Windows 1.0 Easter Egg Managed To Stay Hidden For Nearly 37 Years

Lucas Brooks, an avid Windows fan who digs through and analyzes its early iterations, recently shared his discovery of an easter egg that’s been hiding in Windows 1.0 for nearly 37 years. PC Gamer reports: Brooks discovered the secret, a credits list of Windows developers and a “congratulations” message, buried in the data of a smiley face bitmap file that came with the OS. The data for the credits was encrypted, and according to Brooks, the tools he needed to extract the data didn’t even exist at the time of the OS’ release.

There’s also a name in the credits all PC gamers will recognize: Gabe Newell, co-founder and president of Valve. Newell began his career at Microsoft after dropping out of Harvard, and contributed to the development of the first three iterations of Windows. He also led the team that ported Doom to Windows from DOS, a crucial step in the transition between the operating systems.

Read more of this story at Slashdot.



Source: Slashdot – Windows 1.0 Easter Egg Managed To Stay Hidden For Nearly 37 Years

Maradona 'Suspended' From FIFA Because His Image Rights Are An Absolute Shambles

Argentinian star Diego Maradona—who passed away in 2020—has long been one of a number of ‘Icons’ available to control in EA Sports’ FIFA series, alongside other retired greats like Pele and Johan Cryuff. Until this week, when his avatar was ‘suspended’ by EA.

Read more…



Source: Kotaku – Maradona ‘Suspended’ From FIFA Because His Image Rights Are An Absolute Shambles

Ex-TikTok moderators sue over 'emotional distress' from disturbing videos

Two former TikTok moderators filed a federal lawsuit seeking class-action status today against the platform and parent company Bytedance, reportedNPR. The plaintiffs, Ashley Velez and Reece Young, worked for the social video platform last year as contractors. To fulfill their role as moderators, they witnessed “many acts of extreme and graphic violence”, including murder, bestiality, necrophilia and other disturbing images. The lawsuit accuses TikTok of negligence and violating labor laws in California, the state where the platform’s US operations is based.

Both plaintiffs said they were tasked with viewing hours of disturbing footage, often working 12-hour days. They both paid for counseling out-of-pocket in order to deal with the psychological toll of the job. The lawsuit accuses TikTok of imposing high “productivity standards” on moderators, which forced them to watch large volumes of disturbing content without a break. Both employees were also forced to sign non-disclosure agreements as a condition of their employment.

“We would see death and graphic, graphic pornography. I would see nude underage children every day,” Velez told NPR. “I would see people get shot in the face, and another video of a kid getting beaten made me cry for two hours straight.”

Moderators at Facebook and other platforms have spoken out in the past about the severe psychological toll of their jobs. Employees have alleged they’re given a short period of time, usually only seconds, to determine whether a video violates the platform’s policies. The job has often been called “the worst job in technology,” and workers regularly suffer from depression, PTSD-like symptoms and suicidal ideation. In a 2020 settlement,Facebook paid over $52 million to a group of former moderators who said they developed PTSD from the job.

This is not the first lawsuit of this type for TikTok, which currently has a base of 10,000 content moderators worldwide. Last December another content moderator for TikTok also sued the platform for negligence and violating workplace safety standards. According to NPR, the lawsuit was dropped last month after the plaintiff was fired.



Source: Engadget – Ex-TikTok moderators sue over ’emotional distress’ from disturbing videos

UK Police Arrest 7 People In Connection With Lapsus$ Hacks

An anonymous reader quotes a report from TechCrunch: Police in the United Kingdom have arrested seven people over suspected connections to the Lapsus$ hacking group, which has in recent weeks targeted tech giants including Samsung, Nvidia, Microsoft and Okta. In a statement given to TechCrunch, Detective Inspector Michael O’Sullivan from the City of London Police said: “The City of London Police has been conducting an investigation with its partners into members of a hacking group. Seven people between the ages of 16 and 21 have been arrested in connection with this investigation and have all been released under investigation. Our enquiries remain ongoing.”

News of the arrests comes just hours after a Bloomberg report revealed a teenager based in Oxford, U.K. is suspected of being the mastermind of the now-prolific Lapsus$ hacking group. Four researchers investigating the gang’s recent hacks said they believed the 16-year-old, who uses the online moniker “White” or “Breachbase,” was a leading figure in Lapsus$, and Bloomberg was able to track down the suspected hacker after his personal information was leaked online by rival hackers. TechCrunch has seen a copy of the the suspected hacker’s leaked personal information, which we are not sharing — but it matches Bloomberg’s reporting. City of London Police, which primarily focuses on financial crimes, did not say if the 16-year-old was among those arrested.

