Attackers Drain CPU Power From Water Utility Plant In Cryptojacking Attack

darthcamaro writes: Apparently YouTube isn’t the only site that is draining CPU power with unauthorized cryptocurrency miners. A water utility provider in Europe is literally being drained of its CPU power via an cryptojacking attack that was undetected for three weeks. eWeek reports: “At this point, Radiflow’s (the security firm that discovered the cryptocurrency mining malware) investigation indicates that the cryptocurrency mining malware was likely downloaded from a malicious advertising site. As such, the theory that Radiflow CTO Yehonatan Kfir has is that an operator at the water utility was able to open a web browser and clicked on an advertising link that led the mining code being installed on the system. The actual system that first got infected is what is known as a Human Machine Interface (HMI) to the SCADA network and it was running the Microsoft Windows XP operating system. Radiflow’s CEO, Ilan Barda, noted that many SCADA environments still have Windows XP systems deployed as operators tend to be very slow to update their operating systems.” Radiflow doesn’t know how much Monero (XMR) cryptocurrency was mined by the malware, but a recent report from Cisco’s Talos research group revealed that some of the top un-authorized cryptocurrency campaigns generate over a million dollars per year. The average system would generate nearly $200, 000 per year. Read more of this story at Slashdot.

Follow this link:
Attackers Drain CPU Power From Water Utility Plant In Cryptojacking Attack

Crucial iPhone source code posted in unprecedented leak

Critical, top secret Apple code for the iPhone’s operating system was posted on Github, opening a new, dangerous avenue for hackers and jailbreakers to access the device, Motherboard reported. The code, known as “iBoot, ” has since been pulled, but Apple may have confirmed it was the real deal when it issued a DMCA takedown to Github, as Twitter user @supersat noted . iBoot is the iOS code that ensures a secure boot by loading and checking that kernel is properly signed by Apple before running the OS. The version that was posted to Github, supposedly by a Twitter user named @q3hardcore, was for iOS 9, but much of it likely still exists in the latest version, iOS 11. Fun thing about the DMCA: it required Apple to state, under penalty of perjury, that the iBoot source code was legit: https://t.co/PKHZqcEe6h — Karl (@supersat) February 8, 2018 The code can’t be compiled because certain files are missing, but researchers and hackers who know what to look for could probe it for vulnerabilities. “This is the biggest leak in history, ” author and security researcher Jonathan Levin told Motherboard . “The leaked sources of iBoot … bring us closer to a truly liberated iOS booted on generic arm boards and/or emulator, ” he added on Twitter . Levin and other security researchers believe the code is the real deal. iPhones used to be relatively easy to jailbreak before Apple introduced the ” secure enclave co-processor ” with the TouchID of the iPhone 5s. Now, it’s nearly impossible for hackers to even find bugs in iOS code, making iOS exploits relatively rare, unlike in Windows and Android. As such, the iBoot leak is exposing code that hardly anyone has seen before. The iBoot dump first appeared last year on Reddit, but received little notice from the security community until it hit Github. Apple considers iBoot to be such a critical part of iOS that it offers $200, 000 for vulnerabilities, the most in its bug bounty program. That means the release of the source code could amount to a gold rush for many researchers. Via: Motherboard Source: Github

Read more here:
Crucial iPhone source code posted in unprecedented leak

Why Windows Vista Ended Up Being a Mess

alaskana98 shares an article called “What Really Happened with Vista: An Insider’s Retrospective.” Ben Fathi, formerly a manager of various teams at Microsoft responsible for storage, file systems, high availability/clustering, file level network protocols, distributed file systems, and related technologies and later security, writes: Imagine supporting that same OS for a dozen years or more for a population of billions of customers, millions of companies, thousands of partners, hundreds of scenarios, and dozens of form factors — and you’ll begin to have an inkling of the support and compatibility nightmare. In hindsight, Linux has been more successful in this respect. The open source community and approach to software development is undoubtedly part of the solution. The modular and pluggable architecture of Unix/Linux is also a big architectural improvement in this respect. An organization, sooner or later, ships its org chart as its product; the Windows organization was no different. Open source doesn’t have that problem… I personally spent many years explaining to antivirus vendors why we would no longer allow them to “patch” kernel instructions and data structures in memory, why this was a security risk, and why they needed to use approved APIs going forward, that we would no longer support their legacy apps with deep hooks in the Windows kernel — the same ones that hackers were using to attack consumer systems. Our “friends”, the antivirus vendors, turned around and sued us, claiming we were blocking their livelihood and abusing our monopoly power! With friends like that, who needs enemies? I like how the essay ends. “Was it an incredibly complex product with an amazingly huge ecosystem (the largest in the world at that time)? Yup, that it was. Could we have done better? Yup, you bet… Hindsight is 20/20.” Read more of this story at Slashdot.

