By Waqas

Most of the hacked ChatGPT accounts originated from India, Pakistan, and Brazil.

This is a post from HackRead.com Read the original post: 100,000 Hacked ChatGPT Accounts Discovered on Dark Web

Semiconductor lasers, unlike bulky gas lasers and fiber lasers, are tiny, energy efficient, and highly controllable. The one thing they cant do is deliver their competitors steel-slicing brightness.

In results reported last week in Nature, a group of researchers at Kyoto University, led by IEEE Fellow Susumu Noda, has taken a big step in overcoming the limitations of semiconductor laser brightness by changing the structure of photonic-crystal surface-emitting lasers (PCSELs). A photonic crystal is composed of a semiconductor sheet punched through with regular, nanometer-scale air-filled holes. Photonic crystal lasers are attractive candidates for high-brightness lasers, but until now engineers havent been able to scale them up to deliver beams bright enough for practical metal cutting and processing.

(Brightness is a figure of merit that encompasses a lasers output power and beam quality and encapsulates how well a beam of light can be focused or how little it diverges. The threshold for metal work is about 1 gigawatt per square centimeter per steradian.)

Slicing Stainless Steel With a PCSEL youtu.be

Nodas group, which has been working on PCSELs for more than two decades, was able to develop a laser with a diameter of 3 millimeters, a 10-fold areal jump up from previous 1-millimeter-diameter PCSEL devices. The new laser has a power output of 50 watts, a similar increase from the 5 to 10 W power output of the 1 mm PCSELs. The new lasers brightness, about 1 GW/cm²/str, is now high enough for applications currently dominated by bulky gas l...

Next DLP announced a new Scoped Investigations capability in the Reveal platform that protects privacy by time bounding and restricting access to employee activity to only investigators with an approved and legitimate need to access it. A complementary pseudonymization feature redacts personally identifiable information (PII) so that security professionals can investigate potential incidents without seeing employee details. This prevents bias and protects employee privacy while permitting security professionals to get their jobs done. Organizations now More

The post Next DLP Scoped Investigations separates employee identity from their behavioral data appeared first on Help Net Security.

When IEEE Spectrums Editor in Chief Harry Goldstein needed to replace his 2008 Honda Fit in October 2020, he thought seriously about buying an electric vehicle. Two obstacles stood in his way. One was affordability. Even without a son soon to be entering college, the premium prices of EVs were a turn-off.

The other challenge was where to charge the EV. Harrys 200-unit condominium building in Minneapolis, Minnesota does not have any EV chargers in its 5-story indoor parking garage. There were two Level 2 charging stations about six-blocks away in a grocery store parking lot, but that was not a convenient or reliable option.

Harry decided to forego buying an EV but remains open to purchasing one if both the affordability and charging issues are better addressed.

I asked about installing charging stations in our garage and was invited to bring the issue up before the HOA (homeowners association) board, where all good ideas go to die, he said. They rejected my request to allow cyclists to hose off their bikes in the alley behind the building, which cost nothing. Considering the costs associated with installation and maintenance and anticipating the resistance Im likely to encounter, I decided to put my charger crusade on hold.

Harry is not alone in his EV hesitationit is widely shared by other condo owners and, even more importantly in terms of sheer numbers, renters. Consumer surveys from J.D. Power, for instance, indicate that while 27% of potential car shoppers are very likely to consider an EV as their next purchase, only 17% of renters indicate the same level of interest.

The transition to EVs in the U.S. will hit a deep pothole unless the more than one-third of the 124 million households that rent can be convinced to purchase an EV.

And if they make an EV purchase, they often regret it. For instance, the Minneapolis Star-Tribune...

Grizzled veterans of the computing industry will relate stories of submitting projects on stacks of punched cards, something those of us who stored their 8-bit works on audio cassettes could only imagine. But for those who fancy experimenting with the format its still possible to make a basic card reader using LEDs and light sensors, as [Nino Ivanov] has done using an Arduino Uno as the brains. And these arent just for show, each of his cards holds a LISP program that runs in a cloud service.

The Uno does the job of reading, passing its data over its USB serial port to a tablet. On the tablet the serial data is piped to a cloud API to a LISP interpreter. It seems a needlessly complex way to run a factorial program and its certainly a little over the top, but on the other hand we love it as a glorious combination of the old and the new. With only 23 characters per card its quite an impressive feat to even fit a program on the format, perhaps writing code to fit on minimalist punched cards like this could become a programming challenge in its own right for a generation accustomed to mega-and gigabytes.

If you fancy a go yourself, this isnt the first punched card reader weve shown you...