At least one member of Lapsus$ was also apparently involved with a recent data breach at Electronic Arts, according to [security reporter Brian Krebs], and another is suspected to be a teenager residing in Brazil. The latter is said to be so capable of hacking that researchers first believed that the activity they were witnessing was automated. Researchers’ ability to track the suspected Lapsus$ members may be because the group, which now has more than 45,000 subscribers to its Telegram channel where it frequently recruits insiders and leaks victims’ data, does little to cover its tracks. In a blog post this week, Microsoft said the group uses brazen tactics to gain initial access to a target organization, which has included publicly recruiting company insiders. As reported by Bloomberg this week, the group has even gone as far as to join the Zoom calls of companies they’ve breached and taunted employees trying to clean up their hack.

Read more of this story at Slashdot.



Source: Slashdot – UK Police Arrest 7 People In Connection With Lapsus$ Hacks

Report: EA Sports to finally move forward with FIFA-less soccer game

Ars Technica's MS Paint interpretation of what appears to be a finalized divorce between EA Sports and FIFA.

Enlarge / Ars Technica’s MS Paint interpretation of what appears to be a finalized divorce between EA Sports and FIFA. (credit: EA Sports / Sam Machkovech)

Hidden amidst the usual “coming this fall” slate of video game announcements is one big change: the extrication of “FIFA” from all future EA Sports products.

On Thursday, Giant Bomb reporter and host Jeff Grubb followed up on an October 2021 report about the trademarked term “EA Sports Football Club,” possibly shortened to “EA Sports FC.” Grubb wondered exactly what the EAFC might refer to. EA Sports games come packed with a variety of single-player and online modes that range from cinematic story sequences to card-collecting, microtransaction-fueled frenzies. So the trademark could have referred to any kind of in-game mode—or the term could have been snapped up for nonpublic-facing reasons.

Around the same time, EA Sports provoked questions on the topic by publicly suggesting on its official blog that it might “rename our global EA Sports [soccer] games.” EA did this all while retaining its licensing arrangements with various soccer leagues and clubs. This public suggestion could have been done for any number of reasons—perhaps to put pressure on FIFA itself to relent in aggressive, high-dollar licensing requests, lest EA Sports take both its literal and figurative ball and go home. Privately, EA executives told staffers that its arrangement with FIFA was far from fruitful, in terms of holding back possible development and design directions for future games.

Read 4 remaining paragraphs | Comments



Source: Ars Technica – Report: EA Sports to finally move forward with FIFA-less soccer game

Elden Ring Players Are Killing Online Victims With Invisible Projectiles

Elden Ring, like most Souls games, often rewards you for finding the most effective way to defeat its difficult bosses, whether through overpowered builds or cheap, cheesy strategies. But when those same tactics get turned on other players, things can get ugly fast.

Read more…



Source: Kotaku – Elden Ring Players Are Killing Online Victims With Invisible Projectiles

NVIDIA Working On Support For Valve's Gamescope Wayland Compositor

Valve’s Gamescope Wayland compositor is what was born out of their former Steamcompmgr effort but rewritten to target Wayland, interfacing directly with DRM/KMS APIs for enhanced efficiency, and making use of Vulkan. To date Gamescope has worked with the Intel and Radeon open-source Linux graphics driver stacks while the NVIDIA proprietary driver is seeing work in the direction of supporting it…

Source: Phoronix – NVIDIA Working On Support For Valve’s Gamescope Wayland Compositor

The EPA Plans To Sunset Its Online Archive

Come July, the EPA plans to retire the archive containing old news releases, policy changes, regulatory actions, and more. The Verge reports: The archive was never built to be a permanent repository of content, and maintaining the outdated site was no longer “cost effective,” the EPA said to The Verge in an emailed statement. The EPA announced the retirement early this year, after finishing an overhaul of its main website in 2021, but says that the decision was years in the making. The agency maintains that it’s abiding by federal rules for records management and that not all webpages qualify as official records that need to be preserved.

The EPA says it plans to migrate much of the information to other places. Old news releases will go to the current EPA website’s page for press releases. When it comes to the rest of the content, the EPA has a process for making case-by-case decisions on what content can be deleted — and what is relevant enough to move to the modern website. Some content might be deemed important enough to join the National Archives. The public will be able to request that content through the Freedom of Information Act.

