Security

Gen Z Officially Worse At Passwords Than 80-Year-Olds (theregister.com) 97

A NordPass analysis found that Gen Z is actually worse at password security than older generations, with "12345" topping their list while "123456" dominates among everyone else. The Register reports: And while there were a few more "skibidis" among the Zoomer dataset compared to those who came before them, the trends were largely similar. Variants on the "123456" were among the most common for all age groups, with that exact string proving to be the most common among all users -- the sixth time in seven years it holds the undesirable crown.

Some of the more adventurous would stretch to "1234567," while budding cryptologists shored up their accounts by adding an 8 or even a 9 to the mix. However, according to Security.org's password security checker, a computer could crack any of these instantly. Most attackers would not even need to expend the resources required to reveal the password, given how commonly used they are. They could just spray a list of known passwords at an authentication API and secure a quick win.

Patents

Scientists Still Shoot For the Moon With Patent-Free Covid Drug 11

An anonymous reader quotes a report from Bloomberg, written by Naomi Kresge: In the early days of the Covid-19 pandemic, hundreds of scientists from all over the world banded together in an open-source effort to develop an antiviral that would be available for all. They could never have anticipated the many roadblocks they would face along the way, including the Russian invasion of Ukraine, which made refugees out of a group of Kyiv chemists who were doing important work for the project. The group, which called itself Covid Moonshot, hasn't given up on its effort to introduce a more affordable, patent-free treatment for the virus. Their open-source Covid antiviral, now funded by Wellcome, is on track to be ready for human testing within the next year and a half, according to Annette von Delft, a University of Oxford scientist and one of the Moonshot group's leaders. More early discovery work on a range of potential inhibitors for other viruses is also still going on and being funded by a US government grant.

"It's a bit like a proof of concept," von Delft says, for bringing a patent-free experimental drug into the clinic, a model that could be repurposed as a tool to fight neglected tropical diseases or antimicrobial resistance, or prepare for future pandemics. "Can we come up with a strategic model that can help those kinds of compounds with less of a business case along?" Of course, there was definitely a business case for a Covid antiviral, and some of the biggest drugmakers rushed to develop them. In 2022, Pfizer Inc.'s Paxlovid was one of the world's best-selling medicines with $18.9 billion in revenue. Demand has since cratered for the pill, which needs to be given shortly after infection and can't be taken alongside a number of other commonly prescribed medicines. Analysts expect the Paxlovid revenue to plunge just shy of $1 billion this year.

However, there is still a need for a better Covid antiviral, particularly in countries where access to the Pfizer pill is limited, according to von Delft. Covid cases have surged again this holiday season, with the rise of a new variant called JN.1 reminding us that the virus is still changing to evade the immunity we've built up so far. Just before Christmas, UK authorities said about one in every 24 people in England and Scotland had the disease. An accessible antiviral could help people return to work more quickly, and it could also be tested as a potential treatment for long Covid. "We know from experience in viral disease that there will be resistance variants evolving over time," von Delft said. "We'll need more than one."
Security

US Banks Spent $1 Billion on Ransomware Payments in 2021, Treasury Says (bloomberg.com) 18

US financial institutions spent nearly $1.2 billion on likely ransomware-related payments last year, most commonly in response to breaches originating with Russian criminal groups, according to the Treasury Department. From a report: The payments more than doubled from 2020, underscoring the pernicious damage that ransomware continues to wreak on the private sector. The Financial Crimes Enforcement Network, or FinCEN, said its analysis "indicates that ransomware continues to pose a significant threat to U.S. critical infrastructure sectors, businesses and the public." Financial institutions filed 1,489 incidents related to ransomware in 2021, up from 487 the year before, according to data collected under the Bank Secrecy Act. FinCEN's analysis included extortion amounts, attempted transactions and payments that were unpaid. FinCEN said the top five highest-grossing ransomware variants from the second half of 2021 are connected to Russian cybercriminals. The damage from Russian-related ransomware during that period totaled more than $219 million, according to the data.
Space

