ASASSN-18aan is an unusual cataclysmic variable, study finds

An international team of astronomers has performed photometric and spectroscopic observations of a binary star system known as ASASSN-18aan and have found that the object is an unusual cataclysmic variable with a relatively long orbital period. The findings were presented February 9 on the arXiv pre-print server. Source: https://phys.org/news/2021-02-asassn-18aan-unusual-cataclysmic-variable.html…

Apple Will Proxy Safe Browsing Traffic on iOS 14.5 To Hide User IPs from Google

Apple’s upcoming iOS 14.5 release will ship with a feature that will re-route all Safari’s Safe Browsing traffic through Apple-controlled proxy servers as a workaround to preserve user privacy and prevent Google from learning the IP addresses of iOS users. From a report: The new feature will work only when users activate the “Fraudulent Website Warning” option in the iOS Safari…

The Long Hack: How China Exploited a U.S. Tech Supplier

Supermicro chips and software were tampered with by Chinese operatives in the past decade, Bloomberg reported Friday, doubling down on its 2018 report that was widely disputed by several tech giants and government agencies. Today’s report says that U.S. security and defense officials knew of the hack but kept it secret in an effort to learn more about China’s hacking capabilities….

Galaxy Mrk 335 examined with AstroSat

Using the AstroSat spacecraft, Indian astronomers have performed multiwavelength observations of a Narrow-Line Seyfert 1 (NLS1) galaxy known as Mrk 335. Results of this investigation, presented in a paper published February 1 on the arXiv preprint server, deliver crucial information about the emission from this source. Source: https://phys.org/news/2021-02-galaxy-mrk-astrosat.html…

As VS Code Gains in Popularity, Microsoft Praises ‘Inner Source’ Development

It’s been estimated that there are 24 million developers in the world. 14 million of them now use Microsoft’s Visual Studio Code (VS Code) as their IDE, reports ZDNet, with five million new users arriving in 2020. Julia Liuson, corporate vice president of Microsoft’s developer division, tells them why: “The strategy for VS Code is really to support our any, any,…

Raspberry Pi OS Accused of ‘Phoning Home’ To Microsoft

Slashdot reader rushtobugment quotes a story from Hot Hardware: One of the software options for running a Raspberry Pi module is Raspberry Pi OS (formerly Raspbian), the officially supported Debian-based operating system put out by The Raspberry Pi Foundation. It has been around since 2015 without too much complaint. However, a recent update has some Raspberry Pi OS users up in…

AlmaLinux Releases Beta of Their CentOS/RHEL 8 Fork

AlmaLinux describes itself as “an open-source, community-driven project that intends to fill the gap left by the demise of the CentOS stable release.” And now AlmaLinux “has announced their beta release of their CentOS/RHEL 8 fork,” writes Slashdot reader juniorkindergarten. AlmaLinux will be getting $1 million a year in development funding from CloudLinux (the company behind CloudLinux OS, a CentOS clone…

Plex Media Servers Are Being Abused For DDoS Attacks

DDoS-for-hire services have found a way to abuse Plex Media servers to bounce junk traffic and amplify distributed denial of service (DDoS) attacks, security firm Netscout said in an alert this week. From a report: The company’s alert warns owners of devices that ship with Plex Media Server, a web application for Windows, Mac, and Linux that’s usually used for video…

Google Chrome Sync Feature Can Be Abused For C&C and Data Exfiltration

Threat actors have discovered they can abuse the Google Chrome sync feature to send commands to infected browsers and steal data from infected systems, bypassing traditional firewalls and other network defenses. From a report: For non-Chrome users, Chrome sync is a feature of the Chrome web browser that stores copies of a user’s Chrome bookmarks, browsing history, passwords, and browser and…

Hacker Group Inserted Malware In NoxPlayer Android Emulator

A mysterious hacking group has compromised the server infrastructure of a popular Android emulator and has delivered malware to a handful of victims across Asia in a highly-targeted supply chain attack. ZDNet reports: The attack was discovered by Slovak security firm ESET on January 25, last week, and targeted BigNox, a company that makes NoxPlayer, a software client for emulating Android…