Recent Entries
Tech (100)
Serving the Technologist for more than a decade. IT news, reviews, and analysis.
From Biz & IT – Ars Technica at 2022-09-29 23:06:48 (unread)
Numerous orgs hacked after installing weaponized open source apps
PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and muPDF/Subliminal Recording all targeted.
From Biz & IT – Ars Technica at 2022-09-29 16:39:01
Meta announces Make-A-Video, which generates video from text
Using a text description or an existing image, Make-A-Video can render video on demand.
From Biz & IT – Ars Technica at 2022-09-29 00:48:03
Never-before-seen malware has infected hundreds of Linux and Windows devices
Small office routers? FreeBSD machines? Enterprise servers? Chaos infects them all.
From Biz & IT – Ars Technica at 2022-09-28 21:00:18
Cloudflare’s CAPTCHA replacement lacks crosswalks, checkboxes, Google
Cloud giant says its verification tool doesn't challenge or profile users.
From Biz & IT – Ars Technica at 2022-09-28 18:33:13
DALL-E image generator is now open to everyone
DALL-E launched frenzy of image synthesis development but was invitation-only until now.
From Biz & IT – Ars Technica at 2022-09-28 18:25:19
Google Fiber touts 20Gbps download speed in test, promises eventual 100Gbps
Google Fiber test delivered 20.2Gbps downloads to exec's home in Kansas City.
From Biz & IT – Ars Technica at 2022-09-28 17:00:27
Serious vulnerabilities in Matrix’s end-to-end encryption are being patched
Previously overlooked flaws allow malicious homeservers to decrypt and spoof messages.
From Biz & IT – Ars Technica at 2022-09-28 12:00:08
We interviewed Linux OS through an AI bot to discover its secrets
In the world's first operating system interview, Linux tells all about Windows, Torvalds, and its favorite distro.
From Biz & IT – Ars Technica at 2022-09-27 21:59:25
Better than JPEG? Researcher discovers that Stable Diffusion can compress images
Lossy compression bypasses text-to-image portions of Stable Diffusion with interesting results.
From Biz & IT – Ars Technica at 2022-09-27 14:53:58
Apps can pose bigger security, privacy threat based on where you download them
Same app, different risks if you download it in, say, Tunisia rather than in Germany.
From Biz & IT – Ars Technica at 2022-09-26 20:14:57
Russia plans “massive cyberattacks” on critical infrastructure, Ukraine warns
Distributed denial-of-service attacks are also likely to increase, advisory says.
From Biz & IT – Ars Technica at 2022-09-26 16:21:43
Darth Vader’s voice will be AI-generated from now on
Using Respeecher, Lord Vader will live on as a digital voice generated by voice synthesis.
From Biz & IT – Ars Technica at 2022-09-23 19:04:11
How 3 hours of inaction from Amazon cost cryptocurrency holders $235,000
For 2nd time in 4 years, Amazon loses control of its IP space in BGP hijacking.
From Biz & IT – Ars Technica at 2022-09-23 18:57:20
Starlink is getting a lot slower as more people use it, speed tests show
Starlink capacity limits hit users—SpaceX says more satellites will make it faster.
From Biz & IT – Ars Technica at 2022-09-22 22:38:04
Artist receives first known US copyright registration for generative AI art
Registration of AI-assisted comic comes amid fierce online debate about AI art ethics.
From Biz & IT – Ars Technica at 2022-09-22 17:48:28
AI model from OpenAI automatically recognizes speech and translates it to English
"Whisper" open source model may become a building block in future speech-to-text apps.
From Biz & IT – Ars Technica at 2022-09-21 23:32:35
Fearing copyright issues, Getty Images bans AI-generated artwork
Getty sidesteps potential legal problems from unresolved rights and ethics issues.
From Biz & IT – Ars Technica at 2022-09-21 20:15:20
The record-setting DDoSes keep coming, with no end in sight
As DDoSes continue to innovate, their attacks grow ever bigger.
From Biz & IT – Ars Technica at 2022-09-21 16:43:09
Artist finds private medical record photos in popular AI training data set
LAION scraped medical photos for AI research use. Who's responsible for taking them down?