The archive is the only comprehensive way that public information about agency policies, like fact sheets breaking down the impact of environmental legislation, and actions, like how the agency implements those laws, have been preserved, [says Gretchen Gehrke, one of the cofounders of a group called Environmental Data and Governance Initiative (EDGI) that’s fighting for public access to resources like the EPA’s online archives]. That makes the archive vital for understanding how regulation and enforcement have changed over the years. It also shows how the agency’s understanding of an issue, like climate change, has evolved. And when the Trump administration deleted information about climate change on the EPA’s website, much of it could still be found on the archive. Besides that, Gehrke says the content should just be available on principle because it’s public information, paid for by taxpayer dollars.

Read more of this story at Slashdot.



Source: Slashdot – The EPA Plans To Sunset Its Online Archive

This is why boa constrictors can breathe while squeezing the life out of prey

Brown University biologists x-rayed boa constrictors to determine how they manage to breathe while squeezing prey to death.

Enlarge / Brown University biologists x-rayed boa constrictors to determine how they manage to breathe while squeezing prey to death. (credit: John Capano)

Watching a boa constrictor capture and consume its prey is quite something. First, the snake strikes and latches onto the prey with its teeth, then it coils its body tightly around the poor creature and slowly squeezes the life from it. The constrictor cuts off blood flow to the heart and brain. Then the boa unhinges its jaw and swallows the prey whole. The boa uses its muscles to move its prey down the length of its body to the stomach, where the unlucky varmint is digested over the next four to six days.

Boa constrictors mostly consume various medium-sized rodents, lizards, and birds. They have also been known to chow down on even larger prey, including monkeys, wild pigs, and ocelots. Regardless of what’s on the menu, how do the snakes still manage to breathe as they crush an animal to death, since that constriction also uncomfortably squeezes the boas’ own ribs? Unlike mammals (including humans), boa constrictors don’t have a separate diaphragm. They rely entirely on the motion of their ribs to breathe.

Biologists at Brown University and Dickinson College conducted a series of experiments to find out more, and they described their results in a new paper published in the Journal of Experimental Biology. Boa constrictors, they discovered, have a remarkable ability to selectively use different sections of their rib cage for breathing during constriction. The reptiles essentially using the far end of the lungs as a bellows to pull in air whenever ribs closer to the head are obstructed. Whenever the ribs closest to the head are obstructed, the lungs essentially serve as a bellows to pull in air so the snake can still breathe.

Read 10 remaining paragraphs | Comments



Source: Ars Technica – This is why boa constrictors can breathe while squeezing the life out of prey

Justice Department indicts four Russian government workers in energy sector hacks

The US Justice Department today announced indictments against four Russian government employees, who it alleges attempted a hacking campaign of the global energy sector that spanned six years and devices in roughly 135 countries. The two indictments were filed under seal last summer, and are finally being disclosed to the public.

The DOJ’s decision to release the documents may be a way to raise public awareness of the increased threat these kinds of hacks pose to US critical infrastructure in the wake of Russia’s invasion of Ukraine. State-sponsored hackers have targeted energy, nuclear, water and critical manufacturing companies for years, aiming to steal information on their control systems. Cybersecurity officials noticed a spike in Russian hacking activity in the US in recent weeks.

“Russian state-sponsored hackers pose a serious and persistent threat to critical infrastructure both in the United States and around the world,” said Deputy Attorney General Lisa O. Monaco in a statement. “Although the criminal charges unsealed today reflect past activity, they make crystal clear the urgent ongoing need for American businesses to harden their defenses and remain vigilant.

The indictments allege that two separate campaigns occurred between 2012 and 2018. The first one, filed in June 2021, involves Evgeny Viktorovich Gladkikh, a computer programmer at the Russian Ministry of Defense. It alleges that Gladkik and a team of co-conspirators were members of the Triton malware hacking group, which launched a failed campaign to bomb a Saudi petrochemical plant in 2017. As TechCrunchnoted, the Saudi plant would have been completely decimated if not for a bug in the code. In 2018, the same group attempted to hack US power plants but failed.

The second indictment charges three hackers who work for Russia’s intelligence agency, the Federal Security Service (FSB), as being the members of the hacking group Dragonfly, which coordinated multiple attacks on nuclear power plants, energy companies, and other critical infrastructure. It alleges that the three men, Pavel Aleksandrovich Akulov, Mikhail Mikhailovich Gavrilov and Marat Valeryevich Tyukov engaged in multiple computer intrusions between 2012 and 2017. The DOJ estimates that the three hackers were able to install malware on more than 17,000 unique devices in the US and abroad.

A second phase known as Dragonfly 2.0, which occurred between 2014 and 2017, targeted more than 3,300 users across 500 different energy companies in the US and abroad. According to the DOJ, the conspirators were looking to access the software and hardware in power plants that would allow the Russian government to trigger a shutdown.