CYE announced a new capability in its Hyver platform that calculates dynamic risk in real-time. Hyver sets a new standard for the industry that will allow CISOs to take mitigation plans to the next level by optimizing real-time data to make both short-term and long-term decisions. Ultimately, Hyver helps CISOs make faster, more informed decisions, while they deal with budget concerns and strategic or tactical organizational decisions regarding security investments. Many companies today build their More

The post CYE Hyver enhancements empower organizations with real-time risk analysis module appeared first on Help Net Security.

Cymulate released a new solution for organizations to run an informed continuous threat exposure management (CTEM) program. The CTEM program, which was coined by Gartner is designed to diagnose the severity of exposures, create an action plan for remediation and facilitate a common language for discussions between business and technical teams. Disparate data sources, point-in-time collection, and lack of business context create challenges for cybersecurity teams to ingest and contextualize exposure data and translate it More

The post Cymulate Exposure Analytics provides users with an attackers view of their cyber resilience appeared first on Help Net Security.

IEEE Spectrum recently published a profile of Vint Cerf, who together with Bob Kahn developed what later became known as TCP/IP, the suite of protocols that power the Internet. That article didnt detail the events leading up to their influential technical collaboration, though. So IEEE Spectrum talked with Kahn to learn this part of the story and his conception of open-architecture networking.

Maybe we could start at the beginning of your professional career after you got your Ph.D. You started at BBN [Bolt, Beranek, and Newman], right?

Bob Kahn: I got my Ph.D. from Princeton in 1964 and took a job as an assistant professor at MIT in the electrical engineering department. I was there for a few years. In late 1966, I took a leave of absence (which I thought would be only for a year or two) to get some practical experience. I went to BBN. I started working on networking and ended up not going back to academia.

1966 was at the start of the conception of the ARPANET [the Advanced Research Projects Agency Network], was it not?

Kahn: Close. When I started working on computer networking, I had heard of ARPA, but I had never worked with them. I didnt know what they did. And I didnt even know that they were interested in networking at the time. As far as I was concerned, computer networking was just an idea that I thought was really interesting, especially the communication-network aspects. But there had been other people who had been interested in computer networking well before that.

There was a series of reports that Paul Baran wrote at the Rand Corporation on distributed communications. He was proposing that there be some kind of a network based on the use of discrete addressed message blocks, as he called themthe term packet hadnt been introduced yet.

At around the same time, Len (Leonard) Kleinrock was doi...

After that, those who have been waiting more than a decade for their ride aboard Virgin Galactics rocket-powered space plane are expected to get their chance. The company said the first of those flights will begin in early August, with monthly flights following that.

This next exciting chapter for Virgin Galactic has been driven by innovation, determination and a commitment to delivering an unparalleled and truly transformative customer experience, CEO Michael Colglazier said in a statement.

Virgin Galactic has been working for years to send paying passengers on short space trips and in 2021 finally won the federal governments approval. The company completed its final test fight in May.

NASA will partner with SpaceX to make Starship space stations. This is part of NASA partnering with seven U.S. companies to make advanced space capabilities. SpaceX is collaborating with NASA on an integrated low Earth orbit architecture to provide a growing portfolio of technology with near-term Dragon evolution and concurrent Starship development. This architecture includes Starship as a transportation and in-space low-Earth orbit destination element supported by Super Heavy, Dragon, and Starlink, and constituent capabilities including crew and cargo transportation, communications, and operational and ground support.

Making Giant Space Stations Using SpaceX Starships

Each Starship has more than the volume of the International Space Station. They are also similar in size to the external fuel tank of the old Space Shuttle. There were many space station proposals based upon the external fuel tank of the Space Station. It will be easier to build with SpaceX Starships. The steel construction the SpaceX Starship makes them easy to weld, cut and modify. The SpaceX Starships will start being able to support astronauts.

Orange Business, Orange Cyberdefense and Palo Alto Networks have joined forces to deliver a managed Secure Access Service Edge (SASE) solution that meets enterprise customers most demanding networking and security requirements with high performance, simplicity, and Zero Trust Network Access 2.0. The shift to working from anywhere, software-defined networking, and the rapid adoption of cloud connectivity is enabling global enterprises to drive new levels of productivity and efficiency. However, as they redesign their distributed network More

The post Orange Business, Orange Cyberdefense and Palo Alto Networks improve security for enterprises appeared first on Help Net Security.

This week my guest Anne Scherer, a professor of marketing at the University of Zurich who specializes in the psychological and societal impacts that result from the increased automation and digitization of the consumer-company relationship.

In this episode we focus on the details Anne covers in, You and AI, a book she co-authored with Cindry Candrian to bring an accessible understanding of the ways in which AI is shaping our lives. This takes on a tour of topics such as our symbiotic relationship with AI, manipulation, regulation, the proposed 6 month pause on AI development, the business advantages of better data policies around AI, the difference between artificial intelligence and human intelligence, and more.

Find out more about Anne and her book at annescherer.me.

Host: Steven Parton LinkedIn / Twitter

Music by: Amine el Filali.