Stoke Space Aims To Build Rapidly Reusable Rocket With a Completely Novel Design (arstechnica.com) 62

Andy Lapsa and Tom Feldman, former Blue Origin engineers and the founders of Stoke Space, are working to develop the first fully recyclable space rocket -- one that features a reusable first and second stage. Here's an excerpt from Ars Technica's exclusive report, written by Eric Berger: In the 20 months since its initial seed round of funding, Stoke has built a second-stage engine, a prototype for the second stage, turbopumps, and manufacturing facilities. It also increased its headcount to 72 people and finalized the overall design for the rocket, which has a lift capacity of 1.65 metric tons to low-Earth orbit, in fully reusable mode. Last month, the company started to test-fire its upper-stage engines at a facility in Moses Lake, Washington. The images and video show an intriguing-looking ring with 15 discrete thrusters firing for several seconds. The circular structure is 13 feet in diameter, and this novel-looking design is Stoke's answer to one of the biggest challenges of getting a second stage back from orbit.

Most commonly, a traditional rocket has an upper stage with a single engine. This second-stage rocket engine has a larger nozzle -- often bell-shaped -- to optimize the flow of engine exhaust in a vacuum. Because all parts of a rocket are designed to be as light as possible, such extended nozzles are often fairly fragile because they're only exposed above Earth's atmosphere. So one problem with getting an upper stage back from Earth, especially if you want to use the engine to control and slow its descent, is protecting this large nozzle. One way to do that is to bury the engine nozzle in a large heat shield, but that would require more structure and mass, and it may not be dynamically stable. Stoke's answer was using a ring of 30 smaller thrusters. (The tests last month only employed 15 of the 30 thrusters). In a vacuum, the plumes from these nozzles are designed to merge and act as one. And during reentry, with a smaller number of smaller thrusters firing, it's easier to protect the nozzles. "What you're seeing in the photos of the test is a high-performance upper-stage engine that can operate within atmosphere at deep throttle to support vertical landing but then also perform at a higher ISP than some variants of the RL 10 engine in space," Lapsa said.

Another significant second-stage problem is protecting the whole vehicle from the super-heated atmosphere during reentry. NASA's Space Shuttle accomplished this with brittle thermal tiles, but these required 30,000 employee hours to inspect, test, and refurbish between flights. SpaceX is using a different type of ceramic tile, designed to be more reusable, for Starship. Given Stoke's background in rocket engines, Lapsa said it made the most sense to try a regeneratively cooled heat shield. The vehicle's ductile metallic outer layer will be lined with small cavities to flow propellant through the material to keep it cool during reentry. The second stage, therefore, will return to Earth somewhat like a space capsule -- base first, with the regeneratively cooled heat shield.

Stoke Space has a very long road ahead of it to reach space. Engine tests are an important step, but they're only the first step of many. Next up for the company is "hop" tests with a full-scale version of the second stage at the Moses Lake facility in central Washington. This prototype won't have a fairing as it would during launch, but it will still stand 19 feet tall. Initially, the tests will be low-altitude, probably measured in hundreds of feet. If there's an engineering need to go higher, the company will consider that, Lapsa said. But for now, the goal is to prove the capability to control the rocket during ascent and descent and make a soft landing. This is a shockingly difficult guidance, navigation, and control problem, especially with a novel system of distributed thrusters. "This is kind of a final proof point of this architecture," Lapsa said. "It is new. It's different. It's weird. It's original. There were a lot of questions that we had about how this thing is going to work. But we've already mitigated a lot of risk." If Stoke can manage to land the upper stage, it can move ahead with the first stage and start to turn the yet-unnamed rocket into an orbital vehicle. It sounds easy, but it's not...

