sleep time longer.

The video covers how he minimizes corrosion, but we arent sure how well the board will survive in damp soil, but with a little protection, it might last a while. Besides that, you could probably just consider them almost disposable.

If you are really lazy, you can also automate the actual watering. You can even build that into...

OneLayer released OneLayer Bridge, a security solution for private mobile networks. The use of private cellular networks allows organizations to improve IoT and OT device connectivity. As the adoption of these networks increases, organizations must consider the essential aspect of network security. OneLayer Bridge has been designed to provide seamless and secure connectivity between the enterprise cellular networks and IT/OT networks. Aptly named Bridge, the product serves as a critical link, bridging the gap between More

The post OneLayer Bridge discovers, assesses, and secures IoT device activity appeared first on Help Net Security.

New insights into how X-ray flashes are produced during lightning strikes have been made by research.

Its no secret that electricity bills are on the rise. With the P3 P4400 you can cut your energy costs and find out what appliances are actually worth keeping plugged in by finding power-wasting appliances. Simply connect any appliance to the Kill A Watt EZ, it will then assess how efficient each appliance really is.

Elon Musk has been pretty open about the idea of using social media platforms like Twitter to communicate directly with customers. Tesla highlighted this in its 2022 Impact Report, with the company noting that its social media accounts have helped it reach 1 billion views on Twitter last year.

With Twitter now being owned by Elon Musk, it is no surprise that his companies like Tesla are now more active on the platform. And in a recent post, the official Tesla account asked Twitter users what it could improve. The EV community, from fans to longtime owners, responded, to a great degree. As of writing, Teslas post has attracted over 22k comments.

A look at the comments on Teslas post would show that there are numerous calls for better service. Service has been Teslas Achilles heel for some time now, and with the company adopting a best service is no service stance, some owners have reported experiencing difficulties contacting Tesla for issues with their vehicles. Comments on Teslas post suggest that customer service is still a key point of improvement for the company.

Engineers at the University of Pittsburgh are bringing concrete into the 21st century by reimagining its design. Concrete, which has its roots dating back to the Roman Empire, remains the most widely utilized material in the construction industry.

A new study presents a concept for the development of smart civil infrastructure systems with the introduction of metamaterial concrete. The research presents a concept for lightweight and mechanically-tunable concrete systems with integrated energy harvesting and sensing capabilities.

Modern society has been using concrete in construction for hundreds of years, following its original creation by the ancient Romans, said Amir Alavi, assistant professor of civil and environmental engineering at Pitt, who is the corresponding author on the study. Massive use of concrete in our infrastructure projects implies the need for developing a new generation of concrete materials that are more economical and environmentally sustainable, yet offer advanced functionalities. We believe that we can achieve all of these goals by introducing a metamaterial paradigm into the development of construction materials.

The 2022 physics Nobel prize was awarded for experimental work demonstrating fundamental breaks in our understanding of the quantum world, leading to discussions around local realism and how it could be refuted. Many theorists believe these experiments challenge either locality (the notion that distant objects require a physical mediator to interact) or realism (the idea that theres an objective state of reality). However, a growing number of experts suggest an alternative approach, retrocausality, which posits that present actions can affect past events, thus preserving both locality and realism.

The 2022 Nobel Prize in physics highlighted the challenges quantum experiments pose to local realism. However, a growing body of experts propose retrocausality as a solution, suggesting that present actions can influence past events, thus preserving both locality and realism. This concept offers a novel approach to understanding causation and correlations in quantum mechanics, and despite some critics and confusion with superdeterminism, it is increasingly seen as a viable explanation for recent groundbreaking experiments, potentially safeguarding the core principles of special relativity.

In 2022, the physics Nobel prize was awarded for experimental work showing that the quantum world must break some of our fundamental intuitions about how the universe works.

Via: Techspot: Your next interaction at the drive-thru could be with an AI chatbot instead of a human order-taker, and you might not even know it. Fast-food giant Wendys has partnered with Google to trial an artificial intelligence chatbot at one of its restaurants in its home state of Ohio. The chatbot will be trained []

CertifID released an identity verification solution to help title agencies and real estate firms combat seller impersonation fraud. The solution augments CertifIDs existing capabilities that evaluate more than 150 markers of fraud, including the verification of wiring instructions and bank account information. The new solution is aimed at addressing an alarming increase in seller impersonation scams involving vacant land. The real estate industry overall continues to be a top target for fraud, according to the More

The post CertifID provides identity verification designed to combat seller impersonation fraud appeared first on Help Net Security.