From Biz & IT – Ars Technica at 2022-09-20 22:22:34
$35M fine for Morgan Stanley after unencrypted, unwiped hard drives are auctioned
"Astonishing failures" over a 5-year span.
From Biz & IT – Ars Technica at 2022-09-20 20:20:42
Comcast promises huge boost to cable upload speeds by end of 2023
Full Duplex DOCSIS expected in 2023 but won't be available to everyone at first.
From Biz & IT – Ars Technica at 2022-09-20 17:22:56
Nvidia’s powerful H100 GPU will ship in October
Nvidia's H100 "Hopper" GPU is in full production, eight major vendors shipping products soon.
From Biz & IT – Ars Technica at 2022-09-20 15:52:32
Deepfake audio has a tell and researchers can spot it
With deepfake audio, that familiar voice on the other end of the line might not even be human.
From Biz & IT – Ars Technica at 2022-09-19 20:32:47
AI software helps bust image fraud in academic papers
Proofig and ImageTwin software help detect fudged "Western blot" image data in academic papers.
From Biz & IT – Ars Technica at 2022-09-19 18:18:22
Kiwi Farms has been breached; assume passwords and emails have been leaked
Harassment site is down for now after hacker gains access to admin account.
From Biz & IT – Ars Technica at 2022-09-16 21:16:42
Artists begin selling AI-generated artwork on stock photography websites
Using software that creates art on demand, some artists attempt to cash in on AI-generated content.
From Biz & IT – Ars Technica at 2022-09-16 18:38:52
Twitter pranksters derail GPT-3 bot with newly discovered “prompt injection” hack
By telling AI bot to ignore its previous instructions, vulnerabilities emerge.
From Biz & IT – Ars Technica at 2022-09-16 18:29:37
Uber was breached to its core, purportedly by an 18-year-old. Here are the basics
“I announce I am a hacker and Uber has suffered a data breach,” intruder says on Slack.
From Biz & IT – Ars Technica at 2022-09-16 01:37:16
Trojanized versions of PuTTY utility being used to spread backdoor
Threat actor has connections to hackers backed by North Korean government.
From Biz & IT – Ars Technica at 2022-09-15 22:04:08
Have AI image generators assimilated your art? New tool lets you check
New search engine combs through harvested images used to train Stable Diffusion, others.
From Biz & IT – Ars Technica at 2022-09-15 18:27:30
Microsoft Teams stores cleartext auth tokens, won’t be quickly patched
Electron-based Teams apps can be easily mined for tokens and used for phishing.
From Biz & IT – Ars Technica at 2022-09-15 17:52:22
New AI assistant can browse, search, and use web apps like a human
Adept's ACT-1 has learned how to automate complex UI tasks in web apps using an AI model.
From Biz & IT – Ars Technica at 2022-09-15 17:34:58
Ukraine’s cyberwar chief sounds like he’s winning
Yurii Shchyhol gives a rare interview about the state of the online conflict with Russia.
From Biz & IT – Ars Technica at 2022-09-14 22:42:38
Iranians hacked US companies, sent ransom demands to printers, indictment says
Alleged victims include domestic violence shelter that paid hackers $13,000.
From Biz & IT – Ars Technica at 2022-09-14 22:31:08
China’s most advanced AI image generator already blocks political content
Baidu's ERNIE-ViLG text-to-image model prevents users from creating political images.
From Biz & IT – Ars Technica at 2022-09-14 00:34:47
Breach of software maker used to backdoor as many as 200,000 servers
Hack of FishPig distribution server used to install Rekoobe on customer systems.
From Biz & IT – Ars Technica at 2022-09-13 17:44:16
Artist uses AI to extract color palettes from text descriptions
New technique uses an image synthesis model and some JavaScript to work its magic.
From Biz & IT – Ars Technica at 2022-09-12 22:33:28
Meta spins off PyTorch Foundation to make AI framework vendor neutral
PyTorch, which powers Tesla Autopilot and 150K other projects, will join the Linux Foundation.
From Biz & IT – Ars Technica at 2022-09-12 17:36:10
Flooded with AI-generated images, some art communities ban them completely
Smaller art communities are banning image synthesis amid a wider art ethics debate.