View original post here:
Why Windows Vista Ended Up Being a Mess

Microsoft Office 2019 Will Only Work on Windows 10

Microsoft on Thursday provided an update on Office 2019, in which it revealed that the apps will only run on Windows 10. From a report: In a support article for service and support of Windows and Office, Microsoft has revealed you’ll need to upgrade to Windows 10 if you want the latest version of Office without subscribing to the company’s Office 365 service. It’s a move that’s clearly designed to push businesses that are holding off on Office 365 into subscriptions, as the standalone Office 2019 software will only be supported on Windows 10 and not Windows 7 or Windows 8.1 machines. Microsoft is also altering the support lifecycle for Office 2019, so it will receive 5 years of mainstream support and then “approximately 2 years of extended support.” Read more of this story at Slashdot.

Link:
Microsoft Office 2019 Will Only Work on Windows 10

NVIDIA proves the cloud can replace a high-end gaming rig

A year ago, NVIDIA’s GeForce Now game-streaming service let me play The Witcher 3 , a notoriously demanding PC-only title, on a MacBook Air. This year, NVIDIA finally unveiled the Windows version of the service, and it was even more impressive. I was able to play Rainbow Six: Siege and PlayerUnknown’s Battlegrounds on underpowered PCs that sell for $200 to $300. If NVIDIA’s Mac demo was a revelation, playing high-end PC games on discount hardware felt like a miracle. Now, after testing the GeForce Now beta release on PCs for a week, I’m even more intrigued by the possibilities of game streaming. To put it simply, the service lets you remotely tap into the power of an expensive gaming rig from any computer. It runs on remote servers powered by NVIDIA’s GTX 1080Ti GPUs. While the company isn’t divulging further specifications, you can bet they’re also stuffed with more than enough RAM and CPU horsepower. (NVIDIA claimed they were the equivalent of a $1, 500 gaming PC a year ago.) When you launch GeForce Now, you’re actually watching a video streaming to your PC. But since there’s very little latency between what you’re seeing and your keyboard and mouse inputs, it feels as if the games are running right on your computer. You don’t need a very powerful PC to run the GeForce Now client. At the minimum, NVIDIA recommends using a 3.1GHz Core i3 processor and 4GB RAM, along with either Intel HD 2000, GeForce 600 series or Radeon HD 3000 graphics. Those are all specs you’ll find in PCs four to six years old. But of course, solid internet access is a must. You’ll need speeds of at least 25Mbps, but NVIDIA advises a 50Mbps connection for the best experience. You’ll also have to make sure your computer has a reliable link to your router — which means you’ll either need to use an Ethernet cable or a 5GHz Wi-Fi network. At the moment, GeForce Now on Macs and PCs only lets you play games you already own on Steam, Blizzard’s Battle.net or Ubisoft’s Uplay. Anything you don’t own can be purchased through the streaming platform. That’s a major difference from GeForce Now on NVIDIA’s SHIELD tablet and set-top box , which includes a handful of titles as part of its $7.99 monthly fee as well as games for purchase. Both versions of the service support popular titles like Overwatch, Call of Duty WWII and The Witcher 3 , but you’ll probably have to wait a bit for them to work with lesser-known games. NVIDIA isn’t specifying what it takes to make a game compatible with the service, but I’d wager it has to test them out to make sure nothing breaks in the streaming process. Setting up GeForce Now is as easy as downloading and installing the client and choosing a title to play. Then you just need to provide your login information for whichever service hosts the game. If you’re launching a Steam title, you’ll end up seeing the service’s familiar Windows interface, where you can either buy the game or download it to your library. One big downside with GeForce Now is that you’ll have to install games every time you want to play them, since you’re thrown onto a different server whenever you log in. It’s not a huge