Linux Has a USB Driver Security Problem

Catalin Cimpanu, reporting for BleepingComputer: USB drivers included in the Linux kernel are rife with security flaws that in some cases can be exploited to run untrusted code and take over users’ computers. The vast majority of these vulnerabilities came to light on Monday, when Google security expert Andrey Konovalov informed the Linux community of 14 vulnerabilities he found in the Linux kernel USB subsystem. “All of them can be triggered with a crafted malicious USB device in case an attacker has physical access to the machine, ” Konovalov said. The 14 flaws are actually part of a larger list of 79 flaws Konovalov found in Linux kernel USB drivers during the past months. Not all of these 79 vulnerabilities have been reported, let alone patched. Most are simple DoS (Denial of Service) bugs that freeze or restart the OS, but some allow attackers to elevate privileges and execute malicious code. Read more of this story at Slashdot.

View article:
Linux Has a USB Driver Security Problem

Scientists on new supernova: WTF have we been looking at?

Enlarge / A more typical Type-IIp supernova. (credit: NASA SWIFT ) A supernova may be one of the most extraordinary events in the Universe, but the Universe is a very big place, and the extraordinary happens with great regularity. We’ve now observed a huge number of these events and have managed to break them down into categories based on patterns in the light they produce. Astrophysicists have built models of exploding stars that explain these properties, matching them to the mass of the original star and the process by which it exploded. We’re at the point where, after just a few observations, we can understand exactly what we’re looking at. Except when we can’t. Today in Nature , a team of researchers is announcing observations of a supernova that it simply can’t explain. In some ways, the event looks like a prosaic stellar explosion. Except it’s stayed bright over six times longer than it should and experienced five periods of enhanced brightness that we can’t explain. Different features of the supernova appear to be arising from physically distinct locations in space. And even the best model for what triggered this—something that involves a type of explosion we haven’t definitively observed previously—doesn’t account for all the observations. Read 12 remaining paragraphs | Comments

Read More:
Scientists on new supernova: WTF have we been looking at?

Windows 10’s Version ofd AirDrop Lets You Quickly Share Files Between PCs

Microsoft is testing its “Near Share” feature of Windows 10 in the latest Insider build (17035) today, which will let Windows 10 PCs share documents or photos to PCs nearby via Bluetooth. The Verge reports: A new Near Share option will be available in the notification center, and the feature can be accessed through the main share function in Windows 10. Files will be shared wirelessly, and recipients will receive a notification when someone is trying to send a file. Microsoft’s addition comes just a day after Google unveiled its own AirDrop-like app for Android. Read more of this story at Slashdot.

View article:
Windows 10’s Version ofd AirDrop Lets You Quickly Share Files Between PCs

Ford will build EVs with Chinese automaker in $765 million deal

Over the last few months, China has been making plans and deals to wean its country’s cars off fossil fuels. In July, Daimler agreed to pair up with Chinese automaker BAIC to invest $735 million in EV infrastructure. Ford just entered its own venture, a 50-50 partnership with manufacturer Zotye Auto for a combined investment of $756 million to produce electric cars. Once the Chinese government approves the deal, the enterprise will build a manufacturing facility in the Zhejiang province to produce EVs under its new brand, Zotye Ford. As CNET points out, both parent companies signed an agreement back in August that paved the way for this partnership. “Zotye Ford will introduce a new brand family of small all-electric vehicles, ” Ford group VP Peter Fleet said in the statement . “We will be exploring innovative vehicle connectivity and mobility service solutions for a new generation of young city-dwelling Chinese customers.” While China hasn’t set a specific deadline to ban fossil fueled cars, as France and UK expect to phase out by 2040, the clock is ticking. Foreign automakers have two choices: Pay a hefty 25 percent import tax on vehicles or partner with a local company to produce cars in the country. This gives manufacturers like Zotye experience (though that company in particular already produces electric and battery-powered vehicles) while granting outside conglomerates access to Chinese markets. Companies are making deals to get a slice of the country’s EV pie ahead of time because, while its ratio of car owners is low (one in five people), China’s 1.4 billion-person population means nearly 300 million vehicles currently on its roads. Source: CNET

Read the original:
Ford will build EVs with Chinese automaker in $765 million deal