FFmpeg has added support for WHIP (WebRTC-HTTP Ingestion Protocol), enabling sub-second latency live streaming by leveraging WebRTC's fast, secure video delivery capabilities. It's a major update that introduces a new WHIP muxer to make FFmpeg more powerful for real-time broadcasting applications. Phoronix's Michael Larabel reports: WHIP uses HTTP for exchanging initial information and capabilities and then uses STUN binding to establish a UDP session. Encryption is supported -- and due to WebRTC, mandatory -- with WHIP and audio/video frames are split into RTP packets. WebRTC-HTTP Ingestion Protocol is an IETF standard for ushering low-latency communication over WebRTC to help with streaming/broadcasting uses. With this FFmpeg commit introducing nearly three thousand lines of new code, an initial WHIP muxer has been introduced. You can learn more about WebRTC WHIP in this presentation by Millicast (PDF).

An anonymous reader quotes a report from Bloomberg: Walmart customers will soon have the option to pay directly from their bank accounts with instant transfers for online purchases. The enhanced feature is a flash point in the escalating tensions between merchants and the card networks setting the fees for payment processing. The world's largest retailer has offered pay-by-bank through Walmart Pay since earlier this year. Until now, the transactions were akin to digital checks and took roughly three days to finalize when being processed through The Automated Clearing House, the same network often used for bill payments or paycheck deposits. Soon, customers opting for pay-by-bank transactions will see the purchase reflected in their bank account balance instantly -- and Walmart will receive the funds immediately. [...]

Walmart's upgraded pay-by-bank offering will be rolled out in 2025. The transactions will occur over bank technology provider Fiserv's NOW Network, which integrates with The Clearing House's Real Time Payments network and the Federal Reserve's FedNow. Until now, large retailers hesitated to launch real time payment options because many banks were not connected to an instant settlement system, meaning their customers would not be able to use the product. NOW Network aims to connect to as many banks as possible to reach 100% of deposit accounts by combining its own network with RTP and FedNow. The instant pay-by-bank product will be available for online checkout on Walmart.com. The Bentonville, Arkansas-based retailer already has customers set up a profile when they shop online. If they opt to add pay-by-bank as a payment option on their profile, they will enter their bank login credentials to connect their account. Fiserv's AllData platform connects with their bank clients and vendors including Plaid, MX, Akoya and Finicity to link and authenticate consumer accounts. With this instant pay-by-bank product, consumers will avoid stacked pending transactions, which can open them up to the risk of overdraft or non-sufficient fund fees from their bank. "When the transaction processes as a real time payment, customers get immediate access to see that payment come through, I see it hit my account and I can properly budget," said Jamie Henry, vice president of emerging payments at Walmart. "It's not as if I've got this phantom payment out there that's going to take place a couple days down the road."

In 2021, Apple announced plans for a new $1 billion campus in North Carolina, set to include a new engineering and research center and support up to 3,000 employees. According to Lauren Ohnesorge of Triangle Business Journal (paywalled), Apple remains committed to the project, but the timeline has been delayed by four years. MacRumors reports: A limited amount of progress on the campus has been made since the announcement, and Apple has not provided updates on construction until now. Apple told Triangle Business Journal that it has paused work on the campus, and it is working with North Carolina Governor Roy Cooper and the North Carolina Department of Commerce to extend the project's timeline by four years.

Apple last year filed development plans for the first phase of construction, but the specific timeline for the project has never been clear. Apple's plans for Research Triangle Park include six buildings and a parking garage totaling 700,000 square feet of office space, 190,000 square feet of accessory space, and close to 3,000 parking spaces spanning 41 acres. Apple owns 281 acres of land in the area where it plans to build its campus, so there could ultimately be several phases of construction. As it prepares to build the NC research center, Apple is leasing more than 200,000 square feet of office space in Cary, North Carolina. In a statement, Apple said it is still committed to the project: "Apple has been operating in North Carolina for over two decades. And we're deeply committed to growing our teams here. In the last three years, we've added more than 600 people to our team in Raleigh, and we're looking forward to developing our new campus in the coming years."

The U.S. Federal Reserve has launched a long-awaited service which will aim to modernize the country's payment system by eventually allowing everyday Americans to send and receive funds in seconds, 24 hours a day, seven days a week, the central bank announced on Thursday. From a report: The "FedNow" service, which has been in the works since 2019, will seek to eliminate the several-day lag it commonly takes cash transfers to settle, bringing the U.S. in line with countries including the United Kingdom, India, Brazil, as well as the European Union, where similar services have existed for years. FedNow is launching with 41 banks and 15 service providers certified to use the service, including community banks and large lenders like JPMorgan Chase, Bank of New York Mellon, and US Bancorp, but the Fed plans to onboard more banks and credit unions this year.

