Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Submission + - A $350 'Anti-5G' Device Is Just a 128MB USB Stick, Teardown Finds (arstechnica.com)

An anonymous reader writes: Believers of 5G conspiracy theories have apparently been buying a $350 anti-5G USB key that—not surprisingly—appears to just be a regular USB stick with only 128MB of storage. As noted by the BBC today, the "5GBioShield" USB stick "was recommended by a member of Glastonbury Town Council's 5G Advisory Committee, which has called for an inquiry into 5G." The company that sells 5GBioShield claims it "is the result of the most advanced technology currently available for balancing and prevention of the devastating effects caused by non-natural electric waves, particularly (but not limited to) 5G, for all biological life forms." The product's website charges 283 British pounds for a single 5GBioShield, which converts to nearly $350. That's what it costs to get "protection for your home and family, thanks to the wearable holographic nano-layer catalyser, which can be worn or placed near to a smartphone or any other electrical, radiation or EMF emitting device." The USB stick apparently doesn't need to be plugged in to anything to work its magic. "It is always ON and working—that's why we used quantum nano-layer technology," the company says in an FAQ.

But what does the 5GBioShield actually consist of? The BBC pointed to a recent teardown by security company Pen Test Partners, which found that the device is just a USB stick with 128MB of storage. The company wrote: "When plugged in to our test machine we may have missed the bubble of 'quantum holographic catalyzer technology' appearing. The stick comes loaded with a 25 page PDF version of the material from 5GBioShield's website. It included a Q&A of distances for the "bubble" and how to know if it is working. It's an "always on" system apparently, is always working, powered or not, so no visual checks needed. A review of the stick's properties revealed nothing more than what you'd expect from a regular 128MB USB key. We weren't even sure that 128s are still in production!"

Submission + - WD admits some Reds being SMR

KiloByte writes: After WD and some other HDD vendors have been caught passing off SMR disks without marking them as such, WD has finally admitted doing so, and provided some basic data about which disks are affected.

In a SMR disk, the area is split into a number of append-only zones (whose sizes vary, but 256MB is a typical value). A zone can't be edited except for rewriting its full contents with just the edited sector changed. Obviously, this makes random writes extremely slow — thus most such disks have a regular (PMR) area that forms a "cache". If the disk is used only for short rare bursts, the PMR cache can then be dispatched during a period of downtime. No surprisingly, if the disk is used continually or for a longer burst than what the cache can hold, the performance isn't pretty.

SMR disks are much cheaper than PMR — but the point of refusing to label them is to avoid passing those cost savings.

An "especially naughty deception" prize goes to WD's list of affected disks (PDF) — which lists only disks 1. currently shipping, 2. marketed as "client", 3. marketed as internal, with previous month's models being mysteriously missing.

Submission + - Who's in charge of public health at US airports?

Lasrick writes: Eventually, the United States is going to have to reopen its economy. When that happens, the federal government should not make the same mistakes it made at the beginning of the pandemic, when there was an alarming lack of attention being paid to the health status of travelers arriving at US airports. No government officials were asking people coming into the country medical questions or distributing public health instructions, even when it was clear that a true pandemic was in the works.

Dr. Laura Kahn examines the creation of the US Public Health Service Commissioned Corps, a cadre of about 6500 health care professionals whose mission is to prevent diseases from entering the nation. It's unclear why the Commissioned Corps wasn't immediately deployed, but when the US does start to reopen the economy, they need to already be in place around the country.

Submission + - A Digital Works Progress Administration (WPA) - Jobs program from home

sixoh1 writes: The Brookings Institute suggests a modern twist on the Depression era WPA idea, jobs that can be done from home funded with Government dollars — Mechanical Turk for all?

What is missing in such mandatory “stick” approaches is the more active use of “carrot” incentives that could both encourage self-isolation and help prepare a workforce to bounce back in the recovery phase. Noncompliance during a quarantine has large social costs, not least a faster spread of the pandemic and higher death rates. But governments could subsidize activities that help to better align private incentives with social objectives, and, in so doing, provide new forms of social protection that also make social distancing more bearable. What are some activities that could be performed by many citizens without leaving their homes?

