The D in Systemd stands for 'Dammmmit!' A nasty DHCPv6 packet can pwn a vulnerable Linux box
The flaw therefore puts Systemd-powered Linux computers – specifically those using systemd-networkd – at risk of remote hijacking: maliciously crafted DHCPv6 packets can try to exploit the programming cockup and arbitrarily change parts of memory in vulnerable systems, leading to potential code execution. This code could install malware, spyware, and other nasties, if successful.
Though a number of major admins have in recent years adopted and championed it as the replacement for the old Init era, others within the Linux world seem to still be less than impressed with Systemd and Poettering's occasionally controversial management of the tool.
20 top lawyers were beaten by legal AI. Here are their surprising responses
The study, carried out with leading legal academics and experts, saw the LawGeex AI achieve an average 94% accuracy rate, higher than the lawyers who achieved an average rate of 85%. It took the lawyers an average of 92 minutes to complete the NDA issue spotting, compared to 26 seconds for the LawGeex AI.
Those who took on the AI are 20 US-trained corporate lawyers with legal and contract expertise with experience at companies including Goldman Sachs and Cisco, and global law firms including Alston & Bird and K&L Gates.
Facebook fined £500,000 for Cambridge Analytica scandal
The fine is the maximum allowed under the old data protection rules that applied before GDPR took effect in May.
"Facebook also failed to keep the personal information secure because it failed to make suitable checks on apps and developers using its platform."
Sony goes back on 11-year-old promise to keep Warhawk servers up
If you read Ars Technica (or simply play online games regularly), you're probably accustomed to game makers shutting down online gameplay servers at will, often with little-to-no notice.
Lorenzo B. signed the petition and described himself as "a player of 10 years who has spent money on the game and spent money on all the added extra maps, too. It is important to me to get what I paid for, and what I paid for is the Warhawk game that is now offline on the PlayStation network."
F***=off, Google tells its staff: Any mention of nookie now banned from internal files, URLs
Late last week, a Google programmer claimed that their bosses had suddenly banned swear words from internal documents, and even shortened URLs to files were being blocked.
"They grep all the links for swear words and just delete them. Apparently one person who used the 'gimme a random string' option had his link deleted because they randomly got a swear word.
Google has form as a censor of bad language: the Chocolate Factory's speech-to-text translation engine refuses to print swear words without asterisks. Microsoft, too, decided to take a line on this with some of its platforms.
GitHub.com freezes up as techies race to fix dead data storage gear
From about 4pm US West Coast time on Sunday (2300 UTC), the website has been stuttering and spluttering. Specifically, the site is still up and serving pages – it's just intermittently serving out-of-date files, and ignoring submitted Gists, bug reports, pushes, and posts.
Right now, we're seeing scores of complaints about the site being down on Twitter – including quite a few upset coders in Japan, where at time of writing is late Monday morning. Nice start to the week.
As End of Life Nears, More Than Half of Websites Still Use PHP V5
Despite end-of-life in the horizon, a new report by Web Technology Surveys found that PHP version 5 is still used by 61.8 percent of all server-side programming language websites. And, of those using version 5, 41.5 percent of websites are using version 5.6, the report said.
What this means is, security patches, upgrades and bug fixes will cease for end-of-life technology – putting that percentage of PHP-based websites using PHP 7.0 and below at risk.
Vivaldi 2.0 review: The modern Web browser does not have to be so bland
Vivaldi has recently hit the 2.0 milestone. You can download the latest version from the Vivaldi site or install it through the app store or package manager of your OS. And at first blush, perhaps the most shocking thing about this release is that it's merely 2.0. This release is a throwback to an earlier time when version numbers had meaning, and a major number increment meant that something major had happened.
You like HTTPS. We like HTTPS. Except when a quirk of TLS can smash someone's web privacy
The privacy risks associated with web tracking, however, persist, and now it appears there's yet another mechanism for following people online. Blame researchers from the University of Hamburg in Germany for the latest expansion of the privacy attack surface.
They note that Facebook and Google, due to their behavioral ad businesses, specify longer session resumption ticket lifetimes than most. Facebook's lifetime hint setting of 48 hours is higher than 99.99 per cent of all session ticket hints found. Google's 28 hour value exceeds 97.13 per cent of Alexa's top million websites.
Remote South Atlantic Islands Are Flooded With Plastic
Now, reports Marlene Cimons at Nexus Media, that pollution is getting even worse. A new study in the journal Current Biology shows that plastic trash on the beaches and in the ocean has increased tenfold in the just the last decade and a hundredfold over the last three decades.
“Three decades ago these islands, which are some of the most remote on the planet, were near-pristine,” lead author David Barnes of the British Antarctic Survey says in a statement. “Plastic waste has increased a hundredfold in that time, it is now so common it reaches the seabed. We found it in plankton, throughout the food chain and up to top predators such as seabirds.”