avanzar

One of Linux's most important commands had a glaring security flaw

Sponsored Links

die-phalanx via Getty Images

If you’ve used the command line in Linux or a Unix-based platform like macOS, you’re probably familiar with the “sudo” command — it lets you run tasks with different (usually elevated) permissions than you’d otherwise have. It’s powerful, but it was apparently too powerful until now. Developers have fixed a flaw in sudo that let you claim root-level access even if the configuration explicitly forbids it. So long as an intruder had enough access to run sudo in the first place, they could perform any action they wanted on a given machine.

The quirk revolved around sudo’s treatment of user IDs. If you typed the command with a user ID of -1 or its unsigned equivalent 4294967295, it would treat you as if you had root access (user ID 0) even as it recorded the actual user ID in the log. The user IDs in question don’t exist in the password database, either, so the command won’t require a password

Black holes are bad news for tiny galaxies

While astronomers have only recently been able to spot a black hole directly, there’s a lot that scientists think they know about them. For starters, it’s believed that they exist in the hearts of most large galaxies including our own, and their incredible pull can literally tear apart just about anything, including stars.

So, if black holes are common in larger galaxies, a black hole situated at the center of a smaller dwarf galaxy should be no big deal, right? A new research paper suggests that dwarf galaxies, which are plentiful in the universe, can have their growth stunted by black holes that reside inside of them.

The study, which was published in the Astrophysical Journal, examined 50 dwarf galaxies that were observed by the Sloan Digital Sky Survey. Of those 50 dwarf galaxies, 29 of them are believed to hold black holes, and the scientists were able to use their observations to tell a larger story about how black holes may affect the ability of a small galaxy to form new stars.

In six of the galaxies the team studied, strong gas outflows were observed. These gasses were being pushed out by the black holes at their centers. This may sound counterintuitive, since black holes are notorious for sucking up anything within reach, but it actually makes a lot of sense.

As a black hole is gobbling up matter it actually generates energy that radiates out into space. That energy pushes gasses in the galaxy outward with enough force that it leaves the galaxy entirely. This is called outflow, and in the case of a small galaxy, the loss of such gasses can dramatically hinder the galaxy’s ability to form new stars.

“In these six cases, the wind has a negative impact on star formation,” Laura V. Sales, co-author the research, said in a statement. “Theoretical models for the formation and evolution of galaxies have not included the impact of black holes in dwarf galaxies. We are seeing evidence, however, of a suppression of star formation in these galaxies. Our findings show that galaxy formation models must include black holes as important, if not dominant, regulators of star formation in dwarf galaxies.”

Learning how dwarf galaxies function can give astronomers a better handle on the ebbs and flows of our own, much larger galaxy. Recently, a separate study showed that the Milky Way is a bit of a thief when it comes to matter. Going forward, it’ll be interesting to see if scientists draw a link between the loss of gasses in dwarf galaxies orbiting the Milky Way and our galaxy’s habit of slurping up matter in nearby space.

Image Source: NASA/ESA

Aaron Paul Reveals the Toughest ‘Breaking Bad’ Scene He Recreated for ‘El Camino’

El Camino: A Breaking Bad Movie premiered on Netflix this past weekend and Breaking Bad fans could not get enough of it. Aaron Paul, who plays Jesse Pinkman, recently discussed the hardest Breaking Bad scene he had to recreate for the film and why it was an emotional moment. (Editor’s note: Spoilers ahead!)

During the Breaking Bad finale, Jesse Pinkman flees from a compound and is last seen driving away in a car, crying and in shock from the near-fatal fight he was involved in.

“That was a really hard scene for me to do at end of Breaking Bad. I didn’t really know how I was going to play it. I just knew where he was at,” Paul told IndieWire. “I think we only did that maybe one or two takes. And then they’re like, ‘I think that’s it.’”

