UK outlaws awful default passwords on connected devices
If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password "password." In fact, you're not supposed to have default passwords at all. A new version of the 2022 Product Security and Telecommunications Infrastructure Act (PTSI) is now in effect, covering just about everything that a consumer can buy that connects to the web. Und
How Google Authenticator made one company’s network breach much, much worse
A security company is calling out a feature in Google’s authenticator app that it says made a recent internal network breach much worse. Retool, which helps customers secure their software development platforms, made the criticism on Wednesday in a post disclosing a compromise of its customer support system. The breach gave the attackers responsible access to the accounts of 27 customers, all in t
パスワードの代替「パスキー」が続々登場、Microsoft・Apple・Googleが対応
Ars Technicaは10月25日(米国時間)、「Passkeys—Microsoft, Apple, and Google’s password killer—are finally here｜Ars Technica」において、安全で使いやすいパスワードの代用品がついに登場したと伝えた。Microsoft、Apple、Googleの「パスキー(Passkeys)」の登場によって、パスワードの代替手段を手に入れることが可能になったという。 パスワードに変わる新たな選択肢として、パスキーが具現化した。もともと認証情報をハードウェアに保存するためのさまざまなスキームのことをパスキーと呼び、コンセプトは10年以上前から存在していた。パスキーは、パスワードよりも使いやすく、クレデンシャルフィッシングやクレデンシャルスタッフィング、アカウント乗っ取り攻撃にも完全な耐性があるといわれている。 F
Windows、Linuxなど機器問わず感染するマルウェア「Chaos」が世界に拡散中 | Gadget Gate
テクノロジー ソースコードには中国語 Windows、Linuxなど機器問わず感染するマルウェア「Chaos」が世界に拡散中 Image:Jozsef Bagota-Shutterstock ネットワーク企業Lumen Technologiesのサイバーセキュリティ部門Black Lotus Labsが、WindowsやLinux、FreeBSDなどのエンタープライズサーバーから、SOHO向けのネットワーク機器まで、広範なデバイスを標的にするマルウェア「Chaos」を発見したと発表した。 この悪質なソフトウェアはLinuxボットネット「Kaiji」をベースとした機能を含んでおり、その亜種とも見られている。またGo言語で書かれたソースコードには中国語が含まれており、中国のC2（C&C：Command & Control）インフラによって操作されているとのこと。 Chaosは、遅くとも4月16
世界的な半導体不足によって偽造チップが広がっている
新型コロナウイルスのパンデミックにより需要と供給のバランスは崩壊し、世界的な半導体不足が広がっています。この半導体不足が偽造チップや偽造デバイスの急増を引き起こしており、標準以下の品質のコンポーネントにより電子機器の寿命や信頼性に悪影響が生じ始めている、と電子機器サプライチェーンに関する業界団体The Independent Distributors of Electronics Association(IDEA)の創設者であるスティーブ・カラブリア氏が語っています。 The global chip shortage is creating a new problem: More fake components | ZDNet https://www.zdnet.com/article/the-global-chip-shortage-is-creating-a-new-problem-m
Spotify reportedly in “advanced stages” of acquiring podcast company for $230M
Multiple outlets, citing unnamed sources, reported on Friday that Spotify is in the "advanced stages" of acquiring a leading podcast production company. The rumored deal is no slouch: $230 million to acquire Gimlet Media, the company responsible for highly trafficked podcasts such as Reply All, Science Vs., and StartUp. Recode and The Wall Street Journal each reported a Gimlet bid from Spotify in
How 10 leading companies are trying to make powerful, low-cost lidar
Lidar, short for light radar, is a crucial enabling technology for self-driving cars. The sensors provide a three-dimensional point cloud of a car's surroundings, and the concept helped teams win the DARPA Urban Challenge back in 2007. Lidar systems have been standard on self-driving cars ever since. In recent years, dozens of lidar startups have been created to challenge industry leader Velodyne.
