First Version of Sandboxed Tor Browser Available

An anonymous reader writes: To protect Tor users from FBI hacking tools that include all sorts of Firefox zero-days, the Tor Project started working on a sandboxed version of the Tor Browser in September. Over the weekend, the Tor Project released the first alpha version of the sandboxed Tor Browser. “Currently, this version is in an early alpha stage, and only available for Linux, ” reports BleepingComputer. “There are also no binaries available, and users must compile it themselves from the source code, which they can grab from here.” The report notes: “Sandboxing is a security mechanism employed to separate running processes. In computer security, sandboxing an application means separating its process from the OS, so vulnerabilities in that app can’t be leveraged to extend access to the underlying operating system. This is because the sandboxed application works with its own separate portion of disk and memory that isn’t linked with the OS.” Read more of this story at Slashdot.

Originally posted here:
First Version of Sandboxed Tor Browser Available

Researchers Point Out ‘Theoretical’ Security Flaws In AMD’s Upcoming Zen CPU

An anonymous reader writes from a report via BleepingComputer: The security protocol that governs how virtual machines share data on a host system powered by AMD Zen processors has been found to be insecure, at least in theory, according to two German researchers. The technology, called Secure Encrypted Virtualization (SEV), is designed to encrypt parts of the memory shared by different virtual machines on cloud servers. AMD, who plans to ship SEV with its upcoming line of Zen processors, has published the technical documentation for the SEV technology this past April. The German researchers have analyzed the design of SEV, using this public documentation, and said they managed to identify three attack channels, which work, at least in theory. [In a technical paper released over the past weekend, the researchers described their attacks:] “We show how a malicious hypervisor can force the guest to perform arbitrary read and write operations on protected memory. We describe how to completely disable any SEV memory protection configured by the tenant. We implement a replay attack that uses captured login data to gain access to the target system by solely exploiting resource management features of a hypervisor.” AMD is scheduled to ship SEV with the Zen processor line in the first quarter of 2017. Read more of this story at Slashdot.

Read More:
Researchers Point Out ‘Theoretical’ Security Flaws In AMD’s Upcoming Zen CPU

Maliciously crafted video can freeze your iOS device

If you thought last year’s iOS text crash bug was a headache, you’d better brace yourself. EverythingApplePro and other users have confirmed that at least one maliciously crafted video is guaranteed to trigger a memory leak and freeze iOS devices, even if they’re running something as ancient as iOS 5. All you have to do is play the linked video file in Safari — your iPhone, iPad or iPod will lock up within a few seconds, forcing you to hard reboot to regain control of your gear. It’s so far useful only for cruel pranks (you should be fine afterward), but these kinds of quirks can occasionally be used as part of security breaches. The trick is limited to unaltered files, so you don’t have to worry about a YouTube link or other processed video bringing your device to a screeching halt. And of course, the immediate precaution is to avoid tapping direct video links (particularly from known hosts like vk.com and testtrial.site90.net) if you don’t know that you can trust them. The problem, as you might surmise, is that attackers may use link shorteners or otherwise try to hide the nature of the video. We’ve reached out to Apple about its plans for a fix, and we’ll let you know if can outline plans. It won’t be surprising if there’s already a patch in the works. Don’t be surprised if it’s focused strictly on iOS 10 users, though. The latest version already had 60 percent adoption as of late October, and many of those running iOS 9 can upgrade. An iOS 10-only fix would (eventually) cover the vast majority of users. Via: 9to5Mac , MacRumors Source: EverythingApplePro (YouTube) , Reddit

