SoylentNews

[Note from the Moq Website: Moq (pronounced "Mock-you" or just "Mock") is the only mocking library for .NET developed from scratch to take full advantage of .NET lambda expressions that make it the most productive, type-safe and refactoring-friendly mocking library available. JR]

upstart writes:

Popular open source project Moq criticized for quietly collecting data:

Open source project Moq (pronounced "Mock") has drawn sharp criticism for quietly including a controversial dependency in its latest release.

Distributed on the NuGet software registry, Moq sees over 100,000 downloads on any given day, and has been downloaded over 476 million times over the course of its lifetime.

Moq's 4.20.0 release from this week quietly included another project, SponsorLink, which caused an uproar among open source software consumers, who likened the move to a breach of trust.

Seemingly an open-source project, SponsorLink is actually shipped on NuGet as closed source and contains obfuscated DLLs that collect hashes of user email addresses and send these to SponsorLink's CDN, raising privacy concerns.

Last week, one of Moq's owners, Daniel Cazzulino (kzu), who also maintains the SponsorLink project, added SponsorLink to Moq versions 4.20.0 and above.

This move sent shock waves across the open source ecosystem largely for two reasons—while Cazzulino has every right to change his project Moq, he did not notify the user base prior to bundling the dependency, and SponsorLink DLLs contain obfuscated code, making it is hard to reverse engineer, and not quite "open source."

"It seems that starting from version 4.20, SponsorLink is included," Germany-based software developer Georg Dangl reported referring to Moq's 4.20.0 release.

"This is a closed-source project, provided as a DLL with obfuscated code, which seems to at least scan local data (git config?) and sends the hashed email of the current developer to a cloud service."

Arthur T Knackerbracket has processed the following story:

While rumbling over Mount Sharp on Mars, NASA's Curiosity rover found a strange crackled terrain.

These distinct patterns in dry mud, found over 100 million miles away in space, are a thrilling discovery for geologists. The cracks form a lattice of hexagons, signaling that the land has gone through intermittent spells of wetness and dryness. Many scientists credit these environmental shifts with prompting the chemical reactions needed to create microorganisms on Earth.

Of course, scientists have already found ample evidence that Mars could have supported life long ago. But these new geological findings are something quite different, experts say. They reveal the environmental conditions that could have allowed life to emerge on the Red Planet in the first place.

And to think this major breakthrough was all made possible by looking between the cracks — literally.

"This is the first tangible evidence we’ve seen that the ancient climate of Mars had such regular, Earth-like wet-dry cycles," said William Rapin of France’s Institut de Recherche en Astrophysique et Planétologie in a statement. "But even more important is that wet-dry cycles are helpful — maybe even required — for the molecular evolution that could lead to life."

A team of researchers including lead author Rapin has published a paper in Nature describing how this peculiar mesh of cracks offers the first evidence of wet-dry cycles occurring on ancient Mars.

[...] "It’s pretty lucky of us to have a planet like Mars nearby that still holds a memory of the natural processes which may have led to life," Rapin said.

upstart writes:

Private jet owners have long waited for their flight information to be unavailable to the public, and Congress might grant them that:

Good news may be coming for Elon Musk and other uberwealthy folks with private jets. The FAA reauthorization bill, which was recently passed by the House, may soon block the public from learning about the flights people take on private jets, according to Axios. While it may be good news in the eyes of the rich, it's bad news for everyone else.

The Tesla, SpaceX and X (ugh) CEO has said in the past that people having access to their flight data can pose a security risk, but Axios asserts that the information has proven to be very useful for journalists and other researchers. This sort of tracking has always been part of public record, but until online flight trackers started taking off (I'm so sorry), it was sort of a pain in the ass for most people to learn who owned private planes and where they were going.

The outlet reports that a provision deep inside the five-year FAA reauthorization bill would require the agency to establish a process that would let jet owners request to keep their planes' registration numbers and other information private. That's lame as hell. The bill reportedly passed the House by a 351-69 (nice) vote in July, and now it must be reconciled with the Senate before President Biden can sign it.

Original Submission

taylorvich writes:

https://newatlas.com/biology/plant-persephacin-fungal-pathogens/

While water lilies are perhaps most famous for starring in French impressionist artist Claude Monet's work, they may also have a molecular secret weapon that could help in our ongoing fight against fungal infections.

