Kaspersky reportedly modified its AV to help Russia steal NSA secrets


reader comments
2

The rapidly evolving story about Moscow-based Kaspersky Lab’s involvement in helping Russian government hackers steal sensitive National Security Agency materials has taken yet another turn, as The Wall Street Journal reports that the assistance could have come only with the company’s knowledge.

Wednesday’s report, citing unnamed current and former US officials, said the help came in the form of modifications made to the Kaspersky antivirus software that’s used by more than 400 million people around the world. Normally, the programs scan computer files for malware. “But in an adjustment to its normal operations that the officials say could only have been made with the company’s knowledge, the program searched for terms as broad as ‘top secret,’ which may be written on classified government documents, as well as the classified code names of US government programs, these people said.”

The report is the latest to detail a 2015 event in which an NSA worker—described as a contractor by the WSJ and an employee in articles from The Washington Post—sneaked classified materials out of the agency and onto an Internet-connected computer that had Kaspersky AV installed on it. The WSJ, WaPo, and The New York Times have all reported that hackers working for the Russian government were able to home in on the documents with the help of the Kaspersky software.

On Tuesday, the NYT was first in reporting that NSA officials first learned of the help provided by Kaspersky AV from Israeli intelligence officials who had hacked into Kaspersky’s corporate network and witnessed the assistance in real time.

Wednesday’s report is the first to explicitly say the assistance wasn’t the result of a covert hack or the exploitation of an inadvertent weakness, but rather likely came with the knowledge of at least one Kaspersky official.

“There is no way, based on what the software was doing, that Kaspersky couldn’t have known about this,” the WSJ quoted a former US official with knowledge of the 2015 event saying. The official went on to explain that the Kaspersky software was designed in a way that it would have had to be programmed to look for specific keywords. Kaspersky employees, the official continued, “likely” would have known such a thing was happening. The evidence, Wednesday’s report said, has now caused many US officials to believe the company was a “witting partner” in locating the materials on the home computer.

In a statement issued Wednesday, Kaspersky officials wrote:

Kaspersky Lab was not involved in and does not possess any knowledge of the situation in question, and the company reiterates its willingness to work alongside US authorities to address any concerns they may have about its products as well as its systems.

The company has long maintained it has no inappropriate ties to any government, including Russia’s, and vigorously defends against all malware threats.

Meanwhile, Reuters reported that German officials had no evidence to back the reports Kaspersky AV played a role in the theft of the NSA materials and had no plans to warn against the use of the software. Last month, the US Department of Homeland Security took the unprecedented step of banning all federal government agencies and departments from using any Kaspersky goods or services.

The WSJ went on to report that US intelligence agencies spent months studying and experimenting with Kaspersky software to see if they could trigger it into behaving as if it had discovered classified materials on a computer being monitored by US spies. “Those experiments persuaded officials that Kaspersky was being used to detect classified information,” Wednesday’s report said.

from Ars Technica http://ift.tt/2gww6CM
via IFTTT

Movies Anywhere: Watch all your Amazon, Google, and iTunes titles in one place

Movies Anywhere


reader comments
89

A new service launched late yesterday promises to make streaming your favorite purchased movies easier by putting them all in one place. The new free app Movies Anywhere acts like a digital locker for the movies you’ve paid for through various online retailers, including Amazon Video, Google Play, iTunes, and Vudu. Signing up for a Movies Anywhere account gives you access to the digital locker, which you can then populate with purchased or redeemed movies by logging in to the accounts you have with those online retailers.

It takes a lot of behind-the-scenes work for a service like this to flourish. It’s not easy to access movies you’ve purchased from an online retailer from another service. Typically, users have to go back and forth between Amazon, Google, iTunes, and Vudu to watch the titles they purchased through each outlet. According to a report from the Verge, Movies Anywhere can collect all those titles in one place because it’s built off of the same digital rights system architecture (called Keychest) that Disney first developed for its service Disney Movies Anywhere.

Disney launched its service in 2014, and it allowed users to get access to all of the company’s titles in one place. Movies Anywhere is using the same architecture with the blessing and collaboration of five Hollywood studios: Walt Disney Studios (which includes Disney, Pixar, Marvel Studios, and Lucasfilm), Sony Pictures Entertainment, Twentieth Century Fox Film, Universal Pictures, and Warner Bros. Entertainment. While discussions are ongoing with Paramount Pictures and Lionsgate to join the service, Movies Anywhere will not launch with any titles from those studios. However, that still means the service has more than 7,300 titles in its library already.

