“Stains of deceitfulness”: Inside the US government’s war on tech support scammers

Aurich Lawson / PCCare247 Sitting in front of her PC, the phone in her hand connected to a tech support company half a world away, Sheryl Novick was about to get scammed. The company she had reached, PCCare247, was based in India but had built a lucrative business advertising over the Internet to Americans, encouraging them to call for tech support. After glimpsing something odd on her computer, Novick did so. “I saw some sort of pop-up and I don’t know if there’s a problem,” she told a PCCare247 tech named Yakeen. He offered to check the “management part” of her computer for possible problems. Read 61 remaining paragraphs | Comments

View original post here:
“Stains of deceitfulness”: Inside the US government’s war on tech support scammers

Apple releases OS X 10.9.3 with improved 4K support, restored USB sync

Fire up your updaters—there’s a slightly newer and better version of OS X in town. Andrew Cunningham Following its usual months-long testing process, Apple released OS X version 10.9.3 to the general public today. The third major update to the operating system provides the usual blend of security patches, bug fixes, new (and restored) features, and future-proofing enhancements. As was discovered shortly after the first 10.9.3 beta was released, the new update improves 4K display support specifically on the 2013 Mac Pro and the 15-inch 2013 Retina MacBook Pro. When those computers are connected to a 4K display, they should be able to display images in OS X’s HiDPI “Retina” scaling mode by default, and they should support the faster 60Hz refresh rate on compatible monitors. “Retina” mode will make on-screen images larger and sharper, while the refresh rate increase will make UI animations, videos, and games look and feel smoother and more responsive (provided the GPU is capable of rendering them at 60 frames per second in the first place). Though the 13-inch 2013 Retina MacBook Pro has the hardware it needs to drive similar 4K displays—a Thunderbolt 2 port with DisplayPort 1.2 support and one of Intel’s Iris 5100 GPUs—that specific computer is not mentioned in Apple’s release notes. Read 5 remaining paragraphs | Comments

Excerpt from:
Apple releases OS X 10.9.3 with improved 4K support, restored USB sync

Samsung to launch first AMOLED-equipped tablets at June 12 event

Samsung We’ve previously talked about Samsung’s “flood the market” strategy for phones, but the company applies the same tactic to tablets, too. After releasing the Note 10.1 seven months ago and an entire line of NotePro and TabPro tablets in February, the company has announced yet another tablet event planned for June 12. According to the invite, this event is for the Samsung Galaxy Tab line. While it’s frankly getting harder and harder to try to nail down just what tablet goes where in the Samsung spectrum (which one is the flagship?) the Tabs are usually the mid-range/mainstream devices. This event location would suggest otherwise, though, as it’s being held in The Theater at Madison Square Garden, the former site of the NFL Draft. The event will even be livestreamed on Samsung’s YouTube channel . Rumor has it that this run of tablets will be the first to incorporate Samsung’s AMOLED displays. Samsung’s AMOLED manufacturing has so far not been up to the task of producing a panel large enough or cheaply enough to fit into a tablet, forcing the company’s older devices to use LCDs. Samsung’s AMOLED panels on phones are so mature that it’s difficult to tell the difference between them and LCD, so we aren’t sure how significant this change will be to consumers. The invite seems to confirm the change to AMOLED displays, which shows a top-down view of the new tablets with light gushing from the screen onto the colored background. Read 2 remaining paragraphs | Comments