After viruses and bacteria, fungus is the most deadly pathogen and, much like bacteria, is adapting fast to be resistant to current medical interventions. While the official numbers show that around 8,000 Americans die from fungal infections each year, it's likely to be much higher, since many cases go undiagnosed and, as an 'opportunistic pathogen,' the microorganism can attack weakened immune systems for complex comorbidities.

[...] However, there's some good news. Scientists out of the University of Oklahoma (UO) may have found a molecule in a species of water lily or lotus that can fight off fungal infection.

Journal Reference:
Lin Du, et. al.Persephacin Is a Broad-Spectrum Antifungal Aureobasidin Metabolite That Overcomes Intrinsic Resistance in Aspergillus fumigatus, Journal of Natural Products, 2023 (DOI: https://doi.org/10.1021/acs.jnatprod.3c00382 )

Original Submission

Freeman writes:

https://arstechnica.com/security/2023/08/homeland-security-details-how-teen-hackers-breached-some-of-the-biggest-targets/

A ragtag bunch of amateur hackers, many of them teenagers with little technical training, have been so adept at breaching large targets, including Microsoft, Okta, Nvidia, and Globant, that the federal government is studying their methods to get a better grounding in cybersecurity.

The group, known as Lapsus$, is a loosely organized group that employs hacking techniques that, while decidedly unsophisticated, have proved highly effective.
[...]
Rather than compromising infrastructure used to make various MFA services work, as more advanced groups do, a Lapsus$ leader last year described his approach to defeating MFA this way: "Call the employee 100 times at 1 am while he is trying to sleep, and he will more than likely accept it. Once the employee accepts the initial call, you can access the MFA enrollment portal and enroll another device."

On Thursday, the Homeland Security Department's Cyber Safety Review Board released a report that documented many of the most effective tactics in the Lapsus$ playbook and urged organizations to develop countermeasures to prevent them from succeeding.
[...]
The report contains a variety of recommendations. Key among them is moving to passwordless authentication systems, which presumably refer to passkeys, based on FIDO2. Like all FIDO2 offerings, passkeys are immune to all known credential phishing attacks because the standard requires the device that provides MFA to be no further than a few feet away from the device logging in.

Original Submission

Arthur T Knackerbracket writes:

Arthur T Knackerbracket has processed the following story:

After NASA’s Moon-faring, water-hunting probe faced an untimely demise before it was ever able to reach its final destination, mission scientists have officially declared that clogged propellant lines led to the mission’s failure.

SpaceNews reports that Celeste Smith and Nathan Cheek of NASA’s Jet Propulsion Laboratory announced the finding during a presentation at the 37th Annual Small Satellite Conference earlier this week. Lunar Flashlight first began facing issues with blockages in three of of the four lines that provide propellant to its thrusters just three days after it launched in December 2022. The pair said that the blockages were likely caused by titanium particles that became loose as the spacecraft vibrated before and during launch, and that these thruster issues ultimately led to the death of the mission.

While Lunar Flashlight had its fair share of trouble, JPL and project collaborators at Georgia Tech were never ready to immediately give up on the probe. After the team began detecting trouble with Lunar Flashlight’s propellant lines, NASA took a new approach to push the probe into a high Earth orbit instead of the planned near-rectilinear halo orbit. There, Lunar Flashlight would still have a view of the Moon, but only through monthly flybys of the lunar South pole. All the while, NASA continued attempts to clear the propellant lines of debris.

[...] Lunar Flashlight was a briefcase-sized satellite fitted with an instrument called a four-laser reflectometer. With this device, the probe would have used lasers to scan the Moon’s surface in near-infrared wavelength in an attempt to find water ice hidden in the Moon’s permanently shadowed regions. Infrared wavelengths are absorbed by water, so data collected by Lunar Flashlight would be able to delineate water ice from lunar rocks and soil.

Previously: Recent NASA CubeSat Challenges

Original Submission

owl writes:

http://www.righto.com/2023/08/intel-8086-bus-hold.html

The Intel 8086 microprocessor (1978) revolutionized computing by founding the x86 architecture that continues to this day. One of the lesser-known features of the 8086 is the "hold" functionality, which allows an external device to temporarily take control of the system's bus. This feature was most important for supporting the 8087 math coprocessor chip, which was an option on the IBM PC; the 8087 used the bus hold so it could interact with the system without conflicting with the 8086 processor.

