phone

    • chevron_right

      Backdoor infecting VPNs used “magic packets” for stealth and security

      news.movim.eu / ArsTechnica • 23 January • 1 minute

    When threat actors use backdoor malware to gain access to a network, they want to make sure all their hard work can’t be leveraged by competing groups or detected by defenders. One countermeasure is to equip the backdoor with a passive agent that remains dormant until it receives what’s known in the business as a “magic packet.” On Thursday, researchers revealed that a never-before-seen backdoor that quietly took hold of dozens of enterprise VPNs running Juniper Network’s Junos OS has been doing just that.

    J-Magic, the tracking name for the backdoor, goes one step further to prevent unauthorized access. After receiving a magic packet hidden in the normal flow of TCP traffic, it relays a challenge to the device that sent it. The challenge comes in the form of a string of text that’s encrypted using the public portion of an RSA key. The initiating party must then respond with the corresponding plaintext, proving it has access to the secret key.

    Open sesame

    The lightweight backdoor is also notable because it resided only in memory, a trait that makes detection harder for defenders. The combination prompted researchers at Lumin Technology’s Black Lotus Lab to sit up and take notice.

    Read full article

    Comments

    • chevron_right

      OpenAI releases ChatGPT app for Windows

      news.movim.eu / ArsTechnica • 18 October

    On Thursday, OpenAI released an early Windows version of its first ChatGPT app for Windows, following a Mac version that launched in May . Currently, it's only available to subscribers of Plus, Team, Enterprise, and Edu versions of ChatGPT, and users can download it for free in the Microsoft Store for Windows.

    OpenAI is positioning the release as a beta test. "This is an early version, and we plan to bring the full experience to all users later this year," OpenAI writes on the Microsoft Store entry for the app. (Interestingly, ChatGPT shows up as being rated "T for Teen" by the ESRB in the Windows store, despite not being a video game.)

    A screenshot of the new Windows ChatGPT app captured on October 18, 2024.
    A screenshot of the new Windows ChatGPT app captured on October 18, 2024.

    Upon opening the app, OpenAI requires users to log into a paying ChatGPT account, and from there, the app is basically identical to the web browser version of ChatGPT. You can currently use it to access several models: GPT-4o, GPT-4o with Canvas , 01-preview, 01-mini, GPT-4o mini, and GPT-4. Also, it can generate images using DALL-E 3 or analyze uploaded files and images.

    Read full article

    Comments

    • chevron_right

      Finally upgrading from isc-dhcp-server to isc-kea for my homelab

      news.movim.eu / ArsTechnica • 18 October • 1 minute

    A few months back, I put together a big fat guide on how to configure DNS and DHCP on your LAN the old-school way , with bind and dhcpd working together to seamlessly hand out addresses to hosts on your network and also register those hosts in your LAN's forward and reverse DNS lookup zones. The article did really well—thanks for reading it!—but one thing commenters pointed out was that my preferred dhcpd implementation, the venerable isc-dhcp-server, reached end-of-life in 2022 . To replace it, ISC has for many years been working on the development of a new DHCP server named Kea .

    Kea (which for this piece will refer mainly to the isc-kea-dhcp4 and isc-kea-dhcp-ddns applications) doesn't alter the end-user experience of receiving DHCP addresses—your devices won't much care if you're using isc-dhcp-server or isc-kea-dhcp4. Instead, what Kea brings to the table is a new codebase that jettisons the older dhcpd's multi-decade pile of often crufty code for a new pile of much less crufty code that will (hopefully) be easier to maintain and extend.

    Many Ars readers are aware of the classic Joel on Software blog post about how rewriting your application from scratch is almost never a good idea , but something like isc-dhcp-server—whose redesign is being handled planfully by the Internet Systems Consortium—is the exception to the rule.

    Read full article

    Comments

    • chevron_right

      Microsoft releases a new Windows app called Windows App for running Windows apps

      news.movim.eu / ArsTechnica • 19 September, 2024

    The Windows App runs on Windows, but also macOS, iOS/iPadOS, web browsers, and Android.

    Enlarge / The Windows App runs on Windows, but also macOS, iOS/iPadOS, web browsers, and Android. (credit: Microsoft)

    Microsoft announced today that it's releasing a new app called Windows App as an app for Windows that allows users to run Windows and also Windows apps (it's also coming to macOS, iOS, web browsers, and is in public preview for Android).

    On most of those platforms, Windows App is a replacement for the Microsoft Remote Desktop app, which was used for connecting to a copy of Windows running on a remote computer or server—for some users and IT organizations, a relatively straightforward way to run Windows software on devices that aren't running Windows or can't run Windows natively.

    The new name, though potentially confusing, attempts to sum up the app's purpose: It's a unified way to access your own Windows PCs with Remote Desktop access turned on, cloud-hosted Windows 365 and Microsoft Dev Box systems, and individual remotely hosted apps that have been provisioned by your work or school.

    Read 4 remaining paragraphs | Comments

    • chevron_right

      Ever wonder how crooks get the credentials to unlock stolen phones?

      news.movim.eu / ArsTechnica • 19 September, 2024 • 1 minute

    Ever wonder how crooks get the credentials to unlock stolen phones?

    Enlarge (credit: Getty Images)

    A coalition of law-enforcement agencies said it shut down a service that facilitated the unlocking of more than 1.2 million stolen or lost mobile phones so they could be used by someone other than their rightful owner.

    The service was part of iServer, a phishing-as-a-service platform that has been operating since 2018. The Argentina-based iServer sold access to a platform that offered a host of phishing-related services through email, texts, and voice calls. One of the specialized services offered was designed to help people in possession of large numbers of stolen or lost mobile devices to obtain the credentials needed to bypass protections such as the lost mode for iPhones, which prevent a lost or stolen device from being used without entering its passcode.

