Author name: Paul Patrick

man-eats-dubious-street-food—ends-up-blowing-apart-his-gi-tract

Man eats dubious street food—ends up blowing apart his GI tract

Bilious blowout

Doctors noted that his breath was fast and shallow, with crackling in his neck. But breathing sounds from the base of his right lung were quiet. A computed tomography (CT) scan revealed the problems. There was air in his chest space and into his neck. Fluid was also building up around his lungs, and his right lung was collapsing. The scan also showed a perforation in the esophagus.

The doctors inserted a chest tube to remove the fluid, which did not include gastric contents, suggesting the fluid build-up was from chest inflammation.

The doctors then did an additional X-ray exam of the esophagus using a water-soluble contrast agent. This clearly revealed a large gash in the man’s esophagus resulting from the robust eruption. The imaging also showed the contrast agent leaking out into the man’s chest.

The doctors quickly sent the man into emergency surgery to repair his esophagus. He spent the next 35 days in the hospital recovering. When he was discharged, he still had a feeding tube that passed through his nose and into his small intestine. It took an additional three months for the perforation to completely heal, at which point doctors could finally remove the feeding tube.

It’s not entirely clear what causes Boerhaave syndrome. Researchers hypothesize that it occurs from a loss of neuromuscular coordination, which, in particular, causes the upper sphincter in the esophagus—the cricopharyngeus—to fail to relax at the onset of vomiting. The rapid rise of internal pressure overwhelms the esophagus, typically causing a lengthwise tear in the lower third of the tube, which is the weakest portion. On average, tears can be up to 8 centimeters (about 3 inches) long.

Though researchers expect that cases are underreported, the estimated incidence based on reports is about three cases per million people globally each year.

Man eats dubious street food—ends up blowing apart his GI tract Read More »

judge:-pirate-libraries-may-have-profited-from-meta-torrenting-80tb-of-books

Judge: Pirate libraries may have profited from Meta torrenting 80TB of books

It could certainly look worse for Meta if authors manage to present evidence supporting the second way that torrenting could be relevant to the case, Chhabaria suggested.

“Meta downloading copyrighted material from shadow libraries” would also be relevant to the character of the use, “if it benefitted those who created the libraries and thus supported and perpetuated their unauthorized copying and distribution of copyrighted works,” Chhabria wrote.

Counting potential strikes against Meta, Chhabria pointed out that the “vast majority of cases” involving “this sort of peer-to-peer file-sharing” are found to “constitute copyright infringement.” And it likely doesn’t help Meta’s case that “some of the libraries Meta used have themselves been found liable for infringement.”

However, Meta may overcome this argument, too, since book authors “have not submitted any evidence” that potentially shows how Meta’s downloading may perhaps be “propping up” or financially benefiting pirate libraries.

Finally, Chhabria noted that the “last issue relating to the character of Meta’s use” of books in regards to its torrenting is “the relationship between Meta’s downloading of the plaintiffs’ books and Meta’s use of the books to train Llama.”

Authors had tried to argue that these elements were distinct. But Chhabria said there’s no separating the fact that Meta downloaded the books to serve the “highly transformative” purpose of training Llama.

“Because Meta’s ultimate use of the plaintiffs’ books was transformative, so too was Meta’s downloading of those books,” Chhabria wrote.

AI training rulings may get more authors paid

Authors only learned of Meta’s torrenting through discovery in the lawsuit, and because of that, Chhabria noted that “the record on Meta’s alleged distribution is incomplete.”

It’s possible that authors may be able to show evidence that Meta “contributed to the BitTorrent network” by providing significant computing power that could’ve meaningfully assisted shadow libraries, Chhabria said in a footnote.

Judge: Pirate libraries may have profited from Meta torrenting 80TB of books Read More »

microsoft-extends-free-windows-10-security-updates-into-2026,-with-strings-attached

Microsoft extends free Windows 10 security updates into 2026, with strings attached

Freeupdates

It’s worth noting that the Windows Backup and Microsoft Rewards methods for getting these updates require the use of a Microsoft Account, something Microsoft has been pushing with slowly increasing intensity in Windows 11. Windows 10 pushed Microsoft Account usage in various ways, too, but it was generally easier to create and sign in with a local account; for those people, the “free” update offer seems like another effort from Microsoft to bring them into the fold.

