NSA has a 50-page catalog of exploits for software, hardware, and firmware

A Snowden leak accompanying today’s story on the NSA’s Tailored Access Operations group (TAO) details the NSA’s toolbox of exploits , developed by an NSA group called ANT (Advanced or Access Network Technology). ANT’s catalog runs to 50 pages, and lists electronic break-in tools, wiretaps, and other spook toys. For example, the catalog offers FEEDTROUGH, an exploit kit for Juniper Networks’ firewalls; gimmicked monitor cables that leak video-signals; BIOS-based malware that compromises the computer even before the operating system is loaded; and compromised firmware for hard drives from Western Digital, Seagate, Maxtor and Samsung. Many of the exploited products are made by American companies, and hundreds of millions of everyday people are at risk from the unpatched vulnerabilities that the NSA has discovered in their products. The ANT division doesn’t just manufacture surveillance hardware. It also develops software for special tasks. The ANT developers have a clear preference for planting their malicious code in so-called BIOS, software located on a computer’s motherboard that is the first thing to load when a computer is turned on. This has a number of valuable advantages: an infected PC or server appears to be functioning normally, so the infection remains invisible to virus protection and other security programs. And even if the hard drive of an infected computer has been completely erased and a new operating system is installed, the ANT malware can continue to function and ensures that new spyware can once again be loaded onto what is presumed to be a clean computer. The ANT developers call this “Persistence” and believe this approach has provided them with the possibility of permanent access. Another program attacks the firmware in hard drives manufactured by Western Digital, Seagate, Maxtor and Samsung, all of which, with the exception of latter, are American companies. Here, too, it appears the US intelligence agency is compromising the technology and products of American companies. Shopping for Spy Gear: Catalog Advertises NSA Toolbox [Jacob Appelbaum, Judith Horchert and Christian Stöcker/Spiegel]        

Read the original post:
NSA has a 50-page catalog of exploits for software, hardware, and firmware

100-year-old negatives from the Ross Sea Party found in Antarctica

New Zealand’s Antarctic Heritage Trust has announced an exciting find: 22 never-before-seen cellulose nitrate negatives discovered inside Captain Robert Falcon Scott’s last expedition base at Cape Evans on Ross Island in Antarctica. Read more…        

Read this article:
100-year-old negatives from the Ross Sea Party found in Antarctica

Time Machines: Casio gets smart at CES 2000

Welcome to Time Machines , where we offer up a selection of mechanical oddities, milestone gadgets and unique inventions to test out your tech-history skills. In the week’s leading up to the biggest gadget show on Earth, we’ll be offering a special look at relics from CES’ past. Smart devices have infiltrated our outfits in many ways, but one in particular has been a staple of our ensembles for centuries. From pockets to wrists, its accessibility has also tempted inventors to add camera optics, dating as far back as the 1800s. Although we’ve refined these devices for years, advancements beyond timekeeping tend to come and go. Head past the break for more of the story. CASIO WQV-1 WRIST CAMERA There’s been a great deal of traction in the tech-enabled timepiece market lately, from the crowdfunded success of Pebble to the recent launch of Samsung’s Galaxy Gear . Not only can the latter connect wirelessly to select Samsung smartphones, but it can also take photos. And with snapshots becoming one of the main currencies in social media, camera-studded smart devices are on the rise. Thirteen years ago, Casio lead an early wave of wrist-worn camera tech with its launch of the WQV-1 Wrist Camera at the 2000 Winter Consumer Electronics Show (CES) in Las Vegas, but it wasn’t the first to consider such a hybrid. UK optics and photography company J. Lancaster & Son patented a telescoping camera that fit into a pocket watch-styled casing back in 1886. Although to fit the photo gear inside, they had to ditch the timekeeping tech entirely. It may have been good for secret selfies and clandestine snapshots, but not much else. Spin the clock ahead nearly a century to the 1970s and watches with LED displays like the Hamilton Pulsar P1 and Sinclair Black Watch began to pop up on the market. They had a futuristic look and backlit watch faces, but often suffered from poor battery life. During that same decade, the liquid crystal display (LCD) was also developed. It appeared in watches like the 1974 Casiotron, and converted electrical signals into illuminated digits that could display both time and date, and were typically more reliable in build quality than LEDs. By the time the ’80s rolled around, watches were getting significantly smarter with the addition of calculator functionality, but it wasn’t long before watches like the 1984 Seiko UC-2000 and its UC-2200 keyboard peripheral allowed users to do actual computing. By 1999, Samsung seemed to find inspiration in the tech-laden detective comic Dick Tracy and introduced its SPH-WP10, a CDMA-based watch that offered wireless phone functionality in a wrist-worn form factor. When Casio released its WQV-1 Wrist Camera, it stepped up the gimmick game. It even hedged its bets and launched more than one unique watch at CES that year. Alongside the Wrist Camera, it also showed off its MP3 watch called the WMP-1V, which had a headphone jack so users could get their groove on and tell the time. The WQV-1 Wrist Camera captured snapshots through a lens located just above the timepiece (facing away from the wearer). Images were perhaps best viewed on its 120 x 120 display due to the low image resolution (around 0.03 megapixel). Photos could be taken using three modes: Normal, a 16-shade grayscale monochrome; Art, two-tone only; and Merge, which combined two photos into a single shot. The photos could be exported as BMP or JPEG files, but you’d need a PC running Windows, as well as Casio’s proprietary infrared adapter and Link software. If you had a friend with a Wrist Camera, you could also beam photos directly to their watch. The 1MB of built-in storage could only hold about 100 images, but the monochromatic output and limited resolution likely didn’t provide many “keepers.” Although the technology was still young, it was an iterative step forward in consumer wearables and as the years passed, other watch-based devices popped up — with varied results. Around the same time as the WQV-1 launch, IBM teamed up with Citizen and Tokyo Research Lab to work on its Linux-based WatchPad 1.5 , exploring the possibilities of high-functioning, wrist-worn computers, but it failed to go beyond the prototype phase. In 2004, Microsoft’s Smart Personal Objects Technology (SPOT) started arriving on watches to deliver MSN Direct services over FM airwaves, only to be discontinued in 2008 (followed by the MSN Direct service itself in 2012). The camera didn’t make a splash in the market again until this year, when Samsung launched the Galaxy Gear smartwatch. It’s an ambitious device, aiming to outdo the relatively simplistic functions of the popular Pebble by adding a full-color touchscreen and a 1.9-megapixel camera. Although watches have bigger brains than ever, the ones that have made it to market often fail to gain enduring success and many seem to rely heavily on companion devices for any significant functionality. If wrist-worn form factors continue to come up short in the camera department, snapshot addicts may have to look elsewhere for photographic convenience. Filed under: Science , Alt Comments

