Security

Researchers Develop System To Send Passwords, Keys Through Users' Bodies (onthewire.io) 61

Trailrunner7 quotes a report from On the Wire: Credential theft is one of the more persistent and troubling threats in security, and researchers have been trying to come up with answers to it for decades. A team at the University of Washington has developed a system that can prevent attackers from intercepting passwords and keys sent over the air by sending them through users' bodies instead. The human body is a good transmission mechanism for certain kinds of waves, and the UW researchers were looking for a way to take advantage of that fact to communicate authentication information from a user's phone directly to a target device, such as a door knob or medical device. In order to make that idea a reality, they needed to develop a system that could be in direct contact with the user's body, and could produce electromagnetic signals below 10 MHz. And to make the system usable for a mass audience, the team needed widely available hardware that could generate and transmit the signals. So the researchers settled on the fingerprint sensor on iPhones and the touchpad on Lenovo laptops, as well as a fingerprint scanner and a touchpad from Adafruit. The concept is deceptively simple: generate an electromagnetic signal from the fingerprint sensor or touchpad and transmit that through the user's body to the target device. The signal can carry a typical password or even an encryption key, the researchers said. "We show for the first time that commodity devices can be used to generate wireless data transmissions that are confined to the human body. Specifically, we show that commodity input devices such as fingerprint sensors and touchpads can be used to transmit information to only wireless receivers that are in contact with the body," the researchers, Mehrdad Hessar, Vikram Iyer, and Shyamnath Gollakota, of UW said in their paper, "Enabling On-Body Transmissions With Commodity Devices."
Cellphones

Samsung's Next Flagship Smartphone May Not Feature a Headphone Jack (sammobile.com) 446

Samsung's next flagship smartphone, which may be released sooner than later due to the Note 7 fiasco, may not feature a 3.5mm headphone jack. In fact, Samsung may be one of many manufacturers to make the jump from the 3.5mm headphone jack to USB-C for audio. The USB Implementers Forum published the Audio Device Class 3.0 specification that brings USB Audio over USB Type-C. What this means is that "mobile devices including smartphones, tablets and ultraportable laptops could ditch the headphone jack in the very near future without worrying about having to bake audio support into USB-C or a new, proprietary port," writes Chris Smith via BGR. SamMobile adds: "Removing the dedicated audio plug will also allow OEMs to create smartphones that are slimmer and have better water resistance capabilities."
Microsoft

The Microsoft Band Is Dead (zdnet.com) 58

Microsoft's fitness-band line of devices have not be very well adopted over the years. Last month it was reported that Microsoft will be killing off the Lumia brand in favor of a new Surface Phone brand. Now, it appears the company is discontinuing its Band devices, as it has removed all references to them from its Microsoft Store listing online. Mary Jo Foley writes via ZDNet: A tipster who asked not to be named showed me a cached version of the Microsoft Online Store listing from yesterday, October 2, which included Band devices; today, October 3, references to the Band devices are gone from the company's Store sites. Microsoft also removed the Band software development kit (SDK) today, which isn't surprising given it's no longer selling Band 2 devices. Microsoft is believed to have disbanded the software team that was looking to bring Windows 10 to the Band a couple months ago. I've gotten various tips that at least some of the Band hardware team members have dispersed, too, with some moving to other Microsoft hardware teams inside the company. Even though sources of mine have said Microsoft is planning to phase out its fitness band devices and to have no plans to roll out a Band 3 device any time soon (or likely, ever), company officials still haven't completely conceded that it's the end of the line for Band. I asked again today and have yet to get an updated statement from the company regarding when and why Band devices were removed from Microsoft's online stores. A spokesperson sent me the following statement: "We have sold through our existing Band 2 inventory and have no plans to release another Band device this year. We remain committed to supporting our Microsoft Band 2 customers through Microsoft Stores and our customer support channels and will continue to invest in the Microsoft Health platform, which is open to all hardware and apps partners across Windows, iOS, and Android devices."
Communications

