Ars Technica

Enlarge (credit: Getty Images)

Password-manager LastPass users were recently targeted by a convincing phishing campaign that used a combination of email, SMS, and voice calls to trick targets into divulging their master passwords, company officials said.

The attackers used an advanced phishing-as-a-service kit discovered in February by researchers from mobile security firm Lookout. Dubbed CryptoChameleon for its focus on cryptocurrency accounts, the kit provides all the resources needed to trick even relatively savvy people into believing the communications are legitimate. Elements include high-quality URLs, a counterfeit single sign-on page for the service the target is using, and everything needed to make voice calls or send emails or texts in real time as targets are visiting a fake site. The end-to-end service can also bypass multi-factor authentication in the event a target is using the protection.

Lookout said that LastPass was one of dozens of sensitive services or sites CryptoChameleon was configured to spoof. Others targeted included the Federal Communications Commission, Coinbase and other cryptocurrency exchanges, and email, password management, and single sign-on services including Okta, iCloud, and Outlook. When Lookout researchers accessed a database one CryptoChameleon subscriber used, they found that a high percentage of the contents collected in the scams appeared to be legitimate email addresses, passwords, one-time-password tokens, password reset URLs, and photos of driver’s licenses. Typically, such databases are filled with junk entries.

Read 11 remaining paragraphs | Comments

Enlarge / Seeing power armor in the Fallout series inspired many players to jump back into their own suits (and start stockpiling fusion cores). (credit: Amazon/MGM Studios)

Long-time Fallout fans are used to long waits between titles, and, depending on their preferences, inconsistent results. But when Amazon's Fallout series showed up on Prime and absolutely nailed it, it spurred a lot of players to crack open their libraries and commence some post-apocalyptic replaying. And maybe first-time playing, too.

Fallout 76, the online multiplayer title that is the most recent full release, saw perhaps the biggest delta. The game hit its all-time peak of 43,887 simultaneous players on Wednesday, April 17, according to SteamCharts, roughly one week after the Amazon series' debut. For the year leading up to that peak, Fallout 76 had hovered around 7,000-10,000 players through most of 2024, and then jumped after the series' debut. Of course, that number only counts PC players, and only those on Steam; the game, which launched simultaneously on consoles, and is available on Microsoft's Game Pass, likely has many more players.

SteamDB, another Steam stats tracker, suggested on X (formerly Twitter) that the Fallout game series as a whole had more than doubled its concurrent player count by April 14.

Read 4 remaining paragraphs | Comments

Enlarge (credit: PM Images | DigitalVision)

On Wednesday, Colorado expanded the scope of its privacy law initially designed to protect biometric data like fingerprints or face images to become first in the nation to also shield sensitive neural data.

That could stop companies from hoarding brain activity data without residents realizing the risks. The New York Times reported that neural data is increasingly being collected and sold nationwide. And after a market analysis showed that investments in neurotechnology leapt by 60 percent globally from 2019 to 2020—and were valued at $30 billion in 2021—Big Tech companies have significantly intensified plans to develop their own products to rake in potentially billions.

For instance, in 2023, Meta demoed a wristband with a neural interface used to control its smart glasses and unveiled an AI system that could be used to decode the mind. In January, Elon Musk announced that Neuralink implanted its first brain chip in a human that can be used to control a device with their thoughts. And just last month, Apple Insider reported that "Apple is working on technology that could turn the Apple Vision Pro into a brainwave reader to improve mental health, assist with training and workouts, and help with mindfulness."

Read 18 remaining paragraphs | Comments

Enlarge / The Chinese automaker BYD has every other electric vehicle maker worried. (credit: John Keeble/Getty Images)

The United States has won an important battle in its war to keep low-cost Chinese electric vehicles from American car buyers. Today, Reuters reports that the Mexican federal government has responded to pressure from the US and will not offer incentives to Chinese automakers, like BYD, that are looking to establish North American manufacturing operations.

BYD last met with Mexican officials in January, according to Reuters, where it learned that Chinese automakers would not be offered tax breaks or cheap land to build factories.

Until now, Mexico has offered foreign automakers generous subsidies that have made the country a cheap place to build cars. Added to that, the United States-Mexico-Canada Free Trade Agreement also makes Mexico desirable for ease of access to the US market, and Chinese automotive part suppliers have flocked to the country in recent years.

