Open Source

Arch Linux Turns 20 (neowin.net) 29

"Arch Linux, the rolling Linux distribution that powers Valve's Steam Deck is now 20 years old," reports Neowin.

Slashdot reader segaboy81 writes that "What's cool to see here is that everything changed behind the scenes, but on the surface, things are the same." From the article: Announced on March 11th, 2002, and codenamed Homer, version 0.1 was released to minor fanfare. The release notes were a far cry from today's, essentially announcing it had broken ground and the foundation was going in, as it were.

Homer's release notes:

I've finally got a bootable iso image on the ftp site. The bad news is that you don't get a pretty interactive installer. But if you wanted one of those, you would have gone with RedHat, right? ;)

I'll try to get the docs up for ABS (Arch Build System) which, IMHO, is one of the best advantages of Arch. With ABS, you can easily create new packages, and it's trivial to rebuild existing packages with your own customizations....


It shipped with Linux kernel 2.4.18 which many of the Linux old-timers (myself included) will remember was right before we started to get nice things like auto-mounting USB drives in kernel 2.6. XFree86 4.2.0 was also in stow, which is what we now call Xorg. If you wanted to build software, you had to use an absolutely ancient gcc toolchain (2.95.3). Web browsing was covered by the ghost of Netscape Navigator, Mozilla 0.9.9. Heady days, these were!

Earth

Company Plans To Dig World's Deepest Hole To Unleash Boundless Energy (vice.com) 231

An anonymous reader quotes a report from Motherboard: A company that plans to drill deeper into Earth than ever before, creating holes that would extend a record-shattering 12 miles under our planet's surface, has raised a total of $63 million since its launch in 2020. Most recently, Quaise Energy, a startup that aims to revolutionize the geothermal energy market, secured $40 million in series A funding in February, reports Axios. The goal of these super-deep holes is to access a limitless amount of renewable energy from the heat deep inside Earth.

"This funding round brings us closer to providing clean, renewable baseload energy," said Carlos Araque, CEO and co-founder of Quaise Energy, according to BusinessWire. "Our technology allows us to access energy anywhere in the world, at a scale far greater than wind and solar, enabling future generations to thrive in a world powered with abundant clean energy." Geothermal energy has a low profile compared to other renewable energy sources such as solar, wind, and hydro, but Quaise believes it is "at the core of an energy-independent world," according to the company's website. This form of energy is among the oldest power sources harnessed by humans, but it only accounts for about 0.4 percent of net energy production in the United States, which is the world's biggest geothermal producer.

Quaise, which is a spinoff from the Massachusetts Institute of Technology (MIT), intends to pioneer this technology using vacuum tubes known as gyrotrons that shoot millimeter-wave light beams, powered by electrons in a strong magnetic field. Using these devices, the company plans to burn almost twice as far into Earth as the deepest holes ever made, such as Russia's Kola Superdeep Borehole or Qatar's Al Shaheen oil well, both of which extend for about 7.5 miles. Gyrotrons are powerful enough to heat plasma in nuclear fusion experiments, making them an ideal tool to probe unprecedented depths of some 12 miles, where subterranean rocks roil at temperatures of about 500C (930F). Water pumped into this searing environment would instantly vaporize as steam that could be efficiently converted to electricity. Araque and his team at Quaise plan to funnel their seed money into prototype technologies within the next few years. By 2028, the company aspires to retrofit coal-fueled power plants into geothermal energy hotspots, reports ScienceAlert. The process of drilling out these super-deep holes would take a few months, but once the setup is complete, they could provide limitless energy to a region for up to a century, according to Araque.

Moon

NASA Is Opening a Vacuum-Sealed Sample It Took From the Moon 50 Years Ago (npr.org) 28

Scientists at NASA's Johnson Space Center in Houston are preparing to open the first tube that one of the astronauts on the Apollo missions hammered into the surface of the moon. As NPR reports, it's "remained tightly sealed all these years since that 1972 Apollo 17 mission -- the last time humans set foot on the moon." From the report: The unsealed tube from that mission was opened in 2019. The layers of lunar soil had been preserved, and the sample offered insight into subjects like landslides in airless places. Because the sample being opened now has been sealed, it may contain something in addition to rocks and soil: gas. The tube could contain substances known as volatiles, which evaporate at normal temperatures, such as water ice and carbon dioxide. The materials at the bottom of the tube were extremely cold at the time they were collected. The amount of these gases in the sample is expected to be very low, so scientists are using a special device called a manifold, designed by a team at Washington University in St. Louis, to extract and collect the gas.

