Serious Linux sudo bug lets any user run commands as root – what you need to know

A security vulnerability has been discovered in the Linux sudo utility, which could allow any user to run commands as root.

Ordinarily, in order to execute a sudo (super user do) command, a user would either have to have been granted the relevant permissions, or would need to know the password for root. But in some – admittedly non-standard – configurations it is possible for users without these rights or knowledge to execute potentially dangerous commands as root.

While the consequences of this could be catastrophic, the good news is that the problem doesn’t affect most Linux users.

Although clearly an issue, in order to be vulnerable to this Sudo flaw, a system would have to be set up in a way that allows users to execute commands as any user other than root. While this scenario would imply that executing commands as root was explicitly forbidden, the flaw – which has been assigned CVE-2019-14287 – is such that it is incredibly easy to bypass the restriction.

What you should do

Exploiting the vulnerability is a simple matter of opting to run a command as user -1 or 4294967295. The addition of the parameters -u#-1 or -u#4294967295 to the Sudo command is all it takes to gain the extra privileges of root.

As explained on sudo.ws: “This can be used by a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access as long as the ALL keyword is listed first in the Runas specification. Log entries for commands run this way will list the target user as 4294967295 instead of root.”

The flaw was discovered by Apple security researcher Joe Vennix, and has been fixed in Sudo 1.8.28. Users are encouraged to ensure that they are updated to this version; popular distributions should include the updated version of the tool in due course.

Via The Hacker News

Go to Source

Google Pixel 4 launch live blog: we’re reporting from the Made By Google event

The Google Pixel 4 launch event takes place today, and we’re expecting to see the search and tech giant launch two new flagship smartphones: the Pixel 4 and Pixel 4 XL.

However, we could see more than just phones at the Google launch event, with a new Nest Mini smart speaker, Pixelbook Go Chromebook and Wi-Fi routers all rumored to arrive at the showcase in New York City.

We’ll be reporting live from NYC, with the event kicking off at 10am EDT (7am PDT, 3pm BST, 1am AEDT on October 16). You can follow all the announcements as they happen, and read our expert analysis, here at our Google Pixel 4 launch event live blog – and, of course, we’ll be bringing you our hands-on first impressions of the Pixel 4 phones and other new devices.

All times in Eastern Daylight Time (EDT)

Please refresh this pages for the latest updates

09:05: Good news, we’ve made it to the event, and it’s a lovely day in New York this morning.

08:55 – We’re on our way to the event venue, with just over an hour to go before Google kicks off its Pixel 4 launch.

TechRadar fun fact: before Google started putting its own name on phones, it had the Nexus line to showcase its Android operating system. The first handset in this range, the Nexus One, launched back in January 2010.

It was made by HTC, had a 3.7-inch display, 512MB of RAM, 512MB of storage and a 5MP rear camera. How far we’ve come.

08:25 – Looks like we will get more than just Pixel 4 handsets today, as Google has tweeted a teaser which says it has “a few news things” to show us.

08:15 – Speaking of Amazon, only a couple of weeks ago the online retail giant had its own launch event, where it announced no fewer than 14 new products. 

The Google launch event is unlikely to be quite this busy, which is good news for us as it makes writing our Pixel 4 launch live blog slightly less stressful!

08:00 – While new good hardware will be taking the headlines today, it’s likely that software is the real champion. Google’s focus over the years has been in software, machine learning and AI.

With its voice assistant, photography post-processing prowess and clever machine learning which helps personalize your whole Google experience, it wants to be at the center of your life.

We expect Google to announce further updates in these areas during its event, as it looks to keep competitive against the likes of Amazon’s Alexa and Echo range, and Apple’s Siri.

07:00 – We’re awake in New York City, and we’re ready for a Google-packed day. However, there’s still three hours until the Pixel 4 launch event kicks off, so why not play a game to pass the time?

Fortnite Chapter 2 has just launched, so why not give that a download?

06:00 – A good way of predicting what we may see today at the Made by Google launch event is taking a look at what was announced last year. Winding back the clock to October 2018, we saw Google launch four new products.

You can see them all in the video below:

05:00 – It’s not just new Pixel phones we’re set to see today, with rumors of an upgrade to Google’s entry-level smart speaker – the Home Mini – suggesting it’ll be launched at the same event.

There have been plenty of leaks around the second generation speaker, including speculation that it’s name will change to Nest Mini.