Version 113.0 of the Firefox browser is out. Changes include improved picture-in-picture support, blocking of third-party cookies in private windows, some accessibility improvements, and more. "A 13-year-old feature request was fulfilled and Firefox now supports files being drag-and-dropped directly from Microsoft Outlook".

A DDoS botnet dubbed AndoryuBot has been observed exploiting an RCE, tracked as CVE-2023-25717, in Ruckus access points.

FortiGuard Labs researchers have recently observed a spike in attacks attempting to exploit the Ruckus Wireless Admin remote code execution vulnerability tracked as CVE-2023-25717. The activity is associated with a known DDoS botnet tracked as AndoryuBot that first appeared in February 2023. The bot supports multiple DDoS attack techniques and uses SOCKS5 proxies for C2 communications.

used by multiple Ruckus wireless Access Point (AP) devices. A remote, unauthenticated attacker can exploit the vulnerability to execute arbitrary code and take complete control of a vulnerable device.

Fortinet researchers also reported that a Proof-of-Concept (PoC) code for this vulnerability is publicly available and urges owners to install the patch as soon as possible.

Once compromised a device, the AndoryuBot downloads a script from the URL http[:]//163[.]123[.]142[.]146 for further propagation.

Once a target device is compromised, AndoryuBot quickly spreads and begins communicating with its C2 server via the SOCKS protocol. In a very short time, it is updated with additional DDoS methods and awaits attack commands. states the report published by Fortinet. Users should be aware of this new threat and actively apply patches on affected devices as soon as they become available.

The variant analyzed by the researcher...

SafePaaS announces its Unified Privileged Access Management (UPAM) solution to protect the digital enterprise without the complexity of traditional PAM solutions that fail to meet the evolving needs of todays dynamic, complex organizations. SafePaaS UPAM offering enables in-depth cyber mechanisms by allowing for the discovery, monitoring, and control of access to privileged accounts, management for interactive privileged access, and just-in-time (JIT) privilege approaches. As threat landscapes and cybersecurity threats continue to grow and evolve at More

The post SafePaaS UPAM offering enables discovery, monitoring, and control of privileged accounts appeared first on Help Net Security.

Waterfall Security Solutions and Atlantic Data Security announced a partnership to protect data centers, building automation systems and critical infrastructure facilities. With attacks on OT networks becoming more powerful and pervasive, this new partnership provides owners and operators with solutions that dramatically improve the security posture and preparedness of physical operations. Providing our clients with the strongest and most advanced OT cyber protection is a top priority for Atlantic Data Security, said Scott Kasper, Executive More

The post Waterfall Security Solutions and Atlantic Data Security improve protection for OT networks appeared first on Help Net Security.

upstart writes:

Samsung to unveil first details about SF3 process technology with MBCFETs:

Although Samsung Foundry started to produce chips using its SF3E (aka 3nm gate-all-around early) manufacturing technology last June, the company only uses this tech for select chips, and it's not expected to be used widely. Meanwhile, the company is working on its second-gen 3nm-class node called SF3 (3GAP) and will disclose more information about it at the upcoming 2023 Symposium on VLSI Technology and Circuits in Kyoto, Japan.

Samsung's Sf3 (3nm-class) fabrication technology (set to be introduced at the T1-2 session) will use the company's second-gen Multi-Bridge-Channel field-effect transistors (MBCFET). This new fabrication technology builds upon the first-gen GAA device (SF3E) that's already in mass production, incorporating further optimization.

Samsung claims that compared to SF4 (4LPP, 4nm-class, low power plus), SF3 offers a 22% higher performance at the same power and transistor count, a 34% power reduction at the same clocks and complexity, and a 0.79x logic area reduction. However, Samsung doesn't compare its SF3 to SF3E, and there is no word about the SRAM and analog circuit scaling.

One of the main benefits of GAA transistors over FinFET devices is the reduced leakage current since their gate is surrounded by the channel on all four sides. Additionally, the channel thickness can be adjusted to enhance performance or reduce power consumption.

