Tech Today w/ Ken May

Samsung’s HMD Odyssey proves image quality is worth the cost

Earlier today, Microsoft and Samsung announced the latest Windows Mixed Reality headset: the Samsung HMD Odyssey . At $499, it’s certainly one of the pricier options out of all the Windows Mixed Reality headsets so far. And for good reason. Not only does it come with integrated AKG headphones — which is very similar to the Rift’s design — it has absolutely stunning image quality. The HMD Odyssey is equipped with dual 3.5-inch AMOLED displays, each of which have a 1, 440 x 1, 600 resolution with a refresh rate of 90 to 60 hertz. The result is a brilliantly sharp and crisp virtual environment — when I took a brief Holotour of Machu Picchu, I genuinely felt like I was there, floating above the mountains on a hot air balloon. Color reproduction is fantastic, and there was none of the screendoor effect that so often plagues VR headsets of lesser quality. The 110-degree field of view also contributes to the feeling of immersion, which is especially apparent when viewing 360-degree videos and photos. Yet, this thing is pretty big. It measures 202mm x 131.5mm x 111m and it weighs in at a whopping 625 grams. That’s definitely a lot heavier than the Acer’s 380 grams. It also just looks pretty bulky on the whole. That said, when I placed the whole thing on my head, it didn’t feel so bad. It fits nice and snug, and I loved the feeling of the leather padding around my head. I could see myself wearing this for a few hours at a time. Other specs of the HMD Odyssey include two cameras on the front, each of which give the headset six degrees of freedom. It also has a proximity sensor, an IPD sensor, a built-in microphone, volume adjustment and a couple of dials that help you find the right fit and focus. I also like it that you can wear the headset while wearing your glasses. During my demo, I had a chance to try out the new Halo Recruit title for a few minutes. As was teased, it’s not quite a game as much as a demo of what Halo could look like in VR. Most of what I did was fire at moving targets in a tutorial phase. I found that targeting is sometimes an issue, as I couldn’t just look at something to aim (like I can with a lot of other VR games) I had to actually really aim at it with my virtual gun. Still, it was just my first experience with it and I can see myself getting better over time. The Halo Recruit demo will be available on October 17th for free from the Windows Store, along with 20, 000-plus other apps made for Windows Mixed Reality. Samsung’s HMD Odyssey is available for pre-order today, with a ship date of November 6th.

IRS hands fraud prevention contract to Equifax despite massive hack

You’d think that government agencies would be reticent to work with Equifax given that it just exposed the private info of more than 145 million people through a preventable hack , but a massive data breach apparently isn’t enough of a deterrent. The Internal Revenue Service recently awarded Equifax a fraud prevention contract that will have it verifying taxpayer identities. And crucially, it was a no-bid, “sole source” contract — Equifax was deemed the only company capable of fulfilling demand. In practice, officials didn’t have much of a choice. Credit reporting in the US is dominated by three large companies (Equifax, Experian and TransUnion), and Equifax is arguably the powerhouse of the bunch. However, that only underscores the problem here: the IRS had to trust a crucial anti-fraud system to a company that not only had sloppy online security practices, but has been reluctant to take full responsibility for its mistakes. There’s a real chance that the hack will get Equifax to clean up its act in time to improve its handling of IRS data. We wouldn’t count on it, though, and there’s always the possibility that the IRS will fall afoul of the kind of data breach that prompted this anti-fraud contract in the first place. Via: Politico Source: FedBizOpps.gov

Follow this link:
IRS hands fraud prevention contract to Equifax despite massive hack

