Linux Kernel 4.7 Reaches End of Life, Users Urged To Move To Linux 4.8

prisoninmate writes: The Linux 4.7 kernel branch officially reached end of life, and it has already been marked as EOL on the kernel.org website, which means that the Linux kernel 4.7.10 maintenance update is the last one that will be released for this branch. It also means that you need to either update your system to the Linux 4.7.10 kernel release or move to a more recent kernel branch, such as Linux 4.8. In related news, Linux kernel 4.8.4 is now the latest stable and most advanced kernel version, which is already available for users of the Solus and Arch Linux operating systems, and it’s coming soon to other GNU/Linux distributions powered by a kernel from the Linux 4.8 series. Users are urged to update their systems as soon as possible. Read more of this story at Slashdot.

View the original here:
Linux Kernel 4.7 Reaches End of Life, Users Urged To Move To Linux 4.8

A Flashlight That Can Start Fires and Cook Dinner Is the Best Camping Accessory

Wicked Lasers is known for its handheld lasers and flashlights that redefine what it means to be bright. A few years ago it released a flashlight that was intense enough to start a fire, and now the company has managed to dramatically shrink its design so you can easily bring it the next time you go camping and leave the matches at home. Read more…

Read More:
A Flashlight That Can Start Fires and Cook Dinner Is the Best Camping Accessory

Apple releases iOS 10.1, adds Portrait mode to the iPhone 7 Plus

The Portrait mode for Apple’s iPhone 7 Plus has been in the works for months, and now it’s ready for the masses… sort of. 7 Plus users running beta software have been able to shoot photos full of artificial bokeh for over a month now, but Apple just pushed out its iOS 10.1 update and Portrait mode came along for the ride. Now, here’s the thing: even though you don’t need to be enrolled in the iOS beta program to use the feature anymore, the feature itself still isn’t completely done. Once the update is installed, the camera app asks if you’d like to “try the beta” when you swipe into the new Portrait position. Our professional recommendation? Dive right in. Portrait mode might not be completely complete, but it’s still capable of producing seriously nice headshots. In case you missed it the first time around, the feature uses the iPhone 7 Plus’s two cameras in tandem — the primary 12-megapixel sensor captures the image as normal, but the second, wide-angle sensor is used to determine how far away the subject is. All of that data gets mashed up into a nine -layer depth map, providing the context needed to artfully blur out backgrounds while keeping faces and subjects closer to the phone remain crisp and intact. Apple’s goal was to build a dead-simple photography experience that yields pictures that look like they were shot on expensive SLR cameras, and for the most part, Apple’s work is very impressive. This photo represents well the sort of quality you can expect out of Portrait mode: the focus stays locked on the face and hands, and the windows in the background are blurred pretty dramatically. Thanks to that nine-layer depth map, you can see areas where blurring is very subtle, like the top of the subject’s head and the bottom of her scarf. You don’t need to take photos of people to get some mileage out of Portrait mode, either. Have cats prancing around? Or a sweet new mug you need to share? In my experience, as long as you’re within proper range (the app tells you when you are) and there’s enough contrast between the foreground and background, you’ll get that pleasant background blurring. It’s when you’re in well-lit environments with lots of similar colors that Portrait mode seems to have trouble — that’s often when you’ll see edges blurred when they shouldn’t be. Just check out this photo of a cactus precariously perched on a railing. The camera didn’t have trouble differentiating between the cool blue of the pot and the trees in the background, but it obviously had trouble telling where the cactus ended and the trees began. These disappointments are rare, though, and will probably get ironed out as people continue to put Portrait mode through its paces. Most of the big problems have been solved — now Apple just has to focus on the fine-tuning (which is obviously easier said than done). At this point, Portrait mode is still far from perfect, but there’s a lot to like about just how simple it is to use. It’s fast, it’s impressive and it’s only going to get better with time. Interested in taking it for a spin? Jump into your iPhone 7 Plus’s settings and mash that software update button — it’ll show up sooner or later.