Samsung now says that the SF3 platform offers greater design flexibility enabled by various nanosheet (NS) widths of the MBCFET device within the same cell type. It is unclear whether it means that the original SF3E lacks one of the key capabilities of GAA transistors, but Samsung's phrasing at least implies it.

An image that Samsung demonstrates in its paper depicts damage on top of the nanosheet during the metal gate process, so we may speculate that one of the aspects that the company will cover are production challenges it encountered with its GAA-based SF3E production node.

Interestingly, recently the company admitted that its fabrication processes are behind those of TSMC, and it will take at least five years to catch up.

---

Original Submission

Read more of this story at SoylentNews....

The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to booter services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in December 2022, when it charged six U.S. men with computer crimes for allegedly operating booters.

Booter services are advertised through a variety of methods, including Dark Web forums, chat platforms and even youtube.com. They accept payment via PayPal, Google Wallet, and/or cryptocurrencies, and subscriptions can range in price from just a few dollars to several hundred per month. The services are generally priced according to the volume of traffic to be hurled at the target, the duration of each attack, and the number of concurrent attacks allowed.

The websites that saw their homepages replaced with seizure notices from the FBI this week include booter services like cyberstress[.]org and exoticbooter[.]com, which the feds say were used to launch millions of attacks against millions of victims.

School districts, universities, financial institutions and government websites are among the victims who have been targeted in attacks launched by booter services, federal prosecutors in Los Angeles said in a statement.

Purveyors of booters or stressers claim they are not responsible for how customers use their services, and that they arent breaking the law because like most security tools these services can be used for good or bad purposes. Most booter sites employ wordy terms of use agreements that require customers to agree they will only stress-test their own networks and that they wont use the service to attack others.

But the DOJ says these disclaimers usually ignore the fact that most booter services are heavily reliant on constantly scanning the Internet to commandeer misconfigured devices that are critical for maximizing the size and impact of DDoS attacks. Whats more, none of the services seized by the government required users to demonstrate that they own the Internet addresses being stress-tested, something a legitimate testing service would insist upon.

This is the third in a series of U.S. and international law enforcement actions targeting booter services. In December 2022, the feds seized f...

DigiCert announced a partnership to provide DigiCert ONE, the platform for digital trust, on Oracle Cloud Infrastructure (OCI). Customers will benefit from DigiCert ONEs fast time to value combined with OCIs high-performance and security-first architecture for single and multi-cloud deployments. Moving forward, DigiCert and Oracle will collaborate on further integration into the OCI ecosystem to help joint customers manage their digital trust initiatives in a unified architecture. Collaboration and deeply integrated security are a few More

The post DigiCert and Oracle join forces to help joint customers manage their digital trust initiatives appeared first on Help Net Security.

When it comes to things that hackers build, PCBs are a sizeable portion of our creative output. Its no wonder PCB design is a powerful way to participate in the hardware world, making your ideas all that more tangible with help of a friendly PCB fab. Its often even more lovely when the PCB has been designed for you, and all you have to do is press send bonus points if you can make a few changes for your own liking!

A lot of the time, our projects are untrodden ground, however, and a new design needs to be born. We pick out connectors, work through mechanical dimensions, figure out a schematic and check it with others, get the layout done, and look at it a few more times before sending it out for production. For a basic PCB, that is enough but of course, its no fun to stop at basic, when theres so many things you can do at hardly any cost.

Lets step back a bit youve just designed a board, and its great! It has all the chips and the connectors you could need, and theoretically, its even supposed to work first try. Now, lets be fair, theres an undeniable tendency the more PCBs you design, the better each next one turns out, and you learn to spend less time on each board too. As someon...

ThreatBlockr and GreyNoise announced a partnership that will enhance the ThreatBlockr platform. By leveraging GreyNoise data, ThreatBlockr customers now have automatic access to this enhanced cyber intelligence and the largest cyber intelligence data set that protects against false positives. False positives can often cause disruptions and wasted time, which can lead to security controls being deactivated and open the floodgates for bad actors, said Pat McGarry, CTO of ThreatBlockr. By incorporating GreyNoise into our platform, More

The post ThreatBlockr integrates with GreyNoise to guard against false positives appeared first on Help Net Security.

Posted 3 hours ago by an anonymous person, concurring with what we kept hearing about summertime layoffs:

We assume CXP is Customer Experience.