FBI Agreed To Destroy Laptops of Clinton Aides With Immunity Deal, Sources Say (foxnews.com) 500

An anonymous Slashdot reader quotes a report from Fox News: Immunity deals for two top Hillary Clinton aides included a side arrangement obliging the FBI to destroy their laptops after reviewing the devices, House Judiciary Committee sources told Fox News on Monday. Sources said the arrangement with former Clinton chief of staff Cheryl Mills and ex-campaign staffer Heather Samuelson also limited the search to no later than Jan. 31, 2015. This meant investigators could not review documents for the period after the email server became public -- in turn preventing the bureau from discovering if there was any evidence of obstruction of justice, sources said. The Republican-led House Judiciary Committee fired off a letter Monday to Attorney General Loretta Lynch asking why the DOJ and FBI agreed to the restrictive terms, including that the FBI would destroy the laptops after finishing the search. The immunity deals for Mills and Samuelson, made as part of the FBI's probe into Clinton's use of a private email server when she served as secretary of state, apparently included a series of "side agreements" that were negotiated by Samuelson and Mills' attorney Beth Wilkinson. The side deals were agreed to on June 10, less than a month before FBI Director James Comey announced that the agency would recommend no charges be brought against Clinton or her staff. Judiciary Committee aids told FoxNews.com that the destruction of the laptops is particularly troubling as it means that the computers could not be used as evidence in future legal proceedings, should new information or circumstances arise.
Power

Sandpoint Town Square Home To First Public Solar Roadways Panel Installation (newatlas.com) 163

Two years after the Idaho-based company Solar Roadways exceeded its crowdfunding goal of $1 million for constructing roads that gather solar power, the company has completed its first public installation in the City of Sandpoint, Idaho, where there are 30 tiles currently installed. New Atlas reports: The 150 sq ft (14 sq m) installation in Sandpoint's Jeff Jones Town Square is made up of 30 SR3 panels. Where Solar Roadways' second generation prototype was a 36-watt panel, the SR3 is the same size but is rated at 48 W, made possible by replacing the panel mounting holes with edge connectors. The new units each include four heating elements to help keep the installation free of snow and ice and over 300 brighter, daylight readable LEDs with over 16 million available colors. Though now laid down and switched on, not everything went exactly to plan with the installation. Manufacturing difficulties meant that some of the SR3 panels were not fully operational at the time of the public reveal. The working units were placed in the center of the grid and surrounded by dead panels. Solar Roadways aims to swap out the non-working units as soon as possible. Sandpoint officials plan to allow the public to interact with and modify the light show soon, and future plans for the town square include free public Wi-Fi and the roll out of electric vehicle charging stations. You can view the live stream of the Solar Roadways installation here.
Data Storage

Vint Cerf Warns About the Perishability Of Human Knowledge (vice.com) 348

Vint Cerf "worries about the decreasing longevity of our media, and, thus, about our ability as a civilization to self-document -- to have a historical record that one day far in the future might be remarked upon and learned from." An anonymous Slashdot reader quotes Motherboard: Magnetic films do not quite have the staying power as clay tablets. Clay tablets are more resilient than papyrus manuscripts are more resilient than parchment are more resilient than printed photographs are more resilient than digital photographs. At stake, according to Cerf, is "the possibility that the centuries well before ours will be better known than ours will be unless we are persistent about preserving digital content.

"The earlier media seem to have a kind of timeless longevity while modern media from the 1800s forward seem to have shrinking lifetimes. Just as the monks and Muslims of the Middle Ages preserved content by copying into new media, won't we need to do the same for our modern content...? Unless we face this challenge in a direct way, the truly impressive knowledge we have collectively produced in the past 100 years or so may simply evaporate with time."