Medicine

Study Finds Cannabinoids Prevent COVID-19 Infection (forbes.com) 280

MachineShedFred shares a report from Forbes: Compounds in cannabis can prevent infection from the virus that causes Covid-19 by blocking its entry into cells, according to a study published this week by researchers affiliated with Oregon State University. A report on the research, "Cannabinoids Block Cellular Entry of SARS-CoV-2 and the Emerging Variants," was published online on Monday by the Journal of Natural Products. The researchers found that two cannabinoid acids commonly found in hemp varietals of cannabis, cannabigerolic acid, or CBGA, and cannabidiolic acid, also known as CBDA, can bind to the spike protein of SARS-CoV-2, the virus that causes Covid-19. By binding to the spike protein, the compounds can prevent the virus from entering cells and causing infection, potentially offering new avenues to prevent and treat the disease.

"Orally bioavailable and with a long history of safe human use, these cannabinoids, isolated or in hemp extracts, have the potential to prevent as well as treat infection by SARS-CoV-2," the researchers wrote in an abstract of the study. The study was led by Richard van Breemen, a researcher with Oregon State's Global Hemp Innovation Center in the College of Pharmacy and Linus Pauling Institute, in collaboration with scientists at the Oregon Health & Science University. Van Breeman said that the cannabinoids studied are common and readily available. "These cannabinoid acids are abundant in hemp and in many hemp extracts," van Breemen said, as quoted by local media. "They are not controlled substances like THC, the psychoactive ingredient in marijuana, and have a good safety profile in humans."

Van Breemen added that CBDA and CBGA blocked the action of emerging variants of the virus that causes Covid-19, saying that "our research showed the hemp compounds were equally effective against variants of SARS-CoV-2, including variant B.1.1.7, which was first detected in the United Kingdom, and variant B.1.351, first detected in South Africa." [...] Although further research is needed, van Breemen noted that study shows the cannabinoids could be developed into drugs to prevent or treat Covid-19. CBDA and CBGA are produced by the hemp plant as precursors to CBD and CBG, which are familiar to many consumers. However, they are different from the acids and are not contained in hemp products." Van Breeman also noted that the research showed the cannabinoids were effective against new variants of the virus, which he said are "one of the primary concerns" in the pandemic for health officials and clinicians.

UPDATE (1/14): Slate points out that "working in a petri dish is a relatively low bar for a drug to clear," Slate points out.

"The conventional wisdom in pharmaceutical sciences holds that, of every 10,000 drugs that shows potential effectiveness, only one will make it to market."
News

In Naming Omicron Variant, Authorities Skipped 'Xi' and 'Nu' (wsj.com) 237

WHO has been using the Greek alphabet to name coronavirus strains, but avoided two letters that presented problems. From a report: As health authorities around the world grappled with the emergence of a new strain of the coronavirus, virologists were struggling with a thorny question of their own: What should they name it? The World Health Organization has been using Greek letters to refer to the most widely prevalent coronavirus variants, which otherwise carry unwieldy scientific names. It had already gone through 12 letters of the Greek alphabet when a new variant called B.1.1.529 was detected. But the next two letters in the Greek alphabet, Nu and Xi, posed problems. The WHO said it had skipped them because Nu was too easily confused with "new," while Xi is a common surname. The body cited best practices for naming diseases that seek to avoid causing offense to any cultural, social, national, regional, professional or ethnic groups.

Xi ranked 296th last year among the most common family names in China, according to the government. The top 100 family names are used by about 85% of the population, official data show. The Xi surname is shared by Chinese President Xi Jinping. Until the practice of naming variants after characters in the Greek alphabet was adopted in May, new strains of the virus were commonly referred to by the country where they were first detected. The new system sought to avoid stigmatizing countries that discover new variants. And so what was known as the U.K. variant -- also the Kent variant after the English county where it was discovered -- became Alpha, while a strain detected in South Africa was named Beta. Another thought to have originated in Brazil was given the name Gamma, while Delta was one of the variants first found in India.

Medicine

How Big Data Are Unlocking the Mysteries of Autism (scientificamerican.com) 68

Scientific American has published an opinion piece by the principle investigator for a project called SPARK, launched five years ago "to harness the power of big data by engaging hundreds of thousands of individuals with autism and their family members to participate in research."