See more here:
Samsung to launch first AMOLED-equipped tablets at June 12 event

Former Subway sandwich franchisee cops to $40,000 gift-card hack scheme

A former Subway sandwich shop franchisee pled guilty to taking part in a scheme to hack point-of-sale terminals for at least 13 stores and obtaining gift cards worth $40,000. Shahin Abdollahi, who also ran a business that sold and maintained point-of-sale terminals, sold the computerized checkout registers to the Subway shops that were illegally accessed, according to federal prosecutors in Massachusetts. He set up the terminals with software from LogMeIn , which allows people to remotely log in to PCs over the Internet. Abdollahi and other conspirators then used the software to repeatedly access the Subway terminals without authorization, usually early in the morning, when the restaurants were closed. Once logged in, they loaded gift cards with credit totaling $40,000. Co-conspirator Jeffrey Wilkinson, 37, of Rialto, California, would then advertise the cards for sale on eBay and Craigslist and hand deliver them to buyers. On Wednesday, Abdollahi 46, of Lake Elsinore, California, pled guilty in federal court in Massachusetts to one count of conspiracy to commit computer intrusion and wire fraud and one count of wire fraud. He is scheduled to be sentenced on for August 6. Wilkinson, 37, of Rialto, California, pled guilty in February and is scheduled to be sentenced on May 28. It’s not the first time Subway point-of-sale terminals have been illegally accessed by crooks for purposes of skimming the till. In 2012, two men pled guilty to participating in an international conspiracy that hacked into credit-card payment terminals at more than 150 Subway franchises and racked up more than $10 million in losses. Read on Ars Technica | Comments

Originally posted here:
Former Subway sandwich franchisee cops to $40,000 gift-card hack scheme

Photos of an NSA “upgrade” factory show Cisco router getting implant

NSA techs perform an unauthorized field upgrade to Cisco hardware in these 2010 photos from an NSA document. A document included in the trove of National Security Agency files released with Glenn Greenwald’s book No Place to Hide details how the agency’s Tailored Access Operations (TAO) unit and other NSA employees intercept servers, routers, and other network gear being shipped to organizations targeted for surveillance and install covert implant firmware onto them before they’re delivered. These Trojan horse systems were described by an NSA manager as being “some of the most productive operations in TAO because they pre-position access points into hard target networks around the world.” The document, a June 2010 internal newsletter article by the chief of the NSA’s Access and Target Development department (S3261) includes photos (above) of NSA employees opening the shipping box for a Cisco router and installing beacon firmware with a “load station” designed specifically for the task. The NSA manager described the process: Read 1 remaining paragraphs | Comments

Read the original post:
Photos of an NSA “upgrade” factory show Cisco router getting implant

New planet-hunting hardware needs just a minute to image an exoplanet

PNAS Most of the exoplanets we’ve detected have been spotted during transits, when they pass between their host star and Earth. Almost all the others have been inferred based on the fact that they gravitationally tug at their host star as they orbit around it. Very few exoplanets have been imaged directly, but that may be about to change. Earlier this week, scientists revealed the first images taken with a new instrument, the Gemini Planet Hunter, which has been installed on the (you guessed it) Gemini South telescope located in the Chilean Andes. The new hardware is so efficient that a known exoplanet that once took over an hour and considerable post-processing to image was apparent in a one-minute exposure, with no processing needed. The twin Gemini telescopes (Gemini North is in Hawaii to image the northern sky) are already some of the most advanced hardware on the planet, featuring adaptive optics that correct the gaze of an eight-meter mirror. But directly imaging a planet is a distinct challenge due to the relative brightness of the planet relative to the host star. In terms of our own Solar System, Jupiter would appear 10 9 times fainter than the Sun when imaged at a distance. Read 7 remaining paragraphs | Comments

Read more here:
New planet-hunting hardware needs just a minute to image an exoplanet

Teen arrested for 30 “swatting” attacks against schools, security reporter

Police in the Canadian city of Ottawa said they arrested a 16-year-old male charged with carrying out so-called “swatting” attacks that targeted 30 North American targets. One of the targets included KrebsOnSecurity reporter Brian Krebs , who was previously on the receiving end of a vicious swatting attack that resulted in a team of police pointing guns at him as he opened the front door of his Virginia home. Krebs said the recent attacks were preceded by taunts from someone controlling the Twitter handle @ProbablyOnion . The last tweet made from that account, made on Thursday, stated: “Still awaiting for the horsies to bash down my door.” The individual didn’t have long to wait. That same day, the 16-year-old was arrested, according to press releases here and here issued by the Ottawa Police Service and the FBI, respectively. Swatting refers to the act of knowingly giving authorities false information about bomb threats, the taking of hostages, or similar threats in progress with the goal of tricking heavily armed police to raid the location of an innocent person or group. According to authorities, the unnamed 16-year-old allegedly carried out swatting attacks on 30 targets, including schools in North America that responded with lockdowns or evacuations. The minor was charged with 60 criminal offenses, including public mischief, mischief to property, uttering death threats, and conveying false info with intent to alarm. Read 1 remaining paragraphs | Comments