From Biz & IT – Ars Technica at 2022-09-09 21:22:31
New Linux malware combines unusual stealth with a full suite of capabilities
With polymorphic encoding and a multistage infection chain, Shikitega is hard to detect.
From Biz & IT – Ars Technica at 2022-09-09 21:01:00
Nvidia’s flagship AI chip reportedly 4.5x faster than the previous champ
Upcoming "Hopper" GPU broke records in its MLPerf debut, according to Nvidia.
From Biz & IT – Ars Technica at 2022-09-09 16:55:28
Runway teases AI-powered text-to-video editing using written prompts
Promotional video suggests future video editing could be as easy as writing a suggestion in a box.
From Biz & IT – Ars Technica at 2022-09-09 00:32:04
Feds claw back $30 million of cryptocurrency stolen by North Korean hackers
Blockchain analysis keeps getting better. Expect more seizures to come.
From Biz & IT – Ars Technica at 2022-09-08 17:24:40
With Koe Recast, you can change your voice as easily as your clothing
New AI tool alters the style and timbre of your voice, concealing your vocal identity.
From Biz & IT – Ars Technica at 2022-09-08 00:30:03
Ukraine is under attack by hacking tools repurposed from Conti cybercrime group
Researchers from Google and IBM see unprecedented blurring of lines.
From Biz & IT – Ars Technica at 2022-09-07 20:14:34
New wave of data-destroying ransomware attacks hits QNAP NAS devices
DeadBolt has already infected thousands of QNAP storage devices this year.
From Biz & IT – Ars Technica at 2022-09-06 20:26:44
Chrome patches high-severity 0-day, its 6th this year
Security hole exists in a browser component known as Mojo.
From Biz & IT – Ars Technica at 2022-09-06 16:45:06
With Stable Diffusion, you may never believe what you see online again
AI image synthesis goes open source, with big implications.
From Biz & IT – Ars Technica at 2022-09-02 00:11:49
Actors behind PyPI supply chain attack have been active since late 2021
Group that pulled off successful attack on PyPI has humble origins.
From Biz & IT – Ars Technica at 2022-09-01 15:58:09
US restricts sales of high-end Nvidia AI chips to China and Russia
Government aims to "keep advanced technologies out of the wrong hands."
From Biz & IT – Ars Technica at 2022-09-01 01:15:18
Microsoft finds TikTok vulnerability that allowed one-click account compromises
Flaw resided in the app's deeplink verification process.
From Biz & IT – Ars Technica at 2022-08-31 22:44:33
FCC has approved $6 billion in broadband grants despite rejecting Starlink
Fixed wireless and fiber ISPs get money as FCC continues cleanup of Pai program.
From Biz & IT – Ars Technica at 2022-08-31 22:19:21
AI wins state fair art contest, annoys humans
Stealth win for AI-generated art inspires heated ethics debate on social media.
From Biz & IT – Ars Technica at 2022-08-31 19:59:42
Chrome extensions with 1.4M installs covertly track visits and inject code
If you've installed any of these extensions, manually remove them stat.
From Biz & IT – Ars Technica at 2022-08-31 19:16:50
Microsoft EU cloud revisions just so happen to exclude Google, Amazon
Move to appease EU partners bars running MS apps on competitors' infrastructure.
From Biz & IT – Ars Technica at 2022-08-31 16:48:01
Japan declares war on floppy disks for government use
In Japan, 1,900 government procedures still require submission on floppy disk.
From Biz & IT – Ars Technica at 2022-08-30 20:04:28
Organizations are spending billions on malware defense that’s easy to bypass
Two of the simplest forms of evasion are surprisingly effective against EDRs.
From Biz & IT – Ars Technica at 2022-08-30 17:02:00
France reveals hidden swimming pools with AI, taxes them
Computer eyes in the skies make real estate tax evasion in France much harder.
From Biz & IT – Ars Technica at 2022-08-29 20:06:47
FTC sues data broker that tracks locations of 125M phones per month
Agency says data shows users visits to clinics and homeless shelters.
From Biz & IT – Ars Technica at 2022-08-26 20:54:39
The number of companies caught up in the Twilio hack keeps growing
2FA provider Authy, password manager LastPass, and DoorDash all experienced breaches.
