Showing headlines posted by BernardSwiss

Publishing science behind paywalls is immoral. There, I said it.

I know, I know. It's an easy trap to fall into – I've done it myself. To my shame, several of my own early papers, and even a recent one, are behind paywalls. I'm not speaking as a righteous man to sinners, but as a sinner who has repented.

Earlier this year, VIA released a tiny $49 ARM-powered motherboard it called the Android PC System (APC) in an effort to ride the wave the Raspberry Pi Foundation accidentally started with its $35 Linux computer for budding young developers. Today, it's announcing a pair of follow-ups: the APC Rock is a $79 bare motherboard, and the APC Paper is a $99 version that is identical, except it loses the VGA port and comes in a recycled cardboard case designed to look like a small hardcover book. The Rock is available now, and the Paper has a March pre-order date. The original APC will continue to be sold with Android 2.3 (Gingerbread) for $49.

The last few months have given us a steady trickle of new hardware running Google's lightweight Chrome OS: Samsung's ARM Chromebook and Acer's C7 Chromebook delivered Chrome OS for $249 and $199, respectively. Those releases finally gave us Chromebooks with prices that were roughly in line with their capabilities. Today, Lenovo is getting in on the fun with its own Chromebook announcement, but while the Thinkpad X131e Chromebook promises "a rugged design for the classroom environment," you'll pay $429 per laptop to get that extra durability.

US federal courts are divided into 94 districts. When patent-holders file a lawsuit against a product that's sold nationwide, they have pretty wide leeway as to where to file their case. That's allowed for quite a bit of "venue shopping" in patent cases, and several years ago the remote and rural Eastern District of Texas started to become surprisingly popular.

Over time, East Texas became known as a place very friendly to patent plaintiffs and unfriendly to patent defendants, particularly out-of-state or foreign tech companies. Judges there were reluctant to let cases be transferred out of their district, and some patent-holding companies began setting up Texas LLCs in order to better argue that Texas was the right venue for them.

An exploit for yet another critical Java software vulnerability began circulating online amid reports that the patch Oracle issued two days ago is incomplete.

"Based on our analysis, we have confirmed that the fix for CVE-2013-0422 is incomplete," Trend Vulnerability Research Manager Pawan Kinger wrote in a blog post. Kinger went on to explain that the vulnerability stemmed from flaws in two parts of the Java code base: one involving the findclass method and the other involving the invokeWithArguments() method. While Sunday's patch fixed the latter issue, the findclass method can still be used to get references to restricted classes, leaving a hole that attackers can exploit.

Fedora 18 was released today, and among the promised new features are alternatives to the GNOME desktop in the form of MATE and Cinnamon. Fedora users who dislike the latest versions of GNOME may be disappointed to learn that it's still the only desktop environment that is installed by default—MATE and Cinnamon have to be installed separately.

These alternative desktop environments could already be installed through the command line on Fedora 17. Promising support for both MATE and Cinnamon in official release notes and press announcements might have led some to hope that the interfaces would be included right up front. But with the full install DVDs going up to 4.4GB and MATE alone adding another 104MB, Fedora maintainers decided not to bulk up that download any further.

Thus, you still have to do some extra work to get an alternative to GNOME. Here's how to do it.

Coder and information activist Aaron Swartz took his life on Friday, and in the wake of his death the outpouring of grief from the tech community is palpable. While Swartz wrote publicly about depression, many have speculated that his legal troubles compounded the sense of hopelessness that drove him to take his life. On Saturday afternoon, Swartz's family and his partner released a statement corroborating that idea:

Quoting: Aaron’s death is not simply a personal tragedy. It is the product of a criminal justice system rife with intimidation and prosecutorial overreach. Decisions made by officials in the Massachusetts U.S. Attorney’s office and at MIT contributed to his death. The US Attorney’s office pursued an exceptionally harsh array of charges, carrying potentially over 30 years in prison, to punish an alleged crime that had no victims. Meanwhile, unlike JSTOR, MIT refused to stand up for Aaron and its own community’s most cherished principles.

Today, we grieve for the extraordinary and irreplaceable man that we have lost.

MIT President Rafael Reif e-mailed the members of the university community this morning to address the situation, despite Swartz never having a formal affiliation with the school. Reif emphasized he was compelled to comment not only because of MIT's role in the JSTOR incident, but also because Swartz was beloved by many within the MIT community. The president's tone was clear throughout: "It pains me to think that MIT played any role in a series of events that have ended in tragedy."