He points out that much of this century's digital documents can't be viewed without software. Do we need to start carving our web pages into clay tablets?
Earth

India Ratifies The Paris Climate Change Agreement (npr.org) 130

"India just ratified the Paris climate deal -- bringing it extremely close to taking effect," reports the Washington Post, calling India the world's fourth-largest producer of greenhouse gas. An anonymous Slashdot reader quotes NPR's update on the Paris agreement: It will not become binding until it's ratified by 55 countries that contribute a total of at least 55% of global greenhouse gas emissions. The 55-country requirement has already been fulfilled -- India is No. 62 -- but...the current signatories account for about 52 percent of global greenhouse emissions, according to a statement released by the U.N. on Sunday.

India currently produces about 4.5 percent of the world's greenhouse gas emissions [and] has set a goal of producing 40 percent of its electricity with non-fossil fuel sources by 2030. India also promised to plant or preserve enough tree cover to act as a sink for at least 2.5 billion tons of carbon dioxide, and has called on the U.S. and other fully developed countries to share technologies that help decrease emissions.

Earth

Scientists Identify Another Source of Dangerous Greenhouse Gases: Reservoirs (popsci.com) 159

A team of researchers from Canada, Holland, China, the U.S. and Brazil "found that greenhouse gas emissions from man-made reservoirs were likely equal to the equivalent of one gigaton of carbon dioxide being released into the atmosphere every year...a little less than one-sixth of the United State's greenhouse gas emissions." An anonymous Slashdot reader quotes Popular Science: A reservoir is usually created by damming a river, overflowing the banks and flooding the surrounding area, creating a man-made lake...the perfect conditions for microbes to generate greenhouse gases like carbon dioxide and methane (a gas that is about 25 times more potent than carbon dioxide)... "When reservoirs are first flooded there's organic matter in the soil and vegetation that can be converted by microbes into methane and carbon dioxide," John Harrison, a co-author of the paper, tells Popular Science.

"Also, reservoirs because they are in line in rivers, they receive a lot of organic matter and organic sediment from upstream that can fuel the production of methane, carbon dioxide and nitrous oxide." Harrison says that reservoirs also tend to occur in areas where fertilizers are used on the surrounding land. Runoff from those fertilizers into bodies of water can cause algal blooms that can also produce more methane and carbon dioxide.

If the world's reservoirs were a country, they'd be #8 on a list of polluters -- right behind Brazil, China, the EU and the U.S.
Data Storage

With HDDs On The Ropes, Samsung Predicts SSD Price Collisions As NVMe Takes Over (tomshardware.com) 161

At its Global SSD Summit, Samsung shared its vision of the current state of SSD market and also outlined the future trends. The company noted that SSDs are steadily displacing HDDs in more applications, but NVMe is shaping up to be the dark horse that may put the venerable HDD to rest. From an article on Tom's Hardware: Samsung loves Google, and not just because it probably buys plenty of its SSDs. Samsung outlined its rather intense focus on Google Analytics for marketing purposes last year, and this year it pointed out that recent Google searches for "SSD upgrades" outweighed searches for "CPU upgrades." The historical trend indicates that this wasn't always the case (of course), but with 40 million searches for SSD upgrades this year, it is clear that SSDs are on the move. Performance stagnation in the CPU market is probably to blame here, as well, and we routinely advise readers to spend their hard-earned dollars on GPU and SSD upgrades before the CPU. The cellphone industry has long served as the prime example of an explosive growth market; it grew 19.1% in the last five years alone. SSDs, by contrast, grew 54%, and the steady downward pricing slope is a key factor. The all-important price-per-GB fell from $1.17 in 2012 to a mere $0.36 in 2016 (69% reduction). This is an average value, you can find SSDs for even less on the retail market. The SSD market grew 6x (to 130,000,000) from 2012 to 2016. Samsung's NAND shipments benefit from both the smartphone and SSD industries, and the company presented a chart that highlighted the changing NAND shipment mix. A higher percentage of flash heads into the SSD and Mobile segments every year as the percentage of UFD (USB Flash Drive), cards, and "others" decline.
Open Source

Ask Slashdot: Should An Open Source Hardware Project Support Clones? 117

Long-time Slashdot reader Ichijo has a question about "(not quite) open source hardware": One hardware project that calls itself "open source" doesn't want to make its hardware design source files publicly available because doing so would, in their words, "make it very trivial for e.g Chinese companies to start producing cheap clones... we'd be getting support requests for hardware we had no idea of the quality of." This answer was in response to a request by a user who wants to use the design in his own projects.

