Shared posts

10 Sep 16:40

I Ran

by submission

Author : Ken McGrath

My mother often said that before I learned to walk I ran.

I ran everywhere; probably why I wasn’t so quick at learning to read. I couldn’t sit still for very long, didn’t like having my feet parked beneath a desk you see. I’d an abundance of energy, that’s why I was always darting around the place, chasing everything from footballs to girls. Heck I even chased the odd dream.

And I caught a few too, like the one thing that got me through school. Relay races, the sprint, hurdles. I did it all, although I wasn’t so good at that last one. Seems I never was great at overcoming obstacles. The one minute mile however, that was what stole my heart. A stretch of open track, pure focus and immediate results. Sheer beauty.

When I went from my teens into my twenties I kept upping the distance, ticking off boxes. 10k, 20k. Even the big one a few times.

Then when I was 29 I ran into Bernadette Walters. Beautiful, slender, ambitious Bernadette Walters who had lips that would set you weak at the knees and a shard of ice for a heart. But I found that out much too late, because after we married I ran into a wall. Work, bills, the mortgage on a tiny apartment that went too quickly from bijou to coffin-box. It was too much. I ran myself into the ground.

The pounds began to slide on and, for the first time, life ran away from me. Yet somehow in the midst of it all we conceived and along came my little Suzie, my precious girl. And for a while she brightened everything up, but it didn’t last. We quickly fell back on old habits, staying together just for our little girl.

When Suzie was three I started to run again. Tentative steps in the park at night. Some men might have cheated on their wives but I did the only thing I knew how, I put one foot in front of the other and built up laps. Every night, always coming back to the same place no matter how fast or how far I ran, life had become a circuit of cold stares and bitter, poisonous words.

We were out on Christmas Eve pretending to be a real family when the first attack came. The blast dropped from the heavens like God screaming and tore the shopping centre we were walking towards into pieces. I grabbed Suzie, turned and ran. There were screams but I didn’t look back. I just kept going. I had to make sure my girl was safe.

Weeks have passed now. The snow is melting and buds are appearing on some of the trees. From talking to other survivors I’ve learned of the hundreds of simultaneous attacks around the world. They say those first blasts were an extermination front-wave, firing pulse after pulse and reducing our cities to rubble, disrupting humanity for the coming alien invasion.

They say there’s a Resistance coming together but I don’t want to be part of it. All I do is run. I have my girl and I teach her to run too.

So long as I have legs beneath me I’ll continue to do run. It’s all I’ve known since I was born. If my daughter is to survive she’s going to have to learn to run too and maybe then I’ll have done something good with my life.

Discuss the Future: The 365 Tomorrows Forums
The 365 Tomorrows Free Podcast: Voices of Tomorrow
This is your future: Submit your stories to 365 Tomorrows

09 Sep 19:12

Infectious

by Steve Smith

Author : Steve Smith, Staff Writer

Lauren struggled to open her eyes, the lids heavy, the light in the room blinding. What time is it? It was evening when–

“You’re awake, good”

Darren. They were having dinner when she–

“The sedative will wear off shortly, you’ll be a bit groggy, and the epidural will make it impossible for you to move, but try not to be alarmed.”

She forced her eyes open, blinked as they teared against the bright light of the room. Darren stood facing her, stripped to the waist, one hand cradling the other elbow, idly stroking his chin with his free hand.

“The van I brought you here in is radio opaque, and this entire building is wired such that we’re untraceable. I don’t expect company.”

He moved to a chair opposite, still watching her. On the table beside him she could make out an array of tools, and a camera on a long articulated arm, which he pulled and pointed at his midsection while he continued to talk.

“It’s entirely possible that you don’t know why you’re here, and if that’s the case, I will be happy to apologize, but I’ve a nagging suspicion that you do, in which case – well – we’ll get to that later.”

She could see clearly now, a flat screen on the table beside him flared to life, displaying a high definition view of his lower right abdomen, each individual muscle clearly defined, sweat glistening on the olive-coloured, tightly stretched skin.