This isn’t the industry’s first attempt to simplify film organization, viewing, and purchasing for digital users. The previously launched UltraViolet service was ultimately abandoned for Disney’s superior architecture and did not have support from companies like Apple.

In addition to watching any movies you’ve purchased through Movies Anywhere, you’ll also be able to purchase movies in the app. Before buying a movie, you’ll see every connected retailer that offers it, allowing you to choose which services you want to purchase it from. That means you can buy a title from Google Play using your Google Play account information without leaving the Movies Anywhere app.

Aside from Movies Anywhere supporting the most popular digital film retailers, the service also supports a variety of streaming devices. Movies Anywhere users can access their libraries and watch films on Android, Amazon Fire, and iOS devices, as well as Android TV, Apple TV, Roku, and Chromecast devices.

Users might be skeptical of yet another service they need to sign up for in order to reap the benefits of an all-in-one digital library. However, the fact that the Movies Anywhere app is free will likely be enticing enough for some folks. Movies Anywhere is also offering a tempting deal when you connect accounts: when you link your first account, Movies Anywhere will give you access to two free movies. Linking the second account will give you another three free movies. There’s no word on how long this promotion will last, but it is a “limited-time offer” for those who are the first to embrace Movies Anywhere as their digital film library.

from Ars Technica http://ift.tt/2g6fKQH
via IFTTT

Comcast found a way to raise other cable companies’ prices, rivals say

Comcast


reader comments
0

Comcast is increasingly making demands in TV programming contract negotiations that would force its smaller rivals to raise their minimum cable TV prices, a lobby group for small cable companies told the Federal Communications Commission yesterday.

The American Cable Association (ACA), which represents nearly 800 small and medium-sized cable operators, asked the FCC to investigate the practice and prohibit it under its program access rules.

The issue relates to Comcast’s ownership of regional sports networks that are marketed under the brand of Comcast’s NBC subsidiary. Comcast wants to redefine the so-called “minimum penetration policy,” essentially making it impossible for small cable companies to sell a cheap, basic tier of TV service that doesn’t include higher-priced channels, the ACA alleged. The group’s filing said:

ACA believes that it is no coincidence that the programmer adopting this restrictive policy—Comcast-NBCU—is a vertically integrated provider of MVPD [multichannel video programming distribution] and broadband Internet access services. The ACA members that are being disadvantaged by this policy directly compete with Comcast for MVPD and broadband Internet access service customers. Comcast-NBCU’s minimum penetration policy restricts its competitors from offering broadband Internet access service bundled with broadcast basic video service and thus restricts their ability to compete with Comcast for broadband Internet customers. While it interferes with its competitors’ ability to offer consumers a broadcast basic tier of service, Comcast is aggressively marketing a bundle of networks very similar to the broadcast basic tier to its own customers through its Instant TV service.

The ACA’s filing was submitted in the docket for the FCC’s annual assessment of video competition. Among other things, the FCC asked for public comment on “regulations that have the most significant potential for impact on competition in the market for the delivery of video programming.”

Comcast’s filing in the same proceeding argued that video competition is thriving and that the FCC “should eliminate outdated legacy regulations that are no longer necessary in today’s highly competitive video marketplace.” Comcast, the nation’s biggest cable company with 22.5 million TV subscribers, said the FCC’s program access and program carriage rules are “legacy regulations that constrain investment and innovation.”

Comcast demand allegedly makes basic TV tier unviable

“Minimum penetration policies” included in programming contracts require TV providers “to distribute a cable network to a minimum specified percentage of its video subscribers.” the ACA’s filing explained. But in calculating that percentage of the subscriber base, almost all programmers exclude subscribers who receive only a basic tier consisting primarily of broadcast channels, the filing said.

“This option has always been of value to consumers who only wanted access to broadcast stations but had poor over-the-air reception or wanted to avoid the expense and trouble of installing a large antenna” and is growing in popularity today among people who watch online video services instead of cable channels, the ACA said.

The basic tier of broadcast channels is also known as the “lifeline” tier. Excluding lifeline subscribers from minimum penetration policies “is altogether reasonable and appropriate given the historical distinction between carriage of broadcast and cable network programming under the Communications Act and the Commission’s rules,” the ACA said.