This blog post explains in detail how the bus hold feature is implemented in the processor's logic. (Be warned that this post is a detailed look at a somewhat obscure feature.) I've also found some apparently undocumented characteristics of the 8086's hold acknowledge circuitry, designed to make signal transition faster on the shared control lines.

Original Submission

Freeman writes:

https://arstechnica.com/security/2023/08/how-an-unpatched-microsoft-exchange-0-day-likely-caused-one-of-the-uks-biggest-hacks-ever/

It's looking more and more likely that a critical zero-day vulnerability that went unfixed for more than a month in Microsoft Exchange was the cause of one of the UK's biggest hacks ever—the breach of the country's Electoral Commission, which exposed data for as many as 40 million residents.

Electoral Commission officials disclosed the breach on Tuesday. They said that they discovered the intrusion last October when they found "suspicious activity" on their networks and that "hostile actors had first accessed the systems in August 2021." That means the attackers were in the network for 14 months before finally being driven out. The Commission waited nine months after that to notify the public.
[...]
Some online sleuthing independently done by TechCrunch reporter Zack Whittaker and researcher Kevin Beaumont suggests that a pair of critical vulnerabilities in Microsoft Exchange Server, which large organizations use to manage email accounts, was the cause.

Original Submission

Arthur T Knackerbracket writes:

Arthur T Knackerbracket has processed the following story:

Plastics and soaps tend to have little in common when it comes to texture, appearance, and, most importantly, how they are used. But there is a surprising connection between the two on a molecular level: The chemical structure of polyethylene—one of the most commonly used plastics in the world today—is strikingly similar to that of a fatty acid, which is used as a chemical precursor to soap. Both materials are made of long carbon chains, but fatty acids have an extra group of atoms at the end of the chain.

Guoliang "Greg" Liu, associate professor of chemistry in the Virginia Tech College of Science, had long felt this similarity implied that it should be possible to convert polyethylene into fatty acids—and with a few additional steps to the process—to produce soap. The challenge was how to break a long polyethylene chain into many short—but not too short—chains and how to do it efficiently. Liu believed there was the potential for a new upcycling method that could take low-value plastic waste and turn it into a high-value, useful commodity.

[...] With the help of Zhen Xu and Eric Munyaneza, two Ph.D. chemistry students in Liu's lab, Liu built a small, oven-like reactor where they could heat polyethylene in a process called temperature-gradient thermolysis.

At the bottom, the oven is at a high enough temperature to break the polymer chains, and at the top, the oven is cooled to a low enough temperature to stop any further breakdown. After the thermolysis, they gathered the residue—similar to cleaning soot from a chimney—and found that Liu's hunch had been right: It was composed of "short-chain polyethylene," or more precisely, waxes.

[...] "Our research demonstrates a new route for plastic upcycling without using novel catalysts or complex procedures. In this work, we have shown the potential of a tandem strategy for plastic recycling," said Xu, lead author on the paper. "This will enlighten people to develop more creative designs of upcycling procedures in the future."

Arthur T Knackerbracket writes:

Arthur T Knackerbracket has processed the following story:

Asus has released a new addition to its Tinker Board line of Arm-based single-board computer (SBC) systems, giving hobbyists and embedded developers another design option with a plethora of ports.

The Tinker Board range launched by by Asus in 2017, but while previous models have typically followed a similar form factor to the popular Raspberry Pi – slightly smaller than a playing card – the latest Tinker Board 3N series sports a larger 100 x 100mm (4 x 4in) footprint described by Asus as NUC-sized.

Like earlier models, the Tinker Board 3N is based on a system-on-chip (SoC) from Rockchip, in this case the RK3568 which features a quad-core Cortex-A55 CPU cluster plus a Mali-G52 GPU, while the board itself supports 2GB, 4GB or 8GB of LPDDR4 or LPDDR4X memory.

[...] Speaking of operating systems, Asus claims support for the Tinker Board 3N with Debian or Yocto Linux, plus Android. It also claims to support firmware over the air (FOTA) updates for both Android and Linux.