The article calls autism "a remarkably heterogeneous disorder that affects more than five million Americans and has no FDA-approved treatments," arguing that the more people who participate in their research, "the deeper and richer these data sets become, catalyzing research that is expanding our knowledge of both biology and behavior to develop more precise approaches to medical and behavioral issues." SPARK is the world's largest autism research study to date with over 250,000 participants, more than 100,000 of whom have provided DNA samples through the simple act of spitting in a tube. We have generated genomic data that have been de-identified and made available to qualified researchers. SPARK has itself been able to analyze 19,000 genes to find possible connections to autism; worked with 31 of the nation's leading medical schools and autism research centers; and helped thousands of participating families enroll in nearly 100 additional autism research studies.

Genetic research has taught us that what we commonly call autism is actually a spectrum of hundreds of conditions that vary widely among adults and children. Across this spectrum, individuals share core symptoms and challenges with social interaction, restricted interests and/or repetitive behaviors. We now know that genes play a central role in the causes of these "autisms," which are the result of genetic changes in combination with other causes including prenatal factors. To date, research employing data science and machine learning has identified approximately 150 genes related to autism, but suggests there may be as many as 500 or more...

But in order to get answers faster and be certain of these results, SPARK and our research partners need a huge sample size: "bigger data." To ensure an accurate inventory of all the major genetic contributors, and learn if and how different genetic variants contribute to autistic behaviors, we need not only the largest but also the most diverse group of participants. The genetic, medical and behavioral data SPARK collects from people with autism and their families is rich in detail and can be leveraged by many different investigators. Access to rich data sets draws talented scientists to the field of autism science to develop new methods of finding patterns in the data, better predicting associated behavioral and medical issues, and, perhaps, identifying more effective supports and treatments...

We know that big data, with each person representing their unique profile of someone impacted by autism, will lead to many of the answers we seek.

Botnet

New Variants of Mirai Botnet Detected, Targeting More IoT Devices (arstechnica.com) 36

An anonymous reader quotes a report from Ars Technica: Mirai, the "botnet" malware that was responsible for a string of massive distributed denial of service (DDoS) attacks in 2016 -- including one against the website of security reporter Brian Krebs -- has gotten a number of recent updates. Now, developers using the widely distributed "open" source code of the original have added a raft of new devices to their potential bot armies by compiling the code for four more microprocessors commonly used in embedded systems.

Researchers at Palo Alto Networks' Unit 42 security research unit have published details of new samples of the Mirai botnet discovered in late February. The new versions of the botnet malware targeted Altera Nios II, OpenRISC, Tensilica Xtensa, and Xilinx MicroBlaze processors. These processors are used on a wide range of embedded systems, including routers, networked sensors, base band radios for cellular communications and digital signal processors. The new variants also include a modified encryption algorithm for botnet communications and a new version of the original Mirai TCP SYN denial-of-service attack. Based on the signature of the new attack option, Unit 42 researchers were able to trace activity of the variants back as far as November 2018.

Perl

The Slashdot Interview With Larry Wall 167

You asked, he answered!

Perl creator Larry Wall has responded to questions submitted by Slashdot readers. Read on for his answers...

Jonathan Zdziarski Answers 326

Wednesday we requested questions for Jonathan Zdziarski, an open source contributor and author of the recently reviewed book "Ending Spam." Jonathan seems to have taken great care in answering your questions, which you will find published below. We have also invited Jonathan to take part in the discussion if he has time so if your question didn't make the cut perhaps there is still hope.
News

Alicebot Creator Dr. Richard Wallace Expounds 318

Okay, here are Alicebot inventor Dr. Richard Wallace's answers to your questions. You're about to enter a world that contains interesting thoughts on A.I., a bit of marijuana advocacy, a courtroom drama, tales of academic politics and infighting, personal ranting, discussion of the nature of mental illness, and comments about the state of American society and the world in general. Yes, all this in one interview so long and strong we had to break it up into three parts to make it fit on our pages. This is an amazing work, well worth reading all the way to the end.

Slashdot Top Deals