The Windows Backup option seems intended to ease the migration to a new Windows 11 PC when the time comes. The company may be offering a short reprieve for Windows 10 users, but the goal is still to shift them to Windows 11 eventually.

“To help make your move to a Windows 11 PC, as simple and secure as possible, we recommend using Windows Backup—built right into Windows 10,” writes Microsoft Consumer Chief Marketing Officer Yusuf Medhi in Microsoft’s blog post. “It’s an easy way to help you safely and securely transfer your data, personal files, and most settings and applications, so everything’s ready for you the moment you sign in.”

People with existing Microsoft Accounts who don’t want to use Windows Backup may already have the 1,000 Microsoft Rewards points you would need to enroll in the ESU program; my Microsoft account has 3,411 points attached to it for some reason despite an 18-month expiration window and even though I’ve never taken any intentional steps toward earning any. Users creating a new account for the first time can accumulate that many points fairly trivially over the course of a few days, including by downloading the Bing app and doing various Bing searches.

A Microsoft spokesperson confirmed to Ars that Microsoft Account sign-in will be required to enroll a PC into the ESU program. If you reset or reinstall a fresh copy of Windows on a new Windows 10 PC, you’ll need to sign back in with a Microsoft account to re-enroll the PC in the ESU program.

But “once a Windows 10 PC is enrolled in ESU, it remains enrolled in the program,” the Microsoft spokesperson told Ars. Once enrolled, if you sign out of your Microsoft Account, or if you stop using the Windows Backup app, your PC will continue to receive the security updates afterward.

Microsoft extends free Windows 10 security updates into 2026, with strings attached Read More »

data-recovery-firm-tests-$28,-500gb-hdd-from-amazon-and-gets-surprising-results

Data-recovery firm tests $28, 500GB HDD from Amazon and gets surprising results

Ars was unable to confirm if UnionSine and Toshiba have any formal business relationship. UnionSine’s website says that its full company name is Shenzhen Union Integrity Technology Co., Ltd., a Shenzhen-based company launched in 2014 with “more than 50 employees.” It doesn’t list Toshiba as a partner. Toshiba also doesn’t mention any collaboration with UnionSine on its website. Neither company responded to requests for comment ahead of publication. Interestingly, there’s at least one account of someone finding a Western Digital drive inside their UnionSine HDD’s enclosure.

Rymko said that Secure Data Recovery couldn’t confirm if the Toshiba drive was refurbished but also emphasized the drive’s nearly 10 years of age:

Our internal data indicates that the average lifespan of a drive is approximately three-to-five years, depending on the brand, capacity, and other factors. Our data found that the average ‘power-on’ hours of failed drives was about two years and 10 months. With the right tools, the ‘power-on hours’ data can be reset. This could mean the drive may last a few years; I can’t say for sure.

There are better storage options

Rymko told me that UnionSine “seem[s] like a legitimate company” and noted that Secure Data Recovery has recovered data from UnionSine drives before. He also said that for $28, “the drive performs well and provides good value;” it also “meets expectations for speed and reliability.” Still, he has some concerns about long-term use:

We haven’t identified any major issues with this device, but as with any budget drive, long-term durability and sustained performance under heavy use are potential concerns to watch for. It’s always a good idea to back up important data regularly.

But there are still reasons to look elsewhere for storage.

For one, UnionSine doesn’t have a clearly posted warranty policy for its HDDs. As Rymko mentioned, the long-term durability of its drive is dubious, making the lack of a clear warranty concerning.

Further, there are bigger and roomier storage options than a 500GB HDD. If you’re opting for an HDD over an SSD to save money, it can be prudent to put at least some of those savings toward more storage space. A roomier HDD will cost more, but the price-per-GB may not differ much, depending on the drive.

When storing valued files, you can rest easier by following the 3-2-1 backup rule and by buying from a reputable brand with a solid warranty. Losing important data is frustrating enough, and that frustration is exacerbated when a company doesn’t take accountability for a potentially faulty device.