“You won’t remember,” he continued, “around my nineteenth birthday when my appendix ruptured. Messy business, rushed to the ER. Doctor went in through my stomach with what I can only assume was an axe, judging by the scar he left behind. Hurt to do anything for months while it healed. Sneezing, oh my god sneezing was exquisitely excruciating.”

He doused a cotton swab with dark brown fluid and scrubbed his right flank.

“Three years ago my body rejected the stitches they’d used, presumably they were supposed to dissolve, but they didn’t, and eventually my body took notice and an abscess formed around them. Messier still than the first round, rushed back into the ER, and another Doctor went back through the same scar tissue with, I’m guessing, a saws-all this time and cleaned everything out.”

He picked up a scalpel from the table, and paused, making deliberate eye contact.

“I’m pretty sure that’s when they put it in.”

She flinched and looked away, there was something about his eyes, a cold clarity that she wasn’t used to that frightened her more than the fact that he’d apparently kidnapped her and stuck a drip line into her spine.

“One summer as a teenager I spent a day out at the beach, it was overcast and I didn’t think about the sun but I burnt to a crisp. Do you notice the tan I’ve got now? Don’t you think it odd that my delicate white skin has become so resilient to UV rays? Last week I was at my barber and he complemented me on my hair replacement program, wondered who I used because he’d never seen a bald patch grow back in so quickly and completely.”

Still fingering the scalpel, he retrieved a number of gauze pads on their opened sterile wrappers and laid them on his lap.

“I can hear things far beyond what’s natural, and I can feel things with a depth and fidelity that I’ve never known before. I can feel this,” he waved the blade around his abdomen, “this foreign body in me, feel the virus it controls coursing through my veins. I can sense when they change its instructions and feel the ripple through my body, the newly versioned cells overtaking the obsolete ones as they die off and my entire being upgrades.”

“Have you noticed, the scar on my stomach?” He stretched pulling the camera closer and panning across the smooth flesh, devoid of any imperfections. “You never commented that it had gone, but you must have noticed. Didn’t that seem strange to you?”

Lauren studied him then, there was no doubt he was not quite the same man she’d first been introduced to, he was better in so many subtle ways, like a Darren that had been iterated over in design relentlessly.

“What do you want from me?” She sounded braver than she felt.

“Well, first I’m going to carve out whatever device they’ve buried inside of me, and I expect I should heal back up with alarming rapidity, and then we’re going to determine whether the virus they infected me with is contagious, or if you’re an observer, or perhaps this is just a double blind study and you truly don’t know anything about it.”

Lauren flinched. “What do you mean?”

Darren drew the scalpel across his stomach, blood welling out around the wound.

“Someone’s been following me, that much I know, and I’m curious, for example, how when I met you, you were blind as a bat, and yet you’ve been able to pay such close attention to what I’m doing when your glasses are right here on my table.”

Discuss the Future: The 365 Tomorrows Forums
The 365 Tomorrows Free Podcast: Voices of Tomorrow
This is your future: Submit your stories to 365 Tomorrows
26 Aug 17:39

What Are Frogs?

by Ari Spool
92d

Today, your fortune cookie reads:

“think deeply about difficult questions.”

26 Aug 14:42

110-year-old message in a bottle gets returned to sender

by David Pescovitz
A few months back, Marianne Winkler found a bottle on a German beach with a message inside requesting its return to the Marine Biological Association (MBA) that had dropped more than 1,000 bottles into the North Sea as part of a study of currents. Thing is, that experiment took place more than a century ago. From National Geographic:

screenshot

"We haven't had [a bottle] returned in living memory," says Guy Baker, an MBA spokesperson.

(Former MBA president and lead researcher on the bottle study George Parker) Bidder got about half of his messages back, says Baker. And the longest it took for one of his bottles to come home—before this current one—was about four years....

Bidder's bottle has also been submitted to the Guinness World Records for consideration as the oldest message in a bottle ever recovered. The current record-holder is a 99-year-old bottle discovered in a fishing net off the Shetland Islands in 2013.

"Century-Old Message in a Bottle Returned to Sender"

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

26 Aug 03:07

New Zealand gov't promises secret courts for accused terrorists

by Cory Doctorow


Juha sez, "The Law Society of NZ is alarmed at government proposals to introduce secret courts where defendants have no right to attend hearings and see all the evidence against them."