Continued here:
Teen arrested for 30 “swatting” attacks against schools, security reporter

New Intel chipsets speed up your storage, but they’re missing new CPUs

The 9-series chipsets pile a few new features on top of the previous-generation 8-series chipsets. Intel Last year at around this time, Intel was releasing its brand-new Haswell CPU architecture and its 8-series chipsets out into the world for back-to-school season. About a year before that, it was doing the same for its Ivy Bridge architecture and 7-series chipsets. This year, we’re getting more new chipsets, but they aren’t coming with a new CPU architecture—just some mildly refreshed Haswell processors, some of which we’ve covered already . We’ll get to the new chipsets in a moment, but first let’s talk about the elephant in the room: Intel’s near-silence on the next-generation Broadwell CPUs. We’ve had a few snippets of information about the company’s next CPU architecture, but since announcing a delay late last year the company has said little on the issue. Mass production was supposed to ramp up in the first quarter of 2014, and that quarter has come and gone. Read 14 remaining paragraphs | Comments

More:
New Intel chipsets speed up your storage, but they’re missing new CPUs

Four weeks on, huge swaths of the Internet remain vulnerable to Heartbleed

Aurich Lawson / Thinkstock More than four weeks after the disclosure of the so-called Heartbleed bug found in a widely used cryptography package , slightly more or slightly less than half the systems affected by the catastrophic flaw remain vulnerable, according to two recently released estimates. A scan performed last month by Errata Security CEO Rob Graham found 615,268 servers that indicated they were vulnerable to attacks that could steal passwords, other types of login credentials, and even the extremely sensitive private encryption keys that allow attackers to impersonate websites or monitor encrypted traffic. On Thursday, the number stood at 318,239. Graham said his scans counted only servers running vulnerable versions of the OpenSSL crypto library that enabled the “Heartbeat” feature where the critical flaw resides. A separate scan using slightly different metrics arrived at an estimate that slightly less than half of the servers believed to be vulnerable in the days immediately following the Heartbleed disclosure remain susceptible. Using a tool the researcher yngve called TLS Prober, he found that 5.36 percent of all servers were vulnerable to Heartbleed as of April 11, four days after Heartbleed came to light. In a blog post published Wednesday , he said 2.33 percent of servers remained vulnerable. It’s important to remember the results don’t include the number of Heartbleed-vulnerable servers providing services such a virtual private networks or e-mail. Read 3 remaining paragraphs | Comments

More:
Four weeks on, huge swaths of the Internet remain vulnerable to Heartbleed

Epic announces crowdsourced dev model for next Unreal Tournament

It’s been a long six-and-a-half years since we’ve gotten a new Unreal Tournament game (not counting expansion packs), but today marks the beginning of the end for that wait. Epic announced  that work on a new game, simply titled Unreal Tournament , begins today for PC, Mac, and Linux, and the process will heavily involve participation from the modding and player community from the get go. While a “small team of UT veterans” at Epic will be spearheading the development of the game, everything from design decisions to art direction will primarily “happen in the open, as a collaboration between Epic, UT fans, and [Unreal Engine 4] developers,” Epic says. The developers are inviting everyone from regular players to experienced modders from sites like Polycount to sign up at the Unreal Engine forums and use an official wiki to take direct part in driving the game’s direction. Already, mere minutes after the announcement, those forums are filled with players discussing everything from series maps and weapons they’d like to see return to things like VR headset compatibility. Epic says it will be “many months” until the game is in any sort of playable state, but when it is playable it “will be free. Not free to play, just free.” Source code will be made available directly from GitHub as it is updated, and modders will even be able to fork their own builds if they want to take the project in a new direction. Read 2 remaining paragraphs | Comments

Follow this link:
Epic announces crowdsourced dev model for next Unreal Tournament