Data-recovery firm tests $28, 500GB HDD from Amazon and gets surprising results Read More »

Google’s new robotics AI can run without the cloud and still tie your shoes

We sometimes call chatbots like Gemini and ChatGPT “robots,” but generative AI is also playing a growing role in real, physical robots. After announcing Gemini Robotics earlier this year, Google DeepMind has now revealed a new on-device VLA (vision language action) model to control robots. Unlike the previous release, there’s no cloud component, allowing robots to operate with full autonomy.

Carolina Parada, head of robotics at Google DeepMind, says this approach to AI robotics could make robots more reliable in challenging situations. This is also the first version of Google’s robotics model that developers can tune for their specific uses.

Robotics is a unique problem for AI because, not only does the robot exist in the physical world, but it also changes its environment. Whether you’re having it move blocks around or tie your shoes, it’s hard to predict every eventuality a robot might encounter. The traditional approach of training a robot on action with reinforcement was very slow, but generative AI allows for much greater generalization.

“It’s drawing from Gemini’s multimodal world understanding in order to do a completely new task,” explains Carolina Parada. “What that enables is in that same way Gemini can produce text, write poetry, just summarize an article, you can also write code, and you can also generate images. It also can generate robot actions.”

General robots, no cloud needed

In the previous Gemini Robotics release (which is still the “best” version of Google’s robotics tech), the platforms ran a hybrid system with a small model on the robot and a larger one running in the cloud. You’ve probably watched chatbots “think” for measurable seconds as they generate an output, but robots need to react quickly. If you tell the robot to pick up and move an object, you don’t want it to pause while each step is generated. The local model allows quick adaptation, while the server-based model can help with complex reasoning tasks. Google DeepMind is now unleashing the local model as a standalone VLA, and it’s surprisingly robust.

Google’s new robotics AI can run without the cloud and still tie your shoes Read More »

google-rolls-out-street-view-time-travel-to-celebrate-20-years-of-google-earth

Google rolls out Street View time travel to celebrate 20 years of Google Earth

After 20 years, being able to look at any corner of the planet in Google Earth doesn’t seem that impressive, but it was a revolution in 2005. Google Earth has gone through a lot of changes in that time, and Google has some more lined up for the service’s 20th anniversary. Soon, Google Earth will help you travel back in time with historic Street View integration, and pro users will get some new “AI-driven insights”—of course Google can’t update a product without adding at least a little AI.

Google Earth began its life as a clunky desktop client, but that didn’t stop it from being downloaded 100 million times in the first week. Today, Google Earth is available on the web, in mobile apps, and in the Google Earth Pro desktop app. However you access Earth, you’ll find a blast from the past.

For the service’s 20th anniversary, Google was inspired by a social media trend from last year in which people shared historical images of locations in Google Maps. Now, Google Earth is getting a “time travel” interface where you can see historical Street View images from almost any location.

Google Earth historical

Historical Street View images will be added to Google Earth.

Credit: Google

Historical Street View images will be added to Google Earth. Credit: Google

While this part isn’t new, Google is also using the 20th anniversary as an opportunity to surface its 3D timelapse feature. These animations use satellite data to show how an area has changed from a higher vantage point. They’re just as cool as when they were announced in 2021.

Google rolls out Street View time travel to celebrate 20 years of Google Earth Read More »

rocket-report:-two-big-asian-reuse-milestones,-vandenberg-becomes-spacex-west

Rocket Report: Two big Asian reuse milestones, Vandenberg becomes SpaceX west


“This is potentially going to be a problem.”

Landspace shows off its Zhuque-3 rocket on the launch pad. Credit: Landspace

Welcome to Edition 7.49 of the Rocket Report! You may have noticed we are a little late with the report this week, and that is due to the Juneteenth holiday celebrated in the United States on Thursday. But that hasn’t stopped a torrent of big news this week, from exploding Starships to significant reuse milestones being reached in Asia.

As always, we welcome reader submissions, and if you don’t want to miss an issue, please subscribe using the box below (the form will not appear on AMP-enabled versions of the site). Each report will include information on small-, medium-, and heavy-lift rockets as well as a quick look ahead at the next three launches on the calendar.

Honda stamps passport to the skies with a hopper. An experimental reusable rocket developed by the research and development arm of Honda Motor Company flew to an altitude of nearly 900 feet (275 meters) Tuesday, then landed with pinpoint precision at the carmaker’s test facility in northern Japan, Ars reports. Honda’s hopper is the first prototype rocket outside of the United States and China to complete a flight of this kind, demonstrating vertical takeoff and vertical landing technology that could underpin the development of a reusable launch vehicle.

