New ‘Hardened’ Tor Browser Protects Users From FBI Hacking

An anonymous reader quotes an article from Motherboard: According to a new paper, security researchers are now working closely with the Tor Project to create a “hardened” version of the Tor Browser, implementing new anti-hacking techniques which could dramatically improve the anonymity of users and further frustrate the efforts of law enforcement… “Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers, ” the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany. The researchers say Tor is currently field-testing their solution for an upcoming “hardened” release, making it harder for agencies like the FBI to crack the browser’s security, according to Motherboard. “[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit.” Read more of this story at Slashdot.

Follow this link:
New ‘Hardened’ Tor Browser Protects Users From FBI Hacking

One Million IP Addresses Used In Brute-Force Attack On A Bank

Cisco says in just one week in February they detected 1, 127, 818 different IP addresses being used to launch 744, 361, 093 login attempts on 220, 758, 340 different email addresses — and that 93% of those attacks were directed at two financial institutions in a massive Account Takeover (ATO) campaign. An anonymous reader writes: Crooks used 993, 547 distinct IPs to check login credentials for 427, 444, 261 accounts. For most of these attacks, the crooks used proxy servers, but also two botnets, one of compromised Arris cable modems, and one of ZyXel routers/modems. Most of these credentials have been acquired from public breaches or underground hacking forums. This happened before the recent huge data breaches such as MySpace, LinkedIn, Tumblr, and VK.com. It’s apparently similar to the stolen-credentials-from-other-sites attack that was launched against GitHub earlier this week. Read more of this story at Slashdot.

Excerpt from:
One Million IP Addresses Used In Brute-Force Attack On A Bank

Olli is a 3D Printed, IBM Watson-Powered, Self-Driving Minibus

An anonymous reader writes from a report via Phys.Org: Arizona-based startup Local Motors unveiled Olli — a 3D-printed minibus capable of carrying 12 people. It’s powered by IBM’s supercomputer platform Watson and is designed as an on-demand transportation solution that passengers can summon with a mobile app. The company claims it can be “printed” to specification in “micro factories” in a matter of hours. They say it is ready to go as soon as regulations allow it to hit the streets. While Local Motors has developed the system to control the driving, IBM’s Watson system is used to provide the user interface so passengers can have “conversations” with Olli. “Watson is bringing an understanding to the vehicle, ” said IBM’s Bret Greenstein. “If you have someplace you need to be you can say that in your own words. A vehicle that understands human language, where you can walk in and say, ‘I’d like to get to work, ‘ that lets you as a passenger relax and enjoy your journey, ” he said. The vehicle relies on more than 30 sensors and streams of data from IBM’s cloud. Olli will be demonstrated in National Harbor, Maryland, over the next few months with additional trials expected in Las Vegas and Miami. Read more of this story at Slashdot.

Read More:
Olli is a 3D Printed, IBM Watson-Powered, Self-Driving Minibus

VLC 3.0 nightlies arrive with (sort of working) Chromecast support

Grab the latest build of VLC and you’ll see a “Render Output” option in the “Tools” menu. 6 more images in gallery Streaming online content to a Chromecast is fast and easy, but what if you have local files on your desktop that you want to get on the big screen? There are a few niche apps out there that will serve, but one of the biggest media players, VLC, is working on built-in support for Google’s Chromecast. Recently the nightly build servers started pumping out early, unstable builds of VLC with Chromecast support, so I gave it a try. You won’t find the familiar “cast” button that you see in many apps in this VLC build. Instead, the “Tools” menu has a new option called “Render Output”—this screen is for playing media on something other than the computer screen in front of you. It will detect and display Chromecasts on your local network, and the detection process seems to work great. You just pick the device you want to use and hit “OK.” If you’re playing media you’ll need to stop it, and then once you hit play the casting process should start. I got an “unknown certificate” error at first, but, after accepting it, the usual Chromecast stuff started to happen. My TV turned on and switched to the right input. A Chromecast logo appeared, the loading bar popped up—and then it failed. Read 1 remaining paragraphs | Comments

More:
VLC 3.0 nightlies arrive with (sort of working) Chromecast support

Rolls-Royce Unveils First Driverless Car Complete With Silk ‘Throne’

An anonymous reader writes: Rolls-Royce has unveiled its first driverless vehicle dubbed The Vision Next 100. It is an autonomous vehicle aimed at “the most discerning and powerful patrons in the world.” There’s no steering wheel but there is a silk “throne” where passengers can sit and stare out the window. Rolls-Royce said the zero-emission model, codenamed 103EX, showed the company “rejects the notion of anonymous, utilitarian and bland future modes of mobility.” The owner will be “encircled by the most modern handcrafted fine-line Macassar wood panelling” as they gaze at a “generous” high-definition television display. In addition to the “finest one-off deep-pile ivory wool carpet, ” the vehicle features a virtual assistant named Eleanor, inspired after the actor Eleanor Thornton. It will be able to remind users about meetings; it will even bring the car around to the front of the owner’s house at the start of a journey. “As the Rolls-Royce Vision Next 100 gracefully comes to a halt, something magnificent occurs, ” the company said. The glass roof rises to allow the occupant to stand, while a step emerges from below the running board and a red light is projected, “carpet-like” to announce their arrival. Rolls-Royce did not say how the vehicle would be powered or how much it costs, but it did say it’s due to hit the streets in the 2040s. You can watch a 360-degree video of the 103EX the company posted on YouTube. Read more of this story at Slashdot.