Summary: The media fails to report Microsoft layoffs (except at LinkedIn), but theyre still happening routinely with plenty more on the way

Kyndryl introduced a managed Secure Access Service Edge (SASE) solution powered by Fortinet, which aims to help customers enable advanced network security initiatives. The solution combines Fortinets cloud-delivered security and secure networking solutions with Kyndryls network and security services to design, build, manage, and modernize mission-critical networking for customers across industries. SASE converges networking and security capabilities capbilties into a unified cloud-delivered service. SASE offers Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Cloud More

The post Kyndryl collaborates with Fortinet to modernize mission-critical networking appeared first on Help Net Security.

A gambling company in the Philippines was the target of a China-aligned threat actor as part of a campaign that has been ongoing since October 2021. Slovak cybersecurity firm ESET is tracking the series of attacks against Southeast Asian gambling companies under the name Operation ChattyGoblin. "These attacks use a specific tactic: targeting the victim companies' support agents via chat

This video explains the process of glycogenesis.

Thank You For Watching.

Please Like And Subscribe to Our Channel: https://www.youtube.com/EasyPeasyLearning.

Like Our Facebook Page: https://www.facebook.com/learningeasypeasy/

Join Our Facebook Group: https://www.facebook.com/groups/460057834950033

Support Our Channel: https://www.patreon.com/supereasypeasy

Over the past year, SideWinder has been linked to a cyber attack aimed at Pakistan Navy War College (PNWC) as well as an Android malware campaign that leveraged rogue phone cleaner and VPN apps uploaded to the Google Play Store to harvest sensitive information.

The latest infection chain documented by BlackBerry mirrors findings from Chinese cybersecurity firm QiAnXin in December 2022 detailing the use of PNWC lure documents to drop a lightweight. NET-based backdoor (App.dll) thats capable of retrieving and executing next-stage malware from a remote server.

What makes the campaign also stand out is the threat actors use of server-based polymorphism as a way to potentially sidestep traditional signature-based antivirus (AV) detection and distribute additional payloads by responding with two different versions of an intermediate RTF file.

Oldest known animal killed and secrets of immortality.

---

Ming the ocean quahog lived peacefully for over 500 years off the coast of Iceland. So why did a team of researchers dredge it up and kill it?

Security updates have been issued by Fedora (java-11-openjdk-portable and rubygem-redcarpet), Red Hat (autotrace, bind, buildah, butane, conmon, containernetworking-plugins, curl, device-mapper-multipath, dhcp, edk2, emacs, fence-agents, freeradius, freerdp, frr, fwupd, gdk-pixbuf2, git, git-lfs, golang-github-cpuguy83-md2man, grafana, grafana-pcp, gstreamer1-plugins-good, Image Builder, jackson, kernel, kernel-rt, krb5, libarchive, libguestfs-winsupport, libreswan, libtiff, libtpms, lua, mysql, net-snmp, openssh, openssl, pcs, php:8.1, pki-core, podman, poppler, postgresql-jdbc, python-mako, qemu-kvm, samba, skopeo, sysstat, tigervnc, toolbox, unbound, webkit2gtk3, wireshark, xorg-x11-server, and xorg-x11-server-Xwayland), SUSE (cfengine, cfengine-masterfiles, go1.19, go1.20, libfastjson, python-cryptography, and python-ujson), and Ubuntu (mysql-5.7).

The U.S. DoJ announced the seizure of 13 new domains associated with DDoS-for-hire platforms as part of Operation PowerOFF.

The U.S. Justice Department announced the seizure of 13 domains linked to DDoS-for-hire services as part of a coordinated international law enforcement effort known as Operation PowerOFF.

DDoS-for-hire or booter services allows registered users to launch order DDoS attacks without specific knowledge.

According to DoJ, data relating to the operation of DDoS-for-hire services seized in the past by law enforcement show that hundreds of thousands of registered users have used these platforms to launch millions of attacks against millions of victims (i.e. School districts, universities, financial institutions and government websites).

The authorities pointed out that ten of the 13 domains seized as part of Operation PowerOFF are reincarnations of booters that were seized in December. In December 2022, the FBI seized 48 domains linked to DDoS-for-Hire service platforms as part of the same Operation PowerOFF.