    Catering to low-skilled thieves

    An international operation coordinated by Europol’s European Cybercrime Center said it arrested the Argentinian national that was behind iServer and identified more than 2,000 “unlockers” who had enrolled in the phishing platform over the years. Investigators ultimately found that the criminal network had been used to unlock more than 1.2 million mobile phones. Officials said they also identified 483,000 phone owners who had received messages phishing for credentials for their lost or stolen devices.

    Read 7 remaining paragraphs | Comments

    • chevron_right

      Real-time Linux is officially part of the kernel after decades of debate

      news.movim.eu / ArsTechnica • 19 September, 2024 • 1 minute

    CNC laser skipping across a metal surface, leaving light trails in long exposure.

    Enlarge / Cutting metal with lasers is hard, but even harder when you don't know the worst-case timings of your code. (credit: Getty Images)

    As is so often the case, a notable change in an upcoming Linux kernel is both historic and no big deal.

    If you wanted to use "Real-Time Linux" for your audio gear, your industrial welding laser, or your Mars rover, you have had that option for a long time (presuming you didn't want to use QNX or other alternatives). Universities started making their own real-time kernels in the late 1990s. A patch set, PREEMPT_RT , has existed since at least 2005. And some aspects of the real-time work, like NO_HZ , were long ago moved into the mainline kernel, enabling its use in data centers, cloud computing, or anything with a lot of CPUs.

    But officialness still matters, and in the 6.12 kernel, PREEMPT_RT will likely be merged into the mainline . As noted by Steven Vaughan-Nichols at ZDNet , the final sign-off by Linus Torvalds occurred while he was attending Open Source Summit Europe. Torvalds wrote the original code for printk , a debugging tool that can pinpoint exact moments where a process crashes, but also introduces latency that runs counter to real-time computing. The Phoronix blog has tracked the progress of PREEMPT_RT into the kernel, along with the printk changes that allowed for threaded/atomic console support crucial to real-time mainlining.

    Read 3 remaining paragraphs | Comments

    • chevron_right

      $100 billion AI infrastructure fund launched by Microsoft, BlackRock, UAE firm

      news.movim.eu / ArsTechnica • 19 September, 2024

    An illustration of two robot arms stacking gold coins.

    Enlarge (credit: J Studios via Getty Images )

    If you haven't noticed by now , Big Tech companies have been making plans to invest in the infrastructure necessary to deliver generative AI products like ChatGPT (and beyond) to hundreds of millions of people around the world. That push involves building more AI-accelerating chips , more data centers, and even new nuclear plants to power those data centers, in some cases.

    Along those lines, Microsoft, BlackRock, Global Infrastructure Partners (GIP), and MGX announced a massive new AI investment partnership on Tuesday called the Global AI Infrastructure Investment Partnership (GAIIP). The partnership initially aims to raise $30 billion in private equity capital, which could later turn into $100 billion in total investment when including debt financing .

    The group will invest in data centers and supporting power infrastructure for AI development. "The capital spending needed for AI infrastructure and the new energy to power it goes beyond what any single company or government can finance," Microsoft President Brad Smith said in a statement.

    Read 6 remaining paragraphs | Comments

    • chevron_right

      “Dead Internet theory” comes to life with new AI-powered social media app

      news.movim.eu / ArsTechnica • 18 September, 2024

    People in a hall of mirrors.

    Enlarge (credit: gremlin via Getty Images )

    For the past few years, a conspiracy theory called " Dead Internet theory " has picked up speed as large language models (LLMs) like ChatGPT increasingly generate text and even social media interactions found online. The theory says that most social Internet activity today is artificial and designed to manipulate humans for engagement.

    On Monday, software developer Michael Sayman launched a new AI-populated social network app called SocialAI that feels like it's bringing that conspiracy theory to life, allowing users to interact solely with AI chatbots instead of other humans. It's available on the iPhone app store, but so far, it's picking up pointed criticism.

    After its creator announced SocialAI as " a private social network where you receive millions of AI-generated comments offering feedback, advice & reflections on each post you make," computer security specialist Ian Coldwater quipped on X, "This sounds like actual hell." Software developer and frequent AI pundit Colin Fraser expressed a similar sentiment: "I don’t mean this like in a mean way or as a dunk or whatever but this actually sounds like Hell. Like capital H Hell."

    Read 11 remaining paragraphs | Comments

    • chevron_right

      Landmark AI deal sees Hollywood giant Lionsgate provide library for AI training

      news.movim.eu / ArsTechnica • 18 September, 2024

    An illustration of a filmstrip with a robot, horse, rocket, and whale.

    Enlarge (credit: Benj Edwards / Malte Mueller via Getty Images )

    On Wednesday, AI video synthesis firm Runway and entertainment company Lionsgate announced a partnership to create a new AI model trained on Lionsgate's vast film and TV library. The deal will feed Runway legally clear training data and will also reportedly provide Lionsgate with tools to enhance content creation while potentially reducing production costs.

    Lionsgate, known for franchises like John Wick and The Hunger Games, sees AI as a way to boost efficiency in content production. Michael Burns, Lionsgate's vice chair, stated in a press release that AI could help develop "cutting edge, capital efficient content creation opportunities." He added that some filmmakers have shown enthusiasm about potential applications in pre- and post-production processes.

    Runway plans to develop a custom AI model using Lionsgate's proprietary content portfolio. The model will be exclusive to Lionsgate Studios, allowing filmmakers, directors, and creative staff to augment their work. While specifics remain unclear, the partnership marks the first major collaboration between Runway and a Hollywood studio.

    Read 7 remaining paragraphs | Comments