A legitimately impressive feat… Honda has been quiet on this rocket project since a brief media blitz nearly four years ago. Developed in-house by Honda R&D Company, the rocket climbed vertically from a pedestal at the company’s test site in southeastern Hokkaido, the northernmost of Japan’s main islands, before landing less than a meter from its target. Honda said its launch vehicle is “still in the fundamental research phase,” and the company has made no decision whether to commercialize the rocket program. (submitted by Fernwaerme, TFargo04, Biokleen, Rendgrish, and astromog)

European launch companies seek protection. In a joint statement published on Monday, Arianespace and Avio called for European missions to be launched aboard European rockets, European Spaceflight reports. The statement warned that without “sustained support,” European rocket builders risked losing out to institutionally backed competitors from the US.

Seeking to permanently embed European preference… “Major space powers support their industries through stable and guaranteed institutional markets, enabling long-term investments, innovation, and the preservation of leadership,” explained the statement. The pair argues that Europe risks falling behind not due to a lack of technical capability but because of structural market weaknesses. (submitted by EllPeaTea)

The easiest way to keep up with Eric Berger’s and Stephen Clark’s reporting on all things space is to sign up for our newsletter. We’ll collect their stories and deliver them straight to your inbox.

Sign Me Up!

Increasing launch cadence may threaten ozone layer. The rapidly growing number of rocket launches could slow the recovery of the ozone layer, a new study in the journal Nature finds. The ozone layer is healing due to countries phasing out CFCs, but rocket launches could slow its recovery if the space industry continues growing, Radio New Zealand reports. “At the moment, it’s not a problem because the launches happen too infrequently,” said University of Canterbury atmospheric scientist Laura Revell, one of the authors of the study. “As we get more and more launches taking place—because there are companies out there with very bold ambitions to increase launch frequency—this is potentially going to be a problem.”

Forecasting a lot of growth in launch… In a conservative growth scenario, about 900 total launches a year, there is some ozone loss but not significant amounts,” said Revell. “But when we look at a more ambitious scenario, when we looked at the upper limits of what might be launched in future—around 2,000 launches year—we saw levels of ozone loss that are concerning in the context of ozone recovery,” she said. Ozone losses are driven by the chlorine produced from solid rocket motor propellant and black carbon, which is emitted from most propellants, the study says. (submitted by Zaphod Harkonnen)

Space may soon be pay-to-play with the FAA. The Federal Aviation Administration may soon levy fees on companies seeking launch and reentry licenses, a new tack in the push to give the agency the resources it needs to keep up with the rapidly growing commercial space industry, Ars reports. The text of a budget reconciliation bill released by Sen. Ted Cruz (R-Texas) earlier this month calls for the FAA’s Office of Commercial Space Transportation, known as AST, to begin charging licensing fees to space companies next year.

The price of poker keeps going up… The fees would phase in over eight years, after which the FAA would adjust them to keep pace with inflation. The money would go into a trust fund to help pay for the operating costs of the FAA’s commercial space office. Cruz’s section of the Senate reconciliation bill calls for the FAA to charge commercial space companies per pound of payload mass, beginning with 25 cents per pound in 2026 and increasing to $1.50 per pound in 2033. Subsequent fee rates would change based on inflation. The overall fee per launch or entry would be capped at $30,000 in 2026, increasing to $200,000 in 2033, and then be adjusted to keep pace with inflation.

Landspace tests Zhuque-3 rocket. Chinese launch startup Landspace carried out a breakthrough static fire test Friday as it builds towards an orbital launch attempt with its Zhuque-3 rocket, Space News reports. The Zhuque-3’s nine methane-liquid oxygen engines ignited in sequence and fired for 45 seconds, including gimbal control testing, before shutting down as planned. The successful test lays a solid foundation for the upcoming inaugural flight of the Zhuque-3 and for the country’s reusable launch vehicle technology, Landspace said.