Asus says that Tinker Board 3N will be available in three versions "to meet diverse project requirements," comprising Tinker Board 3N PLUS, Tinker Board 3N and Tinker Board 3N LITE, but offers no information on what the differences between these models are.

[...] While most Tinker Boards are based on an Arm SoC, the previous model Asus released earlier this year was based on a RISC-V chip. The Tinker V has a 1GHz single-core Renesas RZ/Five processor with 1GB of DDR4 memory and supports Yocto and Debian Linux.

Asus and Intel also disclosed last month that they were in negotiations for Asus to take on the Intel NUC brand from Intel, following the chipmaker's decision to cease development of that product line.

Original Submission

Freeman writes:

https://arstechnica.com/space/2023/08/russia-heads-back-to-the-moon-with-luna-25/

Russia's space agency successfully launched a robotic spacecraft Thursday on a journey to the Moon, the country's first lunar explorer since the Soviet Union's Luna 24 sample return mission in 1976.

The Luna 25 mission lifted off from the Vostochny Cosmodrome, located in Russia's Far East, at 7:10 pm ET (23:10 UTC). Heading east, a Soyuz-2.1b rocket propelled Luna 25 through an overcast cloud deck and into the stratosphere, then shed its four first-stage boosters about two minutes into the flight. A core stage engine fired a few minutes longer, and the Soyuz rocket jettisoned its payload shroud.
[...]
Russia would like the Luna 25 mission to rekindle the country's once-stellar record in the realm of interplanetary exploration. Luna 24, the Soviet-era mission that was Russia's last probe to land on the Moon, returned lunar soil samples to Earth on a robotic spacecraft in August 1976, nearly four years after NASA's last Apollo landing with astronauts. That feat was not repeated until China's Chang'e 5 sample return mission scooped up lunar soil and brought it back to Earth in 2020.
[...]
An agreement between Russia and China on robotic and eventual human lunar exploration in 2021 was seen by many as an initiative to potentially rival the US-led Artemis program. Last year, Russian President Vladimir Putin visited the Vostochny Cosmodrome, where Luna 25 launched on Thursday, and vowed to "resume the lunar program" abandoned by the Soviet Union in the 1970s.
[...]
A report released by the Center for Strategic & International Studies last December found that the Russia-China partnership in space "may well be exaggerated," citing declining Russian space budgets, the drain on Russia's space program caused by the war in Ukraine, and persisting mistrust between the two countries.
[...]
The Moon is getting to be a busy place. China has landers operating on the near and far side of the Moon, and NASA's Lunar Reconnaissance Orbiter has been observing there for 14 years. In April, a Japanese commercial spacecraft narrowly missed making a successful landing.

Now Luna 25 is on the way and is scheduled to land on the Moon just two days before India's Chandrayaan 3 spacecraft is due to make its descent on August 23.

Original Submission

fliptop writes:

Experts closing in on potentially identifying new force after surprise wobble of subatomic particle:

The tantalising theory that a fifth force of nature could exist has been given a boost thanks to unexpected wobbling by a subatomic particle, physicists have revealed.

[...] Dr Mitesh Patel, from Imperial College London, said: "We're talking about a fifth force because we can't necessarily explain the behaviour [in these experiments] with the four we know about."

The data comes from experiments at the Fermilab US particle accelerator facility, which explored how subatomic particles called muons – similar to electrons but about 200 times heavier – move in a magnetic field.

Patel says the muons behave a bit like a child's spinning top, in rotating around the axis of the magnetic field. However, as the muons move, they wobble. The frequency of that wobble can be predicted by the standard model.

But the experimental results from FermiLab do not appear to match those predictions.

Prof Jon Butterworth of University College London, who works on the Atlas experiment at the Large Hadron Collider (LHC) at Cern, said: "The wobbles are due to the way the muon interacts with a magnetic field. They can be calculated very precisely in the standard model but that calculation involves quantum loops, with known particles appearing in those loops.

"If the measurements don't line up with the prediction, that could be a sign that there is some unknown particle appearing in the loops – which could, for example, be the carrier of a fifth force."