El Camino: A Breaking Bad Movie was a different case though: it took Paul some extra time to recreate that intense scene for the movie and to set it up in a way that continued Jesse’s story.

“The opening scene, the screaming, the escape, redoing that in a bit of a different way, we spend a lot more time on that than I thought we were going to. Playing that came off of excitement, fear, anger, all of the above. Everything just pouring out of him,” Paul explained. “Especially after reading this script and really getting a more detailed look at what went on when he was being held in that cage, you see that he’s been an abused, tortured animal.”

This is it. This is how it ends. #ElCamino: A Breaking Bad Movie is now on @Netflix and in select theaters. pic.twitter.com/e1vOaV5fFR

— Breaking Bad (@BreakingBad) October 11, 2019

El Camino: A Breaking Bad Movie follows Jesse’s next chapter, as he evades the cops and seeks help from friends to start a new life…and as the trailer showed, he’s “ready” for what’s around the corner. With some closure, fans may have answers on Jesse’s purpose and what he’s up against next.

“We’re dealing with Vince here and so he’s not going to tell a story that doesn’t need to be told. From the very beginning, he said, ‘Look, this is the idea I’m having. I don’t want to do this movie unless it’s perfect, but I want to, [and] I want to make sure that you’re on board before I dive in and really write this script.’ Of course, that was an enthusiastic yes,” Paul added. “I trust him so much and I know he’s not gonna steer anyone in the wrong direction.”

El Camino: A Breaking Bad Movie is now streaming on Netflix.

More on Geek.com:

MacOS 10.15 Catalina Review: More Mobile, More Security, no More iTunes

Having been on record as an iTunes hater since 2008, I’d like to take this moment to do a little dance on its grave. Except for one thing: iTunes is not really dead. It’s just back to doing what it was once really good at, which is managing your music. Oh, and it’s been renamed; it’s now just called Apple Music.

Apple has pulled apart iTunes and assigned all its former functions to different apps: Apple Music, Apple TV, and Apple Podcasts. All iDevice syncing now happens in the Finder, and, in perhaps my favorite MacOS change in years, when you plug in an iPad or iPhone … nothing happens. Sweet, sweet nothing. Your device will charge and show up in the Finder sidebar if you want to interact with it, but no app launches.

Apple Music is tightly focused on your music and nothing else. It looks like iTunes once did before Apple started bolting all kinds of odds and ends onto it. That said, it’s still the most complex of the three new apps, handling your local music library, a music store (which is still called the “iTunes Store”), and Apple Music, Apple’s streaming music service. Each section gets its own place in the sidebar, which means there’s still a lot going on for a music app, but at least it’s all music related and no music features have been removed.

I no longer have a huge iTunes library to run through the upgrade process, but I did do an in-place upgrade with a small library and ran into no problems at all. One important thing to note: iTunes might be gone, but the monolithic iTunes library in the file system is not. Make sure you don’t delete or move that file, because all the new apps use it (see Apple’s help page for details). The other slightly confusing thing is that you have to open Music to get the library converted. Until you do that, none of your other media content will show up in Podcasts or TV either.

If you’ve ever used the Podcasts app on iPad, you’ll recognize the new MacOS version. Not only is it a nicely designed app, it makes a good showcase for how apps from the iPad can be translated to MacOS. The best feature in Podcasts is the search tool, which will now search not just the metadata and descriptions that your favorite podcasters write for each episode, but also Siri transcripts of the actual audio. This means that if you search for “Gadget Lab,” not only will you find our podcast, you’ll find any others that talk about Gadget Lab or use the phrase “Gadget Lab.”

The new TV app is where you’ll go to view your purchased items, access any third-party streaming services you’ve paid for, like HBO or Hulu, and find recommendations on what to watch. The app itself looks like it does on Apple TV and iDevices, but the way it handles outside content is different—frustratingly

New leak shows Google’s Nest Mini comes with a wall mount

Sponsored Links

WinFuture

We’re less than a day away from the start of Google’s 2019 fall hardware event, but that doesn’t mean the leaks have to stop. WinFuture‘s Roland Quandt, a frequent leaker with a solid track record, just shared official-looking images of Google’s upcoming Nest-branded Home Mini refresh.