Facebook VPN that snoops on users is pulled from Android store
Facebook has pulled its privacy-invading Onavo Protect VPN app off the Google Play store and will reportedly stop gobbling up data from users who still have the app on their devices. Facebook "will immediately cease pulling in data from [Onavo] users for market research though it will continue operating as a Virtual Private Network in the short term to allow users to find a replacement," TechCrunc
Supermicro hardware weaknesses let researchers backdoor an IBM cloud server
More than five years have passed since researchers warned of the serious security risks that a widely used administrative tool poses to servers used for some of the most sensitive and mission-critical computing. Now, new research shows how baseboard management controllers, as the embedded hardware is called, threaten premium cloud services from IBM and possibly other providers. In short, BMCs are
Linux hard locks with AMD Ryzen 2500u VEGA Graphics - VMC page fault
Hello I have a Lenovo E585 laptop with AMD 2500u processor and Radeon VEGA graphics. I'm running the latest KDE Neon with mainline kernel 4.19.5 currently using the standard MESA drivers that come with the distro (version 18.0.5). Unfortunately, I keep experiencing random hard locks - they seem to be more likely when performing something graphically intensive but can occur when just using the desk
An AI crushed two human pros at StarCraft—but it wasn’t a fair fight
Enlarge / Two groups of Stalkers controlled by AI AlphaStar approach the army of Grzegorz "MaNa" Komincz in the decisive battle of the pair's fourth game. DeepMind, the AI startup Google acquired in 2014, is probably best known for creating the first AI to beat a world champion at Go. So what do you do after mastering one of the world's most challenging board games? You tackle a complex video game
Google Play malware used phones’ motion sensors to conceal itself
Malicious apps hosted in the Google Play market are trying a clever trick to avoid detection—they monitor the motion-sensor input of an infected device before installing a powerful banking trojan to make sure it doesn’t load on emulators researchers use to detect attacks. The thinking behind the monitoring is that sensors in real end-user devices will record motion as people use them. By contrast,
Monster 773 million-record breach list contains plaintext passwords
Have I Been Pwned, the breach notification service that serves as a bellwether for the security of login credentials, has just gotten its hands on its biggest data haul ever—a list that includes almost 773 million unique email addresses and 21 million unique passwords that were used to log in to third-party sites. According to Have I Been Pwned founder Troy Hunt in a post published Wednesday, the
EFF flips Bird the bird, says Boing Boing post doesn’t violate copyright law
Enlarge / People ride shared dockless electric scooters along Venice Beach on August 13, 2018 in Los Angeles, California. According to a new letter published Friday by an Electronic Frontier Foundation lawyer, the scooter startup Bird significantly overstepped when it recently demanded that Boing Boing remove a post describing personal "conversion kits" that enable the removal of Bird’s proprietar
“Ghost guns,” underage sex, and the First Amendment: Defense Distributed’s legal saga
Plenty has happened since Ars last took a moment to outline the legal mishegas involving Defense Distributed, its founder Cody Wilson, and the future of 3D-printed guns. After a surprising settlement with the Department of Justice in summer 2018 ended a five-year legal battle, Defense Distributed finally had the go-ahead to legally publish its 3D-printable firearms CAD files online. Wilson initial
Englanders’ greasy fish and chips blamed for 64-meter-long fatberg
Another view of the fatberg, which formed in Sidmouth's unusually large sewer under the waterfront. The quiet coastal town of Sidmouth, England is known to be flush with tourists each summer. But it may now be known for another accumulating mass—one that isn’t flushable. Authorities in Sidmouth have discovered a 64-meter-long hardened clump of grease, wet wipes, and sewage—an infamous fatberg—lurk
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
High-tech toilet seat monitors your heart as you sit on the can
Japanese utility makes first contact with melted Fukushima fuel
Apple pushes fix for “FacePalm,” possibly its creepiest vulnerability ever
Ars Technica turns 20 years old, and we couldn’t have done it without the community