See the original article here:
Apple releases iOS 10.1, adds Portrait mode to the iPhone 7 Plus

Photographer Glimpses Larry Page’s Flying Car Hovering In California (Maybe)

From Hollister, California — population 40, 000 — comes a good update from the Mercury News on Larry Page’s efforts to fund a flying car: Even from a few hundred yards away, the aircraft made a noise strikingly different from the roar of a typical plane. “It sounded like an electric motor running, just a high-pitched whine, ” said Steve Eggleston, assistant manager at an airplane-parts company with offices bordering the Hollister Municipal Airport tarmac. But it wasn’t only the sound that caught the attention of Eggleston and his co-workers at DK Turbines. It was what the aircraft was doing. “What the heck’s that?” saleswoman Brittany Rodriguez thought to herself. It’s just hovering.” That, apparently, was a flying car, or perhaps a prototype of another sort of aircraft under development by a mysterious startup called Zee.Aero…one of two reportedly funded by Google co-founder Larry Page to develop revolutionary forms of transportation… A Zee.Aero spokeswoman said the firm is “currently not discussing (its) plans publicly.” However, a Zee.Aero patent issued in 2013 describes in some detail an aircraft capable of the hovering seen by people working at the airport. And the drawings showcase a vision of the future in which flying cars park in lots just like their terrestrial, less-evolved cousins. Page has invested $100 million in Zee.Aero, which appears to have hired more than 100 aerospace engineers. But the article reports that apparently, in the small town where it’s headquartered, “the first rule about Zee.Aero is you don’t talk about Zee.Aero.” Read more of this story at Slashdot.

See the original article here:
Photographer Glimpses Larry Page’s Flying Car Hovering In California (Maybe)

Who Should We Blame For Friday’s DDOS Attack?

“Wondering which IoT device types are part of the Mirai botnet causing trouble today? Brian Krebs has the list, tweeted Trend Micro’s Eric Skinner Friday, sharing an early October link which identifies Panasonic, Samsung and Xerox printers, and lesser known makers of routers and cameras. An anonymous reader quotes Fortune: Part of the responsibility should also lie with lawmakers and regulators, who have failed to create a safety system to account for the Internet-of-Things era we are now living in. Finally, it’s time for consumers to acknowledge they have a role in the attack too. By failing to secure the internet-connected devices, they are endangering not just themselves but the rest of the Internet as well. If you’re worried, Motherboard is pointing people to an online scanning tool from BullGuard (a U.K. anti-virus firm) which checks whether devices on your home network are listed in the Shodan search engine for unsecured IoT devices. But earlier this month, Brian Krebs pointed out the situation is exacerbated by the failure of many ISPs to implement the BCP38 security standard to filter spoofed traffic, “allowing systems on their networks to be leveraged in large-scale DDoS attacks…” Read more of this story at Slashdot.

Originally posted here:
Who Should We Blame For Friday’s DDOS Attack?

Using Rowhammer bitflips to root Android phones is now a thing

Enlarge / An LG Nexus 5 at the moment it is rooted using Rowhammer-induced bit flips. (credit: van der Veen et al.) Researchers have devised an attack that gains unfettered “root” access to a large number of Android phones by exploiting a relatively new type of bug that allows adversaries to manipulate data stored in memory chips. The breakthrough has the potential to make millions of Android phones vulnerable, at least until a security fix is available, to a new form of attack that seizes control of core parts of the operating system and neuters key security defenses. Equally important, it demonstrates that the new class of exploit dubbed Rowhammer can have malicious and far-reaching effects on a much wider base of devices than was previously known, including those running ARM chips. Previously, some experts believed Rowhammer attacks that altered specific pieces of security-sensitive data weren’t reliable enough to pose a viable threat because exploits depended on chance hardware faults or advanced memory-management features that could be easily adapted to repel the attacks. Now, an international team of academic researchers is challenging those assumptions by demonstrating a Rowhammer exploit that alters crucial bits of data in a way that completely roots name brand Android devices from LG, Motorola, Samsung, OnePlus, and possibly other manufacturers. An app containing the researchers’ rooting exploit requires no user permissions and doesn’t rely on any vulnerability in Android to work. Read 17 remaining paragraphs | Comments