Another tool was developed at the European Space Agency (ESA) to pierce the sample and capture the gases as they escape. Scientists there have called that tool the "Apollo can opener." The careful process of opening and capturing has begun, and so far, so good: the seal on the inner sample tube seems to be intact. Now, the piercing process is underway, with that special "can opener" ready to trap whatever gases might come out. If there are gases in the sample, scientists will be able to use modern mass spectrometry technology to identify them. (Mass spectrometry is a tool for analyzing and measuring molecules.) The gas could also be divided into tiny samples for other researchers to study.

Technology

Concept Touchscreen Uses Temperature To Create Feel of Friction (gizmodo.com) 18

Researchers at Texas A&M have come up with a novel way for touchscreens to feel more than just perfectly smooth by fooling a user's sense of touch through temperature changes. Gizmodo reports: In a recently published paper in the Science Robotics journal, they found that by regulating the temperature of the surface of a touchscreen, they can increase or decrease the amount of friction a finger feels like it's experiencing. The sensation of friction can be increased by as much as 50% by increasing a touchscreen's surface temperature from 23 degrees Celsius to 42 degrees Celsius, while the actual temperature changes are imperceptible to the user, assuming they're sticking to taps or quick swipe gestures on the screen.

The current prototypes don't facilitate temperature adjustments in fine detail, but the eventual goal is to be able to manipulate and quickly change the temperature on any region of a touchscreen so that as a finger is sliding across it the changes in friction that are felt fool the brain into thinking it's feeling physical buttons like keyboards, playback controls, even joysticks and action buttons for gaming.

Power

Russian Shelling Damaged a Nuclear Research Facility, Ukraine Says (vice.com) 49

A research center housing a nuclear neutron source facility held at the Kharkiv Institute of Physics and Technology in eastern Ukraine was hit by Russian forces on Sunday, per a report from the state nuclear inspectorate. Motherboard reports: In a release published Sunday evening, the inspectorate called the blast "nuclear terrorism," spelling out a list of damages: a substation, which connects the plant to the electrical grid, on which the plant runs; cables within the facility's cooling system, which effectively prevent the plant from a meltdown; a heating line between structures in the facility; surface damages to the building that houses the structure; and windows across a number of buildings within the installation. "This list of damages is not complete so far. Currently, information on the consequences of the damages is being specified by the personnel," the report reads. An updated report following further inspection located no additional damage this morning.

The Security Service of Ukraine's Kharkiv branch said destruction of the facility could lead to "environmental disaster," the Kyiv Independent reported Sunday. Russian state-owned news agency TASS reported Sunday that the attacks were in fact brought on by Ukraine, a line that has since been debunked. The reactor, known as the NSA "Neutron Source" was built with support from the Illinois-based Argonne National Laboratory in service of an agreement signed between the U.S. and Ukraine at the 2010 Nuclear Security Summit in Washington, D.C. The U.S. invested $73 million in the project, which promised that the Kharkiv Institute of Physics and Technology would be "given the opportunity to build state-of-the-art technology in nuclear research that will contribute to "solving problems of nuclear power industry and extending technical lifetime of nuclear power plants,'" according to a report from the European Union Non-Proliferation Consortium.

Moon

After Mistaken Identity and Confusion, a Piece of Space Junk Slams Into the Moon (theverge.com) 12

After years of zooming through deep space, a presumed leftover piece of a Chinese rocket slammed into the Moon today, just as space tracking experts expected it would. From a report: At least, it should have hit the Moon around 7:30AM ET this morning, as long as the law of gravity has not changed. The collision brings an end to the rocket's life in space and likely leaves a fresh new crater on the Moon that may be up to 65 feet wide. The now-expired rocket has caused quite a buzz this past month. First of all, the vehicle was never intended to crash into the Moon, making it a rare piece of space debris to find its way to the lunar surface by accident. Additionally, there was some confusion over its identity, with various groups trying to nail down exactly where the rocket came from.