But Comcast doesn’t want to exclude basic tier subscribers from minimum penetration policies, making it financially infeasible for small cable companies to offer the basic tier, the ACA told the FCC:

In its RSN [Regional Sports Network] licensing agreements with a number of ACA members, however, Comcast-NBCU has insisted on including a minimum penetration requirement that does not incorporate a lifeline exclusion and on setting the penetration rate at a high enough level such that these members are no longer able to broadly sell a broadcast basic or lifeline tier service at their existing prices without automatically violating the minimum penetration requirement in their RSN agreements. This is true even if they were to include the RSN in every video bundle (expanded basic and specialty tiers) they offer except for broadcast basic service. An MVPD in this position must ultimately either raise the price of the broadcast basic tier to dampen demand for this service or essentially cease to offer a true broadcast basic tier that does not include cable programming networks. Either outcome will obviously harm consumers.

Comcast’s negotiation demands have “begun to threaten some of [the ACA’s] members’ ability to continue to offer their subscribers access to a basic broadcast tier of service,” the group said.

ACA members could also decline to carry regional sports networks, but in doing so could lose sports-watching customers who are willing to pay extra to watch local teams.

Rules need to change, group says

Comcast apparently isn’t breaking any rules with these demands today, but the ACA wants the FCC to change that. Comcast’s strategy “is both anti-competitive and anti-consumer and is not in the public interest,” the group said.

“At a minimum, the commission should further investigate this practice,” the ACA wrote. “ACA believes that should the commission do so, it will determine that the practice of imposing minimum penetration requirements in cable programming network agreements that do not contain a lifeline carve-out unreasonably limits consumer choice and competition without providing any offsetting benefits, and that this conclusion should provide a sufficient basis for the commission to prohibit this practice under the program access rules.”

We asked Comcast for comment today and will update this story if we get a response.

Comcast/NBC merger conditions set to expire

The ACA also said there are a few industry changes that will make this problem worse. AT&T’s pending acquisition of Time Warner Inc. will bring HBO, TBS, TNT, CNN, and other big networks under the control of a major TV provider “and thus further increase the need for continued program access protections,” the group said.

Separately, the merger conditions Comcast agreed to in order to obtain government approval to purchase NBCUniversal in 2011 will expire in January 2018, the ACA wrote. These merger conditions protected smaller rivals with an arbitration requirement.

The conditions “require Comcast to agree to the submission of disputes over prices, terms and conditions of programming agreements to arbitration to determine a fair market value for the programming in the event that a private agreement cannot be reached with an MVPD seeking to license Comcast-NBCU programming,” the group’s filing said.

That requirement essentially “closes a loophole in program access rules” that lets cable companies that own programming “raise prices to rival MVPDs simply by charging itself an artificially high transfer price for the same programming,” the ACA said.

The arbitration requirement that will soon expire is also used by the National Cable Television Cooperative (NCTC), which negotiates programming contracts in bulk on behalf of about 800 small and medium-sized cable companies. The NCTC’s current agreement with Comcast is scheduled to expire less than 10 months after the Comcast/NBC merger conditions expire.

Comcast tried to get a contract without a lifeline exclusion the last time it negotiated with the NCTC, but it relented when the NCTC threatened to demand arbitration, the ACA’s filing said. The ACA urged the commission to consider extending the merger conditions beyond the scheduled end date.

“Both ACA and NCTC fear that NCTC will be less able to resist Comcast’s unreasonable, anti-consumer and anti-competitive demands without the threat of being able to ask to submit the dispute to baseball-style arbitration to determine fair and reasonable terms and conditions and without the ability to file a program access complaint with the Commission,” the filing said.

from Ars Technica http://ift.tt/2xBk2Wt
via IFTTT

Bitcoin surges above $5,000


reader comments
0

Bitcoin surged on Thursday morning, blowing past $5,000 for the first time and setting a new record price above $5,200.

The rise is remarkable because there has been quite a bit of unfavorable news about Bitcoin in recent weeks. China, one of the biggest markets for Bitcoin, is shutting down trading. The Bitcoin community faces ongoing acrimony over how to scale the Bitcoin network. A contentious fork split the Bitcoin network in two in August, and there might be another schism in the Bitcoin community come November.

Finally, many experts believe that the broader blockchain world is in the middle of an unsustainable bubble. If that bubble pops, Bitcoin’s price is likely to fall with it.

So what explains Bitcoin’s rise? One factor may simply be that the blockchain bubble hasn’t run its course. People are continuing to hold “initial coin offerings” of newly invented cryptocurrencies. Despite a falling Bitcoin price last month, ICOs raised more than $600 million in September, according to data from CoinSchedule.

A healthy ICO market creates demand for Bitcoin because Bitcoin is often used as an intermediary currency for token sales. Legal and logistical barriers make it difficult to sell a newly-created cryptocurrency for conventional currencies like dollars or euros. But it’s relatively easy to sell a new cryptocurrency in exchange for Bitcoin. So people wanting to participate in ICOs often need to buy bitcoins first, pushing up Bitcoin’s price.