04:45 – There’s no question that we will see the Google Pixel 4 today, and we know that’s what it will be called too, thanks to this tweet by the search giant from June.

04:30 – It seems there’s very little we don’t already know about the Pixel 4 and Pixel 4 XL. Earlier this year Google even tweeted a picture of the rear of the phones, confirming a large camera block (rumored to house two cameras).

However, the leaks have continued to flow, and even today, mere hours ahead of launch, new information continues to spill onto the web – and of course we’re bringing it all to you, to give you an idea of what to expect.

Today’s Google Pixel 4 leaks

Go to Source

Apex Legends Halloween event sees players (and Kings Canyon) rise from the dead

Apex Legends‘ Halloween event kicks off today, adding spooky new cosmetics, a new limited-time mode and raising both players and Kings Canyon map from the dead. 

The Fight or Fright event runs from October 15 to November 5 and sees Kings Canyon plummeted into eerie darkness for a new limited-time single-player mode, which sees the Legends taking on mysterious villain Revenant.

Check out the new teaser trailer below:

The limited-time mode, titled Shadowfall, sees you and 34 other solo players being dropped into a night time version of Kings Canyon with a mission to be one of the last 10 Legends standing – before working together to escape on an evac ship. However, there’s a twist. Players who die will respawn as undead ‘zombies’ with supernatural movement and jump speed (known as the Shadow Squad), and they’ll be on a mission to take you out.

Trick or treat?

In addition to this new mode, players can grab some exclusive Fight or Fright treats for completing event challenges, including two legendary weapon skins, along with the chance to obtain event limited premium cosmetics such as a Frankenstein-themed skin for Gibraltar and a clown costume for Caustic.

However, Respawn Entertainment hasn’t spilled all the details about the Halloween event yet so we’re not sure of exactly what will be on offer – only that there will be 24 event limited cosmetics up for grabs which you can obtain by direct purchase, through Apex Packs or by crafting.

Apex Legends’ Fight or Fright event goes live on October 15 and runs until November 5. 

Go to Source

Apex Legends Season 3: latest update news, tips, patch notes and more

EA surprised many with the sudden announcement of Apex Legends back in February 2019, a free-to-play battle royale shooter that sees the publisher going toe-to-toe with genre mammoths PlayerUnknown’s Battlegrounds and Fortnite Battle Royale.

Developed by Respawn Entertainment and set in the Titanfall universe, Apex Legends is a squad-based battle royale shooter where teams of three go up against 57 other players to try to gather loot and be the last person (or squad) standing.

However, unlike Fortnite and PUBG, Apex Legends sees players take on one of eight classes, each represented by a unique character (imagine Fortnite mixed with Overwatch and you’ll be on the right track.) 

As of October 1, Apex Legends has entered its third season. Called Meltdown, this season is introducing plenty of changes, big and small. From new weapons, to a new character to a brand spanking new map there’s plenty to enjoy in Season 3 of Apex Legends for old and new players alike. 

Meltdown is seriously building on some of the much-needed and successful improvements that Respawn Entertainment made to Season 2 in a way that gives us great hope for the future of this game that’s now very close to being one year old. 

If you’re new to Apex Legends and looking to see what you’re missing or you’ve dropped off the map for a while and you’d like to catch up on the latest, we’re here to keep you up to date on what’s fresh in Apex Legends. 

(Image credit: Respawn Entertainment)

Apex Legends: the TechRadar verdict

Apex Legends is an engrossing, revamped take on battle royale that as it stands cannot be beat for its attention, detail and care:

People trust robots and turn to them for advice more than their managers

Contrary to common fears around how robots will impact jobs, leaders across the globe are reporting increased adoption of artificial intelligence (AI) and robots at work and many are welcoming it with love and optimism.

According to the second annual “AI at Work” study of 8,370 employees, managers and HR leaders across 10 countries, including the UAE, conducted by Oracle and research firm Future Workplace, 64% of the people trust a robot more than their managers and half have turned to a robot instead of their manager for advice.

Rahul Misra, vice-president for applications at Oracle Lower Gulf, told TechRadar Middle East that 82% of people think robots can do things better than their managers. 

In the UAE, respondents said robots are better at maintaining work schedules (42%), problem-solving (34%) and providing unbiased information (32%) while the top three tasks where managers are better than robots were understanding feelings (46%), coaching them (32%) and evaluating team performance (25%).