"The changes would allow court hearings to be held in secret, in order to protect national security. The Crown could introduce secret evidence, which would not be seen by the defendant or their legal team.

The Law Society said the provisions would allow a person to be tried and convicted of a criminal offence without seeing all the evidence against them, and without the right to be present during all proceedings."

'Secret court' provision alarms Law Society [Nicholas Jones/NZ Herald]

(Image: Line art drawing of a Ducking Stool, Pearson Scott Foresman, public domain)

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

26 Aug 02:36

Ow the Edge

by Brad
Ow_the_edge

The legacy of “Expand Dong” continues to resonate in the internet memescape with this cut-up style reaction image series based on the cover art for the 2005 video game Shadow the Hedgehog, which is typically used as a sarcastic response to any conspicuous display of edginess on 4chan.

26 Aug 02:29

How Disney Is Pronounced in Other Languages

by Ari Spool
Bdc

It’s always so interesting to learn about other languages! So very, very, very interesting.
Headphone peeps: turn it down.

26 Aug 02:27

From Yakuza 4: So Many Choices...

by Brad
5d9
25 Aug 23:27

Louisiana townsfolk terror-freak over Hebrew "welcome home" sign

by Cory Doctorow


Several residents of Rapides Parish called the sherriff's office to report a "terror message" on a sign that actually said "Welcome home, Yamit," in Hebrew.

If you see something, say something.

* You are not necessarily in danger just because you see something you don't recognize.

* The risk that you will be in the danger zone of a terror attack is incredibly low overall.

* It's probably even lower in Gardner, Louisiana, not known to be high on the list of ISIS targets.

* If it were, the terrorists probably would not warn you or communicate with each other by putting up signs.

* And if they just wanted to terrorize you with signs, they wouldn't write them IN ARABIC.

"Arabic Terror Message" Actually Said "Welcome Home" in Hebrew [Lowering the Bar]

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

25 Aug 18:02

Watch this street vendor make ice cream in Thailand

by Mark Frauenfelder

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

25 Aug 16:37

UK surveillance “worse than 1984,” says new UN privacy chief

by Glyn Moody

The newly appointed UN special rapporteur on privacy, Joseph Cannataci, has called the UK's oversight of surveillance "a rather bad joke at its citizens’ expense," and said that the situation regarding privacy is "worse" than anything George Orwell imagined in his novel 1984. Speaking to The Guardian, Cannataci said: "at least Winston [a character in Orwell's 1984] was able to go out in the countryside and go under a tree and expect there wouldn’t be any screen, as it was called. Whereas today there are many parts of the English countryside where there are more cameras than George Orwell could ever have imagined. So the situation in some cases is far worse already."

Cannataci is also concerned about the routine surveillance carried out by Internet companies as a key part of their business model. "They just went out and created a model where people’s data has become the new currency," he said. "And unfortunately, the vast bulk of people sign their rights away without knowing or thinking too much about it."

The mandate of the new post of UN special rapporteur on privacy is broad. Cannataci, who is a professor of law at the University of Malta, and uses neither Facebook nor Twitter, is empowered to review government policies on digital surveillance and the collection of personal data, and to identify activities that harm privacy protection without any compelling justification. He can also give his views on how the private sector should be addressing its human rights responsibilities in this field.

Read 2 remaining paragraphs | Comments

25 Aug 15:35

Saturday Morning Breakfast Cereal - Super Efficient

by admin@smbc-comics.com

Hovertext: All telepaths are now employed by high-speed trading firms.


New comic!
Today's News:

 Over half of general admission tickets for BAHFest East have sold out already! You geeks are the best :)

25 Aug 14:46

Synonym Movies 2

Bewarethewumpus

Ok, I'm stumped on Tropical Boaters. Anyone got the original title so it'll stop bugging me?