One idea that struck me was converting documents to online, a slow process that could help with all those missing productivity numbers we keep hearing about:

Another high-potential area is document digitization: Only 10 percent of the world’s books are digitized. Even with the current level of optical character recognition (OCR) technology, for a book to be digitized, an independent person needs to check it for errors, problems with tables and images, tagging, and oversee the look of the resulting text. Handwritten documents, images, and tables, even in printed books, require manual processing, proofreading, careful checking, and quality control. A person would receive scanned images of, let’s say, old letters to decipher and type into the electronic document. Comparing the results of several independent people working on the same document would assure the quality of transcription. The Rainfall Rescue Project of the U.K.’s Met Office aims to digitize 65,000 pieces of paper that contain monthly and decadal rainfall totals at thousands of weather stations across the U.K. from 1950 back to 1820. Because of their public-good nature, such projects are underfinanced. The global research community and libraries around the world would benefit from government support of these efforts. And many people could earn income and be kept occupied at home, inputting historical climatic data in spreadsheets.

Submission + - Who's Behind the "Reopen" Domain Surge? (krebsonsecurity.com) 1

An anonymous reader writes: Inspired by a thread on Reddit, KrebsOnSecurity has been investigating possible incidences of state-led astroturfing to put pressure on U.S. states to ease, end or reduce the extent of coronavirus lockdowns; From the article:

"The past few weeks have seen a large number of new domain registrations beginning with the word “reopen” and ending with U.S. city or state names. The largest number of them were created just hours after President Trump sent a series of all-caps tweets urging citizens to “liberate” themselves from new gun control measures and state leaders who’ve enacted strict social distancing restrictions in the face of the COVID-19 pandemic. Here’s a closer look at who and what appear to be behind these domains.

"KrebsOnSecurity began this research after reading a fascinating Reddit thread over the weekend on several “reopen” sites that seemed to be engaged in astroturfing, which involves masking the sponsors of a message or organization to make it appear as though it originates from and is supported by grassroots participants.

"The Reddit discussion focused on a handful of new domains — including reopenmn.com, reopenpa.com, and reopenva.com — that appeared to be tied to various gun rights groups in those states. Their registrations have roughly coincided with contemporaneous demonstrations in Minnesota, California and Tennessee where people showed up to protest quarantine restrictions over the past few days.

"Suspecting that these were but a subset of a larger corpus of similar domains registered for every state in the union, KrebsOnSecurity ran a domain search report at DomainTools [an advertiser on this site], requesting any and all domains registered in the past month that begin with “reopen” and end in “.com.”

That lookup returned approximately 150 domains; in addition to those named after the individual 50 states, some of the domains refer to large American cities or counties, and others to more general concepts, such as “reopeningchurch.com” or “reopenamericanbusiness.com.”

https://krebsonsecurity.com/20...

Submission + - Forced Subscriptions Are Increasingly Driving 3D Users To Open Source Tools 2

dryriver writes: More and more professional 3D software like 3DMax, Maya, AutoCAD (Autodesk) and Substance Painter (Adobe) is now only available on a monthly or yearly subscription basis — you cannot buy any kind of perpetual license for these industry standard 3D tools anymore, cannot offline install or activate the tools, and the tools also phone home every few days over the internet to see whether you have "paid your rent". Stop paying your rent, and the software shuts down, leaving you unable to even look at any 3D project files you may have created with software. This has caused so much frustration, concern and anxiety among 3D content creators that, increasingly, everybody is trying to replace their commercial 3D software with Open Source 3D tools. Thankfully, open source 3D tools have grown up nicely in recent years. Some of the most popular FOSS 3D tools are the complete 3D suite Blender ( https://www.blender.org/ ), polygon modeling tool Wings 3D ( http://www.wings3d.com/ ), polygon modeling tool Dust3D ( https://dust3d.org/ ), CAD modeling tool FreeCAD ( https://www.freecadweb.org/ ), PBR texturing tool ArmorPaint ( https://armorpaint.org/ ), procedural materials generator Material Maker ( https://rodzilla.itch.io/mater... ), image editing tool GIMP ( https://www.gimp.org/ ), painting tool Krita ( https://krita.org/en/ ), vector illustration tool Inkscape ( https://inkscape.org/ ) and the 2D/3D game engine Godot Engine ( https://godotengine.org/ ). Along with these tools comes a beguiling possibility — while working with commercial 3D tools pretty much forced you to use Windows X in terms of OS choice in the past, all of the FOSS 3D tool alternatives have Linux versions. This means that for the first time, professional 3D users can give Windows a miss and work with Linux as their OS instead.