Most notable about today’s leak is that it doesn’t look like the Nest Mini features a 3.5mm headphone jack. Back when information about the Nest Mini first started making the online rounds, at least one report suggested Google would add an auxiliary port for external speakers. For whatever reason, it doesn’t look like Google has decided to go down that route.

Otherwise, the new photos nearly confirm everything else we’ve heard about the Nest Mini going into tomorrow’s event. Hard to miss is the new groove on the back of the device for mounting it against a wall. Besides the new mounting mechanism, Quandt says the device features the same dimensions as the current Home Mini.

Oppo working on under-display sensors for supposed quad-curve ‘3D waterfall' display

Smartphone innovation has been at an all-time high in the past couple of years with new designs akin to the pop-up camera, under-display fingerprint technology, and waterfall displays we’re already seeing. The latest patents filed by Oppo suggest we could see a display that’s curved at all edges. This could be possible thanks to another technology that Oppo has also patented: placing sensors under the display.

Mockup render by LetsGoDigital

The patents outline a light sensor and another infrared light sensor, both of which could function from below the display. This would eliminate the need for a bezel to house the sensors, one for adjusting display brightness to the ambient light while the other turns the display off in a call, respectively. This technology could work with either a Micro LED or OLED display.


Patent diagrams

A couple of months ago, Oppo showed off an unreleased device with waterfall display, but the idea of making all four edges swoop towards the frame isn’t a new one. Xiaomi has patented a similar device with four curved edges back in February.

Oppo also teased an under-display camera leading up to MWC Shanghai. This shows the company’s efforts to eventually create a smartphone with 100% screen-to-body ratio.

We have already seen devices with ”waterfall displays” on the two longest edges of the phone: the Huawei Mate 30 Pro and Vivo NEX 3 are two devices already available with waterfall displays.

Source (Translated)

Google Nest Mini leak shows the subtle changes from the Home Mini

Most of the intrigue ahead of Google’s hardware event Tuesday in terms of what new products and designs the tech giant will reveal has essentially disappeared, now that we know most of the key details about what will be unveiled — including the Pixel 4 and Pixel 4 XL, a new Pixelbook, and a new Nest Wi-Fi, among others devices.

Nevertheless, in these final hours ahead of the October 15 “Made By Google” event, which gets underway at 10 a.m. Eastern in New York, the rumors and leaks are still trickling out. Like this one: The design of the Nest Mini that Google is expected to unveil tomorrow was leaked on Monday.

An announcement confirming the Nest Mini is believed to be coming Tuesday as a successor to Google’s Home Mini from two years ago. Thanks to the leak as reported by WinFuture, however, it seems that Google has decided to ensure this speaker looks remarkably similar to the previous generation of the product. In fact, other than the new Nest branding, the only things that are visibly new when it comes to the Nest Mini’s look and feel seem to be a new power connector and the hole that allows it to be mounted on a wall.

Here’s one of the images showing the new design WinFuture published Monday:

In terms of other key details to know, it seems that the color options will include light blue, coral, black, as well as gray. Per WinFuture, Bluetooth has also been upgraded to 5.0. Presumably, any other significant updates and tweaks will be in the form of things you can’t see, such as audio and perhaps other aspects of the user experience, so we’ll have to wait and see what Google acknowledges Tuesday along those lines.

Meanwhile, check out our earlier reporting to get a rundown of some of the other announcements expected Tuesday, including the new Pixelbook and the Pixel 4.