There's also the TV show based on the hit Hot and Cold Music books: Fun With Chairs, Royal Rumble, Knife Blizzard, Breakfast for Birds, and Samba Serpents.
25 Aug 01:34

MeFi: Piracy gave me a future.

by ChurchHatesTucker
25 Aug 01:04

Ashley Madison's founding CTO claimed he hacked competing dating site

by Cory Doctorow


Raja Bhatia was the original CTO of Avid Media, Ashley Madison's parenting site; in an email to Avid CEO Noel Biderman in the latest Ashley Madison dump, he hacked the back-end of Nerve, a competing dating site.

He describes Nerve's security as poor. He says he exfiltrated its entire database, and that he had the power to alter its customers' records: "Also, I can turn any non paying user into a paying user, vice versa, compose messages between users, check unread stats, etc." He also admits that Ashley Madison's security is poor, and that its users' passwords were stored unencrypted.

He asked Avid's PR team to get him in the media to discuss the hack of Grindr, another dating site.

Six months later, in May 2013, Biderman discussed whether he should disclose the vulnerability to Nerve.com.

“Should I tell them of their security hole?” he wrote Bhatia. There is no apparent response among the leaked emails.

Although the emails discuss setting up a phone call with Nerve.com, it’s not clear if ALM did disclose the vulnerability.

Neither Avid Life Media nor Bhatia responded to a request for comment from WIRED.

Ashley Madison Leak Reveals Its Ex-CTO Hacked Competing Site [Kim Zetter/Wired]

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

24 Aug 22:56

This smartphone anti-slip solution has the best Kickstarter video ever

by Mark Frauenfelder
Bewarethewumpus

I don't imagine I'll ever want this product, but their ad made me laugh, so I will share.

An excellent video for Lil Grit, Nathan Cobb's Kickstarter project to fund the manufacture of a small grippy pad that sticks to the side of your phone so it doesn't slip out of your hand. There are quite a few funny moments in the short promo.

lilgrit[via]

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

24 Aug 22:33

FTC can sue companies with poor information security, appeals court says

by Megan Geuss

On Monday, a federal appeals court ruled that the Federal Trade Commission (FTC) has the power to take action (PDF) against companies that employ poor IT security practices. The ruling, from the United States Court of Appeals for the Third Circuit, came as part of a lawsuit between the FTC and Wyndham Worldwide Corporation, which manages a collection of hotels throughout the US.

In 2008 and 2009, Wyndham suffered three different breaches of its network, ultimately losing payment card information for more than 619,000 customers and causing $10.6 million in loss due to fraud. The FTC sued Wyndham in 2012 for failing to protect its customers from hackers, and Wyndham countered by saying that it was a victim of the hack itself and should not be penalized by the FTC for the breach.

The Philadelphia-based appeals court allowed the FTC's case against Wyndham to go forward in district court, and it noted that the FTC could use its authority to pursue “cybersecurity” cases under 15 U.S.C. Sec.45, part of a 1914 law that gives the FTC the power to prohibit “unfair or deceptive acts or practices in or affecting commerce.” The court also noted that the FTC didn't have to spell out the specific security practices that Wyndham fell short of to bring a case against the company. However, the FTC did that in this instance, claiming that Wyndham allowed its partner hotels to store credit card information in plain text, allowed easily guessable passwords in property management software, failed to use firewalls to limit access to the corporate network, and failed to restrict third-party vendors from access to its network, among other things.

Read 2 remaining paragraphs | Comments

24 Aug 22:04

THIS DRUG ZONE

drugs,laws,rules,school,signs,zones

THIS DRUG ZONE It's School-Free, and we enforce it !

Submitted by: xyzpdq1

Tagged: drugs , laws , rules , school , signs , zones
24 Aug 21:58

Fire Emblem: The Original Saga

by Brad
A0a
24 Aug 21:44

A teaser trailer for Barkley 2, a sequel to the hilarious Barkley, Shut Up And Jam: Gaiden, has arri

by Patrick Klepek

A teaser trailer for Barkley 2, a sequel to the hilarious Barkley, Shut Up And Jam: Gaiden, has arrived. It’s promoting the game being at PAX later this week—I can’t wait to check it out—and teases a release in...2023. (The developers tell us it’s actually early next year.)

