Researcher Finds Tens of Software Products Vulnerable To Simple Bug
Posted by News Fetcher on February 08 '16 at 12:12 PM
By timothy from Slashdot's everything's-simple-to-somebody department:
An anonymous reader writes: There's a German security researcher that is arduously testing the installers of tens of software products to see which of them are vulnerable to basic DLL hijacking. Surprisingly, many companies are ignoring his reports. Until now, only Oracle seems to have addressed this problem in Java and VirtualBox. Here's a short (probably incomplete) list of applications that he found vulnerable to this attack: Firefox, Google Chrome, Adobe Reader, 7Zip, WinRAR, OpenOffice, VLC Media Player, Nmap, Python, TrueCrypt, and Apple iTunes. Mr. Kanthak also seems to have paid special attention to antivirus software installers. Here are some of the security products he discovered vulnerable to DLL hijacking: ZoneAlarm, Emsisoft Anti-Malware, Trend Micro, ESET NOD32, Avira, Panda Security, McAfee Security, Microsoft Security Essentials, Bitdefender, Rapid7's ScanNowUPnP, Kaspersky, and F-Secure.

Read Replies (0)
First Image of Titans Return Astrotrain Artwork
Posted by News Fetcher on February 08 '16 at 12:03 PM
By Mechafire from TFW2005:


Weibo user zmultiplier has once again come through, supplying us with our first (cropped) artwork image of the upcoming Titans Return Astrotrain! Surprising absolutely no one, it looks to be a straight redeco of the Voyager class Sentinel Prime figure, albeit with a new Titan Master head and flipped-over feet. We do not get a look at the colors yet, unfortunately, though we predict we’ll be getting a full reveal of the figure soon enough… Check it out after the jump, and stay tuned to TFW for all the upcoming New York Toy Fair news!

The post First Image of Titans Return Astrotrain Artwork appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
Combiner Wars Deluxe Wave 6 Sighted at US Retail
Posted by News Fetcher on February 08 '16 at 12:03 PM
By Sol Fury from TFW2005:


To follow on from the retail sighting of Combiner Wars Legends Wave 5, we’ve also got a report that Deluxe Wave 6 has been found! Combiner Wars Deluxe Wave 6 is the second “Autobot assortment”, reimagining a quartet of Autobots from the first two years of the Transformers line as combiner limbs! In this assortment, we get new versions of Wheeljack, Hound, Trailbreaker, and Smokescreen. These four were spotted by TFW2005 member slpolk21 at a Walmart in Pasadena, MD. Happy hunting, one and all!

The post Combiner Wars Deluxe Wave 6 Sighted at US Retail appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
Talos Secure Workstation Is FSF-Certified — and $3100
Posted by News Fetcher on February 08 '16 at 10:54 AM
By timothy from Slashdot's tradeoffs-are-everywhere department:
jones_supa writes: These days, the motivation to use open source software for many people is to avoid backdoors placed by intelligence organizations and to avoid software that has hidden privacy-intruding characteristics. For the operating system and userspace software, open choices are already available. The last remaining island has been the firmware included in various ROM chips in a computer. Libreboot has introduced an open BIOS, but it is not available for newer systems featuring the Intel ME or AMD PSP management features. Talos' Secure Workstation fills this need, providing a modern system with 8-core POWER8 CPU, 132 GB RAM, and open firmware. The product is currently in a pre-release phase where Raptor Engineering is trying to understand if it's possible to do a production run of the machine. If you are interested, it's worth visiting the official website. Adds an anonymous reader about the new system, which rings in at a steep $3100: "While the engineers found solace in the POWER8 architecture with being more open than AMD/Intel CPUs, they still are searching for a graphics card that is open enough to receive the FSF Respect Your Freedom certification." Update: 02/08 18:44 GMT by T : See also Linux hacker and IBM employee Stewart Smith's talk from the just-completed linux.conf.au on, in which he walks through "all of the firmware components and what they do, including the boot sequence from power being applied up to booting an operating system."

Read Replies (0)
Metel Hackers Roll Back ATM Transactions, Steal Millions
Posted by News Fetcher on February 08 '16 at 10:54 AM
By timothy from Slashdot's not-metal-mettle-meddle-or-medal department:
msm1267 writes: Researchers from Kaspersky Lab's Global Research & Analysis Team today unveiled details on two new criminal operations that have borrowed heavily from targeted nation-state attacks, and also shared an update on a resurgent Carbanak gang, which last year, it was reported, had allegedly stolen upwards of $1 billion from more than 100 financial companies. The heaviest hitter among the newly discovered gangs is an ongoing campaign, mostly confined to Russia, known as Metel. This gang targets machines that have access to money transactions, such as call center and support machines, and once they are compromised, the attackers use that access to automate the rollback of ATM transactions. As the attackers empty ATM after ATM—Metel was found inside 30 organizations—the balances on the stolen accounts remained untouched.