Originally, space trackers thought it was a leftover piece of a SpaceX Falcon 9 rocket that had launched a weather satellite back in 2015. But after careful analysis, various groups of space trackers confirmed that the rocket was likely leftover from the launch of China's Chang'e 5-T1 mission -- a flight that launched in 2014 to test out technology needed to bring samples back from the Moon. That mission, launched on a Chinese Long March 3C rocket, sent a spacecraft looping around the Moon in an attempt to see if China could send a vehicle to the Moon and then bring it back to Earth. Given the flight profile of the Chang'e 5-T1 mission and the tracking of the mystery object, astronomers are fairly certain that a chunk of the Long March 3C rocket has remained in an extremely elongated orbit around Earth ever since, only to find its way to the far side of the Moon.

Security

Russian Cybersecurity Giant Kaspersky Tries To Maintain Neutrality During Ukraine War (vice.com) 161

An anonymous reader quotes a report from Motherboard, written by Joseph Cox: Around the same time Russian forces launched a massive rocket into a square in Kharkiv, Ukraine's second-largest city, killing and wounding an as of yet unknown number of people, Eugene Kaspersky, head of his namesake Russian cybersecurity firm, tweeted that he hoped negotiations between Ukraine and Russia would lead to "a compromise." The statement encapsulates the company's position since Russia invaded Ukraine six days ago -- that of attempted neutrality in a war where silence or fence sitting is implicitly siding with the Russian forces. In another statement to Motherboard sent on Monday, the company said "As a technology and cybersecurity service provider the company is not in a position to comment or speculate on geopolitical developments outside of its area of expertise."

Kaspersky is one of the best-known Russian companies, and for years its antivirus product has been among the most used in the world. The antivirus software also harvests telemetry data for Kaspersky's researchers who can then use that to identify and counter new threats. Its researchers are some of the best in the world, with its Global Research & Analysis Team (GReAT) regularly publishing leading research on various government malware operations. Famously the company first revealed details of a U.S. government hacking group that it dubbed Equation Group. Kaspersky has also researched suspected Russian government linked hackers. Eugene's tweet also brings something else to the surface again: how much is Kaspersky, the company, influenced by the Russian government, even if indirectly? As a Russian firm operating in Moscow under Russian laws, it may feel the need to toe the line on Russian issues.

Kaspersky's company statement on Monday added that "Kaspersky is focused on its mission to build a safer world. For 25 years, the company delivers deep threat intelligence and security expertise that is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. Kaspersky's business operations remain stable. The company guarantees the fulfillment of its obligations to partners and customers -- including product delivery and support and financial transaction continuity. The global management team is monitoring the situation carefully and is ready to act very quickly if needed." Kaspersky may not currently feel it is in a position to speculate or take a position on the invasion of Ukraine. But with a 40 mile long Russian military convoy making its way to Kyiv, and with the prospect of more cyber attacks playing a role in the invasion, Kaspersky may need to take a side.

Mars

NASA Rover Spots Unreal Mars 'Flower' Formation (cnet.com) 13

Thelasko shares a report from CNET: NASA's Curiosity rover snapped a gorgeous, delicate formation on Mars that looks like it could be a branching piece of ocean coral. It's not coral, but it's worth contemplating how we see familiar Earth objects in random shapes on Mars. The miniscule Martian sculpture invites poetic comparisons. It resembles a water droplet captured at the moment of explosion against a surface, or the tendrils of an anemone in a tide pool.

The image comes from Curiosity's Mars Hand Lens Imager (Mahli) instrument, which NASA describes as "the rover's version of the magnifying hand lens that geologists usually carry with them into the field." So the formation in the image is quite small. Abigail Fraeman, a deputy project scientist for Curiosity, tweeted a helpful visual guide that compares the object with a US penny to give an approximate sense of the scale. Fraeman writes that the image "shows teeny, tiny delicate structures that formed by mineral precipitating from water."

Space

Are We Prepared for Contamination Between Worlds? (gizmodo.com) 54

Slashdot reader Tangential shares what he describes as "an interesting article on Gizmodo discussing how we could easily contaminate other planets/moons as we explore them."

"Based on our recently demonstrated vulnerability to locally evolved bacteria and viruses, what will other worlds's pathogens do to us (and what will ours do to them?) What I also find interesting is what a small percentage of SciFi actually addresses this."