Another possible reason for Bitcoin’s rise: the market might actually see forks as a good thing. The August fork split the Bitcoin network in half, creating a new cryptocurrency called Bitcoin Cash that was a perfect copy of the original Bitcoin network—including its transaction history. Anyone who owned one Bitcoin before the fork owned one Bitcoin after the fork and one unit of Bitcoin Cash. And surprisingly, the combined value of these two currencies was higher than Bitcoin had been worth prior to the fork.

So the market may be shrugging off the possibility of another fork in November because it doesn’t expect another fork to hurt Bitcoin’s value. In fact, it might make holders of existing Bitcoins richer.

A final factor driving Bitcoin’s growth: increasing interest from mainstream financial institutions. For example, rumors circulated last week that Goldman Sachs was preparing to open a “Bitcoin desk” for trading cryptocurrency. Speculators may be bidding up Bitcoin’s price in anticipation of greater demand from Wall Street in the coming months.

from Ars Technica http://ift.tt/2gA8Nb7
via IFTTT

Equifax website borked again, this time to redirect to fake Flash update

Randy Abrams


reader comments
106

In May credit reporting service Equifax’s website was breached by attackers who eventually made off with Social Security numbers, names, and a dizzying amount of other details for some 145.5 million US consumers. For several hours on Wednesday the site was compromised again, this time to deliver fraudulent Adobe Flash updates, which when clicked, infected visitors’ computers with adware that was detected by only three of 65 antivirus providers.

Randy Abrams, an independent security analyst by day, happened to visit the site Wednesday evening to contest what he said was false information he had just found on his credit report. Eventually, his browser opened up a page on the domain hxxp:centerbluray.info that looked like this:

Randy Abrams

He was understandably incredulous. The site that previously gave up personal data for virtually every US person with a credit history was once again under the control of attackers, this time trying to trick Equifax visitors into installing crapware Symantec calls Adware.Eorezo. Knowing a thing or two about drive-by campaigns, Abrams figured the chances were slim he’d see the download on follow-on visits. To fly under the radar, attackers frequently serve the downloads to only a select number of visitors, and then only once.

Abrams tried anyway, and to his amazement, he encountered the bogus Flash download links on at least three subsequent visits. The picture above this post is the higher-resolution screenshot he captured during one visit. He also provided the video below. It shows an Equifax page redirecting the browser to at least four domains before finally opening the Flash download at the same centerbluray.info page.

VIDEO

Equifax Flash Download

The file that got delivered when Abrams clicked through is called MediaDownloaderIron.exe. This VirusTotal entry shows only Panda, Symantec, and Webroot detecting the file as adware. This separate malware analysis from Packet Security shows the code is highly obfuscated and takes pains to conceal itself from reverse engineering. Malwarebytes flagged the centerbluray.info site as one that pushes malware, while both Eset and Avira provided similar malware warnings for one of the intermediate domains, newcyclevaults.com.

Randy Abrams

Malvertising?

It’s not yet clear precisely how the Flash download page got displayed. It’s possible Equifax was running ads through a third-party network and those are responsible for the redirects. But even if that’s true, the net result is that the site is arguably compromised in some way, since administrators can’t control the pages visitors see when they’re trying to use key functions, some which require visitors to enter Social Security numbers.

Several hours after this post went live, an Ars reader e-mailed to say he recently encountered a sketchy ad when putting a temporary fraud alert on his Equifax file. The reader wrote:

When I clicked it (from Gmail on Android) I was redirected to a spam page shortly after seeing the Equifax credit file form. I thought maybe it was an anomaly because it didn’t happen again. But after reading your article about how sometimes hacks will redirect randomly I tried the link again just now and sure enough I got a spam page again (lucksupply.club saying I won an iPhone X). This is Chrome-in-a-tab from Gmail so i don’t believe there’s any extensions or other malware on my device that could have caused this redirect.


In the hour this post was being reported and written, Abrams was unable to reproduce the redirects leading to the malicious download. It’s possible Equifax has cleaned up its site. It’s also possible the attackers have shut down for the night and have the ability to return at will to visit still worse misfortunes on visitors. Equifax representatives didn’t respond to an e-mail that included a link to the video and sought comment for this post.