Comment FYI - Interview with one of the developers (Score 5, Informative) 169

I found a link to an interview with Paul Allen Newell, one of the original developers of Entombed (and other games). The interview sheds some light on how the maze algorithm was created. This interview was cited in the original research paper. The interview is here: https://www.digitpress.com/lib...

Submission + - Here's The Shocking Reality Of Completely Blocking Google From Your Life (forbes.com) 2

schwit1 writes: Even if you don't use Google, the Menlo Park data giant still has you and some of your most deeply personal information deep in its servers. Gizmodo's Kashmir Hill took on a "monumental challenge," according to the latest from Forbes, of not merely giving up Google's many services, but actively blocking all communication with every single one of Google's services on all her devices.

In other words, Hill didn't just stop using Google Search, YouTube, Gmail, Waze, etc., she got "the help of a Motorola engineer who designed a custom VPN (virtual private network) that restricted all of her devices — laptops, phones, smart speakers, everything — from talking to Google servers."

The result? It pretty much broke her access to the internet.

Jason Evangelho reports what happens when your smartphone, computer laptop, and tablet are denied access to "Google's 8,699,648 (!) IP addresses," and the results weren't pretty:

1. When trying to get across town for a meeting, Hill discovered that her Uber and Lyft apps were essentially useless. That's because they rely on Google Maps.

2. Hill was unable to stream her favorite on songs on Spotify. Yep. Spotify hosts all its music on the Google Cloud.

3. Attempting to simply browse the web created flashbacks of the internet in the 90's. "On Airbnb, photos won’t load," Hill says. "New York Times articles won’t appear until the site has tried (and failed) to load Google Analytics, Google Pay, Google News, Google ads, and a Doubleclick tracker." Many of the sites she visited were also dependent on Google Fonts. . .

4. When trying to share video journals to her colleagues at Gizmodo, Dropbox refused to let her log in because the service uses an invisible CAPTCHA — hosted by Google — to verify that real humans are trying to access it.

And those were just the obvious results. Behind the scenes, Hill's specialty VPN blocked her devices from trying to ping Google's servers more than 15,000 times — in just the first few hours. After a week, it had stopped more than 100,000 attempts to share data with Google. And to repeat, this is after Hill had stopped using any of Google's apps or services. The company has its tendrils all throughout the internet.

Submission + - Teacher Made Open Source Physics Textbook with Interactive Simulations (github.io)

Ross Landgreen writes: I'd like to share my two year project to build an online textbook for my high school physics classes. I wrote it for my students, but it might be useful for anyone learning or teaching physics.

Most sections have interactive simulations that help understand the fundamental and emergent consequences of physics theories.

The source code is hosted on github. It's free to use under the MIT license.
https://landgreen.github.io/ph...
https://github.com/landgreen/l...

