Transportation

Hacking Internet-Connected Trucks and Buses 30

An anonymous reader writes: Among the things one can find with Shodan, the search engine for the Internet of Things, are trucks, buses and delivery vans that have been equipped with the Telematics Gateway Unit device and a modem to connect to the Internet. What's more, security researcher Jose Carlos Norte says that this setup can be misused by malicious individuals to monitor and control these vehicles -- to discover their position, their speed, and so on, as well as to change some of those parameters, e.g. change the vehicle's route, or put up a geo-fence for it (he says he does not know what such a change would cause).
Network

Email Inventor Ray Tomlinson Dies At 74 (techrepublic.com) 58

vikingpower writes: ARPAnet pioneer and networking legend Ray Tomlinson, who is best known for his contributions in developing email standards, has died at 74. Tomlinson was best known for choosing the @ symbol to indicate a message should be sent to a different computer on a network. He also led development of standards for the from, subject, and date fields found in every email message sent today. When Tomlinson first showed his invention to his colleague Jerry Burchfiel, Tomlinson said, "Don't tell anyone! This isn't what we're supposed to be working on." May Ray rest in peace in /dev/null.
Bug

Cisco Issues Patch For Nexus Switches To Remove Hardcoded Credentials (csoonline.com) 36

itwbennett writes: Cisco Systems has released critical software updates for its Nexus 3000 and 3500 switches to remove a default administrative account with static credentials that could allow remote attackers access to a bash shell with root privileges, meaning that they can fully control the device. The account is created at installation time by the Cisco NX-OS software that runs on these switches and it cannot be changed or deleted without affecting the system's functionality, Cisco said in an advisory. The affected devices are: Cisco Nexus 3000 Series switches running NX-OS 6.0(2)U6(1), 6.0(2)U6(2), 6.0(2)U6(3), 6.0(2)U6(4) and 6.0(2)U6(5) and Cisco Nexus 3500 Platform switches running NX-OS 6.0(2)A6(2), 6.0(2)A6(3), 6.0(2)A6(4), 6.0(2)A6(5) and 6.0(2)A7(1).
Networking

ITU Give Consent To New 40Gbps Fiber-to-the-Home Broadband Standard 55

Mark.JUK writes: The International Telecommunication Union has just granted first-stage approval ("consent") to two new ultrafast Fiber-to-the-Home (FTTH) optical broadband standards. The first (NG-PON2) will support Internet download speeds of 40Gbps (Gigabits per second) and on top of that the new XGS-PON aims to deliver a symmetric 10Gbps service (same upload and download rate). By comparison, the previous XG-PON standard only ensured an asymmetric speed of 10Gbps download and 2.5Gbps upload. Now all we need is computers, Internet services and Wi-Fi networks that can actually harness such performance in the first place.
Education

Raspberry Pi 3 Brings Wi-Fi and Bluetooth (i-programmer.info) 97

mikejuk writes: Details of the next in the family of the successful Raspberry Pi family have become available as part of FCC testing documents. The Pi 3 finally includes WiFi and Bluetooth/LE. Comparing the board with the Pi 2 it is clear that most of the electronics has stayed the same. A Raspberry Pi with built in WiFi and Bluetooth puts it directly in competition with the new Linux based Arduinos, Intel's Edison and its derivatives, and with the ESP8266 — a very low cost (about $2) but not well known WiFi board. And of course, it will be in competition with its own stablemates. If the Pi 3 is only a few dollars more than the Pi 2 then it will be the obvious first choice. This would effectively make the Pi Zero, at $5 with no networking, king of the low end and the Pi 3 the choice at the other end of the spectrum. Let's hope they make more than one or two before the launch because the $5 Pi Zero is still out of stock most places three months after being announced and it is annoying a lot of potential users.
AT&T

AT&T Sues Louisville Over Google Fiber (wdrb.com) 157

An anonymous reader writes: Louisville was one of the cities identified in 2015 as a potential Google fiber location? Since then, Louisville has completed the pre-work Google requires and, most recently, unamiously passed an ordinance to remove legacy bureaucratic speed bumps to installing fiber on existing utility poles. This applies to any telco wanting to add infrastructure, so that's good, right? Well, not according to AT&T. They are suing the city to block this ordinance and prohibit the city from using its infrastructure as it sees fit to provide better broadband to its citizens.
Google

