Orome1 quotes a report from Help Net Security: A single SMS can force Samsung Galaxy devices into a crash and reboot loop, and leave the owner with no other option than to reset it to factory settings and lose all data stored on it. This is because there are certain bugs in older Samsung Galaxy phones and tablets that can be triggered via SMS, and used by attackers to force maliciously crafted configuration messages onto the users’ device. The bugs allow these types of messages to be executed without user interaction. As the ContextIS researchers who discovered the vulnerabilities explained, this avenue of attack can be abused by crooks to hold users’ devices for ransom. “First a ransom note is sent, if ignored then the malicious configuration message can be sent,” they noted. If the victim pays up, a configuration message can later be sent to stop the rebooting. The vulnerabilities in question, CVE-2016-7988 and CVE-2016-7989, can be triggered through SMS on the S4, S4 Mini, S5 and Note 4, but not on newer Samsung devices. “It’s worth noting that although newer phones such as the S6 and S7 aren’t affected over the air, [a similar result] could be accomplished by a malicious app abusing CVE-2016-7988,” they added. These specific issues are related to modifications Samsung made to to the Android telephony framework and are found in a Samsung-specific application for handling carrier messages. They’ve since been patched (November 2016).

Read more of this story at Slashdot.

Source: Slashdot – Remote Attackers Can Force Samsung Galaxy Devices Into Never-Ending Reboot Loop

schwit1 writes: NASASpaceFlight.com reports: “Fifty years ago Friday, the first — but sadly not the last — fatal spaceflight accident struck NASA when a fire claimed the lives of Virgil ‘Gus’ Grissom, Roger Chaffee, and Ed White during a training exercise at Launch Complex 34. The accident, a major setback for the struggling Apollo program, ushered in the first understanding of the ‘bad day’ effects of schedule pressure for spaceflight and brought with it words and reminders that still echo today.” The article provides a very detailed and accurate look at the history and causes of the accident, as well as its consequences, which even today influence American space engineering. Are there any Slashdotters who were old enough to remember the incident? If so, we’d love to hear your take on the disaster. Where were you when the news broke and how did it affect you and the country at that time…?

Read more of this story at Slashdot.

Source: Slashdot – Today Marks 50th Anniversary of Fatal Apollo 1 Disaster

Starting February 5th, Apple will be moving its entire international iTunes business from Luxembourg to its European headquarters in Cork, Ireland, according to a note sent to developers this week. The non-U.S. iTunes business consists of Apple Music and the individual stores for iTunes, iBooks and Apps. Internationally, iTunes is available in over 140 countries, while Apple Music is streaming in roughly 115 territories. Billboard reports: Apple announced its intentions to move its iTunes biz to Ireland in September when it transferred an estimated $9 billion of iTunes assets. At that time it also shuffled all existing developer contracts to Ireland-based Apple Distribution International. Like Luxembourg, Ireland is known for being a low-tax haven for international businesses. Last month, both Apple and Ireland announced they would appeal a record $14 billion tax bill from the European Commission, which earlier found it had been underpaying tax on profits across the European bloc from 2003 to 2014. Apple today is the biggest private employer in Cork, the Irish Republic’s second-largest city, with a workforce exceeding 5,500. Economists estimate Apple’s Cork operation pumps around $17 billion annually in salaries, tax and investment into the Irish economy.

Read more of this story at Slashdot.

Source: Slashdot – Apple Is Moving Its Entire International iTunes Business To Ireland