“NSFW” doesn’t begin to describe Bluetooth security in sex toys

Enlarge (credit: Michael Ochs Archives/Getty Images) Technologies such as Bluetooth Low Energy (BLE) have allowed an increasing number of devices to be controlled by mobile devices. But as Ars has reported in the past, BLE devices also can be a privacy and security risk. And as Alex Lomas of Pentest Partners found recently, some of these vulnerable devices are of a very personal nature. Lomas discovered that he could relatively easily search for and hijack BLE-enabled sex toys—a pursuit he named “screwdriving” (after the Wi-Fi network finding practice of “wardriving”). Lomas performed a security analysis on a number of BLE-enabled sex toys, including the Lovesense Hush—a BLE-connected butt plug designed to allow control by the owner’s smartphone or remotely from a partner’s phone via the device’s mobile application. Using a Bluetooth “dongle” and antenna, Lomas was able to intercept and capture the BLE transmissions between the devices and their associated applications. As it turns out, reverse-engineering the control messages between apps and a number of devices was not terribly difficult—the communications between the apps and the toys were not encrypted and could easily be recorded with a packet capture tool. They could also be replayed by an attacker, since the devices accepted pairing requests without a PIN code—allowing anyone to take over control of them. Read 2 remaining paragraphs | Comments

More:
“NSFW” doesn’t begin to describe Bluetooth security in sex toys

Equifax: we missed 2.5 million people when we counted the size of our breach

Turns out that the total number of people whose lives Equifax ruined by doxing them and then dumping all their most sensitive personal and financial data is 145,500,000 , not 143,000,000. The company’s new CEO apologized for the misunderstanding, and persisted in calling the people his company destroyed “customers” despite the fact that the vast majority of them were not Equifax customers, just random people whom Equifax compiled massive dossiers on, and then lost control over.

See original article:
Equifax: we missed 2.5 million people when we counted the size of our breach

Fully driverless cars could be months away

Enlarge / Waymo is using a fleet of Chrysler Pacifica Hybrid minivans to develop its self-driving technology. (credit: Waymo) Real driverless cars could come to the Phoenix area this year, according to a Monday report from The Information’s Amir Efrati. Two anonymous sources have told Efrati that Google’s self-driving car unit, Waymo, is preparing to launch “a commercial ride-sharing service powered by self-driving vehicles with no human ‘safety’ drivers as soon as this fall.” Obviously, there’s no guarantee that Waymo will hit this ambitious target. But it’s a sign that Waymo believes its technology is very close to being ready for commercial use. And it suggests that Waymo is likely to introduce a fully driverless car network in 2018 if it doesn’t do so in the remaining months of 2017. Waymo plans to launch first in the Phoenix suburbs Efrati reports that Waymo CEO John Krafcik faces pressure from his boss, Google co-founder and Alphabet CEO Larry Page, to transform Waymo’s impressive self-driving technology into a shipping product. Page had been pushing for a launch by the end of 2016. But a major deal with Ford to produce the necessary vehicles fell through, forcing Waymo to scramble and sign a smaller deal with Fiat Chrysler to supply minivans. Read 9 remaining paragraphs | Comments

Continued here:
Fully driverless cars could be months away

Google Scraps Controversial Policy That Gave Free Access To Paywalled Articles Through Search

For years, Google has provided a nifty trick to get around subscriptions for newspapers and magazines. But the company is now doing away with it. From a report: Google is ending its controversial First Click Free (FCF) policy that publishers loathed because it required them to allow Google search results access to news articles hidden behind a paywall. The company is replacing the decade-old FCF with Flexible Sampling, which allows publishers instead to decide how many (if any) articles they want to allow potential subscribers to access. Google says it’s also working on a suite of new tools to help publishers reach new audiences and grow revenue. Via FCF, users could access an article for free but would be prompted to log-in or subscribe if they clicked anywhere else on the page. Publishers were required to allow three free articles per day which Google indexed so that they appeared in searches for a particular topic or keyword. Opting out of the FCF feature was detrimental because it demoted a publisher’s ranking on Google Search and Google News. Read more of this story at Slashdot.