In light of such an acknowledgement, Reif appointed professor Hal Abelson to lead a thorough analysis of the school's involvement, "from the time that we first perceived unusual activity on our network in fall 2010 up to the present." Reif asked Abelson to outline options MIT had plus the decisions the institution made, and he promised to share the report with the MIT community once it's received.

I was the expert witness on Aaron’s side of US vs Swartz, engaged by his attorneys last year to help prepare a defense for his April trial. Until Keker Van Nest called iSEC Partners I had very little knowledge of Aaron’s plight, and although we have spoken at or attended many of the same events we had never once met.

Should you doubt my neutrality, let me establish my bona fides. I have led the investigation of dozens of computer crimes, from Latvian hackers blackmailing a stock brokerage to Chinese government-backed attacks against dozens of American enterprises. I have investigated small insider violations of corporate policy to the theft of hundreds of thousands of dollars, and have responded to break-ins at social networks, e-tailers and large banks. While we are no stranger to pro bono work, having served as experts on EFF vs Sony BMG and Sony vs Hotz, our reports have also been used in the prosecution of at least a half dozen attackers. In short, I am no long-haired-hippy-anarchist who believes that anything goes on the Internet. I am much closer to the stereotypical capitalist-white-hat sellout that the antisec people like to rant about (and steal mail spools from) in the weeks before BlackHat.

I know a criminal hack when I see it, and Aaron’s downloading of journal articles from an unlocked closet is not an offense worth 35 years in jail.

Indeed, it's not news that the DMCA process is subject to abuse. And as McIntosh's case shows, the incentives provided by the law enable that abuse. One section of the DMCA, section 512(f), is supposed to discourage abuse by holding false accusers liable. But as examples like this one demonstrate, the threat of section 512(f) is not enough.

In fact, the senders of this notice were quite brazen about the shakedown operation they were executing. When McIntosh contacted the rightsholders, he got this message in response:

Quoting: Had our requestes to monetize this video not been disputed, we would have placed an ad on the cotent [sic] and allowed it to remain online. Unfortunately after appeal, we are left with no other option than to remove the content.

No consideration of fair use, no conception that the remixer may be in the right. Simply: allow us to generate revenue off your video, or we will shut it down.

Unwired Planet, formerly Openwave Systems, said in a regulatory filing today that it has received more than 1,900 patents, including 753 US patents, from Swedish telecom company Ericsson.

There's not much to Unwired Planet beyond its patents. The operating parts of Openwave were sold off before the transformation to Unwired last April. In September, Unwired launched patent suits against Apple [PDF] and Google, following a time-tested recipe: use patents on old, unsuccessful technology to ask for royalties on new, popular technology. It also had cases against Apple and RIM at the International Trade Commission, but dropped them in October.

The critical Java vulnerability that is currently under attack was made possible by an incomplete patch Oracle developers issued last year to fix an earlier security bug, a researcher said.

According to Gowdiak, the latest vulnerability is a holdover from a bug (referred to here as Issue 32) that Security Explorations researchers reported to Oracle in late August. Oracle released a patch for the issue in October but it was incomplete, he said in an e-mail to Ars that was later published to the Bugtraq mailing list.

Back in June last year, Techdirt reported on the warning from the World Health Organization's Director-General that we risked entering a "post-antibiotic era". That was in part because the current patent system was not encouraging the right kind of research by pharma companies in order to develop the new antibiotics that we desperately need.

Stephan Kinsella points out that the World Economic Forum's 8th Global Risks Report (pdf), based on a survey of over 1,000 experts worldwide, has singled out precisely the same issue as one of the most serious facing humanity today: Those experts also offered their views on why they thought this worrying situation had come about. Their answer turned out to be the same as the key problem outlined in the earlier Techdirt story -- the failure of patents to encourage the development of drugs that maximized public health rather than private profits:

Of course, the reason for doing this was not to make their subscribers happier but rather to attempt to force Google to pay them more money for carrying their traffic. It was related to the story we just had about France Telecom degrading YouTube performance. Both were examples of these French companies effectively seeking to break basic end-to-end principles of the internet, in an effort to get Google to pay more, since Google is so popular. As we've noted, some European telcos have been desperately trying to make the argument that successful internet companies should pay them more money to carry their traffic.