Have any other open source hardware projects run into support issues from people owning cheap "clones"? Have clones been produced even without the hardware design source files?

Leave your answers in the comments. Should an open source hardware project support clones?
Open Source

The Arduino Split is Over, New Non-Profit Formed (arduino.cc) 73

"Today is one of the best days in Arduino history," announced Massimo Banzi, Co-Founder of Arduino LLC, calling it "a new beginning" for Ardunio. Slashdot reader ruhri reports: Massimo Banzi and Federico Musto, co-founders of the Arduino Project, announced they have settled their differences that had resulted in the creation of Arduino LLC and Arduino SRL. A new, unified Arduino Holding and Arduino Foundation will be created.
"Massimo Banzi and Federico Musto took the stage today at the New York Maker Faire to announce the good news," reports a blog post at Arudino.cc. "At the end of 2016, the newly created 'Arduino Holding' will become the single point of contact for the wholesale distribution of all current and future products... In addition, Arduino will form a not-for-profit 'Arduino Foundation' responsible for maintaining the open source Arduino desktop IDE, and continuing to foster the open source movement by providing support for a variety of scholarships, community and developer initiatives."
Open Source

Linux Mint Unveils New 'Mintbox Mini Pro' Desktop (linuxmint.com) 70

It's been 18 months since the original Mintbox Mini launched, and this week saw the release of the new Mintbox Mini Pro (which costs just $100 more). BrianFagioli quotes BetaNews: That extra money gets you a faster processor, more powerful graphics, double the storage, twice the RAM, improved Wi-Fi, Bluetooth, and an additional Ethernet port... This diminutive desktop is the same size as the previously-released Mintbox... Thankfully, it retains the same cute appearance and Linux Mint branding.
Their article calls it a "beautiful little computer that comes pre-loaded with Linux Mint 18 Cinnamon (64-bit)," and the Linux Mint blog promises this fanless device offers "better passive cooling thanks to an all-metal black housing" -- and comes with six different USB ports.
Medicine

Print-On-Demand Bone Could Quickly Mend Major Injuries (sciencemag.org) 27

sciencehabit quotes a report from Science Magazine: If you shatter a bone in the future, a 3D printer and some special ink could be your best medicine. Researchers have created what they call "hyperelastic bone" that can be manufactured on demand and works almost as well as the real thing, at least in monkeys and rats. Though not ready to be implanted in humans, bioengineers are optimistic that the material could be a much-needed leap forward in quickly mending injuries ranging from bones wracked by cancer to broken skulls. Researchers at Northwestern University, Evanston, in Illinois are working on a hyperelastic bone, which is a type of scaffold made up of hydroxyapatite, a naturally occurring mineral that exists in our bones and teeth, and a biocompatible polymer called polycaprolactone, and a solvent. Hydroxyapatite provides strength and offers chemical cues to stem cells to create bone. The polycaprolactone polymer adds flexibility, and the solvent sticks the 3D-printed layers together as it evaporates during printing. The mixture is blended into an ink that is dispensed by the printer, layer by layer, into exact shapes matching the bone that needs to be replaced. The idea is, a patient would come in with a nasty broken bone -- say, a shattered jaw -- and instead of going through painful autograft surgeries or waiting for a custom scaffold to be manufactured, he or she could be x-rayed and a 3D-printed hyperelastic bone scaffold could be printed that same day.
Encryption