From Gizmodo's article: The year is 2034. Humans have sent a probe to Jupiter's moon Europa to drill through the icy surface and photograph the ocean beneath. In the few hours before it stops functioning, the probe returns images of shapes that could be some form of life. Scientists quickly organize a followup mission that will collect samples of that spot and bring them back to Earth. But, unknown to anyone, the first probe wasn't sterile — it carried a hardy bacteria that had survived even the mission's clean rooms. By the time the samples finally reach Earth years later, they're dominated by this bacteria, which has happily set up shop in Europa's dark, salty waters. Just like that, our first opportunity to study a truly alien ecosystem has been destroyed.

This is a nightmare scenario for NASA and other space agencies, and it's one they've worked intensely to avoid with every mission to another orb. But some researchers from a lesser-known branch of ecology argue that even the current strict standards aren't rigorous enough, and as more ambitious missions to other planets and moons get ready to launch, the risk of interplanetary contamination becomes more dire. They say we need to better plan for "forward contamination," in which our technology disseminates Earth microbes, as well as "back contamination," in which life from elsewhere hitches a ride to Earth.

In fact, we already have a playbook to lean on: the discipline of invasion science, the study of how species on our planet invade each other's ecosystems. "What I would say is that, given that there are now concrete plans in place to explore new areas that could have extant life — these pose a new set of risks that were not in play before," Anthony Ricciardi, a professor of invasion ecology and aquatic ecosystems at McGill University, told Gizmodo. "Invasion science has been applied to biosecurity at national and international levels. My colleagues and I believe that it could similarly guide biosecurity at the planetary or interplanetary scales."

Because of the groundbreaking technological advances of recent years, our ability to explore other worlds — from asteroids to planets to ocean moons — is expanding, and so are the risks that come with that. NASA plans to bring bits of Mars to Earth in the early 2030s, and missions to Titan and Europa, which could very well host life, are set to launch this decade.... Although the 2034 Europa tale is invented, there's plenty of precedent for it. We've likely accidentally brought drug-resistant bacteria into the Antarctic ecosystem already, infecting seabirds and seals.

Our lack of foresight and carelessness is driving mass extinctions on Earth — are we willing to do the same thing to the next inhabited world we touch?

Earth

Sensor Breakthrough Paves Way For Groundbreaking Map of World Under Earth Surface (phys.org) 32

An anonymous reader writes: An object hidden below ground has been located using quantum technology -- a long-awaited milestone with profound implications for industry, human knowledge and national security. University of Birmingham researchers from the UK National Quantum Technology Hub in Sensors and Timing have reported their achievement in Nature. It is the first in the world for a quantum gravity gradiometer outside of laboratory conditions. The quantum gravity gradiometer, which was developed under a contract for the Ministry of Defense and in the UKRI-funded Gravity Pioneer project, was used to find a tunnel buried outdoors in real-world conditions one meter below the ground surface. It wins an international race to take the technology outside. The sensor works by detecting variations in microgravity using the principles of quantum physics, which is based on manipulating nature at the sub-molecular level. The success opens a commercial path to significantly improved mapping of what exists below ground level.

Professor Kai Bongs, head of cold atom physics at the University of Birmingham and principal investigator of the UK Quantum Technology Hub Sensors and Timing, said: "This is an 'Edison moment' in sensing that will transform society, human understanding and economies. "With this breakthrough we have the potential to end reliance on poor records and luck as we explore, build and repair. In addition, an underground map of what is currently invisible is now a significant step closer, ending a situation where we know more about Antarctica than what lies a few feet below our streets." [...] This breakthrough will allow future gravity surveys to be cheaper, more reliable and delivered 10 times faster, reducing the time needed for surveys from a month to a few days. It has the potential to open a range of new applications for gravity survey, providing a new lens into the underground.

Space

NASA's Parker Solar Probe Captures First Visible Light Images of Venus' Surface (dpreview.com) 24

dargaud writes: NASA's Parker Solar Probe has captured its first images of Venus' surface in visible light. The images show distinctive areas on the planetary surface, including continental regions, plains and plateaus. The images were taken on the nightside of the planet where the heat reemitted by the various surface areas has differing characteristics. "Venus is the third brightest thing in the sky, but until recently we have not had much information on what the surface looked like because our view of it is blocked by a thick atmosphere," said Brian Wood, lead author on the new study and physicist at the Naval Research Laboratory in Washington, DC. "Now, we finally are seeing the surface in visible wavelengths for the first time from space."