Google Is Lighting Up Dark Fiber All Over the Country (vice.com) 124

sarahnaomi writes: For years, San Francisco has had a robust fiber optic infrastructure laying dormant underneath its streets. Google announced Wednesday that it's going to start lighting some of those cables up. Welcome to the future of broadband in major cities. Most people don't know that many cities throughout the United States are already wired with "dark fiber": infrastructure that, for a variety of reasons, is never used to provide gigabit connections to actual residents. This fiber is often laid by companies you rarely hear about, like Zayo and Level 3, which lay fiber infrastructure in hopes the city, a provider like Google, or a corporate customer (like an office building) will eventually make use of it.
Bug

Linux Virtual Ethernet Bug Delivers Corrupt TCP/IP Data (vijayp.ca) 40

jones_supa writes: Vijay Pandurangan from Twitter warns about a Linux kernel bug that causes containers using Virtual Ethernet devices for network routing to not check TCP checksums. Examples of software stacks that use Virtual Ethernet devices are Docker on IPv6, Kubernetes, Google Container Engine and Mesos. The kernel flaw results in applications incorrectly receiving corrupt data in a number of situations, such as with bad networking hardware. The bug dates back at least 3 years or more – it is present in kernels as far back as the Twitter engineering team has tested. Their patch has been reviewed and accepted into the kernel, and is currently being backported to -stable releases back to 3.14 in various distributions. If you use containers in your setup, Pandurangan recommends that you deploy a kernel with this patch.
Networking

Bad Karma: WISP Pares Back Its Monthly 4G Hotspot Plan, Again 59

Robotech_Master writes: The ongoing saga of the Neverstop plan shows that Karma Wireless just can't seem to catch a break as far as high-bandwidth plans are concerned. After starting out with a straight pay-per-bandwidth plan, "Refuel," for its $150 wireless hotspot, Karma thought it would innovate with a throttled-but-otherwise-unlimited 4G plan, "Neverstop." However, it soon discovered that users were taking it at its word and using up considerably more bandwidth than Karma expected or could afford. After experimenting with further throttling, Karma subsequently revamped the plan into a $50 per month, 15 GB plan that throttled to dialup speed after it ran out. However, now it turns out even that plan was too optimistic, and Karma has opted to dump the Neverstop plan altogether in favor of tiered monthly plan called Pulse —whose bandwidth costs significantly more. ($40/mo for 5 GB, $75 for 10 GB, $140 for 20 GB.) Karma's "unlimited" users weren't pleased the first time the plan changed, and now they're practically through the roof.
Networking

How To Defeat VPN Location-Spoofing By Mapping Network Delays (thestack.com) 81

An anonymous reader writes: An interesting paper from a PhD student in Ontario outlines a system which in initial tests has proved 97% effective at unmasking geo-spoofing VPN users. The Client Presence Verification (CPV) system presented in the paper utilises analysis of delays in network packets in order to determine the user's location, disregarding the IP address geolocation information which currently underpins the efforts of content providers such as Netflix to prevent VPN users accessing content which is not licensed in their country. The detection system was tested at global network laboratory PlanetLab using 80 network nodes based in the U.S. and Canada.
Networking

UCL Scientists Push 1.125Tbps Through a Single Coherent Optical Receiver 25

Mark.JUK writes: A team of researchers working in the Optical Networks Group at the University College London in England claim to have achieved the "greatest information rate ever recorded using a single [coherent optical] receiver", which was able to handle a record data speed of 1.125 Terabits per second (Tbps). The result, which required a 15 sub-carrier 8GBd DP-256QAM super-channel (15 channels of data) and total bandwidth of 121.5GHz, represents an increase of 12.5% relative to the previous record (1Tbps). Now they just need to test it using some long fibre optic cable because optical signals tend to become distorted when they travel over thousands of kilometers.
Businesses

Time Inc. Buys MySpace Parent Company Viant (theverge.com) 38

Today, in a surprising turn of events, Time Inc. went back in time 10 years and bought MySpace. Just kidding - there was no time travel. But Time did announce today that they acquired Viant, a company that has a large ad tech business, but also owns other properties, including the old networking site MySpace. Terms of the deal have not yet been disclosed, but Time described the acquisition as "game changing," most likely in regards to Viant's ad-tech business. It remains to be seen what this will do for the future of MySpace ...
Security

Cisco ASA Firewall Has a Wormable Problem — And a Million Installs (csoonline.com) 78

itwbennett writes: Cisco has published an advisory for a vulnerability with a CVSS (Common Vulnerability Scoring System) score of 10 that was discovered by researchers from Exodus Intelligence. According to the advisory, 'a vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.' As CSO's Dave Lewis points out, 'the part of this that is most pressing is that Cisco claims that there are over a million of these deployed.'
And attackers have not been sitting on their thumbs.
Japan