 “UAE is building a future based on tech innovation. Anything where the managers’ role does not have an emotional quotient, people believe they can work with a fact-based model,” he said.

Invisible operation taking place

The adoption of emerging technologies is far more here in the UAE, he said and added that the UAE is a young nation, built of expats and the generation is a mix of X, Z and millennials.

Moreover, he said that they [youth] have largely seen technology which supported economic growth.

“The concept is that they want an experienced economy to move away from fossil revenue to non-fossil revenue. When you want an experienced economy, you cannot do it with human touch been in there all the time and all the process. What we have seen more and more is that there is a concept of automating as much as possible. A new emerging concept called – invisible operation – is coming up,” he said.

Invisible operation is the concept of using less of human interaction and more and more ability to leverage technology so that your experience with the service is far better as human experience is prone to errors.

“It the only country in the world that has an AI Minister and talks about the happiness index. The UAE has understood that if they want to continue their economic growth, they have to be very strong on fundamentals and that is where we are seeing the adoption of emerging technologies is going higher,” he said.

However, he said that the hype around AI is always been there decades ago but the only difference is that it has become “far more prominent in our daily life”.

AI set to become a commodity

“In the next year or two, I believe that AI will become a commodity as it is touching every aspect of our life. In the workplace, this trend is to become far more prominent. Digital assistants and chatbots are going to become the norm. If I can do everything in voice will I type? Our behavioural change is driving everything around us,” Misra said.

The study showed that in the UAE, more men (76%) than women (64%) have turned to AI over their managers and men (61%) have a more positive view of AI at work than women (55%).

“AI is changing the relationship between people and technology at work and is reshaping the role HR teams and managers need to play in attracting, retaining and developing talent. As a result, the traditional role of HR teams and the manager is shifting,” he said.

The study showed that workers in the UAE, China and India have adopted AI twice more than those in France and Japan and AI is becoming more prominent with 50% of workers currently using some form of AI at work compared to only 32% last year.

Furthermore, workers in India (60%) and China (56% ) are the most excited about AI, followed by the UAE (44%), Singapore (41%), Brazil (32%), Australia/New Zealand (26%), Japan (25%), the US (22%), UK (20%) and France (8%).

“AI is a use case scenario and the project is a journey and it gets better over a period of time by reading and analysing the data. The impact of AI at work is only just beginning and organisations need to focus on simplifying and securing AI at work or risk being left behind,” he said.

Go to Source

Meat has been 3D-printed in space, showing ‘slaughter-free’ beef can be produced anywhere

A 3D printer has been used to produce artificial meat on board the International Space Station, again showing just how diverse – and potentially useful – the applications of 3D printing can be.

The ‘bioprinter’ on the ISS not only produced beef, but also replicated rabbit and fish tissue by a process involving magnetic fields in microgravity.

As AFP reports, this experiment was performed by cosmonaut Oleg Skripochka in the Russian segment of the space station, although the project is a collaboration between Russian, US and Israeli companies.

The printer itself was developed by 3D Bioprinting Solutions, a Russian laboratory for biotechnological research (which was founded by Invitro, the largest private medical operation in Russia).

Space meatballs

Long-serving cosmonaut Oleg Kononenko told AFP: “If we’re going to fly further from Earth to other planets in the solar system, we can’t take that volume of food with us. In any case we will have to grow and produce food on-board the spaceship.”

Kononenko added: “I think progress is developing very quickly, science and knowledge, and I think this will be within our lifetimes.”

The Roscosmos space agency, which partially financed this project, described the experiment as successful and a ‘good result’, although noted that more sophisticated hardware would be needed to create a larger mass of cells – in other words, more than just a nibble.

Although all this is seen as something of a PR stunt by some, it seems like genuinely interesting stuff, and part of the aim, as clarified by Aleph Farms – the Israeli company involved in the experiment along with 3D Bioprinting Solutions – is that this shows such ‘slaughter-free’ artificial meat can be produced anywhere.

And that could have big ramifications for our planet, meaning that meat could be produced in even the harshest conditions with no need for water, viable land, or anything else used in traditional farming – plus such production would have a minimal environmental impact, too.