Image Source: Olly Curtis/Future/Shutterstock

Harley-Davidson suspends LiveWire production over a charging glitch

Sponsored Links

Harley-Davidson has suspended the production and delivery of its LiveWire electric motorcycles. During final tests, the company discovered a problem related to the vehicle’s charging equipment. The company told The Wall Street Journal that tests to pinpoint the issue are progressing well, but it did not say when production will resume.

Customers who have already purchased LiveWires can continue to ride the bikes, but Harley says they should only be charged with the professional ChargePoint chargers available at its dealerships. Customers should not attempt to charge the motorcycles at home.

Harley has been talking about its electric bike since 2014, and it hopes that going electric will appeal to a new generation of motorcyclists. Still, since this is Harley’s first electric motorcycle, it’s a bit of a gamble, and a glitch like this is not something you want in a $30,000 purchase.

Source: The Wall Street Journal Coverage: CNBC In this article: charging, dealership, electric, electric

Get a sleek mouse pad with a built-in fast wireless charger for $19

You need a mouse pad. You need a wireless charger. Since you need both of them and there’s no way around it, why not kill two birds with one stone? As the name suggests, the Zofine 2-in-1 Fast Wireless Charging Mouse Pad combines both of these must-have products into a single device. It looks great and it’s nice and comfortable, plus it costs less than you would pay for most normal wireless chargers!

Here’s the scoop from the product page:

【Mouse Pad + Fast Wireless Charging】2 in 1 Design – Combined mouse pad and QI wireless charging station function into one. Simple charge and very thin, easy to carry out. 10W fast charging mode only for those Device which support 10W(like: Samsung Galaxy S9 S8 S7 etc.).Charge your Qi-compatible devices, no need to plug your phone into a wall charger or USB port.Less damage for your device.Note: The device can be charged immediately as long as you put the corresponding Qi device on the corresponding position of the wireless charger( where there is just only Zofine lable area can charge) 【Elegant Mouse Pad 】 The non-slip base and PU leather surface mouse pad features dust-proof,waterproof properties.It would be better take off your phone case before charge.(No metal/magnetic/iron case,etc.) 【Safe & Reliable】 Built-in over-voltage, under-voltage, temperature control, surge protection and short-circuit protection system provides ultimate safety for your smartphone. NOTE, PLEASE DO NOT PLUG INTO THE COMPUTER OR LAPTOP TO CHARGE, it would charge very slow for your device. 【Compatibility】 Compatible with iPhone X, iPhone 8/ 8 Plus, Samsung Galaxy Note 8, S8, S8 Plus, S7, S7 edge, S6, S6 edge, S6 edge plus, Note 5, Google Nexus 4/5/6 and etc.(NOTE: Samsung S9/S9 Plus OEM AC adapter CANNOT SUPPORT fast wireless charging,pls use other QC3.0/2.0 adapter),most Qi-enabled devices.18 months warranty. Note:Pls use the fast AC adapter to charge it !

Follow @BGRDeals on Twitter to keep up with the latest and greatest deals from around the web. Quantities may be limited. Prices are subject to change without notice and coupons may expire at any time. Some deals may not be available to all customers. BGR may receive a commission on orders placed through this article.

HP Unveils Chromebox Enterprise G2: A Chrome OS-Based Business Desktop

Business and enterprise desktops is an interesting market recently – on the one hand, because extended support for Windows 7 nears its end early in 2020, multiple companies are eager to buy new PCs; on the other hand, margins are low and competition between suppliers is cut-throat. To minimize competition, HP has released one of the industry’s first Chromebox for Enterprise: a UCFF desktop PC for frontline workers, call centers, shared spaces, kiosks, or digital signage applications.

The Chromebox Enterprise G2 comes in a small 14.93×14.93×4 cm black box that packs Intel’s 7th Generation dual-core Core i3-7130U with UHD 620 graphics CPU or Celeron 3867U with UHD 610 graphics CPU that is paired with 16 GB DDR4-2400 DRAM as well as an M.2 SSD.