View article:
Rolls-Royce Unveils First Driverless Car Complete With Silk ‘Throne’

Twitter Invests $70 Million In Music Streaming Service SoundCloud

An anonymous reader writes: Recode reports that Twitter has decided to purchase a piece of the music streaming service SoundCloud. Roughly two years ago, Twitter thought about buying SoundCloud, but ultimately ended up walking away from the music service. Now, Twitter has invested around $70 million “as part of a round that should end up in the $100 million-range.” Recode reports: “The round is expected to value SoundCloud at about $700 million — the same value that investors placed on the company in 2014, when it raised $60 million; since then it has also raised a debt round.” Twitter CEO Jack Dorsey wouldn’t comment on the specifics, but did confirm Twitter’s stake in the company. “Earlier this year we made an investment in SoundCloud through Twitter Ventures to help support some of our efforts with creators, ” said Twitter CEO Jack Dorsey. “They’ve been great partners of ours over the years and their community-supported approach mirrors ours in many ways.” Twitter may try and integrate SoundCloud into its service to increase growth and engagement, while SoundCloud may try and use Twitter to promote its newly launched subscription service. Read more of this story at Slashdot.

See more here:
Twitter Invests $70 Million In Music Streaming Service SoundCloud

Rhapsody Rebrands Itself As Napster

An anonymous reader writes: After completing its purchase of Napster in December 2011, Rhapsody has decided to rebrand itself as Napster. Rhapsody made the announcement on their blog, which states: “No changes to your playlists, favorites, albums, and artists. Same music. Same service. Same price. 100% the music you love. Stay tuned!” That’s it. The company didn’t elaborate as to why they decided to change their name now. Napster has made a name for itself as being a brand synonymous with illegal music downloads. It’ll be interesting to what kind of effect, if any, this has on Rhapsody. Read more of this story at Slashdot.

Follow this link:
Rhapsody Rebrands Itself As Napster

Apple Is Fighting A Secret War To Keep You From Repairing Your Phone

It’s no secret that Apple makes a ton of money by charging ‘astronomical’ fee for replacing and fixing display and other components of iPhone and iPad (as well as Mac line). For instance, the company charges $599 for replacing the display on the iPad Pro tablet. Which sounds insane when you realize that you can almost certainly purchase a new iPad Pro under $700. And this is what most people do. A Huffington Post article notes that this behavior has contributed significantly in “generating heaps of e-waste.” Citing many advocates, the publication claims that Apple has “opposed legislation that could help curb it.” From the report: The Huffington Post spoke with politicians in two states who support such legislation, and confirmed through government filings that Apple has lobbied on the issue. Four states — Minnesota, Nebraska, Massachusetts and New York — have considered adopting “right to repair” amendments, which would update existing laws regarding the sale of electronic equipment. Amending these laws would make it easier to fix your devices and would help reduce “e-waste, ” a catch-all term for any electronic detritus. The New York State Senate and Assembly could approve one of these amendments next week. This would help unofficial repair shops get the information they need to fix your iPad, ideally driving down repair costs and encouraging you to squeeze more life out of your old devices — thus cutting down on the e-waste generated by our voracious appetites for new gadgets. Apple asserts that it helps recycle millions of pounds of electronics equipment every year. But it won’t support right to repair amendments.One would ask what is preventing a user from getting their device repaired by unofficial service person? In addition to the security implication, you also run a risk of getting your device bricked by Apple. To recall, the iPhone maker was found bricking the handsets that had been repaired by third-party vendors earlier this year. Read more of this story at Slashdot.

View the original here:
Apple Is Fighting A Secret War To Keep You From Repairing Your Phone

Air Force Has Lost 100,000 Inspector General Records

schwit1 shares an article from The Hill: The Air Force announced on Friday that it has lost thousands of records belonging to the service’s inspector general due to a database crash. “We estimate we’ve lost information for 100, 000 cases dating back to 2004, ” Air Force spokeswoman Ann Stefanek told The Hill in an email. “The database crashed and there is no data…” The database, called the Automated Case Tracking System (ACTS), holds all records related to IG complaints, investigations, appeals and Freedom of Information Act requests…. “We also use ACTS to track congressional/constituent inquiries.” The Air Force said they were “aggressively” trying to recover the data, adding that they had no evidence of malicious intent. Read more of this story at Slashdot.

Taken from:
Air Force Has Lost 100,000 Inspector General Records

Mozilla Will Fund Code Audits For Open Source Software

Reader Orome1 writes: The Mozilla Foundation has set up the Secure Open Source (SOS) Fund, whose aim is to help open source software projects get rid their code of vulnerabilities. Projects that want Mozilla’s help must be open source/free software and must be actively maintained, but they have a much better probability to being chosen if their software is commonly used and is vital to the continued functioning of the Internet or the Web. Three open source projects — PCRE, libjpeg-turbo, and phpMyAdmin — have already gone through the process, and the result was removal of 43 vulnerabilities (including one critical). Read more of this story at Slashdot.

See more here:
Mozilla Will Fund Code Audits For Open Source Software