Subscribe: http://bit.ly/1Wq6gwm.

Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. Heres a closer look at the conference featuring: Island, Crowdstrike, Panorays, ManageEngine, Mazebolt, Cobalt, Intruder, TikTok, and CensorNet.

The post Photos: Infosecurity Europe 2023 appeared first on Help Net Security.

Zyxel released security updates to address a critical vulnerability affecting its network-attached storage (NAS) devices.

Zyxel released security updates to address a critical security flaw, tracked as CVE-2023-27992 (CVSS score: 9.8), affecting its network-attached storage (NAS) devices.

The vulnerability is a pre-authentication command injection issue that impacts the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0. A remote, unauthenticated attacker can exploit the vulnerability to execute some operating system (OS) commands by sending a specially crafted HTTP request.

Zyxel has released patches addressing a pre-authentication command injection vulnerability in some NAS versions. reads the advisory published by Zyxel. The pre-authentication command injection vulnerability in some Zyxel NAS devices could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request,

The vulnerability was reported by Andrej Zaujec, NCSC-FI, and Maxim Suslov.

In early June, Zyxel published guidance for protecting firewall and VPN devices from the ongoing attacks and exploiting  CVE-2023-28771, CVE-2023-33009, and CVE-2023-33010 vulnerabilities.

Threat actors are actively attempting to exploit the command injection vulnerability  CVE-2023-28771 impacting Zyxel firewalls. Their objective is to leverage this vulnerability to deploy and install malware on the affected systems. US CISA added...

Finding the right conditions for life off the Earth justifiably drives many a researchers work, but nailing down just what might make the environment beneath an icy moons surface benign isnt easy. The recent wave of speculation about Enceladus revolves around the discovery of phosphorus, a key ingredient for the kind of life we are familiar with. But Alex Tolley speculates in the essay below that we really dont have a handle on what this discovery means. Theres a long way between habitable and inhabited, and many data points remain to be analyzed, most of which we have yet to collect. Can we gain the knowledge we need from a future Enceladus plume mission?

by Alex Tolley 

There has been abundant speculation about the possibility of life in the subsurface oceans of icy moons. Europas oceans with possible hydrothermal vents mimicking Earths abyssal oceans and the probable site of the origin of life, caught our attention now that Mars has no extant surface life. Arthur C Clarke had long suggested Europa as an inhabited moon in his novel 2010: Odyssey Two. (1982). While Europas hot vents are still speculative based on interpretations of the surface features of its icy crust, Saturns moon, Enceladus, showed visible aqueous plumes at the southern pole. These plumes ejected material that contributes to the E-Ring around Saturn as shown below.

While most searches for evidence for life focus on organic material, it has been noted that of the necessary elements for terrestrial life, Carbon, Hydrogen, Oxygen, Nitrogen, Sulfur, and Phosphorus (CHONSP), phosphorus is the least abundant cosmically. Phosphorus is a key component in terrestrial life, from energy management (ATP-ADP cycle) and information molecules DNA, and RNA, with their phosphorylated sugar backbones.

If phosphorus is absent, terrestrial biology cannot exist. Phosphorus is often the limiting factor for biomass on Earth, In freshwater environments phosphorus is the limiting nutrient [1]. Typically, algae require about 10x as much nitrogen as phosphorus. If the amount of available nitrogen is increased, th...

These days its hard to imagine that fabrics were ever made out of anything other than cotton or synthetic fibers, yet it wasnt too long ago that hemp and flax-based fabrics linen were the rule rather than the exception. Cotton production has for centuries had the major disadvantages of requiring a lot of water and pesticides, and harvesting the cotton was very labor-intensive, making cotton rather expensive. In order to make separating the cotton fibers from the seed easier, improved versions of the cotton gin (cotton engine) were developed, with the 19th centurys industrial revolution enabling a fully automated version.

What makes cotton attractive is the ease of processing these fibers, which are part of the seed pod. These fibers are 25 mm 60 mm long, 12 m 45 m fine fibers that can be pulled off the seeds and spun into yarn or whatever else is needed for the final product, much like wool. Hemp and flax fibers, in contrast, are extracted from the plant stem in the form of bast fibers. Rather being pure cellulose, these fibers are mostly a mixture of cellulose, lignin, hemicellulose and pectin, which provide the plant with rigid...

ExaGrid released software Version 6.3, which started shipping in June 2023. With each software update in Version 6, ExaGrid has been adding additional layers of security to its Tiered Backup Storage, which already guards against external threats by utilizing a non-network-facing repository tier (tiered air gap) with delayed deletes and immutable data objects where backup data is stored for longer-term retention that cannot be accessed by threat actors and cannot be modified by malicious attacks. More

The post ExaGrid Version 6.3 guards customers against external threats appeared first on Help Net Security.

