“Nemesis” malware hijacks PC’s boot process to gain stealth, persistence

Malware targeting banks, payment card processors, and other financial services has found an effective way to remain largely undetected as it plucks sensitive card data out of computer memory. It hijacks the computer’s boot-up routine in a way that allows highly intrusive code to run even before the Windows operating system loads. The so-called bootkit has been in operation since early this year and is part of “Nemesis,” a suite of malware that includes programs for transferring files, capturing screens logging keystrokes, injecting processes, and carrying out other malicious actions on an infected computer. Its ability to modify the legitimate volume boot record makes it possible for the Nemesis components to load before Windows starts. That makes the malware hard to detect and remove using traditional security approaches. Because the infection lives in such a low-level portion of a hard drive, it can also survive when the operating system is completely reinstalled. “The use of malware that persists outside of the operating system requires a different approach to detection and eradication,” researchers from security firm FireEye’s Mandiant Consulting wrote in a blog post published Monday . “Malware with bootkit functionality can be installed and executed almost completely independent of the Windows operating system. As a result, incident responders will need tools that can access and search raw disks at scale for evidence of bootkits.” Read 5 remaining paragraphs | Comments

Follow this link:
“Nemesis” malware hijacks PC’s boot process to gain stealth, persistence

Spike TV orders 10-episode series for Red Mars written by Babylon 5 creator

According to sources speaking to Variety , Kim Stanley Robinson’s Red Mars has been green-lighted for a 10-episode TV adaptation on Spike TV. Each episode will be an hour long, and J. Michael Straczynski, creator and writer of Babylon 5 and co-creator of Sense8 will serve as Red Mars ’ writer, co-executive producer, and showrunner. Vince Gerardis, co-executive producer of Game of Thrones , will also serve as executive producer on Red Mars with Straczynski. Robinson will reportedly be an on-the-set consultant. The Red Mars project has been on Spike TV’s plate for some time , but the network only just decided to move full-speed ahead with it, according to Variety . The show will go into production this summer and premiere in January 2017. Read 2 remaining paragraphs | Comments

Continued here:
Spike TV orders 10-episode series for Red Mars written by Babylon 5 creator

HGST beats Seagate to market with helium-filled 10TB hard drive

Western Digital’s HGST division has released the world’s first helium-filled 10TB hard drive for everyday use—assuming you have about £600 burning a hole in your pocket, anyway. Meanwhile, despite reiterating that it would have a 10TB drive on the market this year, Seagate hasn’t yet moved past the 8TB mark. The Ultrastar He10 is notable for two reasons: it’s hermetically sealed and filled with helium, which is still a rather novel idea; and it has seven platters crammed into a standard-height 25.4mm (1-inch) hard drive. PMR vs. SMR. With SMR, there’s almost no guard space between tracks, which increases density but can reduce write speed (if you want to rewrite a track in the middle, you may also have to rewrite the adjacent tracks as well). (credit: Seagate) The platters themselves are impressive, too: instead of using shingled magnetic recording (SMR) to boost areal density, these platters use conventional perpendicular magnetic recording (PMR). PMR has been the standard hard drive recording tech since 2005, when it replaced longitudinal recording. The move to PMR has increased the maximum platter density by an order of magnitude—from about 100Gb per square inch to 1000Gb—but now, alas, we’re beginning to hit the limits of PMR. Read 6 remaining paragraphs | Comments

See original article:
HGST beats Seagate to market with helium-filled 10TB hard drive

DirecTV will broadcast live 4K content by “early next year”

(credit: Adam Melancon ) Even if 4K TVs were popular Black Friday and Cyber Monday steals, there continues to be a lack of 4K content to watch on them. DirecTV wants to provide a solution: the company’s SVP of Video and Space Communications Phil Goswitz confirmed at New York’s TranSPORT conference that DirecTV will launch a live 4K broadcasting service sometime in “early 2016.” At the conference, Goswitz explained that the company currently has the ability to transmit up to 50 new UHD channels, and live sports transmissions are already being tested as part of next year’s rollout. DirecTV already has the hardware in place, and according to Goswitz, the company wants to get ahead of cable companies and provide viewers with 4K content they can’t get from their cable companies. “I think the belief that there are technology challenges is a bit of a misinformed myth,” he said. “I think technology throughout the entire ecosystem is ready. But I think content is king; the plane is ready to take off and there is no king on board.” Goswitz went on to say that DirecTV is “moving into working with partners” to create more 4K content. Currently Netflix and YouTube have some 4K video ready to stream, but most companies continue to focus on hardware. Roku and TiVo recently came out with updated set-top boxes ready for 4K streaming, but they still have to work with the finite amount of 4K content available. Read 1 remaining paragraphs | Comments