Post updated at 6:18 am and 7:10 am 10/12/2017 Pacific time to discuss ad networks and add details of ad served on reader.

from Ars Technica http://ift.tt/2z0YzqR
via IFTTT

Oculus Announces Oculus Go: Untethered VR For $199 USD

Today, Facebook owned Oculus announced their follow up to the Oculus Rift VR headset, and they’ve decided to make the entry point to Oculus VR much easier to access. At $199, the new Oculus Go is significantly undercutting the $599 launch price of the Rift, which has seen its own price cut to $399 since it launched about a year and a half ago. But the Go is not just a less expensive version of the Rift. It’s a self-contained VR system, providing untethered VR capabilities.

Despite the lower price, the Go has a higher resolution display than the Rift. The Go features a 2560×1440 “Fast-switch” LCD display, which is a bump up from the 2160×1200 combined resolution of the two OLED displays in the Rift. Fast-Switch likely means a higher refresh rate, but no specifications have been announced yet to see how it compared to the 90 Hz of the Rift. Oculus is also promoting the optical lenses are new and improved for the Go, offering a wider field of view and less glare. The LCD display and new lenses should help with the screen door effect that is present on VR headsets, but we’re still a long way from having the processing power to remove this completely.

Oculus Go also includes integrated spatial audio, which is one of the big features Oculus promoted on the Rift when it launched. The speakers are built-in to the sides of the headset, so no extra equipment is necessary. They have had the courage though to add a 3.5mm headphone jack, if you want to listen privately.

Go and Gear are "binary compatible" so any apps that work on Gear, should work on Go. It’s helpful to have an ecosystem when you’re launching a new product.

The new headset is made of a new breathable cloth, for improved comfort, and the Go can be used with glasses.

Unlike the Rift, the untethered nature of the Go means that it won’t have the full tracking capabilities, but that can be a benefit as well since not everyone has a dedicated location they can leverage VR. At the outset, the Go seems like a well priced, capable VR headset, and although it won’t have the gaming potential of a full PC behind it, the capabilities of a smartphone SoC have been improving dramatically over the years. Unfortunately Facebook / Oculus hasn’t announced what is actually powering the Go, so we’ll have to wait and see how much performance they can get for $199. Tomshardware is reporting it’s a Snapdragon 821.

The Oculus Go ships early next year.

Source: Oculus Blog

from AnandTech http://ift.tt/2hCdT6o
via IFTTT

Western Digital Stuns Storage Industry with MAMR Breakthrough for Next-Gen HDDs

Yesterday, Western Digital announced a breakthrough in microwave-assisted magnetic recording (MAMR) that completely took the storage industry by surprise. The takeaway was that Western Digital would be using MAMR instead of HAMR for driving up hard drive capacities over the next decade. Before going into the specifics, it is beneficial to have some background on the motivation behind MAMR.

​Hard drives may be on the way out for client computing systems, but, they will continue to be the storage media of choice for datacenters. The Storage Networking Industry Association has the best resources for identifying trends in the hard drive industry. As recently as last year, heat-assisted magnetic recording (HAMR) was expected to be the technology update responsible for increasing hard drive capacities.


Slide Courtesy: Dr.Ed Grochowski’s SNIA 2016 Storage Developer Conference Presentation 
‘The Magnetic Hard Disk Drive: Today’s Technical Status and Its Future’ (Video, PDF)

Mechnanical Hard Drives are Here to Stay

One of the common misconceptions amongst readers focused on consumer technology relates to flash / SSDs rendering HDDs obsolete. While using SSDs over HDDs is definitely true in the client computing ecosystem, it is different for bulk storage. Bulk storage in the data center, as well as the consumer market, will continue to rely on mechanical hard drives for the foreseeable future.

The main reason lies in the ‘Cost per GB’ metric.

Home consumers are currently looking at drives to hold 10 TB+ of data, while datacenters are looking to optimize their ‘Total Cost of Ownership’ (TCO) by cramming as many petabytes as possible in a single rack. This is particularly prevalant for cold storage and archival purposes, but can also expand to content delivery networks. Western Digital had a couple of slides in their launch presentation yesterday that point towards hard drives continuing to enjoy this advantage, thanks to MAMR being cost-effective.

Despite new HDD technology, advancements in solid state memory technology are running at a faster pace. As a result SSD technology and NAND Flash have ensured that performance enterprise HDDs will make up only a very minor part of the total storage capacity each year in the enterprise segment.

The projections presented by any vendor’s internal research team always need to be taken with a grain of salt, but given that SanDisk is now a part of Western Digital the above market share numbers for different storage types seem entirely plausible.

In the next section, we take a look at advancements in hard drive technology over the last couple of decades. This will provide further technical context to the MAMR announcement from Western Digital.

 

from AnandTech http://ift.tt/2kJQt3K
via IFTTT