Now Even YouTube Serves Ads With CPU-draining Cryptocurrency Miners

YouTube was recently caught displaying ads that covertly leach off visitors’ CPUs and electricity to generate digital currency on behalf of anonymous attackers, it was widely reported. From a report: Word of the abusive ads started no later than Tuesday, as people took to social media sites to complain their antivirus programs were detecting cryptocurrency mining code when they visited YouTube. The warnings came even when people changed the browser they were using, and the warnings seemed to be limited to times when users were on YouTube. On Friday, researchers with antivirus provider Trend Micro said the ads helped drive a more than three-fold spike in Web miner detections. They said the attackers behind the ads were abusing Google’s DoubleClick ad platform to display them to YouTube visitors in select countries, including Japan, France, Taiwan, Italy, and Spain. The ads contain JavaScript that mines the digital coin known as Monero. Read more of this story at Slashdot.

View article:
Now Even YouTube Serves Ads With CPU-draining Cryptocurrency Miners

How a PhD Student Unlocked 1 Bitcoin Hidden In DNA

dmoberhaus writes: A 26-year-old Belgian PhD student named Sander Wuytz recently solved a 3-year-old puzzle that had locked the private key to 1 Bitcoin in a strand of synthetic DNA. Motherboard spoke with the student about how they managed to crack the puzzle, just days before it was set to expire. From the report: “As detailed by Nick Goldman, a researcher at the European Bioinformatics Institute, in his pioneering Nature paper on DNA storage, to encode information into DNA you take a text or binary file and rewrite it in base-3 (so rather than just ones and zeroes, there are zeroes, ones, and twos). This is then used to encode the data in the building blocks of life, the four nucleobases cytosine, thymine, adenine and guanine. As Wuyts explained to me, coding the data as nucleobases depended upon which nucleobase came before. So, for instance, if the previous base was adenine and the next pieces of data is a 0, it is coded as cytosine. If the next piece of data is a 1, it’s coded as guanine, and so on. After the data is encoded as synthetic DNA fragments, these fragments are used to identify and read the actual files stored in the DNA. In the case of the Bitcoin challenge, there were a total of nine files contained in the DNA fragments. The files were encrypted with a keystream, which is a random series of characters that is included with the actual plain text message to obfuscate its meaning. The keystream code had been provided by Goldman in a document explaining the competition. After running the code, Wuyts was able to combine the DNA fragments in the correct order to form one long piece of DNA. After working out some technical kinks, Wuyts was able to convert the DNA sequence into plain text, revealing the private key and unlocking the bitcoin (as well as some artefacts, including a drawing of James Joyce and the logo for the European Bioinformatics Institute). He had cracked the puzzle just five days before it was set to expire.” Read more of this story at Slashdot.

More:
How a PhD Student Unlocked 1 Bitcoin Hidden In DNA

Coinbase Is Making $2.7 Million a Day

An anonymous reader quotes a report from Bitcoin News: In information released to shareholders this week, Coinbase revealed that it recorded turnover of $1 billion last year, which works out at an astonishing $2.74 million a day or $2, 000 a minute. As America’s largest bitcoin broker, Coinbase claims the lion’s share of the money that’s pouring into the crypto space at a dizzying rate. 2017 was a bumper year for all crypto exchanges, which reported record numbers across the board: new signups, new staff hired, new trading pairs, and new revenue. Those revenue streams have turned into a torrent that has caused Coinbase’ coffers to swell. Recode reports that the company’s revenue exceeded $1 billion last year, most of it derived from the trading fees it levies. These vary from between 0.25% and 1%. and quickly add up: in the past 24 hours, 36, 000 BTC were traded on Coinbase, accounting for more than 15% of the total market. Coinbase isn’t the world’s largest exchange (and is technically a broker rather than a conventional exchange — that duty falls to its GDAX subsidiary) but it’s the best known and carries great weight in the cryptocurrency industry. Read more of this story at Slashdot.