Read Replies (0)
TFsource SourceNews! MP-27, MakeToys, Toyworld Constructor, Arkose and More!
Posted by News Fetcher on February 08 '16 at 10:41 AM
By Sol Fury from TFW2005:
We have received an update from our friends and sponsors TFSource! Check out the highlights of the latest sourcenews below, and read on for the full update! NEW HOT IN STOCK ITEMS: – MP-27 – Masterpiece Ironhide with and without Collector’s CoinCombiner Wars 2016 – Deluxe Class Series 2 – Set of 4Shadow Fisher – SF01 Heavy Arms Upgrade KitMaster Made – SDT-02 Diabolus Rex – <a » Continue Reading.

The post TFsource SourceNews! MP-27, MakeToys, Toyworld Constructor, Arkose and More! appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
Combiner Wars Legends Wave 5 released at US retail
Posted by News Fetcher on February 08 '16 at 10:41 AM
By Sol Fury from TFW2005:


We expect this sighting news is going to be greeted with a mix of “what, haven’t they been out for ages?”, and “finally!”. The fifth wave of Combiner Wars Legends class toys has been confirmed out on US retail shelves! This assortment has been available online since the end of last year, and also has been sighted internationally, so perhaps it is a bit surprising that this assortment has taken this long to pop up in US retail stores. The assortment adds Buzzsaw, Pipes, Chop Shop, and the sinister Shockwave into the mix and into fan’s » Continue Reading.

The post Combiner Wars Legends Wave 5 released at US retail appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
G-Creations Blade Final Product Images
Posted by News Fetcher on February 08 '16 at 10:41 AM
By Sol Fury from TFW2005:


GCreations have shared some new images of their upcoming Blade figure, an unofficial Swoop who forms the arm and wings of the groups Dinobot combiner, Shuraking. Blade features a massive wingspan, two blasters and three swords – two normal sized ones, and a massive two-handed sword which is more than likely going to be wielded by the combiner Shuraking. There’s also some images of the Shuraking combination, showing two Blades for arms, giving a clear impression of what the final combined robot might be like.

The post G-Creations Blade Final Product Images appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
Review: Atelier Escha & Logy Plus: Alchemists of the Dusk Sky
Posted by News Fetcher on February 08 '16 at 10:41 AM
By Christian Chiok from Japanator:
With games like Persona 3, Persona 4, and many of the Hyperdimension Neptunia games coming to portable systems with new features and improvements, it has been a common practice among Japanese developers, and that includes Gust with their Atelier series. Having played Atelier Escha & Logy: Alchemists of the Dusk Sky when it originally released on PS3, I was really excited to play this enhanced version, especially since I’ve been looking for my portable gaming fix lately.

Atelier Escha & Logy is the second entry of the Dusk series, which takes place about four years after the beginning of the first entry. It is important to note that, while this game takes place in the same universe as the first game, you don’t really need to play it, or any other of the Atelier entries for that matter.



Read more...

Read Replies (0)
NAND Flash Density Surpasses HDDs', But Price Is Still a Sticking Point
Posted by News Fetcher on February 08 '16 at 09:23 AM
By timothy from Slashdot's daddy-what-were-spinning-media-and-what-was-their-areal-density? department:
Lucas123 writes: With the introduction of 3D or stacked NAND flash memory, non-volatile memory has for the first time surpassed that of hard disk drives in density. This year, Micron revealed it had demonstrated areal densities in its laboratories of up to 2.77 terabits per square inch (Tbpsi) for its 3D NAND. That compares with the densest HDDs of about 1.3Tbpsi. While NAND flash may have surpassed hard drives in density, it doesn't mean the medium has reached price parity with HDDs — nor will it anytime soon. One roadblock to price parity is the cost of revamping existing or building new 3D NAND fabrication plant, which far exceeds that of hard drive manufacturing facilities, according to market research firm Coughlin Associates. HDD makers are also preparing to launch even denser products using technologies such as heat assisted magnetic recording.