PwC, Microsoft and Icertis announced a new strategic collaboration that will provide C-suites with a powerful, innovative AI-driven approach to contract management that enables accelerated enterprise-level digital transformation. The new collaboration builds on the strength of existing relationships Microsoft has with both PwC and Icertis. It offers a contract intelligence platform that provides C-suites with the ability to unlock critical business insights from data embedded in contracts and use it to automate end-to-end business processes. More

The post PwC partners with Microsoft and Icertis to accelerate enterprise digital transformation appeared first on Help Net Security.

While Intel's in-development Xe kernel graphics driver is focused on supporting Tigerlake/Gen12 graphics and newer integrated/discrete graphics with this modern open-source driver with many design improvements over the aging i915 kernel driver, there looks to be one feature that as currently positioned will be missing for DG2/Alchemist: HuC support for helping with media offloading...

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empowering teams to tackle challenges. Let's dive into DevSecOps and explore how collaboration can give your team the edge to fight cyber villains. Application security and product security Regrettably, application security teams often intervene

Sadly missing out on the Linux 6.4 kernel merge window by a few days is support for sensor monitoring with the ASUS ROG CROSSHAIR X670E Hero motherboard...

By Cyberpress

Dubai / May 1st 2023 / Cyberpress Cybersecurity gets a new dedicated newswire. Cyberpress, a press release

This is a post from HackRead.com Read the original post: Cyberpress Launches Cybersecurity Press Release Distribution Platform

upstart writes:

Australia: Woman survives on wine during five days stranded in Australian bush:

A 48-year-old woman survived five days stranded in the bush in Australia by eating sweets and drinking a single bottle of wine.

Lillian Ip set off on what was meant to be a short trip on Sunday, travelling through dense bush in Victoria state.

But she hit a dead-end after taking a wrong turn, and her vehicle became stuck in the mud.

Ms Ip - who doesn't drink - only had a bottle of wine in the car as she was planning to give it as a present.

After five nights stranded, she was discovered by emergency services on Friday as they flew overhead as part of a search.

"The first thing coming in my mind, I was thinking 'water and a cigarette,'" Ms Ip told 9News Australia. "Thank god the policewoman had a cigarette."

[...] "The only liquid Lillian, who doesn't drink, had with her was a bottle of wine she had bought as a gift for her mother so that got her through," Wodonga Police Station Sergeant Martin Torpey said.

"She used great common sense to stay with her car and not wander off into bushland, which assisted in police being able to find her."

Ms Ip was taken to hospital to be treated for dehydration, but has since returned home to Melbourne.

I'm just off to repack my survival bag.....

---

Original Submission

Read more of this story at SoylentNews.

Further fueling my interest in reaching the ice giants is a study in the Journal of Geophysical Research: Planets that investigates the possibility of oceans on the major moons of Uranus. Imaged by Voyager 2, Uranus is otherwise unvisited by our spacecraft, but Miranda, Ariel, Titania, Oberon and Umbriel hold considerable interest given what we are learning about oceans beneath the surface of icy moons. Hence the need to examine the Voyager 2 data in light of updated computer modeling.

Julie Castillo-Rogez (JPL) is lead author of the paper:

When it comes to small bodies dwarf planets and moons planetary scientists previously have found evidence of oceans in several unlikely places, including the dwarf planets Ceres and Pluto, and Saturns moon Mimas. So there are mechanisms at play that we dont fully understand. This paper investigates what those could be and how they are relevant to the many bodies in the solar system that could be rich in water but have limited internal heat.

Image: This is Figure 1 from the paper. Caption: Densities and mean radii of the Uranian moons compared to those of other large moons and dwarf planets. Miranda has a low density similar to Saturns moon Mimas, whereas the densities of the other Uranian moons are more similar to Saturns moons Dione and Rhea. After Hussmann et al. (2006).

The interest is more than theoretical, for as weve recently discussed the Planetary Science and Astrobiology Decadal Survey for 20232032 has put a Uranus Orbiter and Probe mission on its short list of priorities. A mission to Uranus would open up the prospect for confirming oceans, or the lack of same, within the five large moons. Recent work explored in the Castillo-Rogez paper has made the case that magnetic fields induced by such oceans should be detectable by a Uranus orbiters flybys.

Much has happened to call for new modeling of this system. The paper notes recent advances in surface chemistry and geology, revised models of system dynamics, and the knowledge gained on icy bodies in the size range of the Uranian moons as studies have continued on Enceladus and the moons of Saturn as well as Pluto and Charon, not to mention the availability of data fro...

