AMI Firmware Source Code, Private Key Leaked

Trailrunner7 writes “Source code and a private signing key for firmware manufactured by a popular PC hardware maker American Megatrends Inc. (AMI) have been found on an open FTP server hosted in Taiwan. Researcher Brandan Wilson found the company’s data hosted on an unnamed vendor’s FTP server. Among the vendor’s internal emails, system images, high-resolution PCB images and private Excel spreadsheets was the source code for different versions of AMI firmware, code that was current as of February 2012, along with the private signing key for the Ivy Bridge firmware architecture. AMI builds the AMIBIOS BIOS firmware based on the UEFI specification for PC and server motherboards built by AMI and other manufacturers. The company started out as a motherboard maker, and also built storage controllers and remote management cards found in many Dell and HP computers. ‘The worst case is the creation of a persistent, Trojanized update that would allow remote access to the system at the lowest possible level,’ researcher Adam Caudill said. ‘Another possibility would be the creation of an update that would render the system unbootable, requiring replacement of the mainboard.'” Read more of this story at Slashdot.

Read more here:
AMI Firmware Source Code, Private Key Leaked

Massive Data Leak Reveals How the Ultra Rich Hide Their Wealth

bshell writes “According to the CBC, there was a massive leak of “files containing information on over 120,000 offshore entities — including shell corporations and legal structures known as trusts — involving people in over 170 countries. The leak amounts to 260 gigabytes of data, or 162 times larger than the U.S. State Department cables published by WikiLeaks in 2010…In many cases, the leaked documents expose insider details of how agents would incorporate companies in Caribbean and South Pacific micro-states on behalf of wealthy clients, then assign front people called “nominees” to serve, on paper, as directors and shareholders for the corporations — disguising the companies’ true owners.” Makes a good read and there are some good interactive components. Perhaps Slashdot readers can figure out how the source of the leak, the D.C.-based International Consortium of Investigative Journalists got their hands on this data.” Read more of this story at Slashdot.

Read more here:
Massive Data Leak Reveals How the Ultra Rich Hide Their Wealth

Microsoft Makes Millions Renting Campus Space to Vendors

theodp writes “In a move that would do Bill Lumbergh (YouTube homage) proud, Microsoft has been pulling in about $25 million a year through its unusual practice of charging its vendors for occupying office space on its campus while working on Microsoft projects, according to the real estate firm that manages the program. And that’s before a planned July 1st rate increase that Microsoft informed vendors of earlier this week, which will boost the ‘chargeback’ rate for its ‘shadow workforce’ from $450 per month ($5,400 per year) for every workstation to $510 per month (or $6,120 per year). So, is there a discount if you’re moved downstairs into Storage B?” Read more of this story at Slashdot.

Read this article:
Microsoft Makes Millions Renting Campus Space to Vendors

New Catalyst Allows Cheaper Hydrogen Production

First time accepted submitter CanadianRealist writes “Electrolysis of water to produce hydrogen is very inefficient without the use of a catalyst. Unfortunately catalysts are currently made of crystals containing rare, expensive toxic metals such as ruthenium and iridium. Two chemists from the University of Calgary have invented a process to make a catalyst using relatively non-toxic metal compounds such as iron oxide, for 1/1000 the cost of currently used catalysts. It is suggested this would make it more feasible to use electrolysis of water to create hydrogen as a method of storing energy from variable green power sources such as wind and solar.” Read more of this story at Slashdot.

See original article:
New Catalyst Allows Cheaper Hydrogen Production

Animation Sophistication: The Croods Required 80 Million Compute Hours

Lucas123 writes “It may be a movie about a stone age family, but DreamWorks said its latest 3D animated movie The Croods took more compute cycles to create than any other movie they’ve made. The movie required a whopping 80 million compute hours to render, 15 million more hours than DreamWorks’ last record holder, The Rise of the Guardians. The production studio said between 300 and 400 animators worked on The Croods over the past three years. The images they created, from raw sketches to stereoscopic high-definition shots, required about 250TB of data storage capacity. When the movie industry moved from producing 2D to 3D high-definition movies over the past decade, the data required to produce the films increased tremendously. For DreamWorks, the amount of data needed to create a stereoscopic film leaped by 30%.” Read more of this story at Slashdot.