More here:
Coinbase Is Making $2.7 Million a Day

We All Nearly Missed the Largest Underwater Volcano Eruption Ever Recorded

schwit1 quotes ScienceAlert: She was flying home from a holiday in Samoa when she saw it through the airplane window: a “peculiar large mass” floating on the ocean, hundreds of kilometres off the north coast of New Zealand. The Kiwi passenger emailed photos of the strange ocean slick to scientists, who realised what it was — a raft of floating rock spewed from an underwater volcano, produced in the largest eruption of its kind ever recorded. “We knew it was a large-scale eruption, approximately equivalent to the biggest eruption we’ve seen on land in the 20th Century, ” says volcanologist Rebecca Carey from the University of Tasmania, who’s co-led the first close-up investigation of the historic 2012 eruption. The incident, produced by a submarine volcano called the Havre Seamount, initially went unnoticed by scientists, but the floating rock platform it generated was harder to miss. Back in 2012, the raft — composed of pumice rock — covered some 400 square kilometres (154 square miles) of the south-west Pacific Ocean, but months later satellites recorded it dispersing over an area twice the size of New Zealand itself… for a sense of scale, think roughly 1.5 times larger than the 1980 eruption of Mount St. Helens — or 10 times the size of the 2010 Eyjafjallajokull eruption in Iceland. When an underwater robot first sent back detailed maps, one volcanologist remembers that “I thought the vehicle’s sonar was acting up… We saw all these bumps on the seafloor… It turned out that each bump was a giant block of pumice, some of them the size of a van.” Read more of this story at Slashdot.

More:
We All Nearly Missed the Largest Underwater Volcano Eruption Ever Recorded

Tesla Is Last In the Driverless Vehicle Race, Report Says

Navigant Research has compiled a new report on 19 companies working on automated driving systems, and surprisingly, Tesla came in last place. U.S. News & World Report: Navigant ranked the 19 major companies developing AV technology based on 10 criteria, including vision, market strategy, partnerships, production strategy, technology, product quality and staying power. According to the report, General Motors Co. and Waymo, the auto unit of Alphabet, are the top two AV investment opportunities in the market today. Tesla and Apple are the two biggest laggards in the AV race, according to Navigant’s rankings. Investors are acutely aware of Tesla’s production and distribution disadvantages compared to legacy automakers like GM, but Navigant is also highly critical of Tesla’s technology. “The autopilot system on current products has stagnated and, in many respects, regressed since it was first launched in late 2015, ” Navigant says in the report, according to Ars Technica. “More than one year after launching V2, Autopilot still lacks some of the functionality of the original, and there are many anecdotal reports from owners of unpredictable behavior.” Read more of this story at Slashdot.

Read the original:
Tesla Is Last In the Driverless Vehicle Race, Report Says

Wine 3.0 Released

prisoninmate shares a report from Softpedia: The Wine (Wine Is Not an Emulator) project has been updated today to version 3.0, a major release that ends 2017 in style for the open-source compatibility layer capable of running Windows apps and games on Linux-based and UNIX-like operating systems. Almost a year in the works, Wine 3.0 comes with amazing new features like an Android driver that lets users run Windows apps and games on Android-powered machines, Direct3D 11 support enabled by default for AMD Radeon and Intel GPUs, AES encryption support on macOS, Progman DDE support, and a task scheduler. In addition, Wine 3.0 introduces the ability to export registry entries with the reg.exe tool, adds various enhancements to the relay debugging and OLE data cache, as well as an extra layer of event support in MSHTML, Microsoft’s proprietary HTML layout engine for the Windows version of the Internet Explorer web browser. You can read the full list of features and download Wine 3.0 from WineHQ’s website. Read more of this story at Slashdot.

Read More:
Wine 3.0 Released

America’s Fastest Spy Plane May Be Back — And Hypersonic

A Lockheed Skunk Works executive implied last week at an aerospace conference that the successor to one of the fastest aircraft the world has seen, the SR-71 Blackbird, might already exist. Previously, Lockheed officials have said the successor, the SR-72, could fly by 2030. Bloomberg reports: Referring to detailed specifics of company design and manufacturing, Jack O’Banion, a Lockheed vice president, said a “digital transformation” arising from recent computing capabilities and design tools had made hypersonic development possible. Then — assuming O’Banion chose his verb tense purposely — came the surprise. “Without the digital transformation, the aircraft you see there could not have been made, ” O’Banion said, standing by an artist’s rendering of the hypersonic aircraft. “In fact, five years ago, it could not have been made.” Hypersonic applies to speeds above Mach 5, or five times the speed of sound. The SR-71 cruised at Mach 3.2, more than 2, 000 mph, around 85, 000 feet. “We couldn’t have made the engine itself — it would have melted down into slag if we had tried to produce it five years ago, ” O’Banion said. “But now we can digitally print that engine with an incredibly sophisticated cooling system integral into the material of the engine itself and have that engine survive for multiple firings for routine operation.” The aircraft is also agile at hypersonic speeds, with reliable engine starts, he said. A half-decade before, he added, developers “could not have even built it even if we conceived of it.” Read more of this story at Slashdot.

