Blackberry Will Run Out Of Juice On January 4th

Happy New Year, though it may not be for Blackberry fans. The company that has so often had their products compared to a certain addictive substance recently announced that they are ending support for Blackberry OS and Blackberry 10 devices.

What does this mean? While they won’t be bricking phones outright, they might as well be. On January 4th, Blackberry will be shutting off all the key services — data, SMS, phone calls, and 911 support. In official terms, they are ending network provisioning for these older devices, meaning that they won’t be able to join any cellular or WiFi networks.

Unless you’re old enough to remember, it may seem strange that these half-screen, half-keyboard machines once dominated the mobile market. But back then, the people who used them were texting wizards who had broken free from the chains of the T9 keyboard.

Though this news may not mean much except to a select few, it’s still sad to see the Blackberry era come to a true end. We never had one ourselves during the heyday, though we did pick up a cheap used model to carry around as a tiny mobile writing device and calendar. We sure do miss phones with real keyboards though, and would love to see them come back. At least the keyboards themselves get love in the hacker community.

[Main and thumbnail images via Digital Trends]

Facial Recognition For Covid-19 Tracking In Seoul

The city of Bucheon, population 830,000, is a satellite city southwest of Seoul and part of the greater metropolitan area and the site of a pilot program to apply AI facial recognition and tracking technologies to aid Covid-19 epidemiological investigators. South Korea has been generally praised for its rapid response to coronavirus patient tracking since the beginning of the outbreak. People entering public facilities enter their information on a roster or scan a QR code. Epidemiologists tracking outbreaks use a variety of data available to them, including these logs, electronic transaction data, mobile phone location logs, CCTV footage, and interviews. But the workload can be overwhelming, and there are only a fixed number of workers with the required training available, despite efforts to hire more.

As contract tracing has been done to-date, it takes one investigator up to an hour to trace the movements of one patient. When the system goes online in January, it should be able to trace one patient in less than a minute, handling up to ten traces simultaneously. Project officials say there is no plan for this system to expand to the rest of Seoul, nor nationwide. But with the growing virus caseloads and continued difficulties hiring and training investigators, it’s not unexpected that officials will be turning to these technologies more and more to keep up with the increasing workload.

Like the controversy surrounding the recent facial recognition project at Incheon International Airport, people are becoming concerned about the privacy implications and the specter of a Big Brother government that tracks each and every move of its citizens — a valid fear, given the state of technology today. The project planners note that the data is being legally collected and its usage subject to strict rules. Korean privacy law requires consent for the collecting and storage of biometric data. But there are exceptions for situations such as disease control and prevention.

Even if all the privacy concerns are solves, we wonder just how effective these AI systems will be for tracking people wearing masks. This is not an issue unique to South Korea or even Asia. Many countries around the world are turning to such technologies (see this article from the Columbia School of Law) and are having similar struggles striking the balance between privacy and public health requirements.

[Banner image: “facial-recognition-1” by Electronic_Frontier_Foundation. Thanks for all you do!]

This Week In Security: The Log4j That Won’t Go Away, WebOS, And More

In the past two weeks, Log4j has continued to drive security news, with more vulnerable platforms being found, and additional CVEs coming out. First up is work done by TrendMicro, looking at electric vehicles and chargers. They found a log4j attack in one of the published charger frameworks, and also managed to observe evidence of vulnerability in the Tesla In-Vehicle Infotainment system. It isn’t a stretch to imagine a piece of malware that could run on both a charger, and an EV. And since those systems talk to each other, they could spread the virus through cars moving from charger to charger.

Log4j is now up to 2.17.1, as there is yet another RCE to fix, CVE-2021-44832. This one is only scored a 6.6 on the CVSS scale, as opposed to the original, which weighed in at a 10. 44832 requires the attacker to first exert control over the Log4j configuration, making exploitation much more difficult. This string of follow-on vulnerabilities demonstrates a well-known pattern, where a high profile vulnerability attracts the attention of researchers, who find other problems in the same code.

There are now reports of Log4j being used in Conti ransomware campaigns. Additionally, a Marai-based worm has been observed. This self-propagating attack seems to be targeting Tomcat servers, among others.