LastPass On Mobile Is Now Free (techcrunch.com) 10

Arguably one of the best password manager applications in the wild, LastPass, is making select services available to its mobile users for free. Under the new plan, LastPass's free services will now include two-factor authentication, password generation and sync, and access from unlimited devices. Previously, the browser extension was available for free but users had to pay a $12 annual free to take their passwords with them on mobile. There is still a subscription fee for the LastPass Premium service, which includes access to family password sharing, two-factor authentication methods like YubiKey and Sesame, encrypted file storage, fingerprint identification on desktop, priority customer support and an ad-free password vault. TechCrunch reports: Basically, LastPass is now charging only for enhanced features rather than convenient access. The company also earns revenue from its enterprise offerings. LastPass says that the change is motivated by a commitment to bringing password security to the masses. "Today's reality is that people's digital lives are increasingly in the cloud -- and inherently span countless personal and work devices. We believe that to truly benefit from the security and convenience of a password manager, it should be available whenever and wherever you need it," LastPass vice president Joe Siegrist said in a statement. "By offering LastPass for free across all your devices, we're making it that much easier for everyone to make good password habits the norm, while resetting the expectations of what a great password management experience should be in a multi-device world." But the pricing change might also be intended to lure users from other paid password management services. LogMeIn CEO Bill Wagner said on an earnings call last week that free users drive revenue for LastPass because they often convert to Premium services or serve as referrals for enterprise business opportunities.
Music

USB-IF Publishes Audio Over USB Type-C Specifications (anandtech.com) 135

An anonymous reader quotes a report from AnandTech: The USB Implementers Forum this week published the USB Audio Device Class 3.0 (direct download) specification, which standardizes audio over USB Type-C interface. The new spec enables hardware makers to eliminate traditional 3.5mm mini-jacks from their devices and use USB-C ports to connect headsets and other audio equipment. Makers of peripherals can also build their audio solutions, which use USB-C instead of traditional analog connectors. Developers of the standard hope that elimination of mini-jacks will help to make devices slimmer, smarter and less power hungry. As reported, the USB Audio Device Class 3.0 specification supports both analog and digital audio. Analog audio is easy to implement and it does not impact data transfers and other functionality of USB-C cables since it uses the two secondary bus (SBU) pins. The USB ADC 3.0 defines minimum interoperability across analog and digital devices in order to avoid confusion of end-users because of incompatibility. In fact, all ADC 3.0-compliant hosts should support the so-called headset adapter devices, which allow to connect analog headsets to USB-C. However, digital audio is one of the primary reasons why companies like Intel wanted to develop the USB-C audio tech on the first place, hence, expect them to promote it. According to the USB ADC 3.0 standard, digital USB-C headphones will feature special multi-function processing units (MPUs), which will, to a large degree, define the feature set and quality of headsets. The MPUs will handle host and sink synchronization (this is a key challenge for digital USB audio), digital-to-analog conversion, low-latency active noise cancellation, acoustic echo canceling, equalization, microphone automatic gain control, volume control and others. Such chips will also contain programmable amplifiers and pre-amplifiers, which are currently located inside devices. Besides, USB ADC 3.0-compatible MPUs will also support USB Audio Type-III and Type-IV formats (the latest compressed formats), but will retain compatibility with formats supported by ADC 1.0 and 2.0. Finally, among the mandated things set to be supported by USB-C Audio devices are new Power Domains (allows devices to put certain domains in sleep mode when not in use) as well as BADD (basic audio device definition) 3.0 features for saving power and simplified discovery and management of various audio equipment (each type of devices has its own BADD profile).
Businesses

New iPhone 7 Case Brings Back the Headphone Jack (thenextweb.com) 377

Apple removed the headphone jack in the iPhone 7 and iPhone 7 Plus, forcing users to use either Bluetooth, the Lightning port or included Lightning to 3.5mm headphone jack adaptor in order to listen to music through headphones. However, one company took it upon themselves to create an iPhone 7 case with a built-in 3.5mm headphone jack. The company is called Fuze and they recently launched an Indiegogo campaign that promises to bring the audio port back to the iPhone 7. The Next Web reports: To achieve this, the company is taking Apple's Lightning to 3.5mm adapter and building it straight into a case, where you can plug your headphones with "no dongles, no adapters, no problems." In addition to the audio port, the Fuze Case will also serve as a battery pack as it adds 2,400mAh of extra battery life to the iPhone 7 and 3,600mAh to the 7 Plus. It will be available in five different colors including white, black, gold, rose gold and blue. The case is currently available for $49 to "super early bird" backers, but will increase to $59 once more people have chipped in and will eventually sell for $69 in retail. The company expects to start shipping the accessory in December later this year.
Businesses