Related:

• Making Sense of the Muon's Misdemeanours
• Shock Result in Particle Experiment Could Spark Physics Revolution (0.1% Difference in W Boson Mass)
• Latest Muon Measurements Hint at Cracks in the Standard Model

Also Submitted As: Scientists at Fermilab close in on fifth force of nature

Original Submission

Arthur T Knackerbracket writes:

Arthur T Knackerbracket has processed the following story:

HP all-in-one printer owners, upset that their devices wouldn't scan or fax when low on ink, were handed a partial win in a northern California court this week after a judge denied HP's motion to dismiss their suit.

The plaintiffs argued in their amended class action complaint [PDF] that HP withheld vital information by including software in its all-in-one printer/scanner/fax machines that disabled non-printing functions when out of ink and not telling buyers that was the case.

"It is well-documented that ink is not required in order to scan or to fax a document, and it is certainly possible to manufacture an All-in-One printer that scans or faxes when the device is out of ink," the plaintiffs argued in their complaint. The amended complaint was filed in February this year after US federal Judge Beth Labson Freeman dismissed the suit on the grounds that it hadn't properly stated a claim.

Armed with their amended complaint, lawyers for San Francsican Gary Freund and Minneapolis resident Wayne McMath have succeeded at not only making relevant claims, but also surviving an attempt by HP to have the entire case dismissed for a second time. 

In the amended complaint, Freund and McMath's lawyers argue that HP's move to disable devices that were low on ink was intentional, citing HP's own comments from a support forum post in which an HP support agent told a user complaining of similar issues that their "HP printer is designed in such a way that with the empty cartridge or without the cartridge [the] printer will not function." 

[...] This isn't the first time HP has been taken to court over claims it improperly locked printers down. In 2022 the IT giant settled a European lawsuit for $1.35 million alleging it used security chips and DRM-like software to prevent any third-party cartridges from functioning in HP printers. The US corporation has dealt with similar cases in Australia and America, which were settled. 

HP hasn't responded to our questions about the latest lawsuit.

Original Submission

taylorvich writes:

https://phys.org/news/2023-08-two-thirds-world-biodiversity-soil.html

Coral reefs, the deep sea or the treetops of the rainforests are considered the main hotspots of biodiversity. However, they all trail behind the soils. According to a new study, soils are the most species-rich ecosystems worldwide. Their importance for human nutrition is enormous, and the proportion of soils worldwide that are considered degraded or destroyed is growing steadily. A trio of researchers led by the Swiss Federal Institute for Forest, Snow and Landscape Research WSL has now made the first estimate of global soil biodiversity.

[...] Since the data on soil diversity is extremely patchy—especially in the global South—the results of the study show huge ranges in some cases. For bacteria, for example, the mean value is 40% of species living in the soil—but the range extends from 25% to 88%. The uncertainties are also enormous for viruses, which are mainly studied as human pathogens. Accordingly, the authors are bracing themselves for some criticism of their methods and conclusions. "Our work is a first but important attempt to estimate what proportion of global biodiversity lives in the soil," says Anthony.

The goal, he says, is to provide the basis for much-needed decisions to protect soils and their creatures worldwide. "Soils are under enormous pressure, whether from agricultural intensification, climate change, invasive species and much more," Anthony points out. "Our study shows that the diversity in soils is great and correspondingly important, so they should be given much more consideration in conservation."

Journal Reference:
Mark A. Anthony et al, Enumerating soil biodiversity, Proceedings of the National Academy of Sciences (2023). DOI: 10.1073/pnas.2304663120

Original Submission

upstart writes:

Regulators give green light to driverless taxis in San Francisco:

California regulators gave approval Thursday to two rival robotaxi companies, Cruise and Waymo, to operate their driverless cars 24/7 across all of San Francisco and charge passengers for their services.

The much-anticipated vote, which followed roughly six hours of public comment both for and against driverless taxis, came amid clashes between the robotaxi companies and some residents of the hilly city. San Francisco first responders, city transportation leaders and local activists are among those who shared concerns about the technology.

The California Public Utilities Commission regulates self-driving cars in the state and voted 3-to-1 in favor of Waymo and Cruise expanding their operations.

[...] Genevieve Shiroma, the dissenting commissioner in the 3-1 vote, recommended the commission delay the vote until they received a "better understanding of the safety impacts" of the vehicles.

Original Submission