Similar in design to Falcon 9 … Friday’s static fire test used a first-stage identical to the one intended for Zhuque-3’s inaugural flight, planned for later this year, and covered the full ground-based launch preparation and ignition sequence, including propellant loading, tank pressurization, staged engine ignition, steady-state operation and a programmed shutdown. Payload capacity to low Earth orbit will be 21 metric tons when expendable, or up to 18,300 kg when the first stage is recovered downrange. Alternatively, it can carry 12,500 kg to LEO when returning to the launch site.

Kuiper launch scrubs due to hardware issue. United Launch Alliance and its customer, Amazon, will have to wait longer for the second launch of Amazon’s Project Kuiper satellites following a scrub on Monday afternoon. “United Launch Alliance Atlas 5 551 carrying Amazon’s second Project Kuiper mission, Kuiper 2, is delayed due to an engineering observation of an elevated purge temperature within the booster engine,” ULA said in a statement. “The team will evaluate the hardware, and we will release a new launch date when available.”

Back to the VIF in a spiff… On Tuesday, ULA rolled the Atlas V rocket back to its Vertical Integration Facility to address the issue with the nitrogen purge line on the vehicle. In addition to this mission, ULA has six more Atlas 5 rockets that have been purchased by Amazon to fly satellites for its constellation. As of Friday morning, ULA had not set a new launch date for the Kuiper 2 mission, but it could take place early next week. (submitted by ElllPeaTea)

Varda’s next launch will use in-house spacecraft. Varda Space Industries is preparing to launch its fourth spacecraft, W-4, on a SpaceX rideshare mission scheduled to launch as soon as June 21 from Vandenberg Space Force Base in California, Space News reports. The Los Angeles-based startup manufactures pharmaceuticals in orbit and returns them to Earth using specialized reentry capsules.

No longer using Rocket Lab… For its first three missions, Varda had partnered with Rocket Lab to use its Photon spacecraft for in-space operations. However, with W-4, Varda is debuting its first spacecraft built entirely in-house. The company is consolidating design and production internally in an effort to shorten the timeline between missions and increase flexibility to tailor vehicles to customer requirements. Varda decided that vertical integration was essential for scaling operations. (submitted by MarkW98)

Vandenberg becomes SpaceX west. One of the defining events early in the history of SpaceX is when the company was effectively booted from Vandenberg Space Force Base in 2005 after completing the first successful test firing of the Falcon 1 rocket there. This set the company off on a long romp to Kwajalein Atoll in the Pacific Ocean before acquiring a launch site at Cape Canaveral, Florida. When SpaceX finally returned to Vandenberg half a decade later, it had the Falcon 9 rocket and was no longer the scrappy upstart. Since then, it has made Vandenberg its own.

Falcons flying frequentlyAccording to Spaceflight Now, on Monday, SpaceX launched the 200th overall orbital flight from Space Launch Complex 4 East at Vandenberg Space Force Base, a batch of 26 Starlink V2 Mini satellites. Among the 199 previous orbital launches from SLC-4E, 131 of them were Falcon 9 rockets. The pad was first occupied by the Atlas-Agena rocket shortly after the Air Force Western Test Range activated in May 1964. SpaceX is currently going through the review process for acquiring SLC-6 as well to use for its Falcon 9 and Falcon Heavy rockets. (submitted by EllPeaTea)

China tests launch abort system. China carried out a successful pad abort test early Tuesday for its next-generation crew spacecraft for moon and low-Earth orbit missions, Space News reports. Footage of the test shows the escape system rapidly boosting the Mengzhou spacecraft away from the ground. Around 20 seconds later, the vehicle reached a predetermined altitude. The return capsule separated from the escape tower, and its parachutes deployed successfully. China is planning to conduct an in-flight escape test at maximum dynamic pressure later this year.

No longer reliant on the rocket… According to the agency, Mengzhou shifts from the traditional model of “rocket handles abort, spacecraft handles crew rescue,” as used by the Shenzhou, to a system where the Mengzhou spacecraft takes full responsibility for both abort control and crew safety. “The success of this test lays an important technical foundation for future crewed lunar missions,” a Chinese statement read. “Development work on related spacecraft, such as the Long March 10 launch vehicle and the lunar lander, is progressing steadily and will proceed to further testing as scheduled.” (submitted by EllPeaTea)

Another Starship explodes unexpectedly. SpaceX’s next Starship rocket exploded during a ground test in South Texas late Wednesday, dealing another blow to a program already struggling to overcome three consecutive failures in recent months, Ars reports. The late-night explosion at SpaceX’s rocket development complex in Starbase, Texas, destroyed the upper stage that was slated to launch on the next Starship test flight. The powerful blast set off fires around SpaceX’s Massey’s Test Site, located a few miles from the company’s Starship factory and launch pads.