Black Kite released automated cyber risk quantification (CRQ) modeling for ransomware and business interruption scenarios. The new capabilities, which automates FAIR methodology, extends Black Kites data breach CRQ model to now provide visibility into all third-party risk scenarios, adds environmental, social, and corporate governance (ESG) factors and makes it possible to continuously monitor supply chain risk. Cyber risk quantification provides deeper and more useful insights than a mere security score or rating. Yet, getting it More

The post Black Kite releases two modeling solutions for ransomware and business interruption scenarios appeared first on Help Net Security.

Another feature scheduled to be sent in for the upcoming Linux 6.5 kernel merge window is introducing support for provisioning primitives for thinly provisioned storage with the Device Mapper (DM) code...

The Rust project has announced the formation of the Rust Leadership Council, which will take the place of the existing Core Team and Leadership Chat groups.

The Council will assume responsibility for top-level governance concerns while most of the responsibilities of the Rust Project (such as maintenance of the compiler and core tooling, evolution of the language and standard libraries, administration of infrastructure, etc.) remain with the nine top level teams.

The details on how this body is supposed to work can be found in RFC 3392.

Edgescan released its new External Attack Surface Management solution, offering visibility and continuous monitoring to help secure organizations of all sizes. Todays enterprises require a cloud-savvy security solution that effectively inventories, monitors, manages and protects their corporate assets across their digital footprint. Traditional ad hock approaches and laborious, manual processes, combined with legacy tools make the process complex, expensive, and false positive prone due to human error. An essential way to gain complete visibility and More

The post Edgescan EASM allows organizations to secure their critical assets and applications appeared first on Help Net Security.

upstart writes:

AI is going to eat itself: Experiment shows people training bots are using bots

Workers hired via crowdsource services like Amazon Mechanical Turk are using large language models to complete their tasks which could have negative knock-on effects on AI models in the future.

Data is critical to AI. Developers need clean, high-quality datasets to build machine learning systems that are accurate and reliable. Compiling valuable, top-notch data, however, can be tedious. Companies often turn to third party platforms such as Amazon Mechanical Turk to instruct pools of cheap workers to perform repetitive tasks such as labeling objects, describing situations, transcribing passages, and annotating text.

Their output can be cleaned up and fed into a model to train it to reproduce that work on a much larger, automated scale.

AI models are thus built on the backs of human labor: people toiling away, providing mountains of training examples for AI systems that corporations can use to make billions of dollars.

But an experiment conducted by researchers at the cole polytechnique fdrale de Lausanne (EPFL) in Switzerland has concluded that these crowdsourced workers are using AI systems such as OpenAI's chatbot ChatGPT to perform odd jobs online.

Training a model on its own output is not recommended. We could see AI models being trained on data generated not by people, but by other AI models perhaps even the same models. That could lead to disastrous output quality, more bias, and other unwanted effects.

Read more of this story at SoylentNews.

Security updates have been issued by Debian (libxpm and php7.3), Fedora (chromium), Mageia (kernel, kernel-linus, and sysstat), Red Hat (c-ares), SUSE (libwebp), and Ubuntu (cups-filters, libjettison-java, and libsvgpp-dev).

The Land Unknown by Gary Panter (170x261mm)

This book was published (in France, but in English) in 2011, and Ive somehow never seen a copy before. I happened onto this one in the 50 Watts Books store, but I see that its still available from the publisher here, and for just 15. So its (still, 12 years later) generally available, and Im rather puzzled that I didnt happen onto a copy back when I was doing the Punk Comix blog series.

So lets take a look at the book.

Its about 120 pages long, and is on matte stock, and is mostly printed in colour....

The field of photonics has seen significant advances during the past decades, to the point where it is now an integral part of high-speed, international communications. For general processing photonics is currently less common, but is the subject of significant research. Unlike most photonic circuits which are formed using patterns etched into semiconductor mask using lithography, purely light-based circuits are a tantalizing possibility. This is the focus of a recent paper (press release, ResearchGate) in Nature Photonics by [Tianwei Wu] and colleagues at the University of Pennsylvania.

What is somewhat puzzling is that despite the lofty claims of this being the first time that such an FPGA-like device has been created for photonics, this is far from the case, as evidenced by e.g. a 2017 paper by [Kaichen Dong] and colleagues (full article PDF) in Advanced Materials. Here the researchers used a slab of vanadium dioxide (VO₂) with a laser to heat sections to above 68 C where the material transitions from an insulating to a metallic phase and remains that way until the temperature is lowered again. The m-sized features that can be created in this manner allow for a wide range of photonic devices to be created.

What does appear to be different with the photonic system presented by [Wu] et al. is that it uses a more traditional 2D approach, with a slab of InGaAsP on which the laser pattern is projected. Whether it is more versatile than other approaches remains to be seen, with the use of fully photonic processors in our computers still a long while off, never mind photonics-accelerated machine learning applications.