Read More:
Animation Sophistication: The Croods Required 80 Million Compute Hours

‘Energy Beet’ Power Is Coming To America

Hugh Pickens writes writes “Gosia Wonzniacka reports that farmers in Fresno County, California, supported by university experts and a $5 million state grant, are set to start construction of the nation’s first commercial-scale bio-refinery to turn beets into biofuel with farmers saying the so-called ‘energy beets’ can deliver ethanol yields more than twice those of corn per acre because beets have a higher sugar content per ton than corn. ‘We’re trying to reduce greenhouse gas emissions and to shift our transportation fuels to a lower carbon content,’ says Robert Weisenmiller. ‘The beets have the potential to provide that.’ Europe already has more than a dozen such plants, so the bio-refinery would resurrect a crop that has nearly vanished. The birthplace of the sugar beet industry, California once grew over 330,000 acres of the gnarly root vegetable (PDF), with 11 sugar mills processing the beets but as sugar prices collapsed, the mills shut down. So what’s the difference between sugar beets and energy beets? To produce table sugar, producers are looking for sucrose, sucrose and more sucrose. Energy beets, on the other hand, contain multiple sugars, meaning sucrose as well as glucose, fructose and other minor sugars, called invert sugars. To create energy beet hybrids, plant breeders select for traits such as high sugar yield, not just sucrose production. America’s first commercial energy beet bio-refinery will be capable of producing 40 million gallons of ethanol annually but the bio-refinery will also bring jobs and investment, putting about 80 beet growers and 35,000 acres back into production.” Read more of this story at Slashdot.

More:
‘Energy Beet’ Power Is Coming To America

A 50 Gbps Connection With Multipath TCP

First time accepted submitter Olivier Bonaventure writes “The TCP protocol is closely coupled with the underlying IP protocol. Once a TCP connection has been established through one IP address, the other packets of the connection must be sent from this address. This makes mobility and load balancing difficult. Multipath TCP is a new extension that solves these old problems by decoupling TCP from the underlying IP. A Multipath TCP connection can send packets over several interfaces/addresses simultaneously while remaining backward compatible with existing TCP applications. Multipath TCP has several use cases, including smartphones that can use both WiFi and 3G, or servers that can pool multiple high-speed interfaces. Christoph Paasch, Gregory Detal and their colleagues who develop the implementation of Multipath TCP in the Linux kernel have achieved 50 Gbps for a single TCP connection [note: link has source code and technical details] by pooling together six 10 Gbps interfaces.” Read more of this story at Slashdot.

Read the original:
A 50 Gbps Connection With Multipath TCP

Tracking the Web Trackers

itwbennett writes “Do you know what data the 1300+ tracking companies have on you? Privacy blogger Dan Tynan didn’t until he had had enough of being stalked by grandpa-friendly Jitterbug phone ads. Tracking company BlueKai and its partners had compiled 471 separate pieces of data on him. Some surprisingly accurate, some not (hence the Jitterbug ad). But what’s worse is that opting out of tracking is surprisingly hard. On the Network Advertising Initiative Opt Out Page you can ask the 98 member companies listed there to stop tracking you and on Evidon’s Global Opt Out page you can give some 200 more the boot — but that’s only about 300 companies out of 1300. And even if they all comply with your opt-out request, it doesn’t mean that they’ll stop collecting data on you, only that they’ll stop serving you targeted ads.” Read more of this story at Slashdot.

More here:
Tracking the Web Trackers

MasterCard Forcing PayPal To Pay Higher Fees

iComp sends this quote from El Reg: “PayPal, Google Wallet and other online payment systems face higher transaction fees from MasterCard in retaliation for their refusal to share data on what people are spending. Visa is likely to follow suit. The amount that PayPal has to pay MasterCard for every transaction will go up as the latter introduces new charges for intermediated payment processors. This change is on the grounds that such processors don’t share transaction details, which the card giants would love to get hold of as it can be used to research buying patterns and the like. Companies such as PayPal allow payments between users, so the party (perhaps a merchant) receiving the money doesn’t need to be registered with the credit-card company. PayPal collects the dosh from the payer’s card, and deducts a processing fee before passing the cash on to the receiving party. MasterCard would prefer the receiver to be registered directly so will apply the new fee from June to any payment that is staged in this way.” Read more of this story at Slashdot.

Originally posted here:
MasterCard Forcing PayPal To Pay Higher Fees

Twitter Sued For $50M For Refusing To Identify Anti-Semitic Users

redletterdave writes “After a French civil court ruled on Jan. 24 that Twitter must identify anyone who broke France’s hate speech laws, Twitter has since refused to identify the users behind a handful of hateful and anti-Semitic messages, resulting in a $50 million lawsuit. Twitter argues it only needs to comply with U.S. laws and is thus protected by the full scope of the First Amendment and its free speech privileges, but France believes its Internet users should be subject to the country’s tighter laws against racist and hateful forms of expression.” Read more of this story at Slashdot.

More:
Twitter Sued For $50M For Refusing To Identify Anti-Semitic Users