Read 4 remaining paragraphs | Comments

Enlarge / That is in no way what the Z button looks like or where it goes...

Apple's decision earlier this month to open the iOS App Store to generic retro game emulators is already bearing fruit. Delta launched Wednesday as one of the first officially approved iOS apps to emulate Nintendo consoles from the NES through the N64 and the Game Boy through the Nintendo DS (though unofficial options have snuck through in the past).

Delta is an outgrowth of developer Riley Testut's earlier sideloadable GBA4iOS project, which recently had its own unauthorized clone removed from the App Store. Before Wednesday, iOS users could load Delta onto their devices only through AltStore, an iOS marketplace that used a Developer Mode workaround to sideload apps from a self-hosted server. European users can now get that AltStore directly on their iOS devices (for a small 1.50 euro/year fee), while North American users can simply download Delta for free from the iOS App Store, with no ads or user tracking to boot.

All that history means Delta is far from a slapdash app quickly thrown together to take advantage of Apple's new openness to emulation. The app is obviously built with iOS in mind and already integrates some useful features designed for the mobile ecosystem. While there are some updates we'd like to see in the future, this represents a good starting point for where Apple-approved game emulation can go on iOS.

Read 12 remaining paragraphs | Comments

Enlarge (credit: Sean Gallup | Getty Images)

Google CEO Sundar Pichai promised more layoffs at Google this year, and the company is delivering. Business Insider was the first to report the latest cuts are to "several teams" in Google's real estate and finance departments. The report adds: "One current employee said the changes were 'pretty large-scale' and that some roles are being moved abroad."

CNBC has a copy of the memo that Google and Alphabet CFO Ruth Porat sent out to employees about the layoffs. Porat blames AI for the layoffs, saying, “The tech sector is in the midst of a tremendous platform shift with Al. As a company, this means we have the opportunity to make more helpful products for billions of users and provide faster solutions to our customers, but it also means we collectively have to make tough decisions, including how and where we work to align with our highest priority areas.” It's not clear how or if AI is actually taking over roles in real estate and finance.

Google has been making cuts across a ton of departments since 2022, when Pichai declared Google was not productive enough. There was a big set of 12,000 layoffs in January 2023, and an almost uncountable number of smaller cuts since then. Google's cuts are aligned with a massive wave of layoffs across the tech industry.

Read 1 remaining paragraphs | Comments

Enlarge (credit: Sergey Krasovskiy)

Blue whales have been considered the largest creatures to ever live on Earth. With a maximum length of nearly 30 meters and weighing nearly 200 tons, they are the all-time undisputed heavyweight champions of the animal kingdom.

Now, digging on a beach in Somerset, UK, a team of British paleontologists found the remains of an ichthyosaur, a marine reptile that could give the whales some competition. “It is quite remarkable to think that gigantic, blue-whale-sized ichthyosaurs were swimming in the oceans around what was the UK during the Triassic Period,” said Dr Dean Lomax, a paleontologist at the University of Manchester who led the study.

Ichthyosaurs were found in the seas through much of the Mesozoic era, appearing as early as 250 million years ago. They had four limbs that looked like paddles, vertical tail fins that extended downward in most species, and generally looked like large, reptilian dolphins with elongated narrow jaws lined up with teeth. And some of them were really huge. The largest ichthyosaur skeleton so far was found in British Columbia, Canada, measured 21 meters, and belonged to a particularly massive ichthyosaur called Shonisaurus sikanniensis. But it seems they could get even larger than that.

Read 10 remaining paragraphs | Comments

Enlarge / The Mercedes-Benz E-Class is the brand's workhorse, covering millions of km a year ferrying German taxi passengers around. (credit: Peter Nelson)

Mercedes-Benz's E Class badge possesses a lot of canon. When asked to picture a '90s-or-newer Mercedes full-size sedan, it's hard not to conjure up mental snapshots of W124-and-up generations schlepping around well-heeled suburban communities. I bet a lot of folks also picture the taxi lineup outside any German train station, too.

Well, at least I do. But I'm not talking about envisioning surly Munich cabbies but rather the faithful four-doors they putter around in. A lot of them are E Classes, which further proves that the cars have always been quintessential Mercedes luxury workhorses.