In a bid to meet requirements of all possible applications, the Chromebox Enterprise G2 features rather vast connectivity capabilities that include GbE, Wi-Fi 5, Bluetooth 4.2, three USB 3.0 Type-A ports, two USB 2.0 Type-A ports, one USB Type-C connector, one HDMI display output, one 3-in-1 SD card reader, and a 3.5-mm headphone jack. Depending on configuration, the Chromebox Enterprise G2 comes with a 65 W or a 90 W power brick.

HP’s Chromebox Enterprise G2 Model Celeron Core i3 CPU Intel Celeron 3867U
(2C, 1.8 GHz, 2 MB cache) Intel® Core i3-7130U
(2C, 2.7 GHz, 3 MB cache) GPU Intel HD Graphics 610 Intel HD Graphics 620 DRAM 16 GB DDR4-2400
Two DDR4 SO-DIMM slots Motherboard proprietary Storage SSD 32 GB or 64 GB M.2 SSD DFF –   SD 3-in-1 card reader Wireless Intel Dual Band Wireless-AC 7265 802.11ac (2×2) and Bluetooth 4.2 Ethernet 1 × GbE port (Realtek RTL8151GH-CG GbE LOM) USB Front 1 × USB 3.0 Type-A Back 1 × USB 3.0 Type-C
1 × USB 3.0 Type-A
2 × USB 2.0 Type-A Display Outputs 1 × HDMI Audio 1 × 3.5mm audio jack for headsets (Realtek ALC5662-CG codec) PSU External 65 W External 90 W Warranty Typical, varies by country Dimensions Length: 14.93 cm | 5.87 inches
Width:  14.93 cm | 5.87 inches
Height: 4 cm | 1.57 inches OS Chrome OS with Chrome Enterprise Upgrade MSRP ? ?

Unlike Chromebooks, Chromeboxes have not really gained traction on the market partly because people expect high performance and advanced multimedia capabilities from their desktops, but mostly because people are so used to Windows programs. By releasing a Chromebox for Enterprise, HP obviously faces some risks, but believes that since many people use web-based apps nowadays, they will use a Chrome OS-based desktop without any problems. Meanwhile, the advantage of web-based applications is also their disadvantage because they depend on reliability of Internet connection. On the other hand, one indisputable trump that HP’s Chromebox Enterprise G2 has is support for numerous capabilities aimed precisely at businesses, including 24/7 Google support, automatic software updates through June 2024, virus protection, sandboxing, verified boot, remote management, and easy deployment. All in all, it will be interesting to sell how successful HP’s Chromebox for

Uber lays off employees from Eats, self-driving cars and other teams

Sponsored Links

ASSOCIATED PRESS

Uber has cut around 350 more employees across several of its divisions. The company said it’s the “last wave of a process” that saw layoffs in marketing, then product and engineering over the last few months. This time around, Uber has laid off members of the Eats, performance marketing, Advanced Technologies Group (the self-driving cars unit) and recruiting departments, along with its global rides and platform teams. In total, the job cuts account for around one percent of Uber’s workforce.

Over 70 percent of employees affected by the latest round are based in North America, with the remainder spread across Asia, Europe, Latin America and the Middle East, according to TechCrunch. Uber has laid off more than 1,100 employees across the three rounds, and it also asked some staff members to relocate.

“As you know, over the past few months, our leaders have looked carefully at their teams to ensure our organizations are structured for success for the next few years,” CEO

Nubia’s $529 dual-screen phone is now available in the US

Sponsored Links

Nubia

While we’ve seen Android phone manufacturers, particularly ones like Oppo and OnePlus, experiment with pop-up cameras to create phones without any display cutouts, China’s Nubia is approaching the challenge in an unusual way. Instead of a pop-up selfie camera, the company’s latest phone, the Z20, does away with any unsightly notches by adding a secondary 5.1-inch display that’s on the back of the device. In this way, when you want to take a selfie, you can use the Z20’s primary camera to snap a shot.