Read Replies (0)
Meteorite Strike Kills Man In India
Posted by News Fetcher on February 08 '16 at 09:23 AM
By timothy from Slashdot's as-go-ways-to-die department:
knwny writes: In what is believed to be the first such incident in modern times, a meteorite strike in India killed a man and injured three others. According to police sources, a loud blast was heard at the site of the strike which also left a four-feet deep crater. Preliminary investigation by forensic and bomb experts showed no sign of any explosive substance at the scene. The second link has a picture of the supposed crater which I believe will interest Slashdotters with experience in this area.

Read Replies (0)
Where Are the Raspberry Pi Zeros?
Posted by News Fetcher on February 08 '16 at 09:23 AM
By timothy from Slashdot's hiding-with-the-other-zeros department:
mikejuk writes: The Pi Zero was supposed to be available from November 26, 2015. It is now the start of February and all of the stockists, including the Pi Swag Shop, are still showing out of stock. That's two whole months, and counting, of restricted supply which is more than an initial hiccup. Of course you would expect enough to be made available initially to meet the expected demand. The Pi sells something in the region of 200,000 per month so what do you think the initial run of the Pi Zero actually was? The answer is 20,000 units. Of which 10,000 were stuck to the cover of MagPi and "given away" leaving just 10,000 in the usual distribution channels. And yet Eben Upton, founder of the Raspberry Pi Foundation, commented: "You'd think we'd be used to it by now, but we're always amazed by the level of interest in new Raspberry Pi products," Well yes, you really would think that they might be used to it by now and perhaps even prepared for it. At the time of writing the Pi Zero is still out of stock and when it is briefly in stock customers are limited to one unit.A victim of its own success, yes, but the real victims are the Raspberry Pi's competitors.

Read Replies (0)
Why Facebook Really Shut Down Parse
Posted by News Fetcher on February 08 '16 at 09:23 AM
By timothy from Slashdot's parse-this-buddy department:
New submitter isisilik writes: For those working in the 'aaS' business the Parse shutdown was the main topic of conversation this weekend. So why did Facebook decide to shut down their developer platform? The author claims that Facebook never wanted to host apps to begin with, they just wanted developers to use Facebook login. And he builds up a good case.

Read Replies (0)
Hackers Leak DHS Staff Directory, Claim FBI Is Next
Posted by News Fetcher on February 08 '16 at 09:23 AM
By timothy from Slashdot's soon-we'll-leak-your-mailing-address department:
itwbennett writes: On Sunday, the name, title, email address, and phone number of more than 9,000 DHS employees, with titles ranging from engineers, to security specialists, program analysts, InfoSec and IT, all the way up to director level was posted on Twitter. 'The account went on to claim that an additional data dump focused on 20,000 FBI employees was next,' writes CSO's Steve Ragan. The hacker told Motherboard that the data was obtained by "compromising the email account of a DoJ employee, although he would not elaborate on how that account was accessed in the first place."

Read Replies (0)
India Blocks Facebook's Free Basics Internet Service
Posted by News Fetcher on February 08 '16 at 06:45 AM
By timothy from Slashdot's rich-and-poor-equally-free-to-buy-bread department:
An anonymous reader writes: India's leading telecom regulator, TRAI (Telecom Regulatory Authority of India), has today voted against differential pricing, ruling with immediate effect that all data prices must be equal, and that companies cannot offer cheaper rates than others for certain content. The call is a significant blow to Facebook's Free Basics (previously Internet.org) initiative and Airtel Zero – projects which work to make internet access more accessible by providing a free range of "basic" services. The watchdog confirmed that providers would no longer be able to charge for data based on discriminatory tariffs but instead that pricing must be "content agnostic." It added that fines of Rs. 50,000 – 50 Lakh would be enforced should the regulations be violated.

Read Replies (0)
SpaceX Sets Feb. 24th Target Date For Next Launch
Posted by News Fetcher on February 08 '16 at 06:45 AM
By timothy from Slashdot's safely-after-groundhog-day department:
Rei writes: After some consternation about the pacing of Falcon 9 upgrades, SpaceX has announced that it plans to launch again from Cape Canaveral with a target date of February 24th. While the primary mission will be to place the SES-9 communications satellite in orbit, this will also mark their fourth attempt to land the first stage on an autonomous drone ship, after their last launch touched down softly but fell over when one leg failed to latch. SpaceX is working to significantly accelerate the rate of production and launches — they are reportedly moving the factory from 6-8 cores produced per year to 18 at present, and expect to reach 30 by the end of the year. After the upcoming launch, they expect to launch one rocket every two to three weeks.