You can reach the author of this post at patrick.klepek@kotaku.com or on Twitter at @patrickklepek.

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

24 Aug 17:07

Ashley Madison Offering $378,000 Reward For Info On Hackers

by Ashlee Kieler

ashleymadison-580x370While big companies have been known to offer “bounties” to white-hat hackers to test for weaknesses in their networks and websites to ensure they aren’t one day breached in a cyber attack, it’s too late for AshleyMadison.com, the dating site for cheaters. After the embarrassment of having its users’ private information made very public, the site is now dangling several hundred thousand dollars as a reward for information leading to the arrest of the group behind the massive hack. 

The Toronto Police Department today announced that Avid Life Media – the parent company for the cheaters website – has ponied up half a million Canadian dollars (approx. $378,000 USD, based on today’s exchange rate) as a reward for assistance from the public to identify the people behind the massive breach and subsequent release of personal information, which included customer names and emails from Avid Life Media CEO Noel Biderman.

[NOTE: Though some news outlets are reporting the reward as $500,000 in U.S. currency, Consumerist has confirmed with Avid Life that this figure is in Canadian dollars.]

Authorities appealed to the hacking community during a news conference Tuesday morning, urging them to “do the right thing” by providing information about the group responsible.

“This hack is one of the largest data breaches in the world and is very unique on its own in that it exposed tens of millions of people’s personal information,” police officials said during a news conference Monday morning.

Assistance welcome from public that can help ID hackers known as "The Impact Team" responsible for #AshleyMadisonHack is #AMcaseTPS ^sm

— Toronto Police (@TorontoPolice) August 24, 2015

The Ashley Madison breach came to light back in July, when hackers posted a small sample of stolen data online. The company assured users that all data was secure just a day later.

However, last week, the hackers released the personal information of about 30 million users. The next day, a second data dump occurred, followed by a third over the weekend.

One of the motives behind the Ashley Madison attack is the site’s “Full Delete” feature, which charges users around $20 to fully scrub their information from the website. If users don’t pay for the deletion when they stop using the site, their info remains online but is hidden from search results. According to a leaked document, the company makes nearly $2 million a year from people wishing to be forgotten completely.

Toronto Police ask anyone with knowledge of the hacker group to contact authorities.

Ashley Madison Website Hack criminal investigation hotline for info is 416-808-2040. Hash tag #AMCaseTPS & twitter account @AMCaseTPS ^sm

— Toronto Police (@TorontoPolice) August 24, 2015

Anonymous information about #AshleyMadisonHack can be submitted to Crime Stoppers 1-800-222-8477 http://t.co/s26uSiNpM8 #AMcaseTPS ^sm

— Toronto Police (@TorontoPolice) August 24, 2015

Detectives also warned anyone trying to identify victims of the data breach that they are risking “malware, spyware, virus attacks on your devices.”

[via The Associated Press]

24 Aug 16:00

Twitter blocks site that archives deleted politician tweets

by Rob Beschizza

trumpPolitiwoops, already dead in the U.S., now dies in 30 more countries. They rely on Twitter's API, after all, which the company has long made clear is not a public service. The problem: it kills something that keeps politicians honest.

Jules Mattsson:

"It’s a terrible shame that Twitter has made this decision. Politwoops has been an important new tool in political accountability in the UK and abroad. Politicians are all too happy to use social media to campaign, but if we lose the ability for this to be properly preserved, it becomes a one-way tool."

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

24 Aug 15:41

Odd Meme: Comparing Anime Cards with Magic the Gathering

by Brian Ashcraft

Odd Meme: Comparing Anime Cards with Magic the Gathering

This isn’t the first comparison I would make, but it looks like enough other people are doing so. On Twitter in Japan, people are comparing similar poses in Idolmaster: Cinderella Girls and Magic the Gathering.

As noted on Togetter, there’s even a hashtag for the comparisons: #モバマスの画像をアップすると近い構図のmtgのカードが送られてくる (loosely, “If I/you upload a mobile Idolmaster game image, then then I/you can get a Magic The Gathering card with a similar composition”).