Spacecraft Juno has been orbiting Jupiter for years sending back images. NASA shares the images online. Take a look at what one person discover on an image.

A quartet of chemists at the University of Oxford has, for the first time, found a way to get two beryllium atoms to bond with one another. In their paper published in the journal Science, Josef Boronski, Agamemnon Crumpton, Lewis Wales and Simon Aldridge, describe their process and how they managed to do it in a safe wayand at room temperature. Jason Dutton with La Trobe University, has published a Perspective piece in the same journal issue, outlining the work done by the team in England.

Beryllium is a strong but lightweight, alkaline earth metal. It is also brittle.

Beryllium only ever occurs naturally when mixed with other elements, forming minerals. It is often found in gemstones such as emeralds. And it is used in a variety of applications, from telecommunications equipment to computers and cell phones. It is also mixed with other metals to create alloys used in applications such as gyroscopes and electrical contacts.

The European Space Agency (ESA) launched the BepiColombo mission in 2018, and it is set to enter orbit around Mercury in 2025. In the meantime, it will be making several flybys of the planet, including a close approach today. Thats because the spacecrafts route takes it on a series of increasingly close flybys that use the planets gravity to adjust its course each time.

In total, between its launch in 2020 and its arrival in Mercury orbit in 2025, the spacecraft will make one flyby of Earth, two of Venus, and six of Mercury. The Earth and Venus flybys are already complete, and today BepiColombo is making its third Mercury flyby, coming within 150 miles of the planets surface.

The maneuver will help to slow the spacecraft down so that it can eventually enter orbit. As BepiColombo starts feeling Mercurys gravitational pull, it will be traveling at 3.6 kilometers per second [2.2 miles per second] with respect to the planet. Thats just over half the speed it approached with during the previous two Mercury flybys, explained ESA flight dynamics expert Frank Budnik in a statement. And this is exactly what the point of such events is. Our spacecraft began with far too much energy because it launched from Earth and, like our planet, is orbiting the sun. To be captured by Mercury, we need to slow down, and were using the gravity of Earth, Venus and Mercury to do just that.

Exponential Organizations 2.0: The New Playbook for 10x Growth and Impact Kindle edition by Ismail, Salim, Diamandis, Peter H., Malone, Michael S., Kurzweil, Ray. Download it once and read it on your Kindle device, PC, phones or tablets. Use features like bookmarks, note taking and highlighting while reading Exponential Organizations 2.0: The New Playbook for 10x Growth and Impact.

Every day, tens of thousands of songs are released. This constant stream of options makes it difficult for streaming services and radio stations to choose which songs to add to playlists. To find the ones that will resonate with a large audience, these services have used human listeners and artificial intelligence. This approach, however, lingering at a 50% accuracy rate, does not reliably predict if songs will become hits.

Now, researchers in the US have used a comprehensive machine learning technique applied to brain responses and were able to predict hit songs with 97% accuracy.

By applying machine learning to neurophysiologic data, we could almost perfectly identify hit songs, said Paul Zak, a professor at Claremont Graduate University and senior author of the study published in Frontiers in Artificial Intelligence. That the neural activity of 33 people can predict if millions of others listened to new songs is quite amazing. Nothing close to this accuracy has ever been shown before.

Gravitational waves, like the discovery of the Higgs boson in 2012, have made their mark on a decade of extraordinary discoveries in physics. Unlike gravity, which is created when massive objects leave their mark in the fabric of spacetime, gravitational waves are very weak ripples in spacetime that are caused by gravity-accelerated masses.

So far, researchers have been able to detect the gravitational waves produced by the melting together of very heavy objects, such as black holes or neutron stars. When this happens, these echoes from the past reverberate through the whole universe and finally reach Earth, allowing us to piece together what happened millions of light-years ago.

Current gravitational-wave observatories can only detect a few gravitational waves as they cover just a narrow spectrum of the whole range of wavelengths that are emitted. Future gravitational-wave observatories, such as the Einstein Telescope, a CERN-recognized experiment, need to be larger in order to search for a larger bandwidth of gravitational waves that could tell us more about the universe.

By Deeba Ahmed

The hackers from the infamous BlackCat ransomware gang (also known as ALPHV) have claimed to have stolen 80GB of data from Reddit.

This is a post from HackRead.com Read the original post: The Reddit Files: Hackers Demand $4.5M Ransom and API Access Waiver

Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems. Tracked as CVE-2023-27992 (CVSS score: 9.8), the issue has been described as a pre-authentication command injection vulnerability. "The pre-authentication command injection vulnerability in some Zyxel

The upcoming Linux 6.5 kernel is poised to add support for Qualcomm's Adreno 690 GPU to the open-source MSM kernel graphics/display driver. The A690 is notably used by the Snapdragon 8cx Gen 3 (SC8280XP) platform that in turn is what's found inside the Lenovo ThinkPad X13s laptop and other hardware...