See more here:
DirecTV will broadcast live 4K content by “early next year”

Thunderbird “a tax” on Firefox development, and Mozilla wants to drop it

Mozilla would like to drop Thunderbird from its list of projects. (credit: Andrew Cunningham) You might know Mozilla primarily for its Firefox browser, but for many years the company has also developed an e-mail client called Thunderbird. The two projects use the same rendering engine and other underlying technology, but Mozilla Executive Chairwoman Mitchell Baker has announced that Mozilla would like to stop supporting Thunderbird, calling its continuing maintenance “a tax” on the more important work of developing Firefox. “Many inside of Mozilla, including an overwhelming majority of our leadership, feel the need to be laser-focused on activities like Firefox that can have an industry-wide impact,” Baker writes. “With all due respect to Thunderbird and the Thunderbird community, we have been clear for years that we do not view Thunderbird as having this sort of potential.” Mozilla doesn’t plan to drop Thunderbird immediately, however—the current maintenance schedule will continue and Thunderbird users can continue to use the product. But the end goal for Mozilla, according to Baker, is to find “the right kind of legal and financial home” for the Thunderbird project, and “[separate] itself from reliance on Mozilla development systems and in some cases, Mozilla technology.” In other words, the company would like to give Thunderbird to people who will take care of it, freeing the Firefox team from having to worry about it. Read 1 remaining paragraphs | Comments

Read More:
Thunderbird “a tax” on Firefox development, and Mozilla wants to drop it

Raspberry Pi Zero sells out within 24 hours

(credit: Wired) The Pi Zero—the new £4 Raspberry Pi —has sold out in under 24 hours. The Raspberry Pi Foundation says that around 20,000 individual Pi Zeroes have been sold in the last day, along with a further 10,000 copies of the MagPi  magazine which had a Pi Zero on the front. “You’d think we’d be used to it by now, but we’re always amazed by the level of interest in new Raspberry Pi products,” said Eben Upton, the founder of the foundation. “Right now it appears that we’ve sold every individual Zero we made… people are scouring the country for the last few Asda, Tesco, Sainsbury and Smiths branches that haven’t sold out [of the MagPi magazine],” Upton told Wired . Upton said they are producing more Zeroes “as fast as we can” at its factory in Pencoed, Wales, but didn’t specify when more stock would be available. Read 4 remaining paragraphs | Comments

View post:
Raspberry Pi Zero sells out within 24 hours

Managing a 100-percent renewable grid, without batteries

(credit: US DOE ) Stanford researcher Mark Jacobson likes to take current thinking about renewable energy and supersize it. Rather than aiming for 50 percent renewables, like California is , he has analyzed what it would take for each of the 50 states to go fully renewable . It would apparently involve so many offshore wind turbines that hurricanes headed toward the States would be suppressed. Now, he and a few collaborators are back with a more detailed look at how to manage the grid stability issues that come with large amounts of intermittent generators, like photovoltaic panes and wind turbines. Normally, issues of intermittency are expected to be handled by fossil fuel power and batteries. But the new analysis suggests we don’t need any of that—and we don’t need biofuels or nuclear, either. Instead, it suggests we could manage a 100-percent renewable grid through a combination of hydrogen production and heat storage. None of this is entirely new. People have been talking about generating hydrogen from renewable energy for years—with a fuel cell, it can be used to power cars or generate electricity as needed. And the paper cites an existing community that’s already using solar energy to generate heat that’s stored under ground. But, as with Jacobson’s past analyses, they are taken to new scales here. Read 11 remaining paragraphs | Comments

More:
Managing a 100-percent renewable grid, without batteries

Iranian military spear-phish of State Department employees detected first by Facebook