The Idolmaster Cinderella Girls is an anime and free-to-play mobile game. (As pointed out, some of the cards are also from The Idolmaster: Side M, a mobile game starring male characters.)

Advertisement

While the kwinky-dink images are hardly exact matches, some are close enough to be similar—and humorous. The amazing thing is that people were able to find these corresponding cards!

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: Nyar_Chaos]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: femur0]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: wakwakP]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: masmyan]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: femur0]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: Mirin_u]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: DINOS_DDR]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: Ayutaka]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: CocKAWASAKI]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: moron_idiot]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: 553_sia]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: bell_fly]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: luv_kraft]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: arikawakoba]

Odd Meme: Comparing Anime Cards with Magic the Gathering

[Photo: hiro_is_a_hero]

Top photo: Altergative

To contact the author of this post, write to bashcraftATkotaku.com or find him on Twitter@Brian_Ashcraft.


Kotaku East is your slice of Asian internet culture, bringing you the latest talking points from Japan, Korea, China and beyond. Tune in every morning from 4am to 8am.

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

24 Aug 15:36

That's One Way To Handle Anime Complaints

by Brian Ashcraft

That's One Way To Handle Anime Complaints

The latest episode of the PriPara (Prism Paradise) anime has raised eyebrows in Japan for the way the show changed its ending sequence.

PriPara started out as a kiddy arcade game in Japan and went on to spawn a manga and an anime.

According to IT Media, one possible explanation is a complaint from last month by Japan’s Broadcasting Ethics & Program Improvement Organization (BPO), for an anime ending sequence in which a young female character only has one of her shoulder straps over her, well, shoulder. The complaint wondered if this suggestive pose was necessary in an anime that’s aimed at children, and that it makes parents “uncomfortable.” The BPO did not specifically name PriPara.

Advertisement

The most recent episode features a slightly altered image. Compare for yourself in the clip below (around 1:09).

Everything else in the ending sequence seems to be the same.

To contact the author of this post, write to bashcraftATkotaku.com or find him on Twitter@Brian_Ashcraft.


Kotaku East is your slice of Asian internet culture, bringing you the latest talking points from Japan, Korea, China and beyond. Tune in every morning from 4am to 8am.

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

23 Aug 23:13

Car information security is a complete wreck -- here's why

by Cory Doctorow


Sean Gallagher's long, comprehensive article on the state of automotive infosec is a must-read for people struggling to make sense of the summer's season of showstopper exploits for car automation, culminating in a share-price-shredding 1.4M unit recall from Chrysler, whose cars could be steered and braked by attackers over the Internet.

All complex systems have bugs. Even well-audited systems have bugs luring in them (cough openssl cough). Mission-critical systems whose failings can be weaponized by attackers to wreak incredible mischief are deeply, widely studied, meaning that the bugs in the stuff you depend on are likely being discovered by people who want to hurt you, right now, and turned into weapons that can be used against you. Yes, you, personally, Ms/Mr Nothing To Hide, because you might be the target of opportunity that the attacker's broad scan of IP addresses hit on first, and the software your attacker wrote is interested in pwning everything, regardless of who owns it.

The only defense is to have those bugs discovered by people who want to help you, and who then report them to manufacturers. But manufacturers often view bugs that aren't publicly understood as unimportant, because it costs something to patch those bugs, and nothing to ignore them, even if those bugs are exploited by bad guys, because the bad guys are going to do everything they can to keep the exploit secret so they can milk it for as long as possible, meaning that even if your car is crashed (or bank account is drained) by someone exploiting a bug that the manufacturer has been informed about, you may never know about it. There is a sociopathic economic rationality to silencing researchers who come forward with bugs.

In the computer world, the manufacturers have largely figured out that threatening researchers just makes their claims more widely know (the big exceptions are Oracle and Cisco, but everyone knows they're shitty companies run by assholes.

your car is a copyrighted work and that researching its bugs is a felony form of piracy. Chrysler was repeatedly informed about its showstopper, 1.4M-car-recalling bug, and did nothing about it until it was front-page news. Volkswagen sued security researchers and technical organizations over disclosure of major bugs in VW's keyless entry system. Ford claims that its cars are designed with security in mind, so we don't have to worry our pretty little heads about them (because openssl was not designed with security in mind?).