You can view images of Venus' surface in a video produced by NASA on YouTube.
Mars

NASA's Perseverance Rover Marks Its First Year Hunting for Past Life on Mars (npr.org) 6

It's been one year since a nuclear-powered, one-armed, six-wheeled robot punched through the Martian atmosphere at a blazing 12,000 miles per hour, and a supersonic parachute slowed it way down until a rocket-powered "jetpack" could fire its engines and then gently lower it onto the surface. NPR: NASA's Perseverance rover was too far away for engineers on Earth to control it in real time -- which meant that the spacecraft had to execute that daredevil maneuver all by itself. All that the robot's handlers on Earth could do was wait for confirmation that it had touched down safely. "It is a nail-biting experience," Rick Welch, Perseverance's deputy project manager. "There's no doubt about it." Dramatic as the Feb. 18, 2021 touchdown was, the milestones that the car-sized rover has hit in the year since then could one day prove far more momentous.

Perseverance is hunting for evidence of microbes that may have once lived on the red planet -- a first for a NASA robot. It begins a new chapter of Martian exploration: one that not only searches for ancient signs of microbial Martians, but that lays the groundwork to send samples of Mars rocks and dirt back to Earth. One of the mission's main objectives is to collect samples of rocks and dirt and stash them on the surface of Mars so that a future mission could pick them up and bring them back to Earth to study. The $2.7-billion rover is equipped with a suite of scientific instruments including a rock-blasting laser, cameras and spectrometers. But a robot geologist -- even one as advanced as Perseverance -- can only do so much. Scientists really hope to get pieces of the planet back to their labs.

AI

DeepMind Has Trained an AI To Control Nuclear Fusion (wired.com) 75

The Google-backed firm taught a reinforcement learning algorithm to control the fiery plasma inside a tokamak nuclear fusion reactor. From a report: The inside of a tokamak -- the doughnut-shaped vessel designed to contain a nuclear fusion reaction -- presents a special kind of chaos. Hydrogen atoms are smashed together at unfathomably high temperatures, creating a whirling, roiling plasma that's hotter than the surface of the sun. Finding smart ways to control and confine that plasma will be key to unlocking the potential of nuclear fusion, which has been mooted as the clean energy source of the future for decades. At this point, the science underlying fusion seems sound, so what remains is an engineering challenge.

That's where DeepMind comes in. The artificial intelligence firm, backed by Google parent company Alphabet, has previously turned its hand to video games and protein folding, and has been working on a joint research project with the Swiss Plasma Center to develop an AI for controlling a nuclear fusion reaction. In stars, which are also powered by fusion, the sheer gravitational mass is enough to pull hydrogen atoms together and overcome their opposing charges. On Earth, scientists instead use powerful magnetic coils to confine the nuclear fusion reaction, nudging it into the desired position and shaping it like a potter manipulating clay on a wheel. The coils have to be carefully controlled to prevent the plasma from touching the sides of the vessel: this can damage the walls and slow down the fusion reaction. (There's little risk of an explosion as the fusion reaction cannot survive without magnetic confinement).

But every time researchers want to change the configuration of the plasma and try out different shapes that may yield more power or a cleaner plasma, it necessitates a huge amount of engineering and design work. Conventional systems are computer-controlled and based on models and careful simulations, but they are, Ambrogio Fasoli, director of the Swiss Plasma Center at Ecole Polytechnique Federale de Lausanne in Switzerland. says, "complex and not always necessarily optimized." DeepMind has developed an AI that can control the plasma autonomously. A paper published in the journal Nature describes how researchers from the two groups taught a deep reinforcement learning system to control the 19 magnetic coils inside TCV, the variable-configuration tokamak at the Swiss Plasma Center, which is used to carry out research that will inform the design of bigger fusion reactors in the future.

Space

Why Musk's Biggest Space Gamble Is Freaking Out His Competitors (politico.com) 289

schwit1 shares a report from Politico: Starship is threatening NASA's moon contractors, which are watching its progress with a mix of awe and horror. "They are shitting the bed," said a top Washington space lobbyist who works for SpaceX's competitors and asked for anonymity to avoid upsetting his clients. NASA and its major industry partners are simultaneously scrambling to complete their own moon vehicles: the Space Launch System mega-rocket and companion Orion capsule. But the program is billions of dollars over budget and years behind schedule -- and, many would argue, generations behind SpaceX in innovation.

