Category Archives: News

Shared items and notes from my feeds and browsing. Subscribe as feed.

When Patents Attack 3D Printing: The HangPrinter Is In Peril

Source: Make: Online

Article note: That's some bullshit. The HangPrinter design has been around in public for almost a decade.
When Patents Attack 3D Printing: The HangPrinter Is In Peril

Today I saw some sad news. Apparently, a patent has been rewarded to someone in the U.S. for the HangPrinter, someone who is not Torbjorn Ludvigsen, the original creator who released the project as Open Source back in 2014. Yesterday, Torbjorn shared on twitter that he has released a gofundme to help fight the legal […]

The post When Patents Attack 3D Printing: The HangPrinter Is In Peril appeared first on Make: DIY Projects and Ideas for Makers.

Posted in News | Leave a comment

Meeting Owl videoconference device used by govs is a security disaster

Source: Ars Technica

Article note: Ooh. UK's ECE department has a couple of these things, and frankly the user experience is superb... turns out like many pandemic-expedient telecom tools, they're a security clusterfuck.
Meeting Owl videoconference device used by govs is a security disaster

Enlarge (credit: Owl Labs)

The Meeting Owl Pro is a videoconference device with an array of cameras and microphones that captures 360-degree video and audio and automatically focuses on whoever is speaking to make meetings more dynamic and inclusive. The consoles, which are slightly taller than an Amazon Alexa and bear the likeness of a tree owl, are widely used by state and local governments, colleges, and law firms.

A recently published security analysis has concluded the devices pose an unacceptable risk to the networks they connect to and the personal information of those who register and administer them. The litany of weaknesses includes:

  • The exposure of names, email addresses, IP addresses, and geographic locations of all Meeting Owl Pro users in an online database that can be accessed by anyone with knowledge of how the system works. This data can be exploited to map network topologies or socially engineer or dox employees.
  • The device provides anyone with access to it with the interprocess communication channel, or IPC, it uses to interact with other devices on the network. This information can be exploited by malicious insiders or hackers who exploit some of the vulnerabilities found during the analysis
  • Bluetooth functionality designed to extend the range of devices and provide remote control by default uses no passcode, making it possible for a hacker in proximity to control the devices. Even when a passcode is optionally set, the hacker can disable it without first having to supply it.
  • An access point mode that creates a new Wi-Fi SSID while using a separate SSID to stay connected to the organization network. By exploiting Wi-Fi or Bluetooth functionalities, an attacker can compromise the Meeting Owl Pro device and then use it as a rogue access point that infiltrates or exfiltrates data or malware into or out of the network.
  • Images of captured whiteboard sessions—which are supposed to be available only to meeting participants—could be downloaded by anyone with an understanding of how the system works.

Glaring vulnerabilities remain unpatched

Researchers from modzero, a Switzerland- and Germany-based security consultancy that performs penetration testing, reverse engineering, source-code analysis, and risk assessment for its clients, discovered the threats while conducting an analysis of videoconferencing solutions on behalf of an unnamed customer. The firm first contacted Meeting Owl-maker Owl Labs of Somerville, Massachusetts, in mid-January to privately report their findings. As of the time this post went live on Ars, none of the most glaring vulnerabilities had been fixed, leaving thousands of customer networks at risk.

Read 12 remaining paragraphs | Comments

Posted in News | Leave a comment

Science Is Getting Harder

Source: Hacker News

Article note: This is a neat argument.
Comments
Posted in News | Leave a comment

Google is combining Meet and Duo into a single app for voice and video calls

Source: The Verge - All Posts

Article note: Google's chat service flailing is truly a thing to behold.
Second screen in Google Meet
Meet is Google’s calling app of the future. | Image: Google

Google announced today that it’s combining two of its video-calling apps, Duo and Meet, into a single platform. Pretty soon, there will be only Google Meet, and Google’s hoping it can be the one calling app users need for just about everything in their lives.

By bringing them both together, Google’s hoping it can solve some of what ails modern communication tools. “What’s been really important is understanding how people make the choice as to what tool they’re going to use, for what purpose, in what circumstance,” says Javier Soltero, the head of Google Workspace. Our digital lives are filled with a million different chat apps, each with its own rules and norms and contact list, some for work purposes and some for personal ones. Google’s...

Continue reading…

Posted in News | Leave a comment

AMD-powered Frontier supercomputer breaks the exascale barrier

Source: Hacker News

Article note: It's almost refreshing how _boring_ this thing is. It's a bunch of AMD EPYCs, a bunch of AMD's now-differentiated HPC only DP-focused "GPU" SIMD engines, tied together by some enhanced HPE/Cray fancy Ethernet (and apparently secondary fast IO that isn't actually up yet). It's not full of AI pixie dust. It's not hitting numbers by working on low-precision values. It's not 4 years late (looking at you, Intel's ANL Summit Aurora contract). It's water cooled (not special environmental catastrophe sauce). It is, however, sucking down 40MW to do it, at 400KW per rack.
Comments
Posted in News | Leave a comment

Really Prolific?