See original article:
Using Rowhammer bitflips to root Android phones is now a thing

American ‘Vigilante Hacker’ Defaces Russian Ministry’s Website

An anonymous Slashdot reader quotes CNN Money: An American vigilante hacker — who calls himself “The Jester” — has defaced the website of the Russian Ministry of Foreign Affairs in retaliation for attacks on American targets… “Comrades! We interrupt regular scheduled Russian Foreign Affairs Website programming to bring you the following important message, ” he wrote. “Knock it off. You may be able to push around nations around you, but this is America. Nobody is impressed.” In early 2015, CNN Money profiled The Jester as “the vigilante who hacks jihadists, ” noting he’s a former U.S. soldier who now “single-handedly taken down dozens of websites that, he deems, support jihadist propaganda and recruitment efforts. He stopped counting at 179.” That article argues that “the fact that he hasn’t yet been hunted down and arrested says a lot about federal prosecutors and the FBI. Several cybersecurity experts see it as tacit approval.” “In an exclusive interview with CNNMoney this weekend, Jester said he chose to attack Russia out of frustration for the massive DNS cyberattack that knocked out a portion of the internet in the United States on Friday… ‘I’m not gonna sit around watching these f—-rs laughing at us.'” Read more of this story at Slashdot.

Read more here:
American ‘Vigilante Hacker’ Defaces Russian Ministry’s Website

VeraCrypt Security Audit Reveals Many Flaws, Some Already Patched

Orome1 quotes Help Net Security: VeraCrypt, the free, open source disk encryption software based on TrueCrypt, has been audited by experts from cybersecurity company Quarkslab. The researchers found 8 critical, 3 medium, and 15 low-severity vulnerabilities, and some of them have already been addressed in version 1.19 of the software, which was released on the same day as the audit report [which has mitigations for the still-unpatched vulnerabilities]. Anyone want to share their experiences with VeraCrypt? Two Quarkslab engineers spent more than a month on the audit, which was funded (and requested) by the non-profit Open Source Technology Improvement Fund “to evaluate the security of the features brought by VeraCrypt since the publication of the audit results on TrueCrypt 7.1a conducted by the Open Crypto Audit Project.” Their report concludes that VeraCrypt’s security “is improving which is a good thing for people who want to use a disk encryption software, ” adding that its main developer “was very positive along the audit, answering all questions, raising issues, discussing findings constructively…” Read more of this story at Slashdot.

Originally posted here:
VeraCrypt Security Audit Reveals Many Flaws, Some Already Patched

Amazon May Handle 30% Of All US Retail Sales

An anonymous reader quotes USA Today: Amazon’s yearly sales account for about 15% of total U.S. consumer online sales, according to the company’s statements and the Department of Commerce. But the Seattle e-commerce company may actually be handling double that amount — 20% to 30% of all U.S. retail goods sold online — thanks to the volume of sales it transacts for third parties on its website and app. Only a portion of those sales add to its revenue. “The punchline is that Amazon’s twice as big as people give them credit for, because there’s this iceberg under the surface, but you only see the tip, ” said Scot Wingo, executive chairman of Channel Advisor, an e-commerce software company that works with thousands of online sellers. When third-party sales are taken into account, Amazon’s share of what U.S. shoppers spend online could be as high as $125 billion yearly… Amazon’s share will grow even larger when they can offer two-hour deliveries, warns one analyst, while another puts it more succinctly. “Amazon’s just going to slowly grab more and more of your wallet.” Read more of this story at Slashdot.

See more here:
Amazon May Handle 30% Of All US Retail Sales