Read More:
America’s Fastest Spy Plane May Be Back — And Hypersonic

China Builds ‘World’s Biggest Air Purifier’ That Actually Works

The South China Morning Post shares an update on the status of an experimental tower in northern China, dubbed the world’s biggest air purifier by its operators. According to the scientist leading the project, the tower — which stands over 328 feet (100 meters) tall — has brought a noticeable improvement in air quality. From the report: The head of the research, Cao Junji, said improvements in air quality had been observed over an area of 10 square kilometers (3.86 square miles) in the city over the past few months and the tower has managed to produce more than 10 million cubic meters (353 million cubic feet) of clean air a day since its launch. Cao added that on severely polluted days the tower was able to reduce smog close to moderate levels. The system works through greenhouses covering about half the size of a soccer field around the base of the tower. Polluted air is sucked into the glasshouses and heated up by solar energy. The hot air then rises through the tower and passes through multiple layers of cleaning filters. The average reduction in PM2.5 — the fine particles in smog deemed most harmful to health — fell 15 per cent during heavy pollution. Cao said the results were preliminary because the experiment is still ongoing. The team plans to release more detailed data in March with a full scientific assessment of the facility’s overall performance. Read more of this story at Slashdot.

Continue Reading:
China Builds ‘World’s Biggest Air Purifier’ That Actually Works

Lenovo Discovers and Removes Backdoor In Networking Switches

An anonymous reader writes: Lenovo engineers have discovered a backdoor in the firmware of RackSwitch and BladeCenter networking switches. The company released firmware updates last week. The Chinese company said it found the backdoor after an internal security audit of firmware for products added to its portfolio following the acquisitions of other companies. Lenovo says the backdoor affects only RackSwitch and BladeCenter switches running ENOS (Enterprise Network Operating System). The backdoor was added to ENOS in 2004 when ENOS was maintained by Nortel’s Blade Server Switch Business Unit (BSSBU). Lenovo claims Nortel appears to have authorized the addition of the backdoor “at the request of a BSSBU OEM customer.” In a security advisory regarding this issue, Lenovo refers to the backdoor under the name of “HP backdoor.” The backdoor code appears to have remained in the firmware even after Nortel spun BSSBU off in 2006 as BLADE Network Technologies (BNT). The backdoor also remained in the code even after IBM acquired BNT in 2010. Lenovo bought IBM’s BNT portfolio in 2014. Read more of this story at Slashdot.

See more here:
Lenovo Discovers and Removes Backdoor In Networking Switches

macOS High Sierra’s App Store System Preferences Can Be Unlocked With Any Password

A bug report submitted on Open Radar this week reveals a security vulnerability in the current version of macOS High Sierra that allows the App Store menu in System Preferences to be unlocked with any password. From a report: MacRumors is able to reproduce the issue on macOS High Sierra version 10.13.2, the latest public release of the operating system, on an administrator-level account by following these steps: 1. Click on System Preferences. 2. Click on App Store. 3. Click on the padlock icon to lock it if necessary. 4. Click on the padlock icon again. 5. Enter your username and any password. 6. Click Unlock. As mentioned in the radar, System Preferences does not accept an incorrect password with a non-administrator account. We also weren’t able to unlock any other System Preferences menus with an incorrect password. We’re unable to reproduce the issue on the third or fourth betas of macOS High Sierra 10.13.3, suggesting Apple has fixed the security vulnerability in the upcoming release. However, the update currently remains in testing. Read more of this story at Slashdot.

More:
macOS High Sierra’s App Store System Preferences Can Be Unlocked With Any Password