Submission + - SPAM: The Problem With Programming and How To Fix It 1

theodp writes: Programming today," begins Jonathan Edwards' The problem with programming and how to fix it, "is exactly what you'd expect to get by paying an isolated subculture of nerdy young men to entertain themselves for fifty years. You get a cross between Dungeons & Dragons and Rubik's Cube, elaborated a thousand-fold." To be a 'full stack' developer, Edwards laments, one must master the content of something like a hundred thousand pages of documentation. "Isn't the solution to design technology that doesn't require a PhD?" he asks. "What of the #CSForAll movement? I have mixed feelings. The name itself betrays confusion — want we really want is #ProgrammingForAll. Computer science is not a prerequisite for most programming, and may in fact be more of a barrier to many. The confusion of computer science with programming is actually part of the problem, which seems invisible to this movement." It wasn't always this way, Edwards notes, citing spreadsheets, HyperCard, and the many incarnations of Basic as examples of how programming technology can be vastly easier and more accessible. "Unfortunately application programming got trampled in the internet gold rush," Edwards explains. "Suddenly all that mattered was building large-scale systems as fast as possible, and money was no object, so the focus shifted to 'rock star' programmers and the sophisticated high-powered tools they preferred. As a result the internet age has seen an exponential increase in the complexity of programming, as well as its exclusivity. It is long past time to return to designing tools not just for rock stars at Google but the vast majority of programmers and laypeople with simple small-scale problems. We've done it before so we can do it again, even better this time."

Submission + - Alternatives to PuTTY for Windows SSH client? 7

corvair2k1 writes: I have been a long-time user of PuTTY on Windows. PuTTY has a lot to love: It's very stable, you can just download and go without installing anything, and it doesn't get in the way. It does have a few shortcomings, mostly in how it manages user settings and colors. As far as I can tell, there's no support for having multiple color schemes. User data is stored in the registry, so you can't easily download and apply a new color scheme. You also can't easily pick up your settings and move them to a new machine.

Are there any SSH clients that have the best of all worlds? Is there some new SSH program that deserves a look?

Submission + - Researcher Turns HDD Into Rudimentary Microphone (bleepingcomputer.com)

An anonymous reader writes: Speaking at a security conference, researcher Alfredo Ortega has revealed that you can use your hard disk drive (HDD) as a rudimentary microphone to can pick up nearby sounds. This is possible because of how hard drives are designed to work. Sounds or nearby vibrations are nothing more than mechanical waves that cause HDD platters to vibrate. By design, a hard drive cannot read or write information to an HDD platter that moves under vibrations, so the hard drive must wait for the oscillation to stop before carrying out any actions.

Because modern operating systems come with utilities that measure HDD operations up to nanosecond accuracy, Ortega realized that he could use these tools to measure delays in HDD operations. The longer the delay, the louder the sound or the intense the vibration that causes it. These read-write delays allowed the researcher to reconstruct sound or vibration waves picked up by the HDD platters. A video demo is here.

"It's not accurate yet to pick up conversations," Ortega told Bleeping Computer in a private conversation. "However, there is research that can recover voice data from very low-quality signals using pattern recognition. I didn't have time to replicate the pattern-recognition portion of that research into mine. However, it's certainly applicable."

Furthermore, the researcher also used sound to attack hard drives. Ortega played a 130Hz tone to make an HDD stop responding to commands. "The Linux kernel disconnected it entirely after 120 seconds," he said. There's a video of this demo on YouTube.

Submission + - No Donald Trump — We Will Not "Come Together" with the Alt-Right Racists (vortex.com) 6

Lauren Weinstein writes: Part of his original insipid, blame everybody on “many sides” attempts at creating false equivalence between these genuine and wannabe Nazis — vis-a-vis the protesters against them — was the all too familiar call for us to “come together as one.” But what does that really mean?

We can apply Spock-like logic to this one.

Submission + - Japanese company develops new battery that will double electric car range 2

SmartAboutThings writes: According to a recent report from Nikkei business daily, it would seem that Japan's GS Yuasa Corp will begin mass-producing as early as in 2020 a new lithium-ion battery that would double the range of electric vehicles while keeping prices at the same level.

The new battery will be developed by a joint venture with Mitsubishi Corp and Mitsubishi Motors Corp. For instance, Mitsubishi Motors' i-MiEV compact, has a scope of around 170km per charge. The new battery would extend the range to some 340km, comparable to that of a large electric vehicle which can hold a bigger battery.

Slashdot Top Deals

"Gravitation cannot be held responsible for people falling in love." -- Albert Einstein

Working...