Read More:
Maliciously crafted video can freeze your iOS device

Tesco Bank breached: Money stolen from 20,000 accounts

The UK’s Tesco Bank has confirmed that tens of thousands of its customers’ current accounts were compromised over the weekend, leading to fraudulent withdrawals to the tune of several hundreds of pounds, in some instances. Suspicious activity was seen across some 40, 000 accounts, with money taken from around 20, 000 of those, the bank’s chief exec told the BBC . In reaction, Tesco Bank has temporarily frozen all online payment facilities for current accounts, and guaranteed affected customers will receive full refunds as soon as possible. Tesco Bank has said in its latest update that cards can still be used to withdraw cash, as well as make chip and pin transactions. All scheduled direct debits and bill payments are unaffected, too, though customers should’ve been contacted and told all this already. In the immediate aftermath, overwhelmed support phone lines, cancelled cards and the online payments freeze will be a serious inconvenience, not to mention the missing money. But how did this happen in the first place? As yet, we have no real details on the nature of the breach, but of all online services, you expect banking to be unfalteringly secure. Local telco TalkTalk lost 100, 000 customers after last year’s hack exposed personal details — as well as being fined £400, 000 (around $500, 000) just last month. Rebuilding trust after losing customers’ money will be a much taller order, even if only 40, 000 of more than 7 million current accounts were compromised. It could, of course, have been a very sophisticated attack — or lax security, or facilitated by someone on the inside. For now, Tesco Bank will be scrambling to fix the situation, and is working “with the authorities and regulators to address the fraud.” But hopefully it won’t be too long before we understand more about the breach’s origins. Source: Tesco (1) , (2)

Read More:
Tesco Bank breached: Money stolen from 20,000 accounts

Six next-gen battery technologies

By Cat DiStasio We all love our battery -powered gadgets, but portable power cells can be devastating to the environment. Fortunately, recent developments have proven that greener batteries are coming in the not-too-distant future. Engineers are replacing toxic components with less harmful materials ranging from leaves to sugar . Other innovations on the rise look to nature to help make batteries last longer, perform better and leave less of a trace once they’ve been discarded. This gold nanowire-based battery , for instance, was created by accident and could make lithium ion batteries obsolete, while this single-use battery dissolves in water when its job is done, making it easier to reuse its components. The leafy green battery A team of University of Maryland researchers sought to develop an inexpensive material to serve as their batteries’ negative terminal (anode). In the end, they found the perfect material right on campus. The team found that oak leaves could be heated to 1, 000 degrees Celsius to destroy the existing carbon structures, and then introduced the electrolytes to the leaf’s natural pores for absorption. The result is a plant-based anode that performs similarly to traditional battery components. Research is ongoing to test other natural materials, such as peat moss, banana peels and melon skins in search of the nature-based battery of the future. A graphene battery that charges in an instant Scientists are working hard to create rechargeable batteries that can withstand more use. Australia’s Swinburne University has created a new graphene-based battery that shows rapid charging abilities — and it has enough durability to last virtually forever. Super strong graphene replaces lithium in the battery’s supercapacitor, addressing all of the shortcomings of that widely used material while also reducing the environmental impact of battery production. The graphene-based supercapacitor allows the new battery to charge to 100 percent power in just a few seconds, it can withstand many more recharging cycles and it also costs less to produce than traditional lithium-ion batteries. Sweet and cheap: a battery fueled by sugar A Virginia Tech team developed a sugar battery that lasts longer than any previous sugar-based prototypes could. Maltodextrin, a polysaccharide made from the partial hydrolysis of starch, is isolated from natural sugar and then used as fuel. When combined with air, the battery releases electrons from the sugar solution to generate electricity. Sugar is cheap and abundant, so it makes for a battery that’s not only affordable, but biodegradable as well. Gold-based battery that doesn’t die An accidental discovery by researchers at University of California, Irvine led to a technological breakthrough that could leave lithium-ion batteries in the dust. The team built a nanowire battery using gold and some new-fangled materials, and it can be recharged hundreds of thousands of times without slacking in the performance department like lithium-ion batteries are known to do over time. The battery consists of protected electrode nanowires made from a thin core of gold, surrounded by layers of manganese dioxide and a Plexiglas-like electrolyte gel. Although the team had initially been searching for innovations to increase the power capacity of batteries, they stumbled upon this method of building a battery that can last basically forever without showing any signs of wear. Self-destructing battery dissolves in water A self-destructing battery won’t come in handy for everyone, but the development of this dissolving energy storage device is a key innovation for certain applications where single-use batteries are currently being left behind to pollute the surrounding environment. Created by a team at Iowa State University, this battery is designed to self-destruct when triggered by light, heat or liquid, so it’s well suited for military applications and other so-called “transient” devices that require a power source for a finite amount of time. Certain medical devices and environmental sensors might fall into this category, and since the battery simply dissolves in water once it has served its purpose, its lasting impact on the environment is approximately nil. Edible saltwater battery Although there’s probably no need to eat a battery, you could chow down on parts of this one if you really felt compelled. In an attempt to demonstrate how natural and eco-friendly his company’s new battery really is, Jay Whitacre at Aquion Energy has eaten parts of the saltwater-based battery, and lived to tell. The battery’s components are comprised largely of naturally derived materials such as dirt, cotton, carbon and saltwater acting as an electrolyte solution. While hardly a delicious meal, the battery components demonstrate an ecological sensitivity not often found in the energy storage field. This battery is designed for large-scale jobs, such as providing backup power for a home or business equipped with a renewable energy source, such as wind or solar. It can also be charged up with off-peak grid power, to save money on energy use during peak times when prices are higher.

