UK outlaws awful default passwords on connected devices
If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password "password." In fact, you're not supposed to have default passwords at all. A new version of the 2022 Product Security and Telecommunications Infrastructure Act (PTSI) is now in effect, covering just about everything that a consumer can buy that connects to the web. Und
How Google Authenticator made one company’s network breach much, much worse
A security company is calling out a feature in Google’s authenticator app that it says made a recent internal network breach much worse. Retool, which helps customers secure their software development platforms, made the criticism on Wednesday in a post disclosing a compromise of its customer support system. The breach gave the attackers responsible access to the accounts of 27 customers, all in t
Spotify reportedly in “advanced stages” of acquiring podcast company for $230M
Multiple outlets, citing unnamed sources, reported on Friday that Spotify is in the "advanced stages" of acquiring a leading podcast production company. The rumored deal is no slouch: $230 million to acquire Gimlet Media, the company responsible for highly trafficked podcasts such as Reply All, Science Vs., and StartUp. Recode and The Wall Street Journal each reported a Gimlet bid from Spotify in
How 10 leading companies are trying to make powerful, low-cost lidar
Lidar, short for light radar, is a crucial enabling technology for self-driving cars. The sensors provide a three-dimensional point cloud of a car's surroundings, and the concept helped teams win the DARPA Urban Challenge back in 2007. Lidar systems have been standard on self-driving cars ever since. In recent years, dozens of lidar startups have been created to challenge industry leader Velodyne.
Facebook VPN that snoops on users is pulled from Android store
Facebook has pulled its privacy-invading Onavo Protect VPN app off the Google Play store and will reportedly stop gobbling up data from users who still have the app on their devices. Facebook "will immediately cease pulling in data from [Onavo] users for market research though it will continue operating as a Virtual Private Network in the short term to allow users to find a replacement," TechCrunc
Supermicro hardware weaknesses let researchers backdoor an IBM cloud server
More than five years have passed since researchers warned of the serious security risks that a widely used administrative tool poses to servers used for some of the most sensitive and mission-critical computing. Now, new research shows how baseboard management controllers, as the embedded hardware is called, threaten premium cloud services from IBM and possibly other providers. In short, BMCs are
Linux hard locks with AMD Ryzen 2500u VEGA Graphics - VMC page fault
Hello I have a Lenovo E585 laptop with AMD 2500u processor and Radeon VEGA graphics. I'm running the latest KDE Neon with mainline kernel 4.19.5 currently using the standard MESA drivers that come with the distro (version 18.0.5). Unfortunately, I keep experiencing random hard locks - they seem to be more likely when performing something graphically intensive but can occur when just using the desk
An AI crushed two human pros at StarCraft—but it wasn’t a fair fight
Enlarge / Two groups of Stalkers controlled by AI AlphaStar approach the army of Grzegorz "MaNa" Komincz in the decisive battle of the pair's fourth game. DeepMind, the AI startup Google acquired in 2014, is probably best known for creating the first AI to beat a world champion at Go. So what do you do after mastering one of the world's most challenging board games? You tackle a complex video game
Google Play malware used phones’ motion sensors to conceal itself
Malicious apps hosted in the Google Play market are trying a clever trick to avoid detection—they monitor the motion-sensor input of an infected device before installing a powerful banking trojan to make sure it doesn’t load on emulators researchers use to detect attacks. The thinking behind the monitoring is that sensors in real end-user devices will record motion as people use them. By contrast,
Monster 773 million-record breach list contains plaintext passwords
Have I Been Pwned, the breach notification service that serves as a bellwether for the security of login credentials, has just gotten its hands on its biggest data haul ever—a list that includes almost 773 million unique email addresses and 21 million unique passwords that were used to log in to third-party sites. According to Have I Been Pwned founder Troy Hunt in a post published Wednesday, the
EFF flips Bird the bird, says Boing Boing post doesn’t violate copyright law
Enlarge / People ride shared dockless electric scooters along Venice Beach on August 13, 2018 in Los Angeles, California. According to a new letter published Friday by an Electronic Frontier Foundation lawyer, the scooter startup Bird significantly overstepped when it recently demanded that Boing Boing remove a post describing personal "conversion kits" that enable the removal of Bird’s proprietar
“Ghost guns,” underage sex, and the First Amendment: Defense Distributed’s legal saga
Plenty has happened since Ars last took a moment to outline the legal mishegas involving Defense Distributed, its founder Cody Wilson, and the future of 3D-printed guns. After a surprising settlement with the Department of Justice in summer 2018 ended a five-year legal battle, Defense Distributed finally had the go-ahead to legally publish its 3D-printable firearms CAD files online. Wilson initial
Englanders’ greasy fish and chips blamed for 64-meter-long fatberg
Another view of the fatberg, which formed in Sidmouth's unusually large sewer under the waterfront. The quiet coastal town of Sidmouth, England is known to be flush with tourists each summer. But it may now be known for another accumulating mass—one that isn’t flushable. Authorities in Sidmouth have discovered a 64-meter-long hardened clump of grease, wet wipes, and sewage—an infamous fatberg—lurk
Man says CES lidar’s laser was so powerful it wrecked his $1,998 camera
A man attending this week's CES show in Las Vegas says that a lidar sensor from startup AEye has permanently damaged the sensor on his $1,998 Sony camera. Earlier this week, Jit Ray Chowdhury, an autonomous vehicle engineer at the startup Ridecell, snapped photos of a car at CES with AEye's lidar units on top. He discovered that every subsequent picture he took was marred by two bright purple spot
Hot new trading site leaked oodles of user data, including login tokens
The past few days have showered plenty of favorable attention on a new trading platform called DX.Exchange, with glowing profiles by Bloomberg News and CNBC. The only problem is that the site, which allows people to trade currencies and digitized versions of Apple, Tesla, and other stocks, has been leaking oodles of account login credentials and personal user information. A few days ago, an online
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
High-tech toilet seat monitors your heart as you sit on the can
Japanese utility makes first contact with melted Fukushima fuel
Apple pushes fix for “FacePalm,” possibly its creepiest vulnerability ever
Ars Technica turns 20 years old, and we couldn’t have done it without the community
“Mona Lisa effect” is real but doesn’t apply to Leonardo’s painting