A major anomaly … SpaceX confirmed the Starship, numbered Ship 36 in the company’s inventory, “experienced a major anomaly” on a test stand as the vehicle prepared to ignite its six Raptor engines for a static fire test. These hold-down test-firings are typically one of the final milestones in a Starship launch campaign before SpaceX moves the rocket to the launch pad. The company later said the failure may have been due to a composite overwrap pressure vessel, or COPV, near the top of the vehicle. On Thursday, aerial videos revealed that damage at the test site was significant but not beyond repair. (submitted by Tfargo04)

ArianeGroup will lead reusable engine project. The French space agency CNES announced Tuesday that it had selected ArianeGroup to lead a project to develop a high-thrust reusable rocket engine, European Spaceflight reports. The ASTRE (Advanced Staged-Combustion Technologies for Reusable Engines) project will also include contributions from SiriusSpace and Pangea Aerospace.

Company will take a test and learn approach… The project aims to develop a full-flow staged combustion methalox reusable rocket engine capable of producing between 200 and 300 tonnes of thrust, placing it in roughly the same class as the SpaceX Raptor engine. According to the agency, the goal of the project is “to equip the French and European space industry with new capabilities for strategic applications.” (submitted by EllPeaTea)

Next three launches

June 21: Falcon 9 | Transporter-14 | Vandenberg Space Force Base, Calif. | 21: 19 UTC

June 22: Falcon 9 | Starlink 10-23 | Cape Canaveral Space Force Station, Florida | 05: 47 UTC

June 23: Atlas V | Project Kuiper KA-02 | Cape Canaveral Space Force Station, Florida | 10: 54 UTC

Photo of Eric Berger

Eric Berger is the senior space editor at Ars Technica, covering everything from astronomy to private space to NASA policy, and author of two books: Liftoff, about the rise of SpaceX; and Reentry, on the development of the Falcon 9 rocket and Dragon. A certified meteorologist, Eric lives in Houston.

Rocket Report: Two big Asian reuse milestones, Vandenberg becomes SpaceX west Read More »

to-avoid-admitting-ignorance,-meta-ai-says-man’s-number-is-a-company-helpline

To avoid admitting ignorance, Meta AI says man’s number is a company helpline

Although that statement may provide comfort to those who have kept their WhatsApp numbers off the Internet, it doesn’t resolve the issue of WhatsApp’s AI helper potentially randomly generating a real person’s private number that may be a few digits off from the business contact information WhatsApp users are seeking.

Expert pushes for chatbot design tweaks

AI companies have recently been grappling with the problem of chatbots being programmed to tell users what they want to hear, instead of providing accurate information. Not only are users sick of “overly flattering” chatbot responses—potentially reinforcing users’ poor decisions—but the chatbots could be inducing users to share more private information than they would otherwise.

The latter could make it easier for AI companies to monetize the interactions, gathering private data to target advertising, which could deter AI companies from solving the sycophantic chatbot problem. Developers for Meta rival OpenAI, The Guardian noted, last month shared examples of “systemic deception behavior masked as helpfulness” and chatbots’ tendency to tell little white lies to mask incompetence.

“When pushed hard—under pressure, deadlines, expectations—it will often say whatever it needs to to appear competent,” developers noted.

Mike Stanhope, the managing director of strategic data consultants Carruthers and Jackson, told The Guardian that Meta should be more transparent about the design of its AI so that users can know if the chatbot is designed to rely on deception to reduce user friction.

“If the engineers at Meta are designing ‘white lie’ tendencies into their AI, the public need to be informed, even if the intention of the feature is to minimize harm,” Stanhope said. “If this behavior is novel, uncommon, or not explicitly designed, this raises even more questions around what safeguards are in place and just how predictable we can force an AI’s behavior to be.”

To avoid admitting ignorance, Meta AI says man’s number is a company helpline Read More »

address-bar-shows-hpcom-browser-displays-scammers’-malicious-text-anyway.