Scientists In Japan Build 100Gbps Wireless Network Using Terahertz Transmitter 49

Mark.JUK writes: A group of Japanese scientists working on a project managed by Hiroshima University claim to have successfully built a Terahertz (THz) transmitter, which is implemented as a silicon CMOS integrated circuit and can transmit a signal running at 10Gbps per data channel over multiple channels in the 275-305GHz band for a top speed of 100Gbps (Gigabits per second). But crucially nobody has mentioned the distance at which this speed could be achieved, particularly since the THz band isn't likely to have much of a reach. It also sits very close to the region used by lasers.
Networking

Facebook Developing Radio Wave Mesh To Connect Offline Areas (thestack.com) 44

An anonymous reader writes: As part of its wider Internet.org initiative to deliver connectivity to poor and rural communities, Facebook is actively developing a new network technology which uses millimetre wave bands to transmit data. Facebook engineer Sanjai Kohli filed two patents which outlined a 'next generation' data system, which would make use of millimetre wave technology deployed as mesh networks. Kohli's patents detailed a type of centralised, cloud-based routing system which 'dynamically adjusts route and frequency channel assignments, transmit power, modulation, coding, and symbol rate to maximize network capacity and probability of packet delivery, rather than trying to maximize the capacity of any one link.'
Graphics

First Steps Towards Network Transparency For Wayland (phoronix.com) 154

munwin99 writes: For the longest time, when bringing up Wayland a recurring question was 'what about network transparency?!' Well, Samsung's Derek Foreman has today published the set of Wayland patches for providing Wayland network transparency by pushing the Wayland protocol over TCP/IP.
Bug

The Internet of Broken Things (hackaday.com) 97

szczys writes: The Internet of Things is all the hype these days. On one side we have companies clamoring to sell you Internet-Connected-everything to replace all of the stuff you already have that is now considered "dumb." On the other side are security researchers screaming that we're installing remote access with little thought about securing it properly. The truth is a little of both is happening, and that this isn't a new thing. It's been around for years in industry, the new part is that it's much wider spread and much closer to your life. Al Williams walks through some real examples of the unintended consequences of IoT, including his experiences building and deploying devices, and some recent IoT gaffs like the NEST firmware upgrade that had some users waking up to an icy-cold home.
Communications

Grandma's Phone, DSL, and the Copper They Share (hackaday.com) 177

szczys writes: DSL is high-speed Internet that uses the same twisted pair of copper wire that still works with your Grandmother's wall-mounted telephone. How is that possible? The short answer is that the telephone company is cheating. But the long answer delves into the work of Claude Shannon, who figured out how much data could be reliably transferred using a given medium. His work, combined with that of Harry Nyquist and Ralph Hartley (pioneers of channel capacity and the role noise plays in these systems), brings the Internet Age to many homes on an infrastructure that has been in use for more than a hundred years.
Networking

Japanese Researchers Achieve Record 56Gbps Wireless Transmission 33

Mickeycaskill writes: Fujitsu and the Tokyo Institute of Technology have achieved a wireless transmission of 56Gbps over a 10cm distance using millimeter-wave (mmWave) frequencies located between 30-300GHz. While cellular capacity is improved in some areas through the addition of new mobile masts and small cells, the fibre networks used to link these sites to the wider network is either absent or not feasible to deploy in urban locations or on difficult terrain. This makes the wireless capacity of mobile masts even more important. To achieve the speed, researchers developed custom chips and interface technology to boost capacity of wireless signals without significant data loss.

It is claimed that by pairing the technology developed with a high-output amplifier, the same effect can be achieved outdoors and could be commercialised for mobile operators by 2020.
Communications

Big Satellite Systems, Simulated On Your Desktop (sf.net) 44

An anonymous reader writes: Big systems of hundreds of satellites are under development to provide wireless Internet globally, with Richard Branson's OneWeb and Thales' LeoSat aiming at consumers and business markets respectively. It's like reliving the late 1990s, when Bill Gates' Teledesic and Motorola's Celestri were trying to do the same thing before merging their efforts and then giving up. And now you can simulate OneWeb and LeoSat for yourself, and compare them to older systems, in the new release of the vintage SaVi satellite simulation package, which was created in the 1990s during the first time around. Bear in mind Karl Marx's dictum of history: the first time is tragedy, and the second time is farce. Do these new systems stand a chance?

Slashdot Top Deals