See more here:
Six next-gen battery technologies

Windows 10 one year later: The Anniversary Update

Last year’s  Windows 10 release  was unlike any Windows release I’ve ever used before, and I’ve used most of them. Almost every Windows release to-date had a sort of unfinished vibe that reflects the product’s history. Parts of the operating system developed long ago have almost fossilized, being preserved verbatim in each subsequent release. It gives the entire operating system an overall incomplete feel. Take Control Panel as an example. The oldest parts of Control Panel use dialogs for each group of settings, as this mouse window exemplifies. Those tabs are extensible by third parties. That SetPoint Settings tab, for example, launches Logitech’s mouse app for configuring the various buttons on my Performance MX mouse. New systems to this very day continue to use this extensibility; most Windows laptops will have a tab to configure their touchpad. Read 92 remaining paragraphs | Comments

Read More:
Windows 10 one year later: The Anniversary Update

China Creates World’s First Graphene Electronic Paper

An anonymous reader writes from a report published on Tech Times: China has developed the world’s first graphene electronic paper that can possibly revolutionize the screen displays on electronic gadgets such as wearable devices and e-readers. Developed by Guangzhou OED Technologies in partnership with another company in the Chongqing Province, the material is also the world’s lightest and strongest material in prevalence today. It’s 0.335 nanometers thick and can be used to create hard or flexible graphene displays. Graphene e-paper comes with the capability to conduct both heat and electricity, and it can supposedly enhance optical displays to a brighter level, owing to its high-light transmittance properties. What about cost? Since it’s derived from carbon, graphene-based e-papers can be easily produced cost-effectively. Traditional e-papers use indium metal for their display, which is very expensive and rare to source. Read more of this story at Slashdot.