The space agency's first three Artemis moon missions over the next three years -- including a human landing planned for 2025 -- are all set to travel aboard the SLS rocket and Orion capsule, which are being built by Boeing, Lockheed Martin, Northrop Grumman, Aerojet Rocketdyne and numerous other suppliers and engineering services firms. But with the SLS' first flight this year further delayed at least until late spring, concerns are growing that even if it succeeds, the system, at an estimated $2 billion per launch, could prove too costly for the multiple journeys to the moon that NASA will need to build a permanent human presence on the lunar surface.

That makes Starship, which conducted a successful flight to the edge of space last year, especially threatening to the contractors and their allies in Congress. As Starship progresses, it will further eclipse the argument for sticking with SLS, according to Rand Simberg, an aerospace engineer and space consultant. "Once the new system's reliability is demonstrated with a large number of flights, which could happen in a matter of months, it will obsolesce all existing launch systems," he said. "If SLS is not going to fly more than once every couple of years, it's just not going to be a significant player in the future in space, particularly when Starship is flown," he added.

Moon

China, Not SpaceX, May Be Source of Rocket Part Crashing Into Moon (nytimes.com) 30

An anonymous reader quotes a report from the New York Times: On March 4, a human-made piece of rocket detritus will slam into the moon. But it turns out that it is not, as was previously stated in a number of reports, including by The New York Times, Elon Musk's SpaceX that will be responsible for making a crater on the lunar surface. Instead, the cause is likely to be a piece of a rocket launched by China's space agency.

Last month, Bill Gray, developer of Project Pluto, a suite of astronomical software used to calculate the orbits of asteroids and comets, announced that the upper stage of a SpaceX Falcon 9 rocket was on a trajectory that would intersect with the path of the moon. [...] But an email on Saturday from Jon Giorgini, an engineer at NASA's Jet Propulsion Laboratory in California, changed the story. Mr. Giorgini runs Horizons, an online database that can generate locations and orbits for the almost 1.2 million objects in the solar system, including about 200 spacecraft. A user of Horizons asked Mr. Giorgini how certain it was that the object was part of the DSCOVR rocket. "That prompted me to look into the case," Mr. Giorgini said.

Part of a rocket is expected to crash into the far side of the moon on March 4. Initially thought to be a SpaceX rocket stage, the object may actually be part of a Long March 3C rocket [that launched China's Chang'e-5 T1 spacecraft on Oct. 23, 2014]. He found that the orbit was incompatible with the trajectory that DSCOVR took, and contacted Mr. Gray. [...] Mr. Gray now realizes that his mistake was thinking that DSCOVR was launched on a trajectory toward the moon and using its gravity to swing the spacecraft to its final destination about a million miles from Earth where the spacecraft provides warning of incoming solar storms. But, as Mr. Giorgini pointed out, DSCOVR was actually launched on a direct path that did not go past the moon. "I really wish that I had reviewed that" before putting out his January announcement, Mr. Gray said. "But yeah, once Jon Giorgini pointed it out, it became pretty clear that I had really gotten it wrong."
There is still no chance of the rocket missing the moon, the report says.

"As for what happened to that Falcon 9 part, 'we're still trying to figure out where the DSCOVR second stage might be,' Mr. Gray said," according to the Times. "The best guess is that it ended up in orbit around the sun instead of the Earth, and it could still be out there. That would put it out of view for now."
Security

Microsoft Defender Will Soon Block Windows Password Theft (bleepingcomputer.com) 33

Microsoft is enabling a Microsoft Defender 'Attack Surface Reduction' security rule by default to block hackers' attempts to steal Windows credentials from the LSASS process. BleepingComputer reports: When threat actors compromise a network, they attempt to spread laterally to other devices by stealing credentials or using exploits. One of the most common methods to steal Windows credentials is to gain admin privileges on a compromised device and then dump the memory of the Local Security Authority Server Service (LSASS) process running in Windows. This memory dump contains NTLM hashes of Windows credentials of users who had logged into the computer that can be brute-forced for clear-text passwords or used in Pass-the-Hash attacks to login into other devices. While Microsoft Defender block programs like Mimikatz, a LSASS memory dump can still be transferred to a remote computer to dump credentials without fear of being blocked.