The brand-new 2024 E 350 4Matic, with its thrifty turbo-four powerplant, might have the most direct lineage in the US market to those cream-colored rickety diesels. It's easy on fuel for its size and ready to soak up all the miles across both traffic-ridden cityscapes and high-speed stretches of highway. And with its expansive suite of tech and mild hybrid propulsion, it's an overall great next chapter for the badge.

Read 14 remaining paragraphs | Comments

(credit: Getty Images)

Last October, I received an email with a hell of an opening line: “I fired a nuke at the US Copyright Office this morning.”

The message was from Elisa Shupe, a 60-year-old retired US Army veteran who had just filed a copyright registration for a novel she’d recently self-published. She’d used OpenAI's ChatGPT extensively while writing the book. Her application was an attempt to compel the US Copyright Office to overturn its policy on work made with AI, which generally requires would-be copyright holders to exclude machine-generated elements.

Read 26 remaining paragraphs | Comments

Enlarge / Is that sooty rocket lifting off with the CRS-3 mission in 2014 a reused booster? No, it is not. (credit: SpaceX)

Ten years ago today, when a Falcon 9 rocket took off from Florida, something strange happened. Dramatically, as the rocket lifted off, a fountain of dirty water splashed upward alongside the vehicle, coating the rocket in grime.

Following the ultimately successful liftoff of this third cargo Dragon mission to the International Space Station, SpaceX founder Elon Musk was asked about the incident during a news conference. He offered a fairly generic answer without going into the details.

"We sprayed a bunch of water all around the pad," Musk said. "Essentially what happened is we splashed dirty water on ourselves. So it’s a little embarrassing, but no harm done."

Read 19 remaining paragraphs | Comments

Enlarge / Technicians inside United Launch Alliance's Vertical Integration Facility connect Boeing's Starliner spacecraft to the top of its Atlas V rocket Tuesday. (credit: United Launch Alliance)

Ground teams on Florida's Space Coast hoisted Boeing's Starliner spacecraft atop its United Launch Alliance Atlas V rocket this week, putting all the pieces in place for liftoff next month with two veteran NASA astronauts on a test flight to the International Space Station.

This will be the first time astronauts fly on Boeing's Starliner crew capsule, following two test flights without crew members in 2019 and 2022. The Starliner Crew Flight Test (CFT) next month will wrap up a decade and a half of development and, if all goes well, will pave the way for operational Starliner missions to ferry crews to and from the space station.

Starliner is running years behind schedule and over budget. SpaceX's Crew Dragon spacecraft has flown all of NASA's crew rotation missions to the station since its first astronaut flight in 2020. But NASA wants to get Boeing's spacecraft up and running to have a backup to SpaceX. It would then alternate between Starliner and Crew Dragon for six-month expeditions to the station beginning next year.

Read 19 remaining paragraphs | Comments

Enlarge / Here it is: two virtual Mac displays in Vision Pro. (credit: Samuel Axon)

Apple's Vision Pro headset holds the promise to be a powerful extension of your Mac workflow, but the Mac integration it shipped with is just neat, not a big step forward. Now, an app by established independent developers Jordi Bruin, Mathijs Kadijk, and Tom Lokhorst aims to fix that.

Called Splitscreen, it enables you to utilize two virtual displays at once while working with your Mac and wearing Vision Pro. By contrast, Apple's default implementation only supports mirroring a single Mac display to a resizable virtual one.

Further, the developers are working on achieving what I said I'd like to see from Apple when I wrote up my first impressions of the headset: the ability to move individual Mac windows around your space freely like visionOS apps when your Mac and Vision Pro are connected to one another.

Read 22 remaining paragraphs | Comments

Enlarge / An AI-generated image from DALL-E 2 created with the prompt "A painting by Grant Wood of an astronaut couple, american gothic style." (credit: AI Pictures That Go Hard / X)

When OpenAI's DALL-E 2 debuted on April 6, 2022, the idea that a computer could create relatively photorealistic images on demand based on just text descriptions caught a lot of people off guard. The launch began an innovative and tumultuous period in AI history, marked by a sense of wonder and a polarizing ethical debate that reverberates in the AI space to this day.