Continue reading “This Week In Security: The Log4j That Won’t Go Away, WebOS, And More”

It’s Printable, It’s Programmable, It’s E. Coli

Well, whaddya know? It seems that E. coli, the bane of Romaine and spinach everywhere, has at least one practical use. Researchers at Harvard have created a kind of 3D-printable ink that is alive and made entirely of microbes produced by E. coli. Although this is not the first so-called living ink, it does hold the title of the first living ink that doesn’t need any additional polymers to provide structure.

Passing the pillar test up to 16mm. Image via Nature

Because the ink is alive, it is technically programmable in the sense that it can self-assemble proteins into nanofibers, and further assemble those into nanofiber networks that comprise hydrogels.

One of the researchers compared the ink to a seed, which has everything it needs to eventually grow into a glorious tree. In this way, the ink could be used as a renewable building material both on Earth and in space. Though the ink does not continue to grow after being printed, the resulting structure would be a living system that could theoretically heal itself.

The ink creation process begins when the researchers induce genetically-engineered bacteria cultures to grow the ink, which is also made of living cells. The ink is then harvested and becomes gelatin-like, holding its shape well enough to go through a 3D printer. It even passes the bridging test, supporting its own weight between pillars placed up to 16 mm apart. (We’d like to see a Benchie.)

Continue reading “It’s Printable, It’s Programmable, It’s E. Coli”

RC3 2021: Now Here, Nowhere

The annual meeting of the Chaos Computer Club, Germany’s giant hacker group, is online again this year. While those of us here are sad that we don’t get to see our hacker friends in person, our loss is your gain — the whole thing is online for the entire world to enjoy.

This year’s Congress has gone entirely decentralized, with many local clubs hosting their own video streams and “stages”. Instead of four tracks, there are now six or seven tracks of talks going on simultaneously, so prepare to be overwhelmed by choice. You can find the overall schedule here, so if you see anything you’d like to watch, you’ll know when to tune in.

Like last year, there is also a parallel 2D simulation world, like Zelda with videoconferencing, but for which you’ll need a ticket, and they’re sold out. (Check out the demo video if you want to see what that’s about.) And what would a conference be without t-shirts, armbands, and even a sticker exchange? Or course, it all has to be done by mail, but you do what you can.

We’ll be keeping our eyes on the talks, and let you know if we see anything good. If you do the same, let us know in the comments!

Realtime Shadows On N64 Hardware

Although the Nintendo 64 console has in the minds of many been relegated to the era of ‘firmly obsolete graphics’, since its graphic processor’s (GPU’s) lineage traces directly to the best which SGI had to offer in the 1990s, it too supports a range of modern features, including dynamic shadows. In a simple demo, [lambertjamesd] demonstrates how this feature is used.

As can be seen in the demonstration video (linked after the break), this demo features a single dynamic light, which casts a shadow below the central object in the scene, with a monkey object floating around that casts its own shadow (rendered into an auxiliary frame buffer). This auxiliary buffer is then blended into the main buffer, as explained by [ItzWarty] over at /r/programming on Reddit.

This effectively means that the main scene uses a shadow volume, which was used extensively with Doom 3. The primary reasons for why the N64 didn’t use shadow volumes all over the place was due to the limitations this places on the shadow caster (objects) in the scene, such as the need to be convex, and overlap is likely to lead to artifacts and glitches.

Doom 3 would fix this with the use of a stencil buffer that would further refine the basic dynamic lighting support on the N64, which ultimately would lead to the fancy video game graphics we have today. And which no doubt will look properly obsolete in another decade again, as usual.

Continue reading “Realtime Shadows On N64 Hardware”

Seoul Introduces Self-Driving Taxis

Last year the Seoul city government passed an ordinance enabling the commercial operation of autonomous passenger-carrying vehicles. A six square kilometer region in the Seoul neighborhood of Sangam, near the 2002 World Cup Stadium, was designated as a pilot program test bed. This area encompasses 24 streets totaling 31.3 km. Two companies were selected, and the pilot program launched a few weeks ago. Currently there are three vehicles and passengers can ride for free during this introductory phase. Three more taxis and a bus will be added within this year, with plans for 50 in this region by 2026. For the time being, these cars require a standby driver who takes control in an emergency and in school zones. Check out the short news report (in English) below the break.

There was a smaller autonomous driving test program in the city of Sejong which we wrote about back in January, and [Alfred Jones] gave a keynote presentation at the 2020 Hackaday Remoticon on the challenges of designing self-driving vehicles if you want to learn more on this topic.

Continue reading “Seoul Introduces Self-Driving Taxis”