To prevent threat actors from abusing LSASS memory dumps, Microsoft has introduced security features that prevent access to the LSASS process. One of these security features is Credential Guard, which isolates the LSASS process in a virtualized container that prevents other processes from accessing it. However, this feature can lead to conflicts with drivers or applications, causing some organizations not to enable it. As a way to mitigate Windows credential theft without causing the conflicts introduced by Credential Guard, Microsoft will soon be enabling a Microsoft Defender Attack Surface Reduction (ASR) rule by default. The rule, ' Block credential stealing from the Windows local security authority subsystem,' prevents processes from opening the LSASS process and dumping its memory, even if it has administrative privileges.

While enabling the ASR rule by default will significantly impact the stealing of Windows credentials, it is not a silver bullet by any means. This is because the full Attack Surface Reduction feature is only supported on Windows Enterprise licenses running Microsoft Defender as the primary antivirus. However, BleepingComputer's tests show that the LSASS ASR rule also works on Windows 10 and Windows 11 Pro clients. Unfortunately, once another antivirus solution is installed, ASR is immediately disabled on the device. Furthermore, security researchers have discovered built-in Microsoft Defender exclusion paths allowing threat actors to run their tools from those filenames/directories to bypass the ASR rules and continue to dump the LSASS process. Mimikatz developer Benjamin Delpy told BleepingComputer that Microsoft probably added these built-in exclusions for another rule, but as exclusions affect ALL rules, it bypasses the LSASS restriction.

Security

Linux Malware Attacks are Increasing, and Businesses Aren't Ready (zdnet.com) 63

ZDNet reports: Cyber criminals are increasingly targeting Linux servers and cloud infrastructure to launch ransomware campaigns, cryptojacking attacks and other illicit activity — and many organisations are leaving themselves open to attacks because Linux infrastructure is misconfigured or poorly managed. Analysis from cybersecurity researchers at VMware warns that malware targeting Linux-based systems is increasing in volume and complexity, while there's also a lack of focus on managing and detecting threats against them.

This comes after an increase in the use of enterprises relying on cloud-based services because of the rise of hybrid working, with Linux the most common operating system in these environments. That rise has opened new avenues that cyber criminals can exploit to compromise enterprise networks, as detailed by the research paper, including ransomware and cryptojacking attacks tailored to target Linux servers in environments that might not be as strictly monitored as those running Windows. These attacks are designed for maximum impact, as the cyber criminals look to compromise as much as the network as possible before triggering the encryption process and ultimately demanding a ransom for the decryption key.

The report warns that ransomware has evolved to target Linux host images used to spin up workloads in virtualised environments, enabling the attackers to simultaneously encrypt vast swathes of the network and make incident response more difficult. The attacks on cloud environments also result in attackers stealing information from servers, which they threaten to publish if they're not paid a ransom.... Cryptojacking and other malware attacks are also increasingly targeting Linux servers. Cryptojacking malware steals processing power from CPUs and servers in order to mine for cryptocurrency....

Many of the cyberattacks targeting Linux environments are still relatively unsophisticated when compared with equivalent attacks targeting Windows systems — that means that with the correct approach to monitoring and securing Linux-based systems, many of these attacks can be prevented. That includes cybersecurity hygiene procedures such as ensuring default passwords aren't in use and avoiding sharing one account across multiple users.

Moon

The Greatest Physics Demo of All Time Happened on the Moon (wired.com) 112

This true story of a hammer, a feather, the Apollo 15 mission, and the answers to humanity's oldest questions about how stuff falls. From a report: Does a falling object move at a constant speed, or does it speed up? If you drop a heavy object and a light one at the same time, which will fall faster? The great thing about these two questions is that you can ask pretty much anyone and they will have an answer -- even if they are actually wrong. The even greater thing is that it's fairly simple to determine the answers experimentally. [...] OK, but what about dropping a rock and feather -- doesn't the rock hit first? Usually, the answer is yes. But let's replace the rock with a hammer and then just take a change of scenery and move the experiment to the moon. This is exactly what happened during the Apollo 15 lunar mission in 1971. Commander David Scott took a hammer and an eagle feather and dropped them onto the lunar regolith. Here's what happened: The feather and the hammer hit the ground at the same time.