See the original article here:
Google Scraps Controversial Policy That Gave Free Access To Paywalled Articles Through Search

We’re Not Living in a Computer Simulation, New Research Shows

A reader shares a report: A team of theoretical physicists from Oxford University in the UK has shown that life and reality cannot be merely simulations generated by a massive extraterrestrial computer. The finding — an unexpectedly definite one — arose from the discovery of a novel link between gravitational anomalies and computational complexity. In a paper published in the journal Science Advances, Zohar Ringel and Dmitry Kovrizhi show that constructing a computer simulation of a particular quantum phenomenon that occurs in metals is impossible — not just practically, but in principle. The pair initially set out to see whether it was possible to use a technique known as quantum Monte Carlo to study the quantum Hall effect — a phenomenon in physical systems that exhibit strong magnetic fields and very low temperatures, and manifests as an energy current that runs across the temperature gradient. The phenomenon indicates an anomaly in the underlying space-time geometry. They discovered that the complexity of the simulation increased exponentially with the number of particles being simulated. If the complexity grew linearly with the number of particles being simulated, then doubling the number of partices would mean doubling the computing power required. If, however, the complexity grows on an exponential scale — where the amount of computing power has to double every time a single particle is added — then the task quickly becomes impossible. Read more of this story at Slashdot.

Read the original:
We’re Not Living in a Computer Simulation, New Research Shows

High Sierra’s Disk Utility Does Not Recognize Unformatted Disks

macOS 10.13’s Disk Utility 17.0 (1626) does not recognize raw drives, reads a blog post, shared by several readers. From the post: Diskutil does recognize the drive. We’ll use it to perform a quick, cursory format (e.g., diskutil eraseDisk JHFS+ NewDisk GPT disk0) to make the disk appear in Disk Utility, where further modifications can more easily be made. Plugging in an unformatted external drive produces the usual alert, “The disk you inserted was not readable by this computer. Initialize… | Ignore | Eject”, but clicking Initialize just opens Disk Utility without the disk appearing. There’s an option in Disk Utility to view “all devices, ” but clicking that doesn’t show raw disks, the blog post adds. Read more of this story at Slashdot.

See more here:
High Sierra’s Disk Utility Does Not Recognize Unformatted Disks

A series of delays and major errors led to massive Equifax breach

Enlarge / A monitor displays Equifax Inc. signage on the floor of the New York Stock Exchange (NYSE) in New York on Friday, September 15, 2017. (credit: Michael Nagle/Bloomberg via Getty Images ) A series of costly delays and crucial errors caused Equifax to remain unprotected for months against one of the most severe Web application vulnerabilities in years, the former CEO for the credit reporting service said in written testimony investigating the massive breach that exposed sensitive data for as many as 143 million US Consumers . Chief among the failures: an Equifax e-mail directing administrators to patch a critical vulnerability in the open source Apache Struts Web application framework went unheeded, despite a two-day deadline to comply. Equifax also waited a week to scan its network for apps that remained vulnerable. Even then, the delayed scan failed to detect that the code-execution flaw still resided in a section of the sprawling Equifax site that allows consumers to dispute information they believe is incorrect. Equifax said last month that the still-unidentified attackers gained an initial hold in the network by exploiting the critical Apache Struts vulnerability . “We at Equifax clearly understood that the collection of American consumer information and data carries with it enormous responsibility to protect that data,” Smith wrote in testimony provided to the US House Subcommittee on Digital Commerce and Consumer Protection . “We did not live up to that responsibility.” Read 6 remaining paragraphs | Comments

Taken from:
A series of delays and major errors led to massive Equifax breach

Tesla Is Shipping Hundreds of Powerwall Batteries To Puerto Rico

schwit1 quotes a report from Futurism: In a continued streak of goodwill during this year’s devastating hurricane season, Tesla has been shipping hundreds of its Powerwall batteries to Puerto Rico in the aftermath of Hurricane Maria. Since the hurricane hit on 20 September, much of the U.S. territory has been left without power — about 97 percent, as of 27 September — hampering residents’ access to drinkable water, perishable food, and air conditioning. The island’s hospitals are struggling to keep generators running as diesel fuel dwindles. Installed by employees in Puerto Rico, Tesla’s batteries could be paired with solar panels in order to store electricity for the territory, whose energy grid may need up to six months to be fully repaired. Several power banks have already arrived to the island, and more are en route. Read more of this story at Slashdot.