Read Replies (0)
Review: ‘Adventures of Supergirl’ #2
Posted by News Fetcher on February 08 '16 at 06:32 AM
By Michael Melchor from Panels on Pages:
Writer: Sterling Gates

Artist: Bengal

Chapter 2 of of the digital-first Adventures of Supergirl hits today. The series, based on the TV show, settles into its rhythm a little more – and seems to take some more liberties – as it progresses.

One thing that stuck out about Chapter 1(but was not discussed here) was Supergirl’s adopted sister, Alex Danvers, calling her “Sis” in front of other DEOagents. Last issue could be explained away (which is why it wasn’t really brought up) – it was only once, and in a helicopter. Very noisy, so only Supergirl could (probably) hear it. In Chapter 2, she calls Supergirl by her civilian name, Kara. While in the same helicopter (which Supergirl is trying to save from crashing). And MUCH louder. By itself, this apparent giving away of Supergirl’s identity is an admitted nitpick.

However, We see the comic version of Wynn a bit later, who’s feeding Supergirl information – which is apparently a secret kept from Alex, as Supergirl talks very lightly and doesn’t mention to her sister that Wynn is feeding her information – which she is aware of in the show. The overall issue is that it’s somewhat confusing to see the continuity of the show at odds with this comic based on that very show.

In the plus column, we get some backstory about Alex herself – something we’ve had very little of in any version to date. In fact, Chapter 2 seems to focus more on Alex and also set up some of her story to come. There’s great promise in seeing that come to fruition since we know little about her.

< article continued at Panels on Pages >

Read Replies (0)
Gcreation Reveals Masterpiece Inspired IDW Optimus Prime and Prowl
Posted by News Fetcher on February 08 '16 at 06:26 AM
By Matty from TFW2005:


Third party group Gcreation, known for their unofficial Dinobot combiner Shuraking, has revealed on their Facebook page plans for a Masterpiece sized Optimus Prime and Prowl from their IDW appearances, for now labled GDW01 and GDW02. We currently only have one image of prototypes that are in low lighting, so details are sparse for the time being. What we do know is this project will be Masterpiece scaled, no price has been determined yet, and this will not delay the progress of Shuraking (a sigh of relief for those finishing that line). We have two threads to discuss the projects, you can » Continue Reading.

The post Gcreation Reveals Masterpiece Inspired IDW Optimus Prime and Prowl appeared first on Transformer World 2005 - TFW2005.COM.

Read Replies (0)
Adblock Plus Maker Seeks Deal With Ad Industry Players
Posted by News Fetcher on February 08 '16 at 05:22 AM
By timothy from Slashdot's listen-fellas department:
An anonymous reader writes with Yahoo's report that the makers of Adblock Plus are "looking to reach out to advertisers and identify an 'acceptable' level and form of advertising on the net." That involves convincing advertisers to conform to the company's own guidelines for advertising, or an alternative path much disliked by some of the software's users — to pay the company to ignore ads that don't meet those guidelines. From the article:

Big websites can pay a fee not to be blocked. And it is these proceeds that finance the Cologne-based company and its 49-strong workforce. While Google and Amazon have paid up, others refuse.

Axel Springer, which publishers Germany's best-selling daily Bild, accuses [Adblock Plus maker] Eyeo of racketeering.

"We believe Eyeo's business model is against the law," a spokesman for Springer told AFP.

"Clearly, Eyeo's primary aim is to get its hands on a share of the advertising revenues."

Ultimately, such practices posed a threat to the professional journalism on the web, he suggested, an argument Eyeo rejects.

Read Replies (0)
Linux Kernel Patch Hints At At 32-Core Support For AMD Zen Chips
Posted by News Fetcher on February 08 '16 at 02:31 AM
By timothy from Slashdot's more-like-seeds-than-cores department:
New submitter Iamthecheese points to an article which says that a patch published on the Linux Kernel Mailing List indicates that AMD's forthcoming Zen processors will have as many as 32 cores per socket, but notes that while the article's headline says "Confirms," "the article text doesn't bear that out." Still, he writes,

There are hints of such from last year. A leaked patch for the 14 nanometer AMD Zeppelin (Family 17h, Model 00h) reveals support for up to 32 cores. Another blog says pretty much the same thing. We recently discussed an announced 4+8 core AMD chip, but nothing like this.

Read Replies (0)