Why did it happen? First, it is indeed true that even on the moon there is a greater gravitational force on the hammer than the feather. We can calculate this gravitational force as the product of mass (m in kilograms) and the gravitational field (g in newtons per kilogram). On the surface of the moon, the gravitational field has a value of 1.6 N/kg. If you put this expression in for the net force on a falling object, it looks like this: Fnet = - mg = ma; a = -g. Since both the gravitational force and the acceleration depend on the same mass, it's on both sides of the equation and cancels. That leaves an acceleration of -g. The hammer and the feather fall down with identical motions and hit the ground at the same time.

So, what's different about dropping something on the moon versus on Earth? Yes, there is a different gravitational weight on the moon -- but that's not the issue. It's the lack of air that makes the difference. Remember that Newton's second law is a relationship between the net force and the acceleration. If you drop a feather on the surface of the Earth, there are two forces acting on it. First, there is the downward-pulling gravitational force that is equal to the product of mass and the gravitational field. Second, there is an upward-pushing force due to the interaction with the air, which we often call air drag. This air drag force depends on several things, but the important ones are the object's speed and the size of the object. [...]

Space

A Third World May Be Orbiting Around Our Closest Neighboring Star (theverge.com) 34

Our nearest neighboring star, Proxima Centauri, may be harboring an extensive solar system, as scientists believe they've found a third planet orbiting it. From a report: It's a find that re-emphasizes just how commonplace planets outside our Solar System may be -- and it provides us with a third possible world nearby to study and potentially explore. Located a little more than 4 light-years from Earth, Proxima Centauri has long captured the imagination of scientists and sci-fi enthusiasts as a prime place to visit if we ever venture far outside our Solar System. The celestial object became even more intriguing in 2016 when astronomers found a planet orbiting around it. Called Proxima b, the planet is located in the star's habitable zone, where temperatures may be just right for water to pool on the surface. Just a few years later, a second planet, called Proxima c, was discovered around the star, too. With the discovery of this third likely exoplanet, called Proxima d, Proxima Centauri is possibly home to a wide array of worlds. While we do not have the means to travel to Proxima Centauri yet in any kind of reasonable time frame, these planets might be the first places we'd visit if we ever do develop such a capability. For now, their close proximity to Earth makes them prime candidates for follow-up study and observations. Astronomers say they could help us in our ever-evolving quest to understand how planets form around distant stars.
Mars

NASA Picks Lockheed Martin To Build Rocket To Carry Mars Samples Back To Earth (space.com) 70

NASA on Monday announced that it has selected the aerospace company Lockheed Martin to build the Mars Ascent Vehicle (MAV), a small rocket that will launch pristine Red Planet samples back toward Earth a decade or so from now. Space.com reports: Mars Sample Return is a joint effort of NASA and the European Space Agency (ESA). The project is already well underway, thanks to NASA's Perseverance rover, which landed on the Red Planet in February 2021.The six-wheeled robot has collected a handful of samples thus far and will eventually snag several dozen more, if all goes according to plan. The next big steps are scheduled to come in the mid-2020s, with the launch of two additional missions -- the NASA-led Sample Retrieval Lander (SRL) and ESA's Earth Return Orbiter (ERO).

SRL will deliver an ESA "fetch rover" and the MAV to the Martian surface. The fetch rover will carry the collected samples from Perseverance -- or the spot(s) where Perseverance has cached them -- to the MAV, which will then launch them into orbit around the Red Planet. A container holding the samples will then meet up with the ERO, which will haul it home to Earth, perhaps as early as 2031. Once the samples are down on the ground, scientists in well-equipped labs around the world will study them for signs of ancient Mars life, clues about the planet's evolutionary history and other topics of interest, NASA officials have said. [...] The newly announced MAV contract has a potential value of $194 million, NASA officials said in today's statement. The contracted work will begin on Feb. 25 and run for six years. During this time, Lockheed Martin will build multiple MAV test units as well as the flight unit.
"Committing to the Mars Ascent Vehicle represents an early and concrete step to hammer out the details of this ambitious project not just to land on Mars, but to take off from it," Thomas Zurbuchen, the associate administrator for science at NASA Headquarters, said in a statement. "We are nearing the end of the conceptual phase for this Mars Sample Return mission, and the pieces are coming together to bring home the first samples from another planet," Zurbuchen added. "Once on Earth, they can be studied by state-of-the-art tools too complex to transport into space."

Slashdot Top Deals