Of course, we’ve recently seen another nifty space-related application of 3D printing – and that’s to 3D-print entire rockets with the eventual aim of going to Mars. Technological progress does indeed appear to be speeding along at a rapid rate…

Go to Source

YouTube regrets: Anecdotal claims of damaged users

“My 10-year-old sweet daughter innocently searched for ‘tap dance videos’,” one parent wrote.

“Now she is in this spiral of… videos that give her horrible unsafe body-harming and body-image-damaging advice.”

This is one of hundreds of accounts outlining damage said to have been caused by YouTube’s recommendations algorithm.

It’s a phenomenon some refer to as “falling down the YouTube rabbit hole” with users directed to controversial and potentially dangerous content they might never have stumbled on otherwise.

The accounts have been gathered by Mozilla, the organisation best known for its Firefox web browser, which competes against Google’s Chrome. The BBC was unable to corroborate the posts, as the foundation said they had been collected anonymously.

It’s impossible to know if all the details are true. But Mozilla says it has shared a representative sample of the messages it received. And some read like horror stories.

“She is now restricting her eating and drinking,” the parent continued.

“I heard her downstairs saying, ‘Work to eat. Work to drink.’

“I don’t know how I can undo the damage that’s been done to her impressionable mind.”

White supremacists

Mozilla asked the public to share their “YouTube regrets” – videos recommended to users of the video clip platform, which led them down bizarre or dangerous paths.

“The hundreds of responses we received were frightening: users routinely report being recommended racism, conspiracies, and violence after watching innocuous content,” said Ashley Boyd, Mozilla’s vice-president of advocacy.

“After watching a YouTube video about Vikings, one user was recommended content about white supremacy.

“Another user who watched confidence-building videos by a drag queen was then inundated by clips of homophobic rants.”

YouTube is the second most visited website in the world. Its recommendation engine drives 70% of total viewing time on the site, by tailoring suggestions to keep viewers watching.

Its owner Google has yet to comment on Mozilla’s report.

But managers have previously denied suggestions that their algorithms deliberately promote extremist or harmful content because it boosts watch-time or benefits the business in some other way.

And they have added that YouTube has begun tackling videos that contain misinformation and conspiracy theories by showing “warning labels” and “knowledge panels” containing trustworthy information.

Even so, claims that its recommendations have a tendency to lead users astray persist.

“We urge YouTube and all platforms to act with integrity, to listen to stories and experiences of users,” said Lauren Seager-Smith, chief executive of children’s protection charity Kidscape, which is not involved in Mozilla’s campaign.

“[It needs] to reflect on when content may have caused harm – however inadvertently – and to prioritise system change that improves protection of children and those most at risk.”

Fear and hate

Mozilla said it received more than 2,000 responses in five languages to its call.

It has published 28 of the anecdotes.

“My ex-wife, who has mental health problems, started watching conspiracy videos three years ago and believed every single one,” recalled one contributor.

“YouTube just kept feeding her paranoia, fear and anxiety, one video after another.”

Members of the LGBT community also raised concerns.

“In coming out to myself and close friends as transgender, my biggest regret was turning to YouTube to hear the stories of other trans and queer people,” one person wrote.

“Simply typing in the word ‘transgender’ brought up countless videos that were essentially describing my struggle as a mental illness and as something that shouldn’t exist. YouTube reminded me why I hid in the closet for so many years.”

The LGBT Foundation – a Manchester-based charity – called for YouTube and other social media companies to take more responsibility for the content promoted by their algorithms.

“Hateful content online is on the rise, and something that is of increasing concern,” the foundation’s Emma Meehan told the BBC.

“Social media giants have a responsibility for what is shared on their platforms and the real-world impact this may have, and need to work to take a more dedicated approach to combating hate online.”

Research challenges

YouTube’s recommendations system poses difficulties for researchers outside the company as the business does not share its own recommendations data.

Since each user is given different suggestions, it is hard to determine why some choices are made and how many others have had the same content promoted to them.

“By sharing these stories, we hope to increase pressure on YouTube to empower independent researchers and address its recommendation problem,” Mozilla’s Ashley Boyd said.

“While users should be able to view and publish the content they like, YouTube’s algorithm shouldn’t actively be pushing harmful content into the mainstream.”


Have recommendations by an algorithm confronted you with false or harmful content? You can get in touch by emailing .

Please include a contact number if you are willing to speak to a BBC journalist. You can also contact us in the following ways:

Go to Source