Webb Protocol raised $7 million in a seed funding round co-led by Polychain and Lemniscap, with participation from Zeeprime, CMS Holdings among others. The funding will go towards growing Webbs staff base, accelerating the development of innovative privacy tools and protocols including Zero-Knowledge and Multi-Party Computation (MPC) solutions while creating the most privacy-centric and streamlined user experience possible. Considering the frequency with which assets are transferred across various chains, the risk of data More

The post Webb Protocol raises $7 million to build interoperable privacy in Web3 appeared first on Help Net Security.

Adding to the list of features coming with QEMU 8.1 is now having a native PipeWire audio back-end...

upstart writes:

The co-creator of the Internet's protocols admits his crystal ball had a few cracks:

Vint Cerf, the recipient of the 2023 IEEE Medal of Honor for "co-creating the Internet architecture and providing sustained leadership in its phenomenal growth in becoming society's critical infrastructure," didn't have a perfect view of the Internet's future. In hindsight, there are a few things he admits he got wrong. Here some of those mistakes, as recently told to IEEE Spectrum:

• 1) "I thought 32 bits ought to be enough for Internet addresses."
• 2) "I didn't pay enough attention to security."
• 3) "I didn't really appreciate the implications of the World Wide Web."

These are only his top three - can you think of some that are missing from that group? What about any mistakes that aren't top 3 but still in hindsight should have been done differently?

---

Original Submission

Read more of this story at SoylentNews.

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.

The tech giants threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-202327350 in their operations to achieve initial access.

This activity shows Mint Sandstorms continued ability to rapidly incorporate [proof-of-concept] exploits into their operations, Microsoft said in a series of tweets.

<p><img alt="lavicheats logo" class= "alignright size-full wp-image-234792" height="170" src= "https://torrentfreak.com/images/lavi-logo.jpg" width="300">Over the past several years, major videogame companies have taken cheat developers, sellers, and resellers to court in the United States.</p> <p>In 2021, American videogame company <a href= "https://www.bungie.net/">Bungie</a> upped its game with lawsuits against three major players; <a href= "https://torrentfreak.com/bungie-sues-elite-tech-boss-lavicheats-veterancheats-for-copyrigtht-infringement-210820/"> Elite Tech Boss</a>, <a href= "https://torrentfreak.com/bungie-sues-elite-tech-boss-lavicheats-veterancheats-for-copyrigtht-infringement-210820/"> LaviCheats & VeteranCheats.

Bungies legal campaign is beginning to pay off. Last summer, the case against Elite Tech Boss resulted in a consent judgment where a key defendant agreed to pay <a href= "https://torrentfreak.com/bungie-destiny-2-cheat-creator-agree-13-5m-damages-judgment-220610/"> $13.5 million</a> in damages. This was followed by a <a href= "https://torrentfreak.com/bungie-wins-12-million-in-damages-from-veterancheats-230428/"> $12 Million default judgment</a> last month against Veterancheats.</p> <p>The case against cheat reseller LaviCheats reached its conclusion at a Washington federal court this week. Like the cases against the other cheat operations, this lawsuit wasnt fully litigated.</p> <h2>Lavicheats Doesnt Show Up in Court</h2> <p>Earlier this year, Bungie <a href= "https://torrentfreak.com/bungie-requests-67-million-default-judgment-against-lavicheats-230221/"> filed a motion</a> for default judgment against LaviCheats. The game company asked the court to rule on the matter without hearing the defendant, as they apparently have no interest in making a court appearance.</p> <p>Bungie believes that the cheat seller is operated by India-resident Kunal Bansal, AKA Lavi. No known address exists for this person so to alert Bansal to the legal proceeding, Bungie sent an email and posted a message in the <a href= "https://torrentfreak.com/images/no-more-hacks.jpg">LaviCheats forums</a>.</p> <p>These unusual serving options were authorized by the court and achieved the desired result. Although there was no response from the defendant in court, Destiny 2 cheats were removed from the LaviCheats website.</p> <h2>$6.7 Million Default Judgment</h2> <p>In the absence of a proper defense, United States District Judge Tana Lin assumed that Bungies copyright infringement claims were true. The same also applies to the financial damages reported by the video game company.</p> <p>This week, Judge Lin ruled on the motion for default. After concluding that the court has jurisdiction over the foreign defendant and that a default judgment...