problem, though, since the remote machines are plugged into a fat network pipe and offer unlimited storage. PUBG , which weighs in at 12GB, installed in around four minutes, while The Witcher 3 (31.7GB) took over ten minutes. Devindra Hardawar/AOL On the Surface Laptop — a great ultrabook marred only by its weak integrated graphics — running over our office’s WiFi, PUBG felt almost as smooth as it does on my dedicated gaming rig. It ran at a steady 60 frames per second, even though I cranked the graphics settings to “Ultra” and the resolution to 2, 560 by 1, 400. After a few minutes of running around the game’s apocalyptic European town and taking out other players, I almost forgot I was playing something that was running on a server hundreds of miles away. The game’s excellent audio design also survived — I had no trouble pinpointing people sneaking around a house while wearing headphones, and the bomb strikes in “Red Zones” still rattled my skull. Mostly, though, I was surprised that I didn’t feel any lag while I was using the Surface Laptop’s keyboard and a Logitech wireless G903 gaming mouse. Moving the camera around and aiming my weapons felt incredibly responsive, and I was surprised that I was able to outgun some players in some heated shootouts. That lack of latency as even more impressive with Overwatch , an even faster-paced game. Characters like Tracer and Genji, both of whom would be tough to play with any noticeable lag, felt as nimble as they do on my desktop. I didn’t even have trouble landing shots with snipers like Hanzo and Ana. I was simply able to enjoy playing the game as I normally do. And, even more so than PUBG , I was impressed by how well GeForce Now handled Overwatch’s vibrant and colorful graphics. Gorgeous maps like Ilios and Dorado appeared as detailed as ever, and the same goes for the game’s imaginative character models and costumes. GeForce Now easily handled graphically intensive titles like Destiny 2 and The Witcher 3 , which felt even more impressive to play on the Surface Laptop. Both games managed to run at 60 FPS at a 2, 560 by 1, 400 resolution (the service supports up to 2, 560 by 1, 600), with all of their graphics settings turned all the way up. Even though Destiny 2 isn’t exactly a fast-paced shooter, it still benefited from the service’s low latency, which helped me mow down waves of enemies without much trouble. And with the Witcher 3 , I was impressed that its graphically rich world didn’t lose any fidelity while being streamed. Perhaps because these games are particularly demanding, I occasionally experienced connection hiccups while playing them. They only lasted a few seconds, but if I were fighting against tough bosses, they could have easily led to my doom. Those disruptions also made it clear that your experience with GeForce Now will depend largely on your internet connection. I had a mostly trouble-free experience in our office and at home, where I have 100 Mbps cable service. But if you don’t have a steady 25 Mbps connection, Ethernet access or strong wireless reception, you’ll likely see more gameplay-disrupting issues. I wasn’t able to run any games at Starbucks locations around NYC, and based on my terrible experiences with hotel WiFi, I’d wager you’d have trouble using GeForce Now while traveling, too. (The service is only supported in the US and Europe, at the moment.) Devindra Hardawar/AOL The big problem with GeForce Now? We don’t know what the service will look like once it leaves beta. You can request access now , and if you’re lucky enough to get in, you can test the service for free. NVIDIA isn’t giving us a timeframe for an official release, or how much it’ll eventually cost. Based on what we typically see with streaming services, I’d also expect GeForce Now’s smooth performance to take a hit once it’s open to the hordes of frag-happy gamers. For now, though, it’s a glimpse at the true future of gaming — a world where we don’t have to worry if our video cards are fast enough, or if we have enough hard drive space for a massive open world game. Well, as long as you have an internet connection fast enough to handle all of that gaming goodness.