Link:
Time Machines: Casio gets smart at CES 2000

Convicted Spammer Jeffrey Killbride Flees Prison

An anonymous reader writes with this news from California: “According to the article, ‘Officials at the Federal Bureau of Prisons say an inmate escaped from a minimum security area of the federal prison in Lompoc. Prison officials say Jeffrey Kilbride, 48, was discovered missing at around 1:30 p.m. on Friday….A search is reportedly underway. Prison officials say Kilbride was serving a 78-month sentence for conspiracy and fraud. He was due to be released on December 11, 2015.'” Here’s why Killbride was in prison. Read more of this story at Slashdot.

Read the original post:
Convicted Spammer Jeffrey Killbride Flees Prison

Sorry, Astronauts: It’s Impossible to Fry Food in Zero G

Astronauts have hard jobs. And like anyone with hard jobs, they deserve some french fries and a nice, deep-fried turkey after work. Don’t we all? But there’s bad news. According to a new study, it’s impossible to fry food in zero g . Nooooooooooo! Read more…        

Read the article:
Sorry, Astronauts: It’s Impossible to Fry Food in Zero G

How the Dark Lord of the Internet Made His Fortunes

theodp writes “Over at The Atlantic, Taylor Clark’s epic Jesse Willms, the Dark Lord of the Internet tells the tale of how one of the most notorious alleged hustlers in the history of e-commerce made a fortune on the Web. ‘Accusing Willms of being a scammer, ‘ Clark writes, ‘does him a disservice; what he accomplished elicits something close to awe, even among his critics.’ The classic themes Willms’ company employed in ‘sponsored’ links for products that included colon cleansers, teeth whiteners, and acai supplements, Clark reports, included dubious scientific claims and fake articles (‘farticles’); implied endorsements from celebrities and TV networks; incredible ‘testimonials”; manipulative plays on insecurities (‘You wouldn’t have to worry about being the ‘fat bridesmaid’ at your sister’s wedding!’); and ‘iron-clad’ guarantees that ‘free trials’ of the products were absolutely ‘risk free.’ But beneath his promises of a ‘free trial, ‘ the FTC alleged, Willms buried an assortment of charges in the fine print of his terms and conditions. After the 14-day trial period for each product, customers automatically became enrolled in monthly subscription plans, for up to $80 a month. ‘The product was never the point, ‘ explained an FTC attorney. ‘The point was to get as many hits on each credit card as you could.’ Despite a publicized $359 million settlement with the FTC, Jesse Willms is doing just fine financially-and he has a new yellow Lamborghini to prove it. After settling his tax debts, Willms surrendered his assets of just $991, 000 to get the financial judgment suspended. Willms has left diet products behind and pivoted into information services. ‘As of November, ‘ Clark notes, ‘if you searched vehicle history on Google, Yahoo, or Bing, ads for Willms’s sites were among the first things you would see.'” Read more of this story at Slashdot.

See the article here:
How the Dark Lord of the Internet Made His Fortunes

CSI Style Zoom Sees Faces Reflected In Subjects’ Eyes

mikejuk writes “A recent paper by Dr Rob Jenkins of the Department of Psychology at York University (UK) has managed to prove that you can get useful images of faces from the reflections in eyes. It really is as simple as zooming in. The catch is that the experiments were done with a 39 mega pixel camera — even so the actual final images were low resolution. In the experiment a number of people were photographed with a ‘bystander’ in a position so that a reflection of their face would be captured in the eye. The resulting extracted image of the reflection in the eye was only 27×36 and then rescaled using bicubic interpolation to 400×240 or bigger and enhanced using standard PhotoShop operations to normalize the contrast and brightness. Test subjects were able to match faces using the low resolution images but the important result was that if the subject knew the person in the photo then recognition went up to 90% with false positives down at 10%. So the next time you appear in a photo consider the fact that a simple procedure might reveal who you are with.” Read more of this story at Slashdot.

