Google Joins Mozilla, Microsoft In Pushing For Early SHA-1 Crypto Cutoff

itwbennett writes: Due to recent research showing that SHA-1 is weaker than previously believed, Mozilla, Microsoft and now Google are all considering bringing the deadline forward by six months to July 1, 2016. Websites like Facebook and those protected by CloudFlare have implemented a SHA-1 fallback mechanism. Both companies have argued that there are millions of people in developing countries that still use browsers and operating systems that do not support SHA-2, the replacement function for SHA-1, and will therefore be cut off from encrypted websites that move to SHA-2 certificates. Read more of this story at Slashdot.

Read More:
Google Joins Mozilla, Microsoft In Pushing For Early SHA-1 Crypto Cutoff

Vivendi Takes Over Radionomy, Winamp Relaunch Now Possible

SmartAboutThings writes: Winamp could once again be brought back to life after Vivendi Group took over the majority stake in Radionomy, the previous owner of the app who purchased it from AOL in early 2014. AOL originally planned to discontinue both Winamp and Shoutcast, but instead the company decided to sell the software to Belgian online radio service, Radionomy. The new owners initially promised that they’ll keep Winamp alive, but no updates have been released since the takeover, which made most people think that Winamp era has ended for good. Vivendi Group, which owns or is involved in famous companies such as Dailymotion, Ubisoft, and Deezer, could help relaunch Winamp, although the press release announcing the acquisition offers no suggestion in this regard. The company, however, does mention Winamp and Shoutcast as two of the most important assets that will join its portfolio following the takeover. Read more of this story at Slashdot.

Visit link:
Vivendi Takes Over Radionomy, Winamp Relaunch Now Possible

Juniper’s Backdoor Password Disclosed, Likely Added In Late 2013

itwbennett writes: In a blog post on Rapid7’s community portal Sunday, HD Moore posted some notes on the Juniper ScreenOS incident, notably that his team discovered the backdoor password that enables the Telnet and SSH bypass. Quoting: “Although most folks are more familiar with x86 than ARM, the ARM binaries are significantly easier to compare due to minimal changes in the compiler output. … Once the binary is loaded, it helps to identify and tag common functions. Searching for the text “strcmp” finds a static string that is referenced in the sub_ED7D94 function. Looking at the strings output, we can see some interesting string references, including auth_admin_ssh_special and auth_admin_internal. … The argument to the strcmp call is

Continue Reading:
Juniper’s Backdoor Password Disclosed, Likely Added In Late 2013

Facebook Replaces Flash With HTML5 For Videos

An anonymous reader writes: Facebook announced that it officially replaced Flash with HTML5 for its video player. They made the change because of security reasons, but developers also found it easier to work with — it led to quicker turnarounds for site-wide changes, and had better integration with code testing platforms. Facebook reports that user engagement has gone up since the switch was made. Read more of this story at Slashdot.

More here:
Facebook Replaces Flash With HTML5 For Videos

Israeli Firm Creates a Device That Can Hack Any Nearby Phone

An anonymous reader writes: Israeli startup Rayzone created a device that can hack any smartphone that has its WiFi connection open. The device can steal passwords, files, contact lists, photos, and various others. Called InterApp, the device is dumb-proof (comes with a shiny admin panel), works on hundreds of devices at the same time, and leaves no forensics traces behind after the hack. The company says it will only sell it to law enforcement agency. Read more of this story at Slashdot.

View original post here:
Israeli Firm Creates a Device That Can Hack Any Nearby Phone

Femto Fairy Lights – Touchable Holograms

mikejuk writes with this story about a Japanese team working on creating touchable holograms. I Programmer reports: “One method of creating a volumetric, i.e. true 3D, display, is to use a high power laser and focus it on a small spot in space. The air in that spot will be heated to the point where it ionizes and glows with a bright blue light. Scan the laser really fast and you can make a full 3D arrangement of glowing points of light — not exactly a hologram but as good as. Of course, the big problem is that you have a lot of energy being focused on small areas and human interaction could be a problem. You might well get burned by the laser if you attempted to touch or interact with the display. The solution is to use a really fast laser, a femtosecond laser, that heats a small spot to a high temperature but only for a very short time. This is much safer because the total energy involved is smaller. This is the reason you can touch sparks without getting burned.” Read more of this story at Slashdot.

