macOS High Sierra’s App Store System Preferences Can Be Unlocked With Any Password

A bug report submitted on Open Radar this week reveals a security vulnerability in the current version of macOS High Sierra that allows the App Store menu in System Preferences to be unlocked with any password. From a report: MacRumors is able to reproduce the issue on macOS High Sierra version 10.13.2, the latest public release of the operating system, on an administrator-level account by following these steps: 1. Click on System Preferences. 2. Click on App Store. 3. Click on the padlock icon to lock it if necessary. 4. Click on the padlock icon again. 5. Enter your username and any password. 6. Click Unlock. As mentioned in the radar, System Preferences does not accept an incorrect password with a non-administrator account. We also weren’t able to unlock any other System Preferences menus with an incorrect password. We’re unable to reproduce the issue on the third or fourth betas of macOS High Sierra 10.13.3, suggesting Apple has fixed the security vulnerability in the upcoming release. However, the update currently remains in testing. Read more of this story at Slashdot.

More:
macOS High Sierra’s App Store System Preferences Can Be Unlocked With Any Password

Adobe’s ‘Cloak’ experiment is a content-aware eraser for video

Glamorous show-reels from shows like Game of Thrones get all the fame, but a lot of VFX work is mundane stuff like removing cars , power lines and people from shots. Adobe’s research team is working on making all of that easier for anyone, regardless of budget, thanks to a project called “Cloak.” It’s much the same as ” content-aware fill” for Photoshop, letting you select and then delete unwanted elements, with the software intelligently filling in the background. Cloak does the same thing to moving video, though, which is a significantly bigger challenge. Engadget got an early look at the tech, including a video demonstration and chance to talk with Adobe research engineer Geoffrey Oxholm and Victoria Nece, product manager for video graphics and VFX. At the moment, the technology is in the experimental stages, with no set plans to implement it. However, Adobe likes to give the public ” Sneaks ” at some of its projects as a way to generate interest and market features internally to teams. An example of that would be last year’s slightly alarming “VoCo” tech that lets you Photoshop voiceovers or podcasts. That has yet to make it into a product, but one that did is “Smartpic” which eventually became part of Adobe’s Experience Manager. The “Cloak” tech wouldn’t just benefit Hollywood — it could be useful to every video producer. You could make a freeway look empty by removing all the cars, cut out people to get a pristine nature shot, or delete, say, your drunk uncle from a wedding shot. Another fun example: When I worked as a compositer in another life , I had to replace the potato salad in a shot with macaroni, which was a highly tedious process. Object removal will also be indispensable for VR, AR, and other types of new video tech. “With 360 degree video, the removal of objects, the crew and the camera rig becomes virtually mandatory, ” Nece told Engadget. Content-aware fill on photos is no easy task in the first place, because the computer has to figure out what was behind the deleted object based on the pixels around it. Video increases the degree of difficulty, because you have to track any moving objects you want to erase. On top of that, the fill has to look the same from frame to frame or it will be a glitchy mess. “It’s a fascinating problem, ” Oxholm said. “Everything is moving, so even if you nail one frame, you have to be consistent.” Luckily, video does have one advantage over photos. “The saving grace is that we can see behind the thing we want to remove, ” says Oxholm. “If you’ve got a microphone to remove, you can see behind the microphone.” In other words, if you’re doing shot of a church with a pole in the way, there’s a good chance you have a different angle with a clean view of the church. With 360 degree video, the removal of objects, the crew and the camera rig becomes virtually mandatory. Another thing making content-aware fill for video much more feasible now is the fact that motion-tracking technology has become so good. “We can do really dense tracking, using parts of the scene as they become visible, ” said Oxholm. “That gives you something you can use to fill in.” The results so far, as shown in the video above, are quite promising. The system was able to erase cars from a freeway interchange, did a decent job of deleting a pole in front of a cathedral and even erased a hiking couple from a cave scene. The shots were done automatically in “one quick process, ” Oxholm said, after a mask was first drawn around the object to be removed — much as you do with Photoshop. It’s not totally perfect, however. Shadow traces are visible on the cave floor, and the cathedral is blurred in spots where the pole used to be. Even at this early stage, though, the tool could do much of the grunt-work, making it easier for a human user to do the final touch-ups. I’d love to see Adobe release it in preview as soon as possible, even if it’s not perfect, as it looks like it could be a major time saver — I sure could’ve used it for that macaroni.

Excerpt from:
Adobe’s ‘Cloak’ experiment is a content-aware eraser for video

JRR Tolkien Book ‘Beren and Luthien’ Published After 100 Years

seoras quotes a report from BBC: A new book by Lord of the Rings author JRR Tolkien is going on sale — 100 years after it was first conceived. Beren and Luthien has been described as a “very personal story” that the Oxford professor thought up after returning from the Battle of the Somme. It was edited by his son Christopher Tolkien and contains versions of a tale that became part of The Silmarillion. The book features illustrations by Alan Lee, who won an Academy Award for his work on Peter Jackson’s film trilogy. It is being published on Thursday by HarperCollins on the 10th anniversary of the last Middle Earth book, The Children of Hurin. Read more of this story at Slashdot.