The US government is still looking for the three FSB hackers. The State Department today announced a $10 million award for any information on their whereabouts. However, as the Washington Postnotes, the US and Russia do not have an extradition treaty, so the likeliness of any of the alleged hackers being brought to trial by these indictments is slim.



Source: Engadget – Justice Department indicts four Russian government workers in energy sector hacks

Paltrow’s ex-CCO calls Goop wellness culture “toxic” while touting new cleanse

Screenshot from Netflix series the goop lab with Gwyneth Paltrow.

Enlarge / Paltrow and Loehnen sit in Goop’s headquarters for an interview. (credit: Netflix)

A former high-profile executive at Gwyneth Paltrow’s lifestyle and wellness brand, Goop, has publicly denounced the brand’s “wellness culture” as “toxic”—but only for the purpose of promoting a different wellness brands’ products.

In an Instagram post Tuesday, Goop’s former chief content officer, Elise Loehnen, said that when she left the company in October of 2020 she vowed to never again do another cleanse. “I needed to break a tendency to be critical and punishing. To chastise myself. All of it. I stopped weighing myself completely,” she wrote alongside a brief video.

Generally, cleanses are gimmicky, short-term diets that require adherents to follow restrictive regimens in a misguided effort to “reset” their body and/or clear out toxic material that has allegedly accumulated in the recesses of their innards somehow. All of this is necessary, of course, to rectify a person’s current diet and lifestyle choices, which are most certainly noxious and deplorable.

Read 5 remaining paragraphs | Comments



Source: Ars Technica – Paltrow’s ex-CCO calls Goop wellness culture “toxic” while touting new cleanse

Complaints Mount After GitHub Launches New Algorithmic Feed

GitHub has introduced a new feed into the dashboard of users and it doesn’t appear to have gone down well with the code shack’s regulars. The Register reports: As soon as the new feed arrived, replete with all kinds of exciting suggestions for developers to look at, the complaints began rolling in as users worried the recommendations were turning GitHub into something distressingly like a social media platform. “I do not need to see recommendations, nor activity of people I don’t follow,” said one user. “Don’t fix what’s not broken.” Others were blunter, stating: “I don’t want algorithmic feed” and requesting a feed on stuff that actually mattered â” issues, releases, PRs and so on. GitHub pushed out a new beta version of its Home Feed earlier this week, with the avowed intention of developers reaching a wider audience and building communities. The plan is to make discovery easier and help users “find new repositories or users to follow based on your interests.”

As if to demonstrate the levels of discontent around GitHub’s new feature, a Chrome extension quickly showed up to disable the social feed by removing the “For You” section on the GitHub dashboard. Not all users were upset by the appearance of the new feed, and GitHub staff popped up to promise that there would be an option to make one’s profile private and opt out of pretty much everything via a single setting. It will, however, take until late April before this option is likely to appear, they said. Which prompted the obvious question: “Why is this opt-out instead of opt-in?”

Read more of this story at Slashdot.



Source: Slashdot – Complaints Mount After GitHub Launches New Algorithmic Feed

Horn: Racing against the clock

Jann Horn describes
in great detail
the process he went through to exploit a tiny race
window in the kernel.

Luckily for us, the race window contains the first few memory
accesses to the struct file; therefore, by making sure that the
struct file is not present in the fastest CPU caches, we can widen
the race window by as much time as the memory accesses take. The
standard way to do this is to use an eviction pattern / eviction
set; but instead we can also make the cache line dirty on another
core.



Source: LWN.net – Horn: Racing against the clock

Moira MacTaggert Is Doing Her Damndest to Make Sure the X-Men Always Lose

Wolverine has been a very important part of the X Lives and X Deaths of Wolverine event—after all, he is Wolverine, and he’s in the title of both books—but the post-Inferno story explored in Deaths has explicitly not made him the focal character. Instead, that side of the duology has seen one of the most important…

Read more…



Source: Gizmodo – Moira MacTaggert Is Doing Her Damndest to Make Sure the X-Men Always Lose

New Activision Blizzard Lawsuit Alleges Sexual Harassment, Retaliation Endured By Woman For Years

A new lawsuit against Call of Duty publisher Activision Blizzard by a current employee raises fresh allegations of sexual harassment at the publisher, this time focused on leaders in Blizzard’s IT department. According to the lawsuit, the current employee was repeatedly subjected to unwanted advances, touching, and…

Read more…



Source: Kotaku – New Activision Blizzard Lawsuit Alleges Sexual Harassment, Retaliation Endured By Woman For Years