Summary: Online bullying in social control media and even in IRC (our network has been trolled a lot lately) is a serious issue; to make matters worse, the CoC system has been weaponised by trolls to silence and intimidate critics of unethical corporations (habitually employing those trolls on 6-digit if not 7-figure salaries)

MORE than 3 years ago we cautioned that the Linux Foundation's Linux Kernel Code of Conduct (CoC) Committee had become "Officially Corporate". Its all about one thing: censorship. Who for? Check the members of the Code of Conduct (CoC) Committee. Theyre the cops, not to mention the judge, the witness, and the jury (the phrase is often judge, jury, executioner; but theyre also the cops/vigilante on the scene). Theyd also process the appeals if any are registered. This is lynching, not a system of justice, and salaries peripheral to the role govern who is punished and what for. Those committees arent full-time jobs. Theyre for corporate lynch mobs to crucify communities.

What the Linux Foundation does with CoCs is still relevant, albeit buried under Easter holidays (because its embarrassing; people file complaints for insulting companies)If the so-called Linux Foundation wants not to be seen as a "Microsoft proxy" anymore, then the answer is simple: just quit being a Microsoft proxy like the Open Source Initiative (OSI) still is. It should be noted that the OSI never quit being a Microsoft proxy. More time passes and the OSI falls deeper and deeper into Microsofts hands, just like the Linux Foundation. Friend brings a friend, mole brings another mole. Shooting the messenger tactics wont help when the message is factual and clearly demonstrable, based on hard evidence; for instance, beware trolls saying/insinuating/alleging that someone is sexist and pro-rape (or choosing moles who are female so that critics...

The Quick Serve Restaurant (QSR) industry is built on consistency and shared resources. National chains like McDonald's and regional ones like Cracker Barrel grow faster by reusing the same business model, decor, and menu, with little change from one location to the next.  QSR technology stacks mirror the consistency of the front end of each store. Despite each franchise being independently

A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer. "The operation was active for more than a year with the end goal of compromising credentials and data exfiltration," Bitdefender security researcher Victor Vrabie said in a technical report shared with The Hacker News. Evidence gathered by the Romanian

Silobreaker announced that it will be showcasing its enhanced geopolitical threat intelligence capabilities with RANE (Risk Assistance Network + Exchange) at Infosecurity Europe 2023. The tie-up will see Silobreaker integrate global risk intelligence company RANEs Enterprise Geopolitical Intelligence into its own threat intelligence platform, providing cyber threat intelligence (CTI) teams with real-time information about world events that could heighten the risk of cyberattacks. With the addition of RANEs geopolitical threat intelligence, analysis and forecasting capabilities, More

The post Silobreaker unveils new geopolitical threat intelligence capabilities With RANE appeared first on Help Net Security.

By Deeba Ahmed

Threat actors have been taking over abandoned S3 buckets to launch malicious binaries, steal login credentials and more.

This is a post from HackRead.com Read the original post: Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads

Netskope has released a comprehensive data protection solution to help enterprises securely manage employee use of ChatGPT and other generative AI applications, such as Google Bard and Jasper. As part of its Intelligent Security Service Edge (SSE) platform, Netskope enables safe usage of generative AI thanks to patented data protection techniques. Following incidents in 2023 of sensitive data exposure from generative AI, many enterprises are now prioritising if and how to safely enable the use More

The post Netskope Intelligent SSE helps enterprises securely manage employee use of generative AI apps appeared first on Help Net Security.

Read "Pharmacological and non-pharmacological countermeasures to Space Motion Sickness: a systematic review" coauthored by our Barry L. Bentley along with researchers at NASA and ISRO.

GPS is a handy modern gadget until you go inside, underground, or underwater. Japanese researchers want to build a GPS-like system with a twist. It uses cosmic ray muons, which can easily penetrate buildings to create high-precision navigation systems. You can read about it in their recent paper. The technology goes by MUWNS or wireless muometric navigation system quite a mouthful.

With GPS, satellites with well-known positions beam a signal that allows location determination. However, those signals are relatively weak radio waves. In this new technique, the reference points are also placed in well-understood positions, but instead of sending a signal, they detect cosmic rays and relay information about what it detects to receivers.

The receivers also pick up cosmic rays, and by determining the differences in detection, very precise navigation is possible. Like GPS, you need a well-synchronized clock and a way for the reference receivers to communicate with the receiver.

Muons penetrate deeper than other particles because of their greater mass. Cosmic rays form secondary muons in the atmosphere. About 10,000 muons reach every square meter of our planet at any minute. In reality, the cosmic ray impacts atoms in the atmosphere and creates pions which decay rapidly into muons. The muon lifetime is short, but time dilation means that a short life traveling at 99% of the speed of light seems much longer on Earth and this allows them to reach deep un...