From Biz & IT – Ars Technica at 2022-08-25 19:27:12
Phishers who hit Twilio and Cloudflare stole 10k credentials from 136 others
Already regarded among the most advanced, the attacks were also done at a massive scale.
From Biz & IT – Ars Technica at 2022-08-24 18:33:20
Plex imposes password reset after hackers steal data for >15 million users
Intruders access personal information for the majority of its 30 million users.
From Biz & IT – Ars Technica at 2022-08-23 18:50:27
Unix legend, who owes us nothing, keeps fixing foundational AWK code
Co-creator of core Unix utility, now 80, just needs to run a few more tests.
From Biz & IT – Ars Technica at 2022-08-19 17:44:35
Wave of debit card fraud hits Ally Bank customers, hacked vendors
Some are seeing charges on cards they've never activated or hardly used.
From Biz & IT – Ars Technica at 2022-08-18 17:39:46
Zoom patches critical vulnerability again after prior fix was bypassed
MacOS security researcher was able to bypass the fix issued just last weekend.
From Biz & IT – Ars Technica at 2022-08-18 17:20:18
Netflix’s ad-supported plan likely to have another drawback: No video downloads
Text found in iOS app code says plan won't allow downloads for offline viewing.
From Biz & IT – Ars Technica at 2022-08-18 16:38:52
Ring patched an Android bug that could have exposed video footage
After a chain of attacks, security firm got access to locations and recordings.
From Biz & IT – Ars Technica at 2022-08-17 21:49:47
Update Chrome now to patch actively exploited zero-day
It's the fifth Chrome zero-day patched by Google this year.
From Biz & IT – Ars Technica at 2022-08-17 17:32:07
iOS VPNs have leaked traffic for more than 2 years, researcher claims
VPNs on Apple mobile devices reportedly keep connections open and expose data.
From Biz & IT – Ars Technica at 2022-08-16 23:09:02
Chrome “Feed” is tantalizing, but it’s not the return of Google Reader
It's not that Google doesn't like RSS, it just wants RSS to look like Google.
From Biz & IT – Ars Technica at 2022-08-15 21:59:01
1,900 Signal users’ phone numbers exposed by Twilio phishing
No message, profile, or other data exposed—but SMS remains a weakness.
From Biz & IT – Ars Technica at 2022-08-15 17:21:56
Update Zoom for Mac now to avoid root-access vulnerability
Feature you'd normally want for secure software opened a huge hole.
From Biz & IT – Ars Technica at 2022-08-15 14:00:00
Machine learning, concluded: Did the “no-code” tools beat manual analysis?
In the finale of our experiment, we look at how the low/no-code tools performed.
From Biz & IT – Ars Technica at 2022-08-15 13:57:36
A new jailbreak for John Deere tractors rides the right-to-repair wave
Exploit now provides root access to two popular models of the company’s farm equipment.
From Biz & IT – Ars Technica at 2022-08-12 16:45:42
Samsung heir pardoned due to South Korean economic needs
Lee's ascendancy to Samsung chairman position key to "vitalizing the economy."
From Biz & IT – Ars Technica at 2022-08-11 23:57:39
I’m a security reporter and got fooled by a blatant phish
Think you're too smart to be fooled by a phisher? Think again.
From Biz & IT – Ars Technica at 2022-08-11 18:46:59
Amid backlash from privacy advocates, Meta expands end-to-end encryption trial
E2EE prevents anyone other than the sender and receiver from reading messages.
From Biz & IT – Ars Technica at 2022-08-11 15:41:06
One of 5G’s biggest features is a security minefield
There are vulnerabilities in 5G platforms carriers offer to wrangle embedded device data.
From Biz & IT – Ars Technica at 2022-08-10 18:51:13
Google Fiber was stalled for years but now says it’ll expand to 5 new states
ISP's history suggests you can expect only limited availability in each area.
From Biz & IT – Ars Technica at 2022-08-10 14:00:18
Man who built ISP instead of paying Comcast $50K expands to hundreds of homes
Jared Mauch gets $2.6 million from gov't to expand fiber ISP in rural Michigan.