See more here:
China Creates World’s First Graphene Electronic Paper

Watch Two Guys Build This Gorgeous House From Scratch Using Only Hand Tools

We can just about guarantee you’ve never seen a home built this way. Nor witnessed every step of the process. Literally every step; these two guys start off by felling the freaking trees that they will themselves process into lumber, then proceed to erect an entire house, with a process and results that are about as green as you can get: (Did you spot the shou sugi ban wood-burning-and-preserving technique being used?) So who are these guys? One of the men in the video is Jacob, the founder of Latvia-based John Neeman Tools . That’s a small company of craftsmen and friends who produce hand-forged hand tools and knives, with multiple skillsets between them: Traditional carpentry, bladesmithing and leather crafting. I believe the other gent is Siluan, one of the company’s master carpenters, judging by the company’s crew page . The fact that they haven’t splashed their names, nor even the company’s name, across the video is telling; they seem less interested in self-promotion and more interested in sharing their craftsmanship. Which as you saw, is crazily impressive. “In the building process [we] used mostly traditional carpenters hand tools—axes, hand saws, timber framing chisels and slicks, old Stanley planes, augers, draw knives and mostly human energy, ” Jacob writes. “All the [foundation digging] was done by hand with shovels.” Some of the details: Built Using Local Materials [We built the] house from trees that [we] felled with an axe and two man crosscut saw in my own forest. The foundation consists mostly of bigger and smaller rocks and boulders. Lime, sand and concrete mixture are using only in small amounts—to hold the boulders together. The visible part over the ground level—boulder mosaic has been masoned with hand split local granite. Done on Nature’s Schedule [We felled the trees] following the research of old carpenter’s calendar that coniferous trees should be felled in January’s first days when the new moon rises and the deciduous trees should be felled in the winter time during the old moon. In winter time trees are sleeping and the juice and moisture content is very low in them. As time passes timber felled in winter becomes light and strong. Multiple Design Influences The House has been built based on the western part of Latvia – Kurland/Kurzeme (German influence) historical wooden architecture typical technique—Timber Frame construction with sliding log walls between the posts. House is two carpentry technique union—Timber Frame (that is typical in France, Germany, Great Britain, North America and other countries) and traditional Latvian log building technique, between the logs using moss from the local swamp. There Are No Fasteners In the walls, timber frame and roof construction there I used only wood joints and wooden pegs to hold the main construction together—no nails, screws or steel plates. Primarily Natural Materials, Yet High Thermal Efficiency Walls are insulated with 250mm thick dry pine and larch shaving layer (leftover from the local cabinet makers workshop). Overall exterior wall thickness is 50cm. In the walls (except wind vapour breathable membrane over the roof) has not been used any plastic or modern synthetic materials. Roof walls are insulated with ecological wood fibre wool and wood fibre panels. Over the wood fibre panels are plastered natural plaster—mixture of sand, clay powder, lime, linen fibre, salt, wheat flour. Overall thickness of the plaster is 20mm and over all amount of plaster used on the walls are 5000 kilos. It works also as thermal mass and improves energy performance. Exterior measurements of the house is 6.5 x 13 meters. Living space in both floors are 120sq/m. The house is being heated with clay plastered brick bread oven and smaller oven made of clay tiles in the kitchen. To heat up both floors of the house, when outside it is minus 10 degrees (Celsius) only small oven is heated once a day. When [the temperature] gets below -15, -20 C, we heat up the bread oven. Once it is heated, because of it+s thermal mass of 5 tons, it keeps the warmth 2-3 days. To heat up all the house (120 sq/m) in the winter time we use not more than 4 m3 of dry firewood. This is 2nd winter we are living there and we still heat up the house with the leftovers of lumber from the building process. And it will be enough for 3 more years. Built to Last for Five Centuries To preserve the wood from the spoiling, fame posts, sills, top beams and final cladding boards are treated with fire and pine tar mixed with Tung oil. This wood preservation technique was adapted from the Japanese traditional wood preservation technique Shou Sugi Ban ( ??? ). Exterior cladding boards [require] recoating each 10-15 years. [With the] Tung oil and pine or birch tar mixture, the house can last more than 500 years. As an example [there are] Norwegian stave churches that [have stood] more than 500 years until [today]. Roofing is three layer white oak shingles (each 10mm thick, 120mm wide and 720mm long) laid in two directional technique. Overall amount of shingles used is 15 000 pieces. Why Do It This Way? I have fulfilled my vision to a build natural, ecological house with high thermal efficiency, low energy consumption, sustainable, using local materials such as—wood, stone, old and new clay bricks, moss, linen fibre, clay, water, lime, wheat flour, salt and wood shavings.

See the article here:
Watch Two Guys Build This Gorgeous House From Scratch Using Only Hand Tools

Doctors reveal they can 3D print body parts and tissue

3D printing isn’t just for toys and models — doctors at the Wake Forest Institute for Regenerative Medicine announced yesterday that they’ve managed to 3D print “living” tissue and organs that functioned properly when implanted in animals. The team, led by Anthony Atala, is already renowned for printing the building blocks for human bladders. But now they’ve reached another level entirely: They say it’s possible to print structures large and strong enough for humans. They’ve printed muscle structures, bone and ear tissue so far, according to Nature . With a little more work, the technology could revolutionize the way we approach surgical replacements (and finally make plenty of sci-fi biotechnology scenarios a reality). At the heart of the discovery is the Integrated Organ and Printing System (ITOP), which is unlike any 3D printer we’ve seen so far. It uses “biodegradable, plastic-like material” to form the shape of tissues, as well as water-based ink to hold cells and a series of microchannels to allow oxygen and nutrients to flow through. The idea is to make strong tissue that effectively integrates into animals and humans. Sure, we’ve been hearing about 3D printed organs for years, but this announcement is notable for several reasons. Atala’s team used the ITOP to print human-sized ears that were implanted under the skin of mice and, over the course of two months, managed to form cartilage and blood vessels. They’ve also seen similar progress when implanting muscle tissue and skull bone in rats. At this rate, it might not be too long before we start seeing human trials. Source: Nature

Continued here:
Doctors reveal they can 3D print body parts and tissue

We Finally Know What’s Inside Rosetta’s Comet

Scientists have long pondered what lies beneath the surface of comet 67P, but a study out in Nature this week has the answer: dust. Lots and lots of dust. I was hoping for space gremlins, but to planetary scientists this result is almost as exciting. Read more…

See the article here:
We Finally Know What’s Inside Rosetta’s Comet