Hugh Pickens DOT Com writes "Dan Goodwin writes at Ars Technica about a rootkit that seems straight out of a science-fiction thriller. According to security consultant Dragos Ruiu one day his MacBook Air, on which he had just installed a fresh copy of OS X, spontaneously updated the firmware that helps it boot. Stranger still, when Ruiu then tried to boot the machine off a CD ROM, it refused and he also found that the machine could delete data and undo configuration changes with no prompting. Next a computer running the Open BSD operating system also began to modify its settings and delete its data without explanation or prompting and further investigation showed that multiple variants of Windows and Linux were also affected. But the story gets stranger still. Ruiu began observing encrypted data packets being sent to and from an infected laptop that had no obvious network connection with—but was in close proximity to—another badBIOS-infected computer. The packets were transmitted even when the laptop had its Wi-Fi and Bluetooth cards removed. Ruiu also disconnected the machine's power cord so it ran only on battery to rule out the possibility it was receiving signals over the electrical connection. Even then, forensic tools showed the packets continued to flow over the airgapped machine. Then, when Ruiu removed internal speaker and microphone connected to the airgapped machine, the packets suddenly stopped. With the speakers and mic intact, Ruiu said, the isolated computer seemed to be using the high-frequency connection to maintain the integrity of the badBIOS infection as he worked to dismantle software components the malware relied on. It's too early to say with confidence that what Ruiu has been observing is a USB-transmitted rootkit that can burrow into a computer's lowest levels and use it as a jumping off point to infect a variety of operating systems with malware that can't be detected. It's even harder to know for sure that infected systems are using high-frequency sounds to communicate with isolated machines. But after almost two weeks of online discussion, no one has been able to rule out these troubling scenarios, either. 'It looks like the state of the art in intrusion stuff is a lot more advanced than we assumed it was,' says Ruiu. 'The take-away from this is a lot of our forensic procedures are weak when faced with challenges like this. A lot of companies have to take a lot more care when they use forensic data if they're faced with sophisticated attackers.'"

TorrentFreak reports that piracy rates of the television show Under the Dome shot up by more than a third last weekend, even though official ratings dropped. What caused the increase? On Friday, three million subscribers to Time Warner's cable TV service lost access to CBS programming, the network on which Under the Dome airs. The article says this provides compelling evidence that the availability of a show is a key factor in the decision to pirate it. "To find out whether download rates in the affected markets increased, we monitored U.S. BitTorrent downloads of last week's episode as well as the one that aired this Monday following the blackout. The data from these two samples show that in Los Angeles, New York City, Boston, Chicago, Dallas, Denver, Detroit and Pittsburgh, relatively more people downloaded the latest episode, an indication that customers are turning to unauthorized channels to get the show. With hundreds of thousands of downloads Under The Dome is one of the most pirated TV-shows at the moment. Of all sampled downloaders in the U.S. 10.9% came from the blackout regions for last week's episode, and this increased to 14.6% for Monday's episode, a 34% increase. In New York City, one of the largest affected markets, the relative piracy rate more than doubled from 1.3% of all U.S. downloads last week to 3% for the episode that aired after the blackout."

Craefter writes "It seems that the Oculus Rift virtual-reality headset caught the attention of investors after its showing at E3 this year. Spark Capital and Matrix Partners were able to push $16 million at Oculus VR in the hopes that the product will live up to the hype. The HD unit looks a bit more slick than the ski-goggles-with-a-tablet-glued-to-it prototype, but the device would look even more appealing if the next-gen consoles would commit to supporting it. (We all know how well the PS3's 'wave-stick' did as an afterthought.) That said, major titles like the 9-year-old Half-Life 2 and the 6-year-old Team Fortress 2 are getting full support for the device. Hopefully some developers are looking into support for the Oculus Rift as a launch feature, rather than an addition years after the fact. IA bit like the EAX standard from Soundblaster. That worked out well too."

Presto Vivace writes "In a blog post, danps explains how the music industry initially thought that the Internet meant that people wanted their music for free. In 2003 Apple persuaded the industry to use an online music store with DRM. But DRM just does not work for consumers, so by 2011 online music stores were DRM-free. Sadly, the book industry has not learned these lessons. And there are larger lessons for the gadget industry: 'The tech industry right now is churning out lots of different devices, operating systems and form factors in an attempt to get the One True Gadget — the thing you'll take with you everywhere and use for everything. That's a lovely aspiration, but I don't see it happening. What I see instead is people wanting to only carry around one thing at a time, and rotating through several: Smart phone for everyday use, tablet for the beach, laptop for the road, etc. If you can't get the book you paid for on each of those devices, it's a pain. As a reader I want to be able to put a book on everything as soon as I buy it so I always have a local (non-Internet dependent) copy — no matter which thing I run out of the house with.'"

holy_calamity writes "Digital currency Bitcoin is gaining acceptance with mainstream venture capitalists, reports Technology Review, but at the price of its famed anonymity and ability to operate without central authority. Technology investors have now ploughed millions of dollars into a handful of Bitcoin-based payments and financial companies that are careful to follow financial regulations and don't offer anonymity. That's causing tensions in the community of Bitcoin enthusiasts, some of whom feel their currency's success has involved abandoning its most important features."

ananyo writes "Scientists working 2.4 kilometers below Earth's surface in a Canadian mine have tapped a source of water that has remained isolated for at least a billion years. The researchers say they do not yet know whether anything has been living in it all this time, but the water contains high levels of methane and hydrogen — the right stuff to support life. Micrometer-scale pockets in minerals billions of years old can hold water that was trapped during the minerals' formation. But no source of free-flowing water passing through interconnected cracks or pores in Earth's crust has previously been shown to have stayed isolated for more than tens of millions of years (paper abstract)."

New submitter edanto writes "A young Irish man wrongly accused of jumping from a taxi without paying the fare has secured a judgement from an Irish court ordering the video removed from the entire Internet. Experts from Google, Youtube, Facebook, and others must tell the court in two weeks if this is technically possible. The thing is, the video is accurate, it is only a comment that wrongly identified Eoin McKeogh as the fare-jumper in the video that is inaccurate. It's not clear if the judge has made any orders about the comment."

"Quirky.com has generated a lot of buzz," writes frequent contributor Bennett Haselton, "but it's hard to see how it could ever be more than a novelty unless they change two key features of their process. Fortunately, they already have all the infrastructure in place for bringing inventions to fruition, so that with these two changes, Quirky really could deliver on their early promise to change the way products get invented." Read on for Bennett's thoughts — which seem more sensible than quirky.

Yvonne Lee, Community Manager at Dice.com, writes "Because EMC has expanded through more than 70 acquisitions in eight years — it was hiring even during the recession — and because many of the acquired companies were startups, it is trying to leverage the more dynamic cultures it's inherited and make itself more nimble and innovative. People it hired 'need to be able to move fast and run,' Thus, a key to getting the company's attention is to prove you can do what you say you can. In other words, when Murray asks if you can work fast, you can't just say yes. You'll have to use your previous achievements to prove that you can."

An anonymous reader writes "Google's Nexus 4 sold out around the world very quickly this week, and while there was talk of very limited supply, apparently some key people managed to get their hands on it. That's right: the Nexus 4 has already been rooted."