From Biz & IT – Ars Technica at 2022-08-10 00:33:48
Phishers who breached Twilio and fooled Cloudflare could easily get you, too
Unusually resourced threat actor has targeted multiple companies in recent days.
From Biz & IT – Ars Technica at 2022-08-09 19:01:33
10 malicious Python packages exposed in latest repository attack
Supply-chain attacks are moving GitHub toward digitally signed packages.
From Biz & IT – Ars Technica at 2022-08-09 18:01:16
SGX, Intel’s supposedly impregnable data fortress, has been breached yet again
ÆPIC Leak spills users' most sensitive secrets in seconds from SGX enclaves.
From Biz & IT – Ars Technica at 2022-08-09 14:52:46
Crypto and the US government are headed for a decisive showdown
Lawsuits may decide whether most digital assets are illegal securities offerings.
From Biz & IT – Ars Technica at 2022-08-09 14:29:23
Small businesses count cost of Apple’s privacy changes
Online brands reliant on personalised ads ramp back marketing spending.
From Biz & IT – Ars Technica at 2022-08-09 14:00:40
Setting our heart-attack-predicting AI loose with “no-code” tools
In the second part of this three-part series, our heart attack predictions take flight.
From Biz & IT – Ars Technica at 2022-08-08 19:14:57
Crypto-driven GPU crash makes Nvidia miss Q2 projections by $1.4 billion
Cheaper GPUs are good for gamers but bad for Nvidia's bottom line.
From Biz & IT – Ars Technica at 2022-08-08 19:01:32
Excel esports on ESPN show world the pain of format errors
Where one sheet link can be the difference between success or elimination.
From Biz & IT – Ars Technica at 2022-08-05 22:30:37
Cyberattack on Albanian government suggests new Iranian aggression
Tehran-linked hack of a NATO member is a significant escalation.
From Biz & IT – Ars Technica at 2022-08-05 01:32:44
“Huge flaw” threatens US emergency alert system, DHS researcher warns
Hackers can disrupt legit warnings or issue fake ones of their own.
From Biz & IT – Ars Technica at 2022-08-04 00:43:46
North Korea-backed hackers have a clever way to read your Gmail
SHARPEXT has slurped up thousands of emails in the past year and keeps getting better.
From Biz & IT – Ars Technica at 2022-08-03 17:59:00
Intel’s loss is AMD’s gain as EPYC server CPUs benefit from Intel’s delays
Success in laptops, game consoles, and servers leads to record quarter for AMD.
From Biz & IT – Ars Technica at 2022-08-02 13:31:15
Post-quantum encryption contender is taken out by single-core PC and 1 hour
Leave it to mathematicians to muck up what looked like an impressive new algorithm.
From Biz & IT – Ars Technica at 2022-08-01 18:44:21
Charter loses home Internet customers, blames end of COVID subsidy program
After loss of 42,000 customers, Charter pins growth hopes on new federal funding.
From Biz & IT – Ars Technica at 2022-08-01 14:00:18
No code, no problem—we try to beat an AI at its own game with new tools
In part one of three, we give the cloud a new problem to (heart) attack.
From Biz & IT – Ars Technica at 2022-07-29 16:15:56
How Tor is fighting—and beating—Russian censorship
Russia has been trying to block the anonymous browser since December—with mixed results.
From Biz & IT – Ars Technica at 2022-07-28 21:15:54
Comcast stock falls as company fails to add Internet users for first time ever
Comcast started and ended Q2 with 32.2 million broadband subscribers.
From Biz & IT – Ars Technica at 2022-07-27 21:24:22
0-days sold by Austrian firm used to hack Windows users, Microsoft says
Windows and Adobe Reader exploits said to target orgs in Europe and Central America.
From Biz & IT – Ars Technica at 2022-07-27 01:15:54
Newly found Lightning Framework offers a plethora of Linux hacking capabilities
This modular malware framework for Linux has gone undocumented until now.
From Biz & IT – Ars Technica at 2022-07-26 18:49:17
How big is the risk that someone will hack an EV charging network?
EV chargers are on the spectrum of the Internet of Things, and that means risk.