Address bar shows hp.com. Browser displays scammers’ malicious text anyway.

Not the Apple page you’re looking for

“If I showed the [webpage] to my parents, I don’t think they would be able to tell that this is fake,” Jérôme Segura, lead malware intelligence analyst at Malwarebytes, said in an interview. “As the user, if you click on those links, you think, ‘Oh I’m actually on the Apple website and Apple is recommending that I call this number.’”

The unknown actors behind the scam begin by buying Google ads that appear at the top of search results for Microsoft, Apple, HP, PayPal, Netflix, and other sites. While Google displays only the scheme and host name of the site the ad links to (for instance, https://www.microsoft.com), the ad appends parameters to the path to the right of that address. When a target clicks on the ad, it opens a page on the official site. The appended parameters then inject fake phone numbers into the page the target sees.

A fake phone number injected into a Microsoft webpage.

Credit: Malwarebytes

A fake phone number injected into a Microsoft webpage. Credit: Malwarebytes

A fake phone number injected into an HP webpage.

Credit: Malwarebytes

A fake phone number injected into an HP webpage. Credit: Malwarebytes

Google requires ads to display the official domain they link to, but the company allows parameters to be added to the right of it that aren’t visible. The scammers are taking advantage of this by adding strings to the right of the hostname. An example:

/kb/index?page=search&q=☏☏Call%20Us%20%2B1-805-749-2108%20AppIe%20HeIpIine%2F%2F%2F%2F%2F%2F%2F&product=&doctype=¤tPage=1&includeArchived=false&locale=en_US&type=organic

Credit: Malwarebytes

The parameters aren’t displayed in the Google ad, so a target has no obvious reason to suspect anything is amiss. When clicked on, the ad leads to the correct hostname. The appended parameters, however, inject a fake phone number into the webpage the target sees. The technique works on most browsers and against most websites. Malwarebytes.com was among the sites affected until recently, when the site began filtering out the malicious parameters.

Fake number injected into an Apple webpage.

Credit: Malwarebytes

Fake number injected into an Apple webpage. Credit: Malwarebytes

“If there is a security flaw here it’s that when you run that URL it executes that query against the Apple website and the Apple website is unable to determine that this is not a legitimate query,” Segura explained. “This is a preformed query made by a scammer, but [the website is] not able to figure that out. So they’re just spitting out whatever query you have.”

So far, Segura said, he has seen the scammers abuse only Google ads. It’s not known if ads on other sites can be abused in a similar way.

While many targets will be able to recognize that the injected text is fake, the ruse may not be so obvious to people with vision impairment, cognitive decline, or who are simply tired or in a hurry. When someone calls the injected phone number, they’re connected to a scammer posing as a representative of the company. The scammer can then trick the caller into handing over personal or payment card details or allow remote access to their computer. Scammers who claim to be with Bank of America or PayPal try to gain access to the target’s financial account and drain it of funds.

Malwarebytes’ browser security product now notifies users of such scams. A more comprehensive preventative step is to never click on links in Google ads, and instead, when possible, to click on links in organic results.

Address bar shows hp.com. Browser displays scammers’ malicious text anyway. Read More »

new-dating-for-white-sands-footprints-confirms-controversial-theory

New dating for White Sands footprints confirms controversial theory

Some of the sediment layers contained the remains of ancient grass seeds mixed with the sediment. Bennett and his colleagues radiocarbon-dated seeds from the layer just below the oldest footprints and the layer just above the most recent ones. According to those 2021 results, the oldest footprints were made sometime after 23,000 years ago; the most recent ones were made sometime before 21,000 years ago.

At that time, the northern half of the continent was several kilometers below massive sheets of ice. The existence of 23,000-year-old footprints could only mean that people were already living in what’s now New Mexico before the ice sheets sealed off the southern half of the continent from the rest of the world for the next few thousand years.

Ancient human footprints found in situ at at White Sands National Park in New Mexico.

Ancient human footprints found in situ at White Sands National Park in New Mexico. Credit: Jeffrey S. Pigati et al., 2023

Other researchers were skeptical of those results, pointing out that the aquatic plants (Ruppia cirrhosa) analyzed were prone to absorbing the ancient carbon in groundwater, which could have skewed the findings and made the footprints seem older than they actually were. And the pollen samples weren’t taken from the same sediment layers as the footprints.