Besides working as a viewfinder, the Z20’s secondary screen can also double as an always-on display, showing you your notifications on the back of the phone. If you want to save battery life, Nubia suggests you can use it as your primary display in a pinch. Similarly, it’s possible to use the display for multi-tasking by putting two separate apps on each screen — though constantly flipping your phone seems like it would get tedious quickly. It’s also

NASA’s Juno Spacecraft Captures Jupiter’s Windy, Colorful ‘Jet N4’ Region

NASA’s Juno spacecraft snapped the swirling clouds of Jupiter’s “Jet N4” region on September 11. (Photo Credit: NASA / JPL-Caltech / SwRI / MSSS)

NASA’s Juno spacecraft recently caught a view of Jupiter’s northern hemisphere, “Jet N4,” and it’s a swirly, vibrant portrait of the massive planet.

Citizen scientist Björn Jónsson used data from Juno’s JunoCam imager to create the image above. It was taken on September 11 at 8:31 p.m. PDT while Juno completed its 22nd flyby of the planet. When the image was taken, Juno was approximately 7,540 miles from the cloud tops, as shown in the colorful image above.

According to NASA, the gas giant spins once every 10 hours and this fast rotation forms strong jet streams, dividing clouds into dark belts and bright zones that span Jupiter. Over 12 prevailing winds sweep over Jupiter and some can reach more than 300 miles per hour at the planet’s equator.

Colors on the wind: I took in this view of Jupiter’s turbulent atmosphere during my latest close flyby. This image was created from JunoCam data by Björn Jónsson. Details: https://t.co/yM9YCegsHA pic.twitter.com/x8hQr2hMEf

— NASA’s Juno Mission (@NASAJuno) October 10, 2019

The Juno mission, which was launched on August 5, 2011, aims to improve scientists’ understanding of the solar system’s early days by revealing details on the evolution of Jupiter. Juno will specifically determine how much water is present in Jupiter’s atmosphere, measure composition and cloud motion of Jupiter, map Jupiter’s magnetic and gravity fields, and explore Jupiter’s magnetosphere near the planet’s poles.

More on Geek.com:

Leaked 'Fortnite' Chapter 2 trailer showcases a new map and boats

Sponsored Links

Epic Games

Fortnite is set to return from the void with a major overhaul, if a leaked trailer is anything to go by. The original, constantly evolving battle royale map was destroyed in spectacular fashion Sunday, leaving only a black hole for players to look at. As has been rumored, Fortnite Chapter 2 is set to debut an all-new map. It seems there are plenty of other fresh features in store, including boats, swimming and fishing. The trailer for Season 1 of Chapter 2, which is said to have been shared with Epic’s permission, also showcases pogo sticks and the ability to carry downed teammates.

It looks like Epic Games will bump up the level cap from 100 to at least 127. There are new ways to increase your rank too — you can earn battle, scavenger and survival medals through fighting, looting and collecting materials. There are more than 100 rewards with the Chapter 2 Season 1 Battle Pass, so you

Microsoft starts inviting people to try Project xCloud

Sponsored Links

Microsoft

Microsoft is starting to invite players to test out its Project xCloud game streaming service. It said last month it would open up a public preview of the platform in October, allowing players to stream games to their Android devices. Now, it’s starting to send out invitations to those eager to try it, with Halo 5: Guardians, Gears 5, Killer Instinct and Sea of Thieves available to play.

Proud of the #ProjectxCloud team for launching the public preview – it’s an exciting time at Xbox. Invitations are rolling out now and will continue over the coming weeks. We’re excited for all of you to help shape the future of game streaming.

— Phil Spencer (@XboxP3) October 14, 2019

When Microsoft announced the public preview, it said players in the US, UK and South Korea would be able to try it out. It’s gradually opening up access to people who signed up for the trial, Xbox chief Phil Spencer said, so