Link:
CSI Style Zoom Sees Faces Reflected In Subjects’ Eyes

Sherlock and co are finally in the public domain

Patrick writes, “After more than 125 years and countless crappy incarnations on film, A federal judge has issued a declarative judgment stating that Holmes, Watson, 221B Baker Street, the dastardly Professor Moriarty and other elements included in the 50 Holmes works Arthur Conan Doyle published before Jan. 1, 1923, are no longer covered by United States copyright law and can be freely used by creators without paying any licensing fee to the Conan Doyle estate.” The estate are notorious bullies, and have relied upon bizarre legal theories to extract funds from people who use the Sherlock canon characters in new works, even though those characters come from stories that are largely in the public domain. “They’ve heard about the way the estate is going around bullying people,” said Darlene Cypser, a lawyer in Denver and the author of a self-published trilogy about the young Holmes, for which the estate initially demanded a licensing fee. (She declined to pay, she said.) “This has been coming for some time. I’m glad Les decided to take it up.” Several other authors and publishers of Holmes-based work reported receiving somewhat friendlier versions of a threatening letter cited in Mr. Klinger’s complaint. In the letter Mr. Lellenberg suggested that the estate regularly worked with “Amazon, Barnes & Noble, and similar retailers” to “weed out unlicensed uses of Sherlock Holmes,” and would not hesitate to do so with Mr. Klinger’s volume as well. Mr. Klinger did pay a fee for a similar collection in 2011 at the insistence of his earlier publisher, but this time said he is calling the estate’s bluff. “It’s the ultimate case of the emperor having no clothes,” said Jonathan Kirsch, a publishing lawyer who represents him. “Everyone is making the decision to pay for permission they don’t need to avoid the costs and risks of litigation.” Suit Says Sherlock Belongs to the Ages [Jennifer Schuessler/NYT] ( Thanks, Patrick ! ) ( Image: A Study in Scarlet (Beeton’s Christmas Annual) , a Creative Commons Attribution Share-Alike (2.0) image from 43021516@N06’s photostream )        

Follow this link:
Sherlock and co are finally in the public domain

Utility companies go to war against solar

Utility companies across America are fighting solar , imposing high fees on homeowners who install their own solar panels to feed back into the grid. This one was predictable from a long, long way out — energy companies being that special horror-burrito made from a core of hot, chewy greed wrapped in a fluffy blanket of regulatory protection, fixed in their belief that they have the right to profit from all power used, whether or not their supply it. Bruce Sterling once proposed that Americans should be encouraged to drive much larger trucks, big enough to house monster fuel-cells that are kept supplied with hydrogen by decentralized windmill and solar installations — when they are receiving more power than is immediately needed, they use the surplus to electrolyze water and store the hydrogen in any handy nearby monster-trucks’ cells. When the wind isn’t blowing or the sun isn’t shining, you just plug your house into your enormous American-Dream-mobile — no need for a two-way grid. This solution wasn’t just great because it aligned the core American value of driving really large cars with environmental protection, but also because it was less vulnerable to sabotage from hydrocarbon-addicted energy companies. HECO, despite criticism from Hawaii’s solar industry, denies the moratorium is anything more than an honest effort to address the technical challenges of integrating the solar flooding onto its grid. The slowdown comes in a state where 9 percent of the utility’s residential customers on Oahu are already generating most of their power from the sun and where connections have doubled yearly since 2008. In California, where solar already powers the equivalent of 626,000 homes, utilities continue to aggressively push for grid fees that would add about $120 a year to rooftop users’ bills and, solar advocates say, slow down solar adoptions. Similar skirmishes have broken out in as many as a dozen of the 43 states that have adopted net-metering policies as part of their push to promote renewable energy. In Colorado, Xcel Energy Inc. has proposed cutting the payments it makes for excess power generated by customers by about half, because it says higher payouts result in an unfair subsidy to solar users. Utilities Feeling Rooftop Solar Heat Start Fighting Back [Mark Chediak, Christopher Martin and Ken Wells/Bloomberg] ( via /. ) ( Image: Solar Panels All Done! , a Creative Commons Attribution (2.0) image from clownfish’s photostream )        

Read More:
Utility companies go to war against solar

Stonehenge’s New Visitor Center Looks Positively Neolithic

The decrepit old visitor center at Stonehenge has been too small and too old for decades. In fact, it’s been described with typical Brit candor as “disgraceful” and an “embarrassment” to England. Finally, this month, a new, $44 million visitors’ center has opened—here’s a look inside. Read more…        

See the original article here:
Stonehenge’s New Visitor Center Looks Positively Neolithic