The Facebook and email accounts of US State Department officials focused on Iran were hacked, and possibly used to gather data about US-Iranian dual citizens in Iran. More details have emerged about the hacking the computers of US State Department and other government employees, first revealed earlier this month in a Wall Street Journal report . The intrusions by hackers purported to be associated with the Iranian Revolutionary Guard may be tied to the arrest of an Iranian-American businessman in Tehran in October and other arrests of dual citizens in Iran. The attackers used compromised social media accounts of junior State Department staff as part of a “phishing” operation that compromised the computers of employees working in the State Department’s Office of Iranian Affairs and Bureau of Near Eastern Affairs and computers of some journalists. The first warning of the attacks came from Facebook, which alerted some of the affected users that their accounts had been compromised by a state-sponsored attack, the New York Times reports . The Iranian Revolutionary Guard hackers used the access to identify the victims’ contacts and build “spear-phishing” attacks that gave them access to targeted individuals’ e-mail accounts. The attack “was very carefully designed and showed the degree to which they understood which of our staff was working on Iran issues now that the nuclear deal is done,” an unnamed senior US official told the Times . This most recent attack, which came after a brief period of little or no Iranian activity against US targets over the summer according to data from Check Point and iSight Partners, was a change from tactics previously associated with Iranian hackers. Earlier attacks attributed to Iran were focused on taking financial services companies’ websites offline  and destroying data—such as in the attack attack on casino company Las Vegas Sands Corp. last year after its majority owner called for a nuclear attack on Iran. These attacks may not have been carried out by the Iranian government but by Iranian or pro-Iranian “hacktivists.” The State Department attack, however, was more subtle and aimed at cyber-espionage rather than simple vengeance—bearing hallmarks of tactics attributed to Chinese state-sponsored hackers. Read 1 remaining paragraphs | Comments

Follow this link:
Iranian military spear-phish of State Department employees detected first by Facebook

TrueCrypt is safer than previously reported, detailed analysis concludes

(credit: Khürt Williams ) The TrueCrypt whole-disk encryption tool used by millions of privacy and security enthusiasts is safer than some studies have suggested, according to a comprehensive security analysis conducted by the prestigious Fraunhofer Institute for Secure Information Technology. The extremely detailed 77-page report comes five weeks after Google’s Project Zero security team disclosed two previously unknown TrueCrypt vulnerabilities . The most serious one allows an application running as a normal user or within a low-integrity security sandbox to elevate privileges to SYSTEM or even the kernel. The Fraunhofer researchers said they also uncovered several additional previously unknown TrueCrypt security bugs. Despite the vulnerabilities, the analysis concluded that TrueCrypt remains safe when used as a tool for encrypting data at rest as opposed to data stored in computer memory or on a mounted drive. The researchers said the vulnerabilities uncovered by Project Zero and in the Fraunhofer analysis should be fixed but that there’s no indication that they can be exploited to provide attackers access to encrypted data stored on an unmounted hard drive or thumb drive. According to a summary by Eric Bodden , the Technische Universität Darmstadt professor who led the Fraunhofer audit team: Read 4 remaining paragraphs | Comments

View article:
TrueCrypt is safer than previously reported, detailed analysis concludes

FDA approves first GM food animal—Atlantic salmon

(credit: Artizone/Flickr ) After two decades of deliberation, the Food and Drug Administration has approved the first ever genetically engineered food animal, a fast-growing Atlantic Salmon called AquAdvantage salmon. According the agency, which announced the approval Thursday , the modified salmon are safe to eat, equally nutritious as other salmon, and should pose no threat to the environment. First created in 1989 and submitted to the agency for approval in 1995, the Atlantic salmon are modified to carry a growth hormone gene from Chinook salmon. That gene is further engineered to be under the control of a tiny bit of DNA, called a promoter, from the eel-like ocean pout fish. In general, DNA promoters are non-coding sequences that help control the expression level of a gene—how much protein product is synthesized from the gene. With the engineered promoter boosting hormone production, the modified salmon grow to market-size in about half the time of conventional Atlantic salmon. Read 4 remaining paragraphs | Comments

View original post here:
FDA approves first GM food animal—Atlantic salmon