The Fed said on Thursday in a statement that 35 banks and credit unions were currently utilizing the service, as well as the Treasury Department's Bureau of Fiscal Service. The service will compete with private sector real-time payments systems, including The Clearing House's RTP network, and was initially opposed by big banks who said it was redundant. But many have since agreed to participate on the basis FedNow will allow them to expand the services they can offer clients. "For us, FedNow really is a wonderful way of expanding reach," said Anu Somani, head of global payables and embedded payments at U.S. Bank. Unlike peer-to-peer payments services like Venmo or PayPal, which act as intermediaries between banks, payments made via FedNow will settle directly in central bank accounts.

Firefox 106 is now available for download, bringing various new features and enhancements, such as a new PDF editing feature and new way to organize recently closed tabs. 9to5Linux reports: Mozilla says that Firefox 106 finally brings the long-anticipated two-finger swipe horizontal gesture for navigating back and forward on a website without having to hold down the Alt key. [...] Firefox 106 also introduces annotation capabilities to the built-in PDF viewer so you can write text, draw, or add signatures on PDF files. You'll be able to change the size and color of the text tool, as well as the thickness, opacity, and color of the draw tool.

Another interesting new feature of the Firefox 106 release is called Firefox View, which is implemented as a pinned tab, promising to help you get back to the content you've previously discovered by allowing you to switch seamlessly between your devices running Firefox. On top of all that, Firefox 106 also brings major WebRTC changes to improve Windows and Wayland screen sharing, RTP performance and reliability, statistics, and more. There are also the usual bug and security fixes to make Firefox more stable and reliable on your system.

Mark Wilson shares a report from BetaNews: Security researchers from Dojo by Bullguard have discovered a vulnerability in Amazon's Ring doorbell that leaves it prone to man-in-the-middle attacks. As well as enabling a hacker to access audio and video feeds in a severe violation of both privacy and security, the vulnerability also means that an attacker could replace a feed with footage of their own. Revealing the security flaw at Mobile World Congress, Yossi Atias from Dojo, demonstrated how a feed could be hijacked and injected with counterfeit video. The vulnerability poses a number of risks. The ability to spy on audio and video feeds has obvious privacy implications, but it could also enable a hacker to monitor comings and goings to determine when a house will be empty. Using easily-available tools, it is possible to intercept Ring's RTP stream and extract a viewable MPEG video.

A critical remote code execution vulnerability has been spotted in the LIVE555 media streaming library used by popular media players such as VLC and MPlayer. "Maintained by the company Live Networks, the library works with RTP / RTCP, RTSP or SIP protocols, with the ability to process video and audio formats such as MPEG, H.265, H.264, H.263 +, VP8, DV, JPEG, MPEG, AAC, AMR, AC-3, and Vorbis," reports Hackread. From the report: These findings (CVE-2018-4013) have left millions of users of media players vulnerable to cyber attacks, according to Lilith Wyatt, a researcher at the Cisco Talos Intelligence Group. In this case, the flaw lies in the HTTP packet parsing functionality, which analyzes HTTP headers for RTSP tunneling over HTTP, explains. An update has already been issued to address the vulnerability. Therefore, if you are using any of the vulnerable media players make sure they are updated to the latest version.

WhatsApp developers have fixed a bug in the Android and iOS versions of the WhatsApp mobile app that allowed hackers to take over the application when users answered an incoming video call. From a report: Natalie Silvanovich, a security researcher with Google's Project Zero security research team, discovered the WhatsApp vulnerability at the end of August. She described the vulnerability as a "memory corruption bug in WhatsApp's non-WebRTC video conferencing implementation." "Heap corruption can occur when the WhatsApp mobile application receives a malformed RTP packet," Silvanovich said in a bug report. "This issue can occur when a WhatsApp user accepts a call from a malicious peer." It is unclear how popular the video feature is on WhatsApp, which is used by more than 1.2 billion users. But in July, the company said users were spending over two billion minutes on calls (including voice) each day.