IBM Buys Promontory Financial Group (zdnet.com) 20

An anonymous reader quotes a report from ZDNet: IBM said Thursday it plans to acquire compliance consulting firm Promontory Financial Group to bring more financial regulatory expertise to Watson's cognitive computing platform. Promontory is a global consulting operation with an aim of helping banks manage the ever-increasing regulation and risk management requirements in the financial sector. With that in mind, IBM wants to use the industry expertise of Promontory's workforce -- which is made up of ex-regulators and banking executives -- to teach Watson all about regulation, risk and compliance. IBM is also using the deal to create a new subsidiary called Watson Financial Services, which will build cognitive tools for things things like tracking regulatory obligations, financial risk modeling, surveillance, anti-money laundering detection systems. "This is a workload ideally suited for Watson's cognitive capabilities intended to allow financial institutions to absorb the regulatory changes, understand their obligations, and close gaps in systems and practices to address compliance requirements more quickly and efficiently," IBM said in a press release.
Operating Systems

Raspberry Pi Foundation Unveils New LXDE-Based Desktop For Raspbian Called PIXEL (softpedia.com) 47

Raspberry Pi Foundation's Simon Long has unveiled a new desktop environment for the Debian-based Raspbian GNU/Linux operating system for Raspberry Pi devices. From a Softpedia report (submitted by an anonymous reader):Until today, Raspbian shipped with the well-known and lightweight LXDE desktop environment, which looks pretty much the same as on any other Linux-based distribution out there that is built around LXDE (Lightweight X11 Desktop Environment). But Simon Long, a UX engineer working for Raspberry Pi Foundation, was hired to make it better, transform it into something that's more appealing to users. So after two years of work, he managed to create a whole new desktop environment for Raspbian, the flagship operating system for Raspberry Pi single-board computers developed and distributed by Raspberry Pi Foundation. Called PIXEL, the new Raspbian desktop offers a more eye-candy design with the panel on top (not on the bottom like on a default LXDE setup), new icons, new Applications Menu, and new theme. "It's actually surprisingly easy to hack about with the LXDE desktop once you get your head around what all the bits do, and since then I've been slowly chipping away at the bits that I felt would most benefit from tweaking," reveals Simon Long. "Stuff has slowly been becoming more and more like my original concept for the desktop; with the latest changes, I think the desktop has reached the point where it's a complete product in its own right and should have its own name."
Communications

Commodore C64 Survives Over 25 Years Balancing Drive Shafts In Auto Repair Shop (hothardware.com) 290

MojoKid writes: One common gripe in the twenty-first century is that nothing is built to last anymore. Even complex, expensive computers seem to have a relatively short shelf-life nowadays. However, one computer in a small auto repair shop in Gdansk, Poland has survived for the last twenty-five years against all odds. The computer in question here is a Commodore C64 that has been balancing driveshafts non-stop for a quarter of a century. The C64C looks like it would fit right in with a scene from Fallout 4 and has even survived a nasty flood. This Commodore 64 contains a few homemade aspects, however. The old computer uses a sinusoidal waveform generator and piezo vibration sensor in order to measure changes in pressure, acceleration, temperature, strain or force by converting them to an electrical charge. The C64C interprets these signals to help balance the driveshafts in vehicles. The Commodore 64 (also known as the C64, C-64, C= 64) was released in January 1982 and still holds the title for being the best-selling computer of all time.

Slashdot Top Deals