Excerpt from:
JRR Tolkien Book ‘Beren and Luthien’ Published After 100 Years

Pope cautions youths about social media’s “false image of reality”

Enlarge / Pope Francis holds his homily during his weekly audience Wednesday in St. Peter’s Square in Vatican City, Vatican. Pope Francis is warning the world’s youth to be wary of the “false image of reality” portrayed in social media and on reality television shows. In a written message the Vatican issued Tuesday, the pontiff cautioned followers not to let the Internet dilute the church’s message. The speech will be released in video format on World Youth Day on April 9. “History teaches us that even when the Church has to sail on stormy seas, the hand of God guides her and helps her to overcome moments of difficulty. The genuine experience of the Church is not like a flash mob, where people agree to meet, do their thing, and then go their separate ways,” Francis wrote. Read 5 remaining paragraphs | Comments

See more here:
Pope cautions youths about social media’s “false image of reality”

Humanity is on the cusp of de-extincting the Wooly Mammoth

After successfully extracting sequenceable DNA from a pair of Woolly Mammoth carcasses pulled from Siberia’s permafrost in 2014, a team of Harvard researchers announced on Thursday that they are tantalizing close to cloning the (currently) extinct pachyderms. The team made the announcement ahead of American Association for the Advancement of Science (AAAS) annual meeting this week. They estimate that they’re just two years away from creating a viable hybrid embryo. That is, they take a modern day asian elephant embryo and splice in DNA from the Mammoth to get a fuzzy “mammophant, ” as the team calls it. “Our aim is to produce a hybrid elephant-mammoth embryo, ” Harvard Professor George Church told the Guardian . “Actually, it would be more like an elephant with a number of mammoth traits. We’re not there yet, but it could happen in a couple of years.” So far, the team hasn’t progressed passed the cellular stage in creating one of these beasts though they have managed to splice in as many as 45 mammoth genes, up from their initial 15. Within a few years, the team expects to ramp their efforts up to the embryonic stage but it’ll likely be quite a while until they can birth a living mammophant. Since the Asian elephant is itself endangered, this hybridizing technique could help preserve the species. At the same time, the Harvard team doesn’t want to put one of these valuable animals at risk carrying a mammophant fetus to term, so they’re looking into gestating it in an artificial womb. That’s where the delay comes in. While Church’s team has managed to grow a mouse in an artificial womb for ten days — half its normal gestation period — the technology for doing that for an elephant-scale animal likely won’t be feasible for at least a decade. And even once that technology has matured, there are still a host of hand-wringing ethical arguments that will have to be sorted before Church’s team gets the green light to proceed further. Source: Guardian

More:
Humanity is on the cusp of de-extincting the Wooly Mammoth

The FBI Spent Two Years Investigating An Online Cult That Didn’t Exist

A two-year FBI investigation apparently centered on the satirical web site “GodHatesGoths”. Long-time Slashdot reader v3rgEz writes: In 2005, the FBI launched an investigation into the “Church of the Hammer, ” a fundamentalist Christian sect which called for the wholesale slaughter of practitioners of the goth subculture. Two years later, the investigation was closed, on grounds that the Church didn’t exist. The FBI’s threat assessment detailed “an extremely right-wing Christian group that adheres to a Middle Ages Catholic text called the ‘Malleus Malificarum.'” But MuckRock.com reports that “The Bureau’s main source on the case was a goth who had engaged with members of the Church via their Yahoo Group…trying to dispel their misconceptions about the relationship between the subculture and Satanism.” After two years of scouring through crime databases and making phone calls to the Salem police department, FBI investigators actually visited the GodHatesGoths web site — which turned out to be a parody. Read more of this story at Slashdot.

Read More:
The FBI Spent Two Years Investigating An Online Cult That Didn’t Exist

Drone Footage Inside a 19th-Century Church Looks Too Incredible to Be Real

The talented pilots and cinematographers of France’s BigFly skillfully piloted a camera-equipped drone through the sanctuary of the 137-year-old Église Saint-Louis de Paimbœuf . Given the church is filled with priceless art and architecture, the skills needed to ensure the drone didn’t hit anything are easily as impressive as the stunning footage they captured. Read more…

Original post:
Drone Footage Inside a 19th-Century Church Looks Too Incredible to Be Real

Symantec Disavows Business Partner Caught Running a Tech Support Scam

An anonymous reader writes: Malwarebytes has caught one of Symantec’s resellers running a tech support scam that was scaring users into thinking they were infected with malware and then graciously offering to sell Symantec’s security software at inflated rates. Malwarebytes played along with their scam and found out the company behind it was Silurian Tech Support, located somewhere in North India (surprised?).Symantec told El Reg that it terminated the reseller’s contract and will work with law enforcement to defend its brand and intellectual property. Read more of this story at Slashdot.

Visit link:
Symantec Disavows Business Partner Caught Running a Tech Support Scam

Questions Linger As Juniper Removes Suspicious Dual_EC Algorithm

msm1267 writes: Juniper Networks has removed the backdoored Dual_EC DRBG algorithm from its ScreenOS operating system, but new developments show Juniper deployed Dual_EC long after it was known to be backdoored. Stephen Checkoway, assistant professor of computer science at the University of Illinois at Chicago, said that he and a number of crypto experts looked at dozens of versions of Juniper’s NetScreen firewalls and learned that ANSI X9.31 was used exclusively until ScreenOS 6.2 when Juniper added Dual_EC. It also changed the size of the nonce used with ANSI X9.31 from 20 bytes to 32 bytes for Dual_EC, giving an attacker the necessary output to predict the PRNG output. ‘And at the same time, Juniper introduced what was just a bizarre bug that caused the ANSI generator to never be used and instead just use the output of Dual_EC. They made all of these changes in the same version update.’ Read more of this story at Slashdot.

More here:
Questions Linger As Juniper Removes Suspicious Dual_EC Algorithm

This Viral List About 1915 Is Full of Lies

A list of fun facts about the year 1915 has gone viral . But many items on the list are false or misleading. As we’ve seen time and again, never trust the internet for your fun facts. It’s all lies. Read more…

View article:
This Viral List About 1915 Is Full of Lies