More:
Femto Fairy Lights – Touchable Holograms

Sony Creating Sulfur-Based Batteries With 40% More Capacity Than Li-Ion

MojoKid writes: Since the original iPhone was released in 2007, we have seen some incredible advances in smartphone processing power along with a wealth of feature improvements like faster Wi-Fi and cellular speeds and larger, higher resolution displays. However, battery technology, for the most part, hasn’t kept up. There are a few major battery suppliers but Sony is currently an underdog, commanding just 8 percent of the market for compact lithium-ion batteries. Its three largest competitors — Samsung (SDI), Panasonic and LG Chem — each command around 20 percent of the market. In an effort to change that, Sony is developing a new type of battery chemistry that can boost runtimes by 40 percent compared to lithium-ion batteries of the same volume. Sony’s batteries use a sulfur compound instead of lithium compounds for the positive electrodes, reportedly allowing for much great energy density. Sulfur batteries can also supposedly be made 30 percent smaller than traditional lithium-ion cells while maintaining the same run times. The company is now working to ensure that the new battery chemistry is safe enough for commercial use. Read more of this story at Slashdot.

Read the original post:
Sony Creating Sulfur-Based Batteries With 40% More Capacity Than Li-Ion

LifeLock Agrees To Pay $100 Million Fine In Settlement With FTC

New submitter dasgoober writes: Lifelock has agreed to pay $100 million to settle charges that it failed to properly protect user data, the F.T.C. announced on Thursday. This is the second settlement between the company and federal authorities. In 2010, the F.T.C. charged the company with failing to provide strong security measures for personal data. “This settlement demonstrates the Commission’s commitment to enforcing the orders it has in place against companies, including orders requiring reasonable security for consumer data, ” F.T.C .Chairwoman Edith Ramirez said in a statement. “The fact that consumers paid Lifelock for help in protecting their sensitive personal information makes the charges in this case particularly troubling.” Read more of this story at Slashdot.

Excerpt from:
LifeLock Agrees To Pay $100 Million Fine In Settlement With FTC

‘Unauthorized Code’ In Juniper Firewalls Could Decrypt VPN Traffic

m2pc writes: Ars Technica reports that Juniper Networks firewalls have been discovered to include “unauthorized code” inserted into their ScreenOS software. Juniper has has published an advisory addressing the matter, with instructions to patch the affected devices. From the Ars article: “NetScreen firewalls using ScreenOS 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20 are affected and require immediate patching. Release notes published by Juniper suggest the earliest vulnerable versions date back to at least 2012 and possibly earlier. … The first flaw allows unauthorized remote administrative access to an affected device over SSH or telnet. Exploits can lead to complete compromise. ‘The second issue may allow a knowledgeable attacker who can monitor VPN traffic to decrypt that traffic, ‘ the advisory said.” The rogue code was discovered during a recent internal source code review conducted by Juniper. Read more of this story at Slashdot.

View original post here:
‘Unauthorized Code’ In Juniper Firewalls Could Decrypt VPN Traffic

Shelfie Lets You Download Ebooks and Audiobooks by Snapping Photos of Your Physical Copies

Shelfie, formerly known as BitLit , already lets you take a photo of the physical books you own and get matching ebook copies. Now they’re throwing audiobooks into the mix, so you can listen to the books on your bookshelf too. Read more…

Continue reading here:
Shelfie Lets You Download Ebooks and Audiobooks by Snapping Photos of Your Physical Copies