Source: Hacker News

Article note: Not this shit again. At least this one just breaks the Windows driver based on quirks of the clones rather than damaging them like what FTDI pulled a few years ago.
Comments
Posted in News | Leave a comment

My students cheated… a lot

Source: Hacker News

Article note: It's a good, thorough investigation/writeup of something I have high confidence is extremely widespread.
Comments
Posted in News | Leave a comment

Broadcom to ‘focus on rapid transition to subscriptions’ for VMware

Source: The Register

Article note: Oh. They're buying it to rentseek, not do neat better hardware integration for virt tricks or something else interesting. That's unfortunate.

Offers comforting vision for core customers, products, channel – though warns efficiencies are coming

Broadcom has signaled its $61 billion acquisition of VMware will involve a “rapid transition from perpetual licenses to subscriptions.”…

Posted in News | Leave a comment

Report finds remote learning apps collected and sold kids’ data

Source: Engadget

Article note: Of course they do. For-ptofit ed-tech is always carpetbagger bullshit, and they had a window to "scale their business" that was too hurried for serious vetting, so they're getting away with all kinds of bullshit that might not survive scrutiny.

In their rush to employ online learning as a COVID-19 mitigation strategy, governments across the world exposed young people to the threat of their personal data being collected and sold without their consent. In a report published on Wednesday, Human Rights Watch found that many of the apps and services governments either directly procured or recommended for remote learning as recently as 2021 were actively harvesting the data of children or were otherwise engaged in monitoring their activities.

In its study of 49 countries, the nonprofit found that 146 of the 164 “EdTech” products used in those places reviewed employed data practices that either put the rights of young people at risk or actively infringed on them. Those platforms either employed or had the capacity to use tracking technology to monitor their young users secretly and without their consent or that of parents. What’s more, their data was frequently sold to third-party companies.

Human Rights Watch observed 146 of the apps it reviewed directly sending or granting access to the data of their young users to 196 third-party companies, with the vast majority of that information making its way to adtech platforms. Put another way, there were significantly more advertising firms buying the data of children than there were tech companies collecting it.

“In the process of endorsing and ensuring their wide adoption during COVID-19 school closures, governments offloaded the true costs of providing online education onto children, who were unknowingly forced to pay for their learning with their rights to privacy, access to information and potentially freedom of thought,” the report’s authors said.

Human Rights Watch points out that many of the tools governments recommended for online learning, including Zoom, Microsoft Teams and Cisco Webex, weren’t explicitly designed for use by children. But even those that were, such as ST Math, often employed trackers that sent data to companies like Meta and Google that could then later be used for behavioral advertising.

The report is yet one reminder of just how problematic surveillance capitalism has become in recent years. A similar report published earlier this month found that Immigration and Customs Enforcement operates as a “domestic surveillance agency,” and that it was able to bypass laws governing its operation by purchasing databases from private companies.

Posted in News | Leave a comment

Google urged to stop collecting phone location data before Roe v. Wade reversal

Source: Ars Technica

Article note: That actually seems pretty low on the long list of henious things that giant silos of searchable, purchasable, subpoenable location data will be used for, but it's always nice when the women's rights folks are on the privacy train.
A pro-choice demonstrator holds a sign with a coat hanger and the words

Enlarge / A pro-choice demonstrator in front of the US Supreme Court in Washington, DC, on May 11, 2022. (credit: Getty Images | Stefani Reynolds)

More than 40 Democratic members of Congress called on Google to stop collecting and retaining customer location data that prosecutors could use to identify women who obtain abortions.

"[W]e are concerned that, in a world in which abortion could be made illegal, Google's current practice of collecting and retaining extensive records of cell phone location data will allow it to become a tool for far-right extremists looking to crack down on people seeking reproductive health care. That's because Google stores historical location information about hundreds of millions of smartphone users, which it routinely shares with government agencies," Democrats wrote Tuesday in a letter led by Senator Ron Wyden (D-Ore.) and Rep. Anna Eshoo (D-Calif.). The letter was sent to Google CEO Sundar Pichai.

Specifically, Google should stop collecting "unnecessary customer location data" or "any non-aggregate location data about individual customers, whether in identifiable or anonymized form. Google cannot allow its online advertising-focused digital infrastructure to be weaponized against women," lawmakers wrote. They also told Google that people who use iPhones "have greater privacy from government surveillance of their movements than the tens of millions Americans using Android devices."

Read 13 remaining paragraphs | Comments

Posted in News | Leave a comment