In an interview with As It Happens with Nil Kksal, Chris Howden on CBC Radio, Citizen Lab Director Ron Deibert discussed Jamal Khashoggis widow Hanan Elatars lawsuit against Israeli spyware company NSO. Hanan Elatr Khashoggi claimed in a civil lawsuit lodged with the Northern District of Virginia that NSO intentionally targeted her devices and caused her immense harm, both through the tragic loss of her husband and through her own loss of safety, privacy, and autonomy.

Ron explains how Citizen Lab learned that Hanans device had spyware installed on it: Someone typed in a website that was used to install Pegasus when her phone was not in her possession when Hanan was interrogated at the Dubai airport and the phone communicated several times with a server that is part of the NSO infrastructure, he said. When trusted devices become an enemy, Ron notes that it has a psychological and emotional toll on victims and some of the victims carry a huge amount of emotional guilt, illuminating the psychological cost of spyware. 

Speaking about how the US executive order has altered cybersecurity and what needs to be done more, he says, Executive order is a big deal and prohibits US federal agencies from purchasing spyware that presents a national security risk or is involved in human rights abuses. Countries like Canada and others  should follow suit.

Data-centric distributed resilience (DDR) offers a compelling approach to addressing data sovereignty in cybersecurity.

As much of our modern life relies upon the cloud, the question of data protection is front of mind for many organizations. Those who fail to take a proactive approach to secure their data often learn the hard way how vulnerable and valuable that data can be.

Data sovereignty plays a crucial role in a robust security strategy. Organizations must hope for the best yet plan for the worst, keeping their data, end users, and company safe from intruders as cybersecurity threats are on the rise.

Understanding Data Sovereignty

Data sovereignty has emerged as a critical concern for businesses worldwide in todays interconnected digital landscape. When data is sovereign, an organization retains control and ownership over that data. Data sovereignty also encompasses the rights and regulations governing data storage, processing, and transfer and often intersects with privacy, security, and legal considerations.

Various data sovereignty challenges arise for many businesses, such as cross-border data transfers, compliance with differing data protection laws, and protecting sensitive information from unauthorized access. These challenges are intensified in industries that handle large volumes of sensitive data under stringent regulations, such as financial services, healthcare, and government sectors.

Understanding the nuances of data sovereignty is crucial for organizations to effectively address cybersecurity concerns, protect sensitive information, and ensure compliance with relevant regulations. By recognizing the significance of data sovereignty, businesses can take measures to enhance data security and control, mitigating these risks.

About DDR (Data-centric Distributed Resilience)

Data-centric distributed resilience (DDR) offers a compelling approach to addressing data sovereignty in cybersecurity. At its core, DDR emphasizes the protection and control of data itself, regardless of its physical location or the infrastructure supporting it.

Unlike traditional approaches that focus solely on securing the perimeter, DDR places data at the center of the security strategy. It employs encryption, tokenization, and data masking to ensure that sensitive information remains protected throughout its lifecycle, both in transit and...

As another feature on the way for the upcoming Linux 6.5 kernel cycle is the large extent counts feature of the XFS file-system no longer being treated as "experimental" but is now considered safe to deploy...

Patches being queued ahead of the upcoming Linux 6.5 kernel merge window prepare initial support for DEXCR that is found in recent Power ISA specifications...

CPU microcode updates are commonly done in the name of security fixes and resolving functionality issues.. In recent years, CPU microcode updates have been a much more common -- and important -- occurrence. While all modern CPUs rely on microcode it's just a minority" of users are unhappy with CPU microcode being included in Libreboot ROMs. Thus moving forward there will be alternative builds of Libreboot for different motherboards with the CPU microcode stripped out in the name of software freedom...

Front page story a few moments ago:

Summary: Rupert Murdochs media empire keeps promoting TikTok trash [1, 2] every single day this year (New York Post does about 2 stories based on TikTok per day sometimes a lot more and the above is a new example); we need to get people focused on information, not gossip and tabloid trash; society is paralysed when people reject journalism, stuck in outage cycles that are manufactured by the rich (averting class issues while billionaires pander to woke/non-woke, i.e. culture wars and mutually-harmful infighting)

This shown-below page like their Web site in general also stopped being a Web page; its a JavaScript app now, instead (they dont care about accessibility or disabled people, but they say DEI a lot):

Summary: The Linux Foundation is gradually becoming a shadow of Microsoft, just like the Open Source Initiative, where most of the money comes from Microsoft and the official blog promotes Microsoft, its proprietary software, and Microsofts side in a class action lawsuit over GPL violations (with 9 billion dollars in damages at stake). So it all started with one Board member after the Microsoft loves Linux PR charade (money passed to Jim Zemlin, who gives talks at Microsoft and is married to Microsoft^*); then it became two (more money paid for the second seat; the Linux Foundation openly advertises that Board seats are up for sale with upper bound of 2) and now its three through the loophole (subsidiary to evade membership limits being exceeded, just like at the OSI and Redmonk). Its like a completely covert takeover in slow motion and the AT-LARGE DIRECTOR is also a Microsoft employee (all 3 are female, so talking about this hostile act of entryism will get baited as being sexist^**); Mr. Mason is no longer there, so no geeks or Linux developers left in the Board (its just suits and corporate actors). As a reminder, Microsoft is also in the Technical Advisory Board of the Linux Foundation and its current Bo...