So the same team followed up by radiocarbon-dating pollen sampled from the same layers as some of the footprints—those that weren’t too thin for sampling. This pollen came from pine, spruce, and fir trees, i.e., terrestrial plants, thereby addressing the issue of groundwater carbon seeping into samples. They also analyzed quartz grains taken from clay just above the lowest layer of footprints using a different method, optically stimulated luminescence dating. They published those findings in 2023, which agreed with their earlier estimate.

New dating for White Sands footprints confirms controversial theory Read More »

cybersecurity-takes-a-big-hit-in-new-trump-executive-order

Cybersecurity takes a big hit in new Trump executive order

Cybersecurity practitioners are voicing concerns over a recent executive order issued by the White House that guts requirements for: securing software the government uses, punishing people who compromise sensitive networks, preparing new encryption schemes that will withstand attacks from quantum computers, and other existing controls.

The executive order (EO), issued on June 6, reverses several key cybersecurity orders put in place by President Joe Biden, some as recently as a few days before his term ended in January. A statement that accompanied Donald Trump’s EO said the Biden directives “attempted to sneak problematic and distracting issues into cybersecurity policy” and amounted to “political football.”

Pro-business, anti-regulation

Specific orders Trump dropped or relaxed included ones mandating (1) federal agencies and contractors adopt products with quantum-safe encryption as they become available in the marketplace, (2) a stringent Secure Software Development Framework (SSDF) for software and services used by federal agencies and contractors, (3) the adoption of phishing-resistant regimens such as the WebAuthn standard for logging into networks used by contractors and agencies, (4) the implementation new tools for securing Internet routing through the Border Gateway Protocol, and (5) the encouragement of digital forms of identity.

In many respects, executive orders are at least as much performative displays as they are a vehicle for creating sound policy. Biden’s cybersecurity directives were mostly in this second camp.

The provisions regarding the secure software development framework, for instance, was born out of the devastating consequences of the SolarWinds supply chain attack of 2020. During the event, hackers linked to the Russian government breached the network of a widely used cloud service, SolarWinds. The hackers went on to push a malicious update that distributed a backdoor to more than 18,000 customers, many of whom were contractors and agencies of the federal government.

Cybersecurity takes a big hit in new Trump executive order Read More »

reddit-user-surprised-when-1960s-computer-panel-emerged-from-collapsed-family-garage

Reddit user surprised when 1960s computer panel emerged from collapsed family garage

The Spectra 70 family included five models: the 70/15, 70/25, 70/35, 70/45, and 70/55, with progressively more capable memory speeds and capacities. Operators could configure the system with up to 32,768 bytes of memory (32K), achieved by combining two 16,384-byte core memory modules—a respectable amount for the mid-1960s, though minuscule by today’s standards. By comparison, a decade later, the Apple II personal computer could utilize up to a maximum of 48K of memory.

A view of operators using an RCA Spectra 70 control panel similar to the one found in the garage, circa 1965.

A view of operators using an RCA Spectra 70/45 control panel similar to the one found in the garage, circa 1965. Credit: RCA

SonOfADeadMeme believes the 70/35 panel ended up in his family’s garage as a keepsake from the computer’s decommissioning. “I think the system may had been dismantled at IBM and the guy kept the terminal as a souvenir unfortunately, searched high and low while it was still standing but only other computers there was a Apple IIE and a Compaq that I think got tossed (kept the Apple II but cant find the Compaq). I did make sure to pretty much clean the whole place out before the collapse though,” they explained.

RCA discontinued the Spectra series in 1971 when the company exited the mainframe computer business, making surviving examples increasingly scarce. The company sold its computer division to Univac, which briefly continued supporting existing Spectra installations before phasing them out entirely.

As for the control panel’s future, the original poster has creative plans for this piece of computing history. “Unfortunately I don’t think I’m ever finding the other 1,500lbs of mainframe needed to use the luxurious 34 kilobytes of memory so I may (without altering a single Goddamn thing) string some LEDs behind the front panel and set them to blink at random.”

Reddit user surprised when 1960s computer panel emerged from collapsed family garage Read More »