Last week, OpenAI turned off the ability for new customers to purchase generation credits for the web version of DALL-E 2, effectively killing it. From a technological point of view, it's not too surprising that OpenAI recently began winding down support for the service. The 2-year-old image generation model was groundbreaking for its time, but it has since been surpassed by DALL-E 3's higher level of detail, and OpenAI has recently begun rolling out DALL-E 3 editing capabilities.

But for a tight-knit group of artists and tech enthusiasts who were there at the start of DALL-E 2, the service's sunset marks the bittersweet end of a period where AI technology briefly felt like a magical portal to boundless creativity. "The arrival of DALL-E 2 was truly mind-blowing," illustrator Douglas Bonneville told Ars in an interview. "There was an exhilarating sense of unlimited freedom in those first days that we all suspected AI was going to unleash. It felt like a liberation from something into something else, but it was never clear exactly what."

Read 42 remaining paragraphs | Comments

Enlarge / A rat looks for food while on a subway platform at the Columbus Circle - 59th Street station on May 8, 2023, in New York City. (credit: Getty | Gary Hershorn)

A life-threatening bacterial infection typically spread through rat urine sickened a record number of people in New York City last year—and this year looks on track for another all-time high, the NYC Department of Health and Mental Hygiene reports.

The infection is leptospirosis, which can cause a range of symptoms, including non-specific ones like fever, headache, chills, muscle aches, vomiting, diarrhea, and cough. But, if left untreated, can become severe, causing kidney failure, liver damage, jaundice, hemorrhage, bloody eyes (conjunctival suffusion), respiratory distress, and potentially death.

The bacteria that causes it—spirochete bacteria of the genus Leptospira—infect rats, which shed the bacteria in their urine. The germs jump to people through direct contact with open wounds or mucous membranes.

Read 7 remaining paragraphs | Comments

Enlarge (credit: da-kuk/Getty)

Kremlin-backed actors have stepped up efforts to interfere with the US presidential election by planting disinformation and false narratives on social media and fake news sites, analysts with Microsoft reported Wednesday.

The analysts have identified several unique influence-peddling groups affiliated with the Russian government seeking to influence the election outcome, with the objective in large part to reduce US support of Ukraine and sow domestic infighting. These groups have so far been less active during the current election cycle than they were during previous ones, likely because of a less contested primary season.

Over the past 45 days, the groups have seeded a growing number of social media posts and fake news articles that attempt to foment opposition to US support of Ukraine and stoke divisions over hot-button issues such as election fraud. The influence campaigns also promote questions about President Biden’s mental health and corrupt judges. In all, Microsoft has tracked scores of such operations in recent weeks.

Read 13 remaining paragraphs | Comments

Enlarge / The new, all-electric Atlas. (credit: Boston Dynamics)

The humanoid robotics market is starting to heat up, and the company that's been doing this the longest isn't going to sit by and watch. Boston Dynamics has a new humanoid robot that the company says represents a path to commercialization. It's the company's next-generation, all-electric "Atlas" robot.

While new Atlas and old Atlas share a name, they couldn't be more different when it comes to construction. The old Atlas—a research platform and viral sensation that could handle nearly any terrain, do backflips, and pick up heavy objects—was powered by a heavy, complicated hydraulics system. The new Atlas is all-electric and looks like it's a fraction of the size and weight of the hydraulic version. It also looks like a product, with covers around all the major components and consumer-friendly design touches like a giant status light in the head and a light-up power button that looks like it was ripped right from the Spot assembly line.

Hydraulic Atlas is being retired to make way for the all-electric version. The company posted one last goodbye video for the hydraulic model on its YouTube page, showing the history of the project. Atlas has done a lot of neat tricks over the years, but getting there has required a lot of learning—part of that is taking some absolutely gnarly slams, which are highlighted in the video. The video seemed to go out of its way to show just how cumbersome hydraulics can be. At one point, it looks like Atlas' foot completely breaks off, and hydraulic fluid gushes all over the floor. Other times, the robot just springs a leak, and a fine mist of high-pressure fluid sprays everywhere as the robot goes limp. The fluid has a red tinge to it, so with a little imagination, it can look pretty gory!