Also available via the Gemini protocol at:

• gemini://gemini.techrights.org/irc-gmi/irc-log-techrights-190623.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-190623.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-social-190623.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-techbytes-190623.gmi

Over HTTP:

Taiwanese company ASUS on Monday released firmware updates to address, among other issues, nine security bugs impacting a wide range of router models. Of the nine security flaws, two are rated Critical and six are rated High in severity. One vulnerability is currently awaiting analysis. The list of impacted products are GT6, GT-AXE16000, GT-AX11000 PRO, GT-AXE11000, GT-AX6000, GT-AX11000,

fliptop writes:

MSI's latest PSU series aims to mitigate user error with one minor change:

MSI has launched its MAG GL power supplies, showcased at Computex 2023. These new power supplies are PCIe 5.0 compatible and are compliant with the ATX 3.0 standard. In addition to meeting new spec guidelines, they have the bonus of featuring yellow pin connectors on both ends of the cable. The idea behind the subtle change is to make it easier for users to see whether or not the cable is completely inserted, preventing a few common hardware failures, such as the 16-pin connector meltdowns on the GeForce RTX 4090, one of the best graphics cards.

According to MSI, users frequently reported problems with burnt power supply connectors when using them with newer high-end GPUs. Upon investigation, the team realized one of the most common causes of this issue was improperly connected cables. With the new yellow pin connectors, users can easily see whether or not the cable has been fully inserted when assembling their PC.

The new MAG GL series PSUs are designed to handle Nvidia GeForce RTX 40-series graphics cards. They are also compatible with Intel's Power Supply Design Guide (PSDG) ATX 3.0 standard. This support only waivers when the power supply isn't correctly installed, which is always necessary, especially given the latest hardware demands.

Previously: Another 16-pin RTX 4090 Power Adapter Has Melted, but From the PSU Side This Time

Original Submission

Read more of this story at SoylentNews.

Over 101,100 compromised OpenAI ChatGPT account credentials have found their way on illicit dark web marketplaces between June 2022 and May 2023, with India alone accounting for 12,632 stolen credentials. The credentials were discovered within information stealer logs made available for sale on the cybercrime underground, Group-IB said in a report shared with The Hacker News. "The number of

The field of photonics has seen significant advances during the past decades, to the point where it is now an integral part of high-speed, international communications. For general processing photonics is currently less common, but is the subject of significant research. Unlike most photonic circuits which are formed using patterns etched into semiconductor mask using lithography, purely light-based circuits are a tantalizing possibility. This is the focus of a recent paper (press release, ResearchGate) in Nature Photonics by [Tianwei Wu] and colleagues at the University of Pennsylvania.

What is somewhat puzzling is that despite the lofty claims of this being the first time that such an FPGA-like device has been created for photonics, this is far from the case, as evidenced by e.g. a...

Summary: People who used the Internet before are still on the Internet but not necessarily on the Web; weve seen growth in the number of Gemini users (this month has been the best so far) and if more people reject apps not the same as HTTP/S perhaps we can move technology in a healthier direction

FOR those who dont pay much attention to Internet gossip, Reddit is in trouble and its CEO is spamming people (via E-mail) together with NPR, trying hard to control the narrative/story about whats happening. Yesterday he was linked to Musk, which is a total disaster. In addition, this past week there were stories such as these:

• Reddit Blackouts Impact Music Communities Online CEO Not Backing Down

• Reddit Blackuut: What, Why and How It is Impacting Users

• Reddit: users boycott to force platform to scrap plans to charge for access, company wont budge

• The Reddit Protest Is a Battle for the Soul of the Human Internet

Yesterday in IRC Alexei said, Both Steve Huffman and Elon Musk must be reaffirmed by Volodymyr Saldo when he was in Nova Kakhovka standing next to a flooded theatre and saying on camera that people are walking, driving and working just fine. Saldo was filmed on June 6th of course.

Are some more Reddit clones on their way? Based on Gemini protocol alone?From what we can gather, Reddit will never be the same again. Many users, not only moderators (slaves/volunteer staff) left permanently. Some of them ended up in Gemini. They say so themselves. There are some hello world posts.

Is the collapse of Reddit helping Gemini grow so much faster this month?...