None of this stops bad guys from learning about the bugs in these systems -- it just stops you, the poor sucker behind the wheel, making payments on a remote-controllable deathmobile, from learning about them.

Tesla, at least, has a bug-bounty program and a commitment to transparency. But the bugs that researchers found are pretty heinous and difficult to comprehensively mitigate.

Gallagher's article explains in eye-watering detail the dumb technological decisions the car-makers made that got us into this mess, but more importantly (and less prominently), the culture of the car-makers that has allowed this situation to come to pass. Even if the technological boondoggles can be fixed, we're still in a lot of trouble unless we can sort out their culture.

The “attack surfaces” of cars that get the most attention are the ones designed to keep people from driving away with cars they don’t own—electronic keyless entry systems or locks, and vehicle immobilizers that use low-power radio to detect the presence of a valid car key before allowing a car to start for example. Both of those types of systems, which use cryptographic keys transmitted by radio from a key or key fob, have been targeted by researchers. Engine immobilizers for a number of luxury brands were successfully attacked as part of a study by researchers at Radboud University (that was suppressed by Volkswagen’s lawyers for two years). Remote keyless entry systems have also been targeted in a number of ways, including signal amplification attacks and brute-force crypto breaking (as detailed in research by Qualys’ Silvio Cesare).

There are still areas of potential radio hacking that haven’t been fully explored. For example, tire pressure monitoring systems use radio communications to alert low tire pressure. Some commercial vehicles use remote automatic tire inflation systems, activated by pressure sensors, that communicate wirelessly. These systems could be targeted by hijackers to potentially fool a driver into pulling off the road or to blow out the tires on a trailer if an attacker successfully fooled them. (Though because of the design of some of these systems, a blow-out seems unlikely.)

Three of the exploits discussed at conferences this month were focused on simply gaining access to vehicles. As Ars reported last week, Dutch researchers finally were able to present the (almost) full findings of their research on defeating engine immobilizer systems used in cars from Volkswagen and its luxury brands as well as other automakers at USENIX Security in Washington. At DEF CON, Samy Kamkar unveiled two potential attacks on auto security. One, called "RollJam," targeted remote keyless entry systems on cars by performing a type of man-in-the-middle attack against the rolling keys used by the systems. By jamming the reception of the signal by the vehicle's receiver, the RollJam device could record the attempts made by the keyfob to authenticate and then rebroadcast the first of them to the car to unlock it.

Highway to hack: why we’re just at the beginning of the auto-hacking era [Sean Gallagher/Ars Technica]

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

23 Aug 19:40

Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

by Phil Owen

As has been demonstrated on this venerable website previously, Poly Bridge players have made some weird and cool stuff. They haven’t stopped yet, and I haven’t stopped watching their GIFs. And you shouldn’t either.

Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

By Violets-Are-Blue

Advertisement


Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

by Bolt986


Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

by Iwajira


Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

by Xotice


Here's a Handful of Awesomely Hypnotic Poly Bridge GIFs

by Charlbarl

This entry passed through the Full-Text RSS service - if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

23 Aug 15:38

(812): See, remember when you...

(812): See, remember when you wanted to get an Ashley Madison account and I told you not to and you hated me? You. Are. Welcome.
23 Aug 14:24

Ladder 1

http://oglaf.com/ladder1/

22 Aug 04:54

News Post: Funny Story

by gabe@penny-arcade.com (Gabe)
Gabe: At the very first PAX in 2004 there was a daring theft. One of our banners, THIS banner actually was stolen in the night! Remember when PAX was 24 hours? Yuck. Anyway, the thief was chased but escaped and we assumed the banner was gone forever. However at last year’s PAX prime here in Seattle, we received an incredible gift. The banner that had been lost was returned and the man who gave it to us confessed to having committed the crime! The story he told was fantastic. The plan he hatched to get it, how he eluded capture, then how he lived with his trophy for an entire decade. I…
22 Aug 02:11

A Directory of Rejectors' Phone Numbers

by Brad
E8e