Read 12 remaining paragraphs | Comments

Enlarge (credit: Bill Oxford | iStock / Getty Images Plus)

The US AI Safety Institute—part of the National Institute of Standards and Technology (NIST)—has finally announced its leadership team after much speculation.

Appointed as head of AI safety is Paul Christiano, a former OpenAI researcher who pioneered a foundational AI safety technique called reinforcement learning from human feedback (RLHF), but is also known for predicting that "there's a 50 percent chance AI development could end in 'doom.'" While Christiano's research background is impressive, some fear that by appointing a so-called "AI doomer," NIST may be risking encouraging non-scientific thinking that many critics view as sheer speculation.

There have been rumors that NIST staffers oppose the hiring. A controversial VentureBeat report last month cited two anonymous sources claiming that, seemingly because of Christiano's so-called "AI doomer" views, NIST staffers were "revolting." Some staff members and scientists allegedly threatened to resign, VentureBeat reported, fearing "that Christiano’s association" with effective altruism and "longtermism could compromise the institute’s objectivity and integrity."

Read 34 remaining paragraphs | Comments

Enlarge (credit: Getty Images)

It's easy to get the impression that Discord chat messages are ephemeral, especially across different public servers, where lines fly upward at a near-unreadable pace. But someone claims to be catching and compiling that data and is offering packages that can track more than 600 million users across more than 14,000 servers.

Joseph Cox at 404 Media confirmed that Spy Pet, a service that sells access to a database of purportedly 3 billion Discord messages, offers data "credits" to customers who pay in Bitcoin, Ethereum, or other cryptocurrency. Searching individual users will reveal the servers that Spy Pet can track them across, a raw and exportable table of their messages, and connected accounts, such as GitHub. Ominously, Spy Pet lists more than 86,000 other servers in which it has "no bots," but "we know it exists."

• An example of Spy Pet's service from its website. Shown are a user's nicknames, connected accounts, banner image, server memberships, and messages across those servers tracked by Spy Pet. [credit: Spy Pet ]

As Cox notes, Discord doesn't make messages inside server channels, like blog posts or unlocked social media feeds, easy to publicly access and search. But many Discord users many not expect their messages, server memberships, bans, or other data to be grabbed by a bot, compiled, and sold to anybody wishing to pin them all on a particular user. 404 Media confirmed the service's function with multiple user examples. Private messages are not mentioned by Spy Pet and are presumably still secure.

Read 3 remaining paragraphs | Comments

Enlarge / Three female skeletons found in a Neolithic storage pit in France show signs of ritualistic human sacrifice. (credit: . Beeching/Ludes et al., 2024)

Archaeologists have discovered the remains of two women in a Neolithic tomb in France, with the positioning of the bodies suggesting they may have been ritualistically murdered by asphyxia or self-strangulation, according to a recent paper published in the journal Science Advances.

(WARNING: graphic descriptions below.)

France's Rhône Valley is home to several archaeological sites dating to the end of the Middle Neolithic period (between 4250 and 3600/3500 BCE in the region); the sites include various storage silos, broken grindstones, imported ceramics, animal remains (both from communal meals and sacrifices), and human remains deposited in sepulchral pits. Saint-Paul-Trois-Châteaux is one such site.

Read 8 remaining paragraphs | Comments

Enlarge (credit: Frame Studio)

Almost from the start, arguments about mitigating climate change have included an element of cost-benefit analysis: Would it cost more to move the world off fossil fuels than it would to simply try to adapt to a changing world? A strong consensus has built that the answer to the question is a clear no, capped off by a Nobel in Economics given to one of the people whose work was key to building that consensus.

While most academics may have considered the argument put to rest, it has enjoyed an extended life in the political sphere. Large unknowns remain about both the costs and benefits, which depend in part on the remaining uncertainties in climate science and in part on the assumptions baked into economic models.

In Wednesday's edition of Nature, a small team of researchers analyzed how local economies have responded to the last 40 years of warming and projected those effects forward to 2050. They find that we're already committed to warming that will see the growth of the global economy undercut by 20 percent. That places the cost of even a limited period of climate change at roughly six times the estimated price of putting the world on a path to limit the warming to 2° C.

Read 18 remaining paragraphs | Comments