Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious attacks, typically require hackers to jump through all kinds of hoops to bypass the measures. But what if remote code execution were as simple as being within Bluetooth range of a speaker connected to the targeted device?

It turns out it can, at least when the speaker is a Sound Blaster Katana V2X sold by Singapore-based Creative Technologies. The speaker, which sells for $280 , is widely acclaimed with numerous reviews showering praise on its sound and performance.

A PC-pwning proxy

Researcher Rasmus Moorats stumbled on the hack by accident, after he purchased a Katana V2X, a soundbar that connects to PCs, Macs, and Linux devices over USB or Bluetooth. Moorats was curious if he could create a Linux tool that communicated with his speaker. He discovered he could do so through CTP, a proprietary mechanism he guesses is short for Creative Transport Protocol.

Read full article

Comments

Just over a year ago, the Trump Administration issued an executive order meant to accelerate the development of nuclear power in the US. While an entire startup ecosystem has developed around the use of different—and typically smaller—reactor designs, only one of them has been fully licensed so far, and there are no plans to actually build any instances of that design.

The executive order directed the Department of Energy to have three different reactor designs reach criticality in a bit over a year. On Thursday, a startup called Antares announced that a test reactor it had placed at the Idaho National Laboratory had reached criticality, making it the first new design to cross this threshold. Criticality means that the nuclear reactions inside the hardware had become self sustaining; it does not mean the reactor had started to generate power.

Antares is one of a number of companies that is basing its design on a new fuel system called TRISO that takes some of the complexity and safety out of the reactor design and places them in the fuel design. The fuel design is based on tiny pellets with a uranium oxide core. The pellets are surrounded by several layers of carbon that can moderate the energy of both the neutrons and lighter nuclei that are released by fission reactions. All of that is encased in a hard ceramic shell that's designed to withstand the highest temperatures that can be produced by the encased uranium.

Read full article

Comments

Five of the seven crew members on the International Space Station briefly sought refuge inside a SpaceX return capsule Friday morning as two Russian cosmonauts worked on an air leak on the other end of the complex.

NASA ordered US astronauts Jessica Meir and Jack Hathaway, French astronaut Sophie Adenot, and Russian cosmonaut Andrey Fedyaev into SpaceX's Crew Dragon Freedom spacecraft around 9 am EST (14:00 UTC) on Friday. The foursome launched aboard the SpaceX crew capsule on the Crew-12 mission in February, and the ship serves as their lifeboat until the crew's scheduled return to Earth in September.

NASA astronaut Chris Williams, who flew to the station in a Russian Soyuz ferry ship, joined the Crew-12 astronauts inside the Dragon spacecraft.

Read full article

Comments

SpaceX has requested unusually swift entry into several leading stock market indexes as a condition of its historic stock market debut. But the S&P 500 stock market index representing many of the largest profitable US companies has surprised market analysts by refusing to bend the rules for Elon Musk’s space and AI company.

The June 4 decision by S&P Dow Jones Indices —the company that creates and manages stock market indexes such as the S&P 500—means that SpaceX will not gain accelerated access to potentially billions more dollars through passive investment funds that automatically purchase shares of S&P 500 companies. An exception for SpaceX could have also allowed leading AI companies such as OpenAI and Anthropic to gain entry not long after their own expected initial public offerings (IPOs). That possibility has now been shuttered.

The news will likely come as a relief to people concerned about passive investor money and people’s retirement savings plans having greater exposure to the market risks associated with SpaceX’s big bet on AI and speculative orbital data center plans . AI companies are generally facing more challenges in funding and building expensive AI data centers , even as they shift more of the subsidized costs of running AI services onto shocked customers through usage-based pricing .

Read full article

Comments

One of the world's biggest data center projects was designed to be nearly three times the size of Manhattan, stretching across multiple Utah sites. But intense local backlash in Box Elder County has now pushed the developer to cut the project plans in half before construction starts.