An anonymous reader writes "One of the major themes of the ongoing presidential election in the United States has been the perceived need to bring product manufacturing back to the United States. A recent announcement from Lenovo is going to play to this point; the PC manufacturer said today that it's building a U.S. location in Whitsett, North Carolina. The new facility is small, with just over 100 people and is being built for a modest $2M, but Lenovo states that it's merely the beginning of a larger initiative." It makes sense: their U.S. HQ is a stone's throw away in RTP.

Orome1 writes "A group of researchers from the Warsaw University of Technology have devised a relatively simple way of hiding information within VoIP packets exchanged during a phone conversation. The called the method TranSteg, and they have proved its effectiveness by creating a proof-of-concept implementation that allowed them to send 2.2MB (in each direction) during a 9-minute call. IP telephony allows users to make phone calls through data networks that use an IP protocol. The actual conversation consists of two audio streams, and the Real-Time Transport Protocol (RTP) is used to transport the voice data required for the communication to succeed. But, RTP can transport different kinds of data, and the TranSteg method takes advantage of this fact."

BSD Forums writes "FreeBSD's Dag-Erling Smorgrav reports the successful cross-world build of the amd64 tree (A tinderbox is system designed to test builds and report failure. In the FreeBSD case, tinderboxes build world [the base system], GENERIC, and if applicable LINT kernels. Dag-Erling Smorgrav currently runs all the tinderboxes by cross-building from i386)."

Veeru writes "In my career, I have run across some whopper error messages, but a call from the mainframe sysop one night beat them all: 'We are experiencing MVS processor spin loops, the programs are running while holding a disabled CPU. This is causing XCF communication delays to the point where we are losing VTAM RTP routing, are suffering OSPF adjacency failures on TCP/IP dynamic routing and MIM VCF failures. Whatever this code is, it should NOT be propagated to production or we run the risk of losing the development plex if XCF signaling is adversely impacted by processor disabled spin loops'. My friend once got an error message 'Error 2 while trying to report error 2'. I would be curious to hear from the Slashdot community on encounters with other bizarre error messages."

Jason writes: "OSNews is running an exclusive preview of the brand new version 6.2 of the QNX realtime operating system. The article is going through the installation process, the Photon user interface (lots of screenshots included), the internals, and the advantages and disadvantages of the OS as a desktop system. QNX RtP 6.2 is expected to be released for free (for non commercial usage) before March."

SD asks: "I am planning to write and experiment with multicast RTP streaming. I am not sure if my ISP supports multicast at the router level, so I am wondering if there any way I can set up a LAN in my home to experiment with multicast technology." For those of you who don't know what a Multicast network is, you may want to check the HOWTO. It strikes me that building a network to test multicasting would not be something you would want to do in too small of a scale. Without more details about what kind of application is getting tested, what do you feel would be a ballpark numbers (routers, machines, etc) for a network designed for testing multicast applications, and how much would such a thing cost?

An anonymous reader sends in: "iPaq just got new gracious looks. QNX microkernel and the gracious Photon micro GUI did wonders to iPaq. Get a sneak preview here. If you are in Boston next week, be sure to drop by Embedded Systems Boston to try your hands at the qPaq... ;)"

Mike Bouma writes: "The Phoenix Developer Consortium is an developer organisation which is unhappy with the currently available computing solutions. John Chandler has written an article about a small start-up company which has been one of many developers to tap into the organisation for resource contacts and advice. "It allowed them to extend their resources and survive the perils of being a small company in a large world." If you are a similar minded developer and want to join and help others or yourself to take your Ideas2Reality contact Greenboy and include the following information (signing a NDA will be required). Among the members are important figures involved in the development of OSes like the Amiga DE, MorphOS and QNX RtP."

Thanks to Mike Bouma who put together a paper with the help from a number of the Phoenix project members which gives more information regarding what's going on with QNX and why it matters.

alanh writes "Last week, the News and Observer from the RTP area of NC had this article about the modern usage of the words "Geek" and "Nerd." " Typical piece about the ascendancy of "geeks" and "nerds". However, an interesting question: How do you view the difference between the two words? Or do they mean the same thing?

hfcs writes "Just browsing the Red Hat Careers page, and a good number of their open positions are listed as being in San Franscisco. Just a couple of weeks ago, all positions were listed as being in RTP, NC. Hmmmm.... "

Robert Wagoner writes "Today's News and Observer had yet another Red Hat article in the business section. This is one of the more clueful items we've seen in the local press coverage. " It's a longish article with a few pictures and various interesting quotes. And there's raster again in that suit. Yikes. I don't even wear pants.