Volkswagen CEO: Dieselgate caused by Lynndie England "rogue engineers"; execs blameless


Remember Lynndie England, the 21-year-old low-ranking Army Specialist who, along with ten other low-ranking Army personnel, was determined to be responsible for years of systematic torture in Iraq's notorious Abu Ghraib prison, thus letting the entire Army chain of command off the hook for any wrongdoing in one of the worst scandals of the unbelievably scandalous Iraq War? Read the rest

It's been ten years since Sony Music infected the world with its rootkit


Oct 31 2005: Security researcher Mark Russinovich blows the whistle on Sony-BMG, whose latest "audio CDs" were actually multi-session data-discs, deliberately designed to covertly infect Windows computers when inserted into their optical drives. Read the rest

Algorithmic guilt: defendants must be able to inspect source code in forensic devices


Some day, you may be the defendant in a criminal trial that turns on whether the software in a forensic device reached a reliable conclusion about a DNA test or other piece of evidence. Wouldn't you like to have your own experts check the source code on that device? Read the rest

Landmark patent case will determine whether you can ever truly own a device again


Former IBM division Lexmark (which, a decade ago, lost a key copyright case that tried to ban ink-toner refilling) is headed to court in a patent case called Lexmark v. Impression, where it argues that patent law gives it the right to restrict your use of your property after you buy it. Read the rest

Internet of Things That Lie: the future of regulation is demonology


Volkswagen's cars didn't have a fault in their diesel motors -- they were designed to lie to regulators, and that matters, because regulation is based on the idea that people lie, but things tell the truth. Read the rest

Dieselgate for TVs: Samsung accused of programming TVs to cheat energy efficiency ratings


The European Commission is probing whether Samsung televisions' sensed when they were being tested for energy efficiency and changed their power consumption to get better ratings than they deserved. Read the rest

Newly disclosed Android bugs affect all devices


The newly released bugs are part of the Stagefright family of vulnerabilities, disclosed by Zimperium Zlabs. Read the rest

Theoretical "auto-brothel" attack on mechanics' computers could infect millions of cars


Companies like GM have engineered their cars so that it's a felony to make independent diagnostic tools for them, or to investigate the official diagnostic tools rented to mechanics in exchange for a promise to only buy GM's hyper-inflated replacement parts. Read the rest

Not just emissions: manufacturers' dirty tricks fake everything about cars


VW's diesel firmware detected when it was undergoing emissions testing and changed the engine tuning to produce 1/40 of its normal toxic output, fooling regulators. But though they're the only ones who've been caught using firmware to game emissions testing, they're not the only ones with something to hide. Read the rest

MIT and EFF's Freedom to Innovate Summit: defending students' and hackers' right to tinker


The Oct 10/11 event is run jointly by the Electronic Frontier Foundation, the Center for Civic Media at MIT and will be hosted at the MIT Media Lab. Read the rest

VW's car DRM let it get away with cheating on its diesel emissions testing


The EPA has accused Volkswagen of rigging its software to cheat the agency's diesel emissions standards so that its cars could be on the road while spewing 40 times the legal limit for diesel emissions. Read the rest

Empty Epson "professional" inkjet cartridges are still 20% full

If you've wondered why it matters that the Internet of Things is being born with the inkjet printer business model, here's why. Read the rest

Well I'll be drmed

Jargon for the XXIth C. [via Sarah Jeong] Read the rest

Insurance monitoring dashboard devices used by Uber let hackers "cut your brakes" over wireless

UCSD computer scientist Stefan Savage and colleagues will present their work at Usenix Security: they were able to disable the brakes on a 2013 Corvette by breaking into a Mobile Devices/Metromile Pulse dongle, used by insurance companies to monitor driving in exchange for discounts on coverage. Read the rest

Come see me at Defcon!

I'm speaking at Defcon this weekend in Las Vegas: my talk, "Fighting Back in the War on General Purpose Computers," is tomorrow (Friday) at 11AM in track 3, followed immediately by a signing at the No Starch Press table in the Champagne Ballroom at the Paris hotel. Read the rest

Open "Chromecast killer" committed suicide-by-DRM

The Matchstick, a Firefox-OS-based Chromecast-style device, kickstarted on the promise of bringing open, user-rights-respecting video to our homes -- then they decided to add DRM. Read the rest

Self-aiming sniper rifle can be pwned over the Internet

The $13,000 Trackingpoint sniper rifle is vulnerable to wifi-based attacks that allow your adversary to redirect bullets to new targets of their choosing. Read the rest

More posts