Watson, IBM's Jeopardy-contestant supercomputer, showed the world that, with the right programming, any puny human could be bested in a mildly snooty game show that handed out answers and asked for questions. However, the quest for true artificial intelligence is still ongoing.

So, in the interest of science, the whole of human knowledge (Internet Edition™) was dropped into Watson's brain and then... the problems began.

Critical Java zero-day bug is being “massively exploited in the wild” (Updated) ( Dan Goodin, Ars Technica) According to researchers at Alienvault Labs, the exploits work against fully patched installations of Java. Attack files are highly obfuscated and are most likely succeeding by bypassing security checks built in to the program. KrebsOnSecurity said the malware authors say the exploits work against all versions of Java 7.

Dangerous vulnerability in latest Java version (sno, The H Security/Heise online) The latest Java version, Java 7 Update 10 contains a critical security vulnerability which is reportedly already being used for large scale cyberattacks. Users who have Java installed on their computers should deactivate the Java plugin in their browsers without delay.

CES is about technology of all kinds; while we're busy covering cameras, TVs, and CPUs, there's a huge number of products that fall outside our normal coverage. Austin-based startup TrackingPoint isn't typical Ars fare, but its use of technology to enable getting just the perfect shot was intriguing enough to get me to stop by and take a look at the company's products.

TrackingPoint makes "Precision Guided Firearms, or "PGFs," which are a series of three heavily customized hunting rifles, ranging from a .300 Winchester Magnum with a 22-inch barrel up to a .338 Lapua Magnum with 27-inch barrel, all fitted with advanced computerized scopes that look like something directly out of The Terminator. Indeed, the comparison to that movie is somewhat apt, because looking through the scope of a Precision Guided Firearm presents you with a collection of data points and numbers, all designed to get a bullet directly from point A to point B.

It has been three and a half years since I first uploaded my remix video “Buffy vs Edward: Twilight Remixed” to YouTube. The work is an example of fair use, transformative storytelling which serves as a visual critique of gender roles and representations in modern pop culture vampire media.

Since I published the remix in 2009 it has been viewed over 3 million times on YouTube and fans have translated the subtitles into 30 different languages. It has been featured and written about by the LA Times, Boston Globe, Salon, Slate, Wired, Vanity Fair, and Entertainment Weekly, and it was discussed on NPR radio. It was nominated for a 2010 Webby Award in the best remix/mashup category. The video is used in law school programs, media studies courses, and gender studies curricula across the country. The remix also ignited countless online debates over the troubling ways stalking-type behavior is often framed as deeply romantic in movie and television narratives. This past summer, together with the Electronic Frontier Foundation, I even screened the remix for the US Copyright Office at the 2012 hearings on exemptions to the DMCA. Afterward, my "Buffy vs. Edward" remix was mentioned by name in the official recommendations by the US Copyright Office (PDF) on exemptions to the DMCA as an example of a transformative noncommercial video work.

Canonical demonstrated a Galaxy Nexus running Ubuntu's phone interface at the Consumer Electronics Show, but product manager Richard Collins explained that the company isn't quite ready to let us use it. "We're just doing all of the driving for the demos for now simply because we understand how the experience works," Collins told me when I asked if I could test it out. In other words: No touching!

We do expect to be getting a hands-on experience within a few weeks, because Canonical says it will be releasing a version that can be installed by anyone on a Nexus. Today, Ars reporter Andrew Cunningham and I settled for the controlled demo and an interview, with Andrew taking pictures. Canonical's wireless Internet on the CES expo floor wasn't working, but we could get a sense of the phone's basic functionality.

Content companies used to getting their way on Capitol Hill got humbled last January when an unprecedented wave of public protest shut down the SOPA and PIPA proposals that would have regulated online copyright. Now that the public has been awakened to the issue, those interested in a more balanced copyright system are thinking over their strategy.

"Everything is on the table, including copyright terms," said Gigi Sohn, the president of Public Knowledge, speaking at a panel at CES 2013. "Let's put it to those who want greater, longer, stronger CR enforcement... why shouldn't we have some balance? Let's turn the clock back and think about the original need for copyright." This year, says Sohn, will be the year "we push our own, affirmative, agenda."