If youre like most of us, your basic approach to building something boils down to: Whats the minimum amount I need to do to get this to work? Its not a bad strategy in general, but the minimal build is rarely enough to meet all the requirements, as this extremely minimal but functional USB device illustrates.

Functional, yes, but as [TM] explains, only if you define functional as being recognized by your operating system. The BOM for that job turns out to be really small a 3.3-volt regulator, its capacitor, and a pair of resistors connected to a DIP switch. The resistors, 1.5k each, are connected to the D+ and D- lines of the USB connector and pull their respective lines up to 3V3 when their switch is closed. If the D- switch is thrown, it indicates a low-speed connection is requested, while D+ requests a speedier connection. Either way, its enough to get the familiar USB connect sound in Windows, and to see it listed in Device Manager or dmesg on Linux.

With no microcontroller to return a device descriptor, not much else happens, of course, but its still interesting that so little is needed to at least get the host machine to know that something was p...

Microsoft has enabled number matching for Microsoft Authenticator push notifications to improve user sign-in security. Authenticator MFA number matching in action (Source: Microsoft) If the user has a different default authentication method, theres no change to their default sign-in. If the default method is Authenticator, they get number matching, Microsoft clarified, and noted that users cant opt out of this feature. MFA number matching Number matching provides an additional layer of security by displaying a More

The post Microsoft Authenticator push notifications get number matching appeared first on Help Net Security.

Contents

• GNU/Linux
  • Instructionals/Technical
• Distributions and Operating Systems
  • BSD
  • Devices/Embedded
  • Mobile Systems/Mobile Applications
• Free, Libre, and Open Source Software
  • Web Browsers/Web Servers
    • Mozilla
  • Productivity Software/LibreOffice/Calligra
  • Education
  • Programming/Development
• Leftovers
  • Science
  • Education
  • Hardware
  • Health/Nutrition/Agriculture
  • Proprietary
  • Pseudo-Open Source
    • Openwashing
  • Security
    • Integrity/Availability/Authenticity
    • Privacy/Surveillance
  • Defence/Aggression
  • Transparency/Investigative Reporting
  • Environment
    • Energy/Transportation
    • Wildlife/Nature
    • Overpopulation
  • Finance
  • AstroTurf/Lobbying/Politics
  • Censorship/...

• GNU/Linux

  • Personal

    • Re: JeanG3nie: Id rather be Ferrari than Ford

      For me its liking bare fingers on acoustic guitar strings, attempting to hit higher vocal notes through 62-year-old vocal chords that might have encounters one cigarette too many the night before. Its ftping files Id vimd to a gemini account instead of typing into either a textarea or a javascript-mediated equivalent.

    • Growing in the Wrong Places

      The city that I live in used to be a steel production town, it has since morphed into a hybrid college town and regular small city, but the scars are still here. An environmental survey of a pond near my house revealed that the only way to clean it would be to either cover the whole thing over and forget it existed, or dig out >6 feet of contaminated sludge from the floor of the pond. There isnt 0 green-space in the city, but there is at least a 3:1 ratio of abandoned parking lots to flora. Nature within the city is often seen as a problem that needs to be overcome, rather than a harmonious relationship. In spite of this, small plants jut through cracks in the sidewalk made by the roots of trees. Squirrels use the power lines in lieu of dense forests, and geese inhabit the parks in droves, daring anybody to challenge their authority.

    • Ne-an-nes!

      Yesterday I sang the Liturgy in Byzantine chant at another church than the one I usually attend. It was stressful (I was protopsaltis and it was my first rodeo at that particular klros), but ultimately it was a good experience. I really enjoyed improvizing during the Anaphora, the Cherubic Hymn, and the communion hymn. The 2 other chanters were good isokrats and I appreciated their help in pointing me to the right hymns for the day and filling in the places I was unsure on.

      The weather has been beautiful, and spring is finally here. Its pretty warm here most days, sometimes even getting to 75. Ive been playing koi-koi with my family and a...

While missing out on the recently-closed Linux 6.4 merge window, one of the patch series seeing a lot of activity in recent weeks/months has been around parallel CPU bring-up in order to speed-up the Linux kernel boot process for today's high-end desktops and many-core servers...