Residents' top concern was the Stratos data center project draining local waters, and they were willing to pay to protect them, most especially the vulnerable Great Salt Lake. Many locals paid a $15 fee to register comments to block the transfer of 1,900 acre-feet of water from a ranch to the hyperscale data center. Other concerns include electricity bills rising and potential risks to air quality, local wildlife, and land.

Venture capitalist Kevin O'Leary, chair of O'Leary Digital and Shark Tank investor, is behind the construction of the project. He told a local ABC affiliate that he regrets not working with state officials to be more transparent about the project from the beginning.

Read full article

Comments

My hopes were high for the new Prime Video superhero series Spider-Noir , based on all those amazing trailers . But I also had some trepidation. Could the actual series live up to the hype?

As it turns out, yes, it could. Spider-Noir is a triumph, fusing fast-paced storytelling, compelling characters, gorgeous cinematography and production design, and whip-smart dialogue into a hugely entertaining, loving homage to a magical bygone era.

(Some spoilers below, but no major reveals.)

Read full article

Comments

On Thursday, President Donald Trump announced his administration's latest attempt to prop up the US coal industry during an incoherent press event that randomly oscillated between energy issues and Trump's fixation with building and renovating monuments in DC. The energy portion of the events was also frequently disconnected from reality.

"Today we're taking historic action to bring down the price of energy and the cost of living for all Americans with the power of clean, beautiful coal," said Trump, apparently unaware that coal is one of the most expensive means of generating electricity in the US.

With wind and solar power getting cheaper, coal has become the second-most expensive way of producing electricity, trailing only the cost of building a new nuclear plant. As a result, no new coal plants have been completed in over a decade, and coal has gone from powering over half the electrical grid to producing only about 15 percent of the nation's electricity. That's before the indirect costs of coal use are considered. It produces the most greenhouse gas emissions per unit of energy, releases dangerous particulates and chemicals into the atmosphere, and leaves behind ash that has high levels of toxic metals.

Read full article

Comments

Smartwatches can track your health stats, but they also do a lot of other things you might not always want or need. The $100 Fitbit Air tracker ditches the screens that have become common on people's wrists, leaving behind a tiny puck of health sensors you can often forget you're wearing. You will not, however, forget that Google's new health platform is built around AI.

The Air has no speaker, and there's only one LED on the side to indicate battery level. You can double-tap the tracker to check the level, and that's about the end of on-device features. The vibration motor is only for alarms—it can't sync with notifications on your phone. That makes sense, given there is no screen to tell you what that buzz was all about.

The Fitbit Air doesn't have a display or buttons—just a small LED on the side for battery status. Credit: Ryan Whitwam

The stock Performance Band is simple, consisting of a smooth polyester yarn with small velcro pads and a metal loop. It's durable but does seem to absorb a bit of moisture. For swimming or heavy workouts, you'll probably want the silicone active band. This one hides the Air puck a bit more effectively, and it looks good in a sporty way.

Read full article

Comments

A couple of weeks ago, we learned from Audi CEO Gernot Döllner that the automaker was likely working on a replacement for its R8 supercar . We now know what it will probably look like, as the brand unveiled the Nuvolari concept in the South of France yesterday on the eve of the Monaco Grand Prix.

The Nuvolari's styling is a departure from Audi's current design language, though it remains consistent with the Concept C , a more compact coupe that will use the same underpinnings as Porsche's electric Boxster. Similarly, the Nuvolari leverages another of Audi's stablemates within the Volkswagen Group empire: Lamborghini. As with both generations of R8, the Nuvolari uses Lamborghini's smaller mid-engined platform.

In the past, that meant a wonderful-sounding naturally aspirated V10 lived behind the cockpit within the aluminum space frame chassis. But the Huracán is gone now, and with it, that engine. Now it's time for the Temerario , which amazed our reviewer when we tested one in February due to the accessibility of its performance and the advances it made over its predecessor. The Nuvolari may even eclipse the Lamborghini for performance; with 987 hp (736 kW), it equals the Bugatti Veyron's output.

Read full article

Comments