View article:
NVIDIA proves the cloud can replace a high-end gaming rig

LibreOffice 6.0 Released: Features Superior Microsoft Office Interoperability, OpenPGP Support

prisoninmate writes: LibreOffice 6.0 comes two and a half years after the LibreOffice 5.x series, and it’s the biggest release of the open-source and cross-platform office suite so far. It introduces a revamped design with new table styles, improved Notebookbars, new gradients, new Elementary icons, menu and toolbar improvements, and updated motif/splash screen. LibreOffice 6.0 offers superior interoperability with Microsoft Office documents and compatibility with the EPUB3 format by allowing users to export ODT files to EPUB3. It also lets you import your AbiWord, Microsoft Publisher, PageMaker, and QuarkXPress documents and templates thanks to the implementation of a set of new open-source libraries contributed by the Document Liberation project. Many great improvements were made to the OOXML and ODF filters, as well as in the EMF+, Adobe Freehand, Microsoft Visio, Adobe Pagemaker, FictionBook, Apple Keynote, Pages, and Numbers, as well as Quattro Pro import functionality, and to the XHTML export. LibreOffice Online received numerous improvements as well in this major release of LibreOffice. Read more of this story at Slashdot.

View article:
LibreOffice 6.0 Released: Features Superior Microsoft Office Interoperability, OpenPGP Support

Microsoft’s new Windows 10 Spectre patch disables Intel’s ‘fix’

Intel recently admitted that its latest patch for “Spectre” was essentially worse than the bug it was supposed to fix, as it was causing computers to spontaneously reboot. Now, Microsoft has taken action by issuing an out-of-band patch for Windows 7, 8.1 and 10 that disables that fix for Spectre variant 2. If you’re experiencing the problem you’ll need to download the update, as it won’t yet install automatically. Microsoft said that its internal testing shows the patch will stop the rebooting until Intel gets a new update together. Intel had already recommended that customers stop deploying the original patch, but that’s obviously impossible for individual Windows users, as the fixes come bundled in Microsoft’s own security updates. Intel dodged a bullet when its latest earnings report showed minimal financial impact from Spectre and Meltdown. However, it has been criticized by security experts over its lack of forthrightness about the scope of the problem. At one point, the chip maker had said the faulty patches only affect older CPUs, but later admitted that it can cause newer computers to reboot for no good reasons, too. Intel took another knock over the weekend for reportedly disclosing Meltdown and Spectre to Chinese customers like Lenovo and Alibaba before it even told the US government. The concern was that the Chinese government could have found out about the vulnerability and exploited it. Meanwhile, Intel has promised to release new patches for Spectre and Meltdown soon, and said chips invulnerable to the problem are coming later this year. Via: The Verge Source: Microsoft

Read more here:
Microsoft’s new Windows 10 Spectre patch disables Intel’s ‘fix’

Amateur Astronomer Discovers Long-Dead NASA Satellite Has Come Back To Life

schwit1 shares a report from Behind The Black: In his hunt to locate Zuma, an amateur astronomer has discovered that a long-dead NASA satellite, designed to study the magnetosphere, has come back to life. IMAGE went dead in 2005, and though NASA thought it might come back to life after experiencing a total eclipse in 2007 that would force a reboot, no evidence of life was seen then. It now appears that the satellite came to life sometime between then and 2018, and was chattering away at Earth waiting for a response. NASA is now looking at what it must do to take control of the spacecraft and resume science operations. Zuma is the secret U.S. government payload that was launched by SpaceX earlier this month and reportedly lost. As for why Scott Tilley — the amateur radio astronomer — decided to have a look for the present of secret military satellites, Ars Technica reports that he apparently does this semi-regularly as a hobby and, in this case, was inspired by the Zuma satellite. Read more of this story at Slashdot.

See more here:
Amateur Astronomer Discovers Long-Dead NASA Satellite Has Come Back To Life

Australian Birds of Prey Are Deliberately Setting Forests On Fire

An anonymous reader writes: If you’ve been counting the ways the Australian environment is trying to kill you, you can now add “arson” to the list. According to a six-year study published in The Journal of Ethnobiology, observers have confirmed what Aboriginal rangers have been observing for years: birds of prey routinely carry burning or smouldering sticks into dry grassy areas to scare small mammals into fleeing so they can be pack-hunted more effectively. This has implications for environmental management, since the best firebreak will not protect your controlled burn from a “firehawk” determined to breach it. Read more of this story at Slashdot.

Read More:
Australian Birds of Prey Are Deliberately Setting Forests On Fire

The Windows 10 control panel modernization continues: Fonts get some love

Enlarge / The Settings app is gaining new powers to control your PC’s settings. (credit: Thurrott.com ) The Windows user interface has a certain archaeological quality to it. While the upper layers tend to be new—using the styling and conventions of the day—dig a little deeper and you can find elements that are decades old. With each Windows release, Microsoft has heaped new stuff onto the pile, but it hasn’t spent much time going back and revamping the old bits. Very occasionally, the relics of yesteryear are identified and excised, but more often than not, they’re left alone. One area where this is particularly plain is Control Panel. Control Panel spans many eras of Windows development, and so Windows’ settings are spread across three different styles of interface. The very oldest are the individual Control Panel applets in their tabbed dialog boxes; more recent are the Explorer-based Control Panels. The very newest is the Settings app. With Windows 10, the company has, for the first time ever, taken serious strides toward modernizing even old parts of the operating system. With each new update, more and more settings are being moved from Control Panel into the Settings app. This creates the possibility that perhaps one day Windows will have a single application that is used for all its major settings and configurations. Read 4 remaining paragraphs | Comments

See the original article here:
The Windows 10 control panel modernization continues: Fonts get some love