×
Why the F5 Hack Created an ‘Imminent Threat’ for Thousands of Networks

Why the F5 Hack Created an ‘Imminent Threat’ for Thousands of Networks

Thousands of networks—many of them operated by the US government and Fortune 500 companies—face an “imminent threat” of being breached by a nation-state hacking group following the breach of a major maker of software, the federal government warned on Wednesday.

F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a “sophisticated” threat group working for an undisclosed nation-state government had surreptitiously and persistently dwelled in its network over a “long term.” Security researchers who have responded to similar intrusions in the past took the language to mean the hackers were inside the F5 network for years.

Unprecedented

During that time, F5 said, the hackers took control of the network segment the company uses to create and distribute updates for BIG IP, a line of server appliances that F5 says is used by 48 of the world’s top 50 corporations. Wednesday’s disclosure went on to say the threat group downloaded proprietary BIG-IP source code information about vulnerabilities that had been privately discovered but not yet patched. The hackers also obtained configuration settings that some customers used inside their networks.

Control of the build system and access to the source code, customer configurations, and documentation of unpatched vulnerabilities has the potential to give the hackers unprecedented knowledge of weaknesses and the ability to exploit them in supply-chain attacks on thousands of networks, many of which are sensitive. The theft of customer configurations and other data further raises the risk that sensitive credentials can be abused, F5 and outside security experts said.

Customers position BIG-IP at the very edge of their networks for use as load balancers and firewalls, and for inspection and encryption of data passing into and out of networks. Given BIG-IP’s network position and its role in managing traffic for web servers, previous compromises have allowed adversaries to expand their access to other parts of an infected network.

F5 said that investigations by two outside intrusion-response firms have yet to find any evidence of supply-chain attacks. The company attached letters from firms IOActive and NCC Group attesting that analyses of source code and build pipeline uncovered no signs that a “threat actor modified or introduced any vulnerabilities into the in-scope items.” The firms also said they didn’t identify any evidence of critical vulnerabilities in the system. Investigators, which also included Mandiant and CrowdStrike, found no evidence that data from its CRM, financial, support case management, or health systems was accessed.

The company released updates for its BIG-IP, F5OS, BIG-IQ, and APM products. CVE designations and other details are here. Two days ago, F5 rotated BIG-IP signing certificates, though there was no immediate confirmation that the move is in response to the breach.

Source link
#Hack #Created #Imminent #Threat #Thousands #Networks


There’s an argument to be made that audiobooks are the finest form of content. You take a book—already off to a good start—and you get to have someone read it right into your ears. And when I say “someone” I mean the GOATs in the voice game. I could cite examples of celebrities you never knew narrated audiobooks, but here’s a sample of Werner Herzog narrating his memoir Every Man for Himself and God Against All that I think speaks for itself:

What could be better than this?

Not only are audiobooks heaven, you can probably get all the audiobooks you want for free (and legally) by getting yourself a library card and using your local library’s preferred app (Libby, perhaps).

I say all that, because given all the easy and free access to high quality audiobooks, why in the world would anyone listen to a John Grisham audiobook presented like this?

Don’t click that link. Instead of the actual audiobook, which is read wonderfully by Michael Beck, it will take you to a YouTube video consisting of an AI narrator reading Grisham’s recent hit novel the Widow, and the narration plays under 13 hours of AI slop video—simulated stock footage of fake vacations, basically. It looks like the video they display under the lyrics on Hell’s karaoke machine. I don’t have any science to back this up, but it will definitely give you brain cancer.

As the New York Times points out, 80,000 lost souls listened to the Widow this way. And Grisham is pissed about it. “The thieves and pirates who steal my work and try to profit from it, in any format, should be punished civilly and criminally […] And in this particular example, YouTube is complicit because it’s clear they know what is happening and refuse to stop it,” Grisham told the Times in an email. He should really write about this.

YouTube, for its part, says the video is still up because there hasn’t been a takedown request, and that it doesn’t proactively police for copyright violations. “For more than two decades, we’ve built systems that help rights holders manage and control their copyrighted content — investing continuously to make sure those systems evolve as new threats emerge,” Jack Malon, a YouTube spokesperson, wrote to the Times.

If you’ve ever had a YouTube video flagged for a copyright violation, it may have been because of a feature called Content ID that music publishers absolutely love. It allows copyright holders to crawl YouTube and automatically detect copyrighted content. At times, Content ID has been a valuable moneymaking scheme for copyright holders, who were able to zero in on incidental—or even accidental—uses of copyrighted material, especially music, and by making a claim, monetize other people’s videos. It can’t do this anymore, but this is the sort of thing YouTube’s copyright system has been designed to support.

As the Times points out, Content ID isn’t great at finding AI-narrated audiobooks. The audio waveform of the content is not the same as the audio the publisher owns, which makes it tricky to know what to even scan for. The author holds a copyright on the text, which can be slightly changed by the creator of the YouTube video while still leaving the book largely intact—good enough for casual listeners anyway.

This leaves publishers and authors to navigate the takedown process manually, which seems, judging from the fact that the Widow is still up, to just not be happening.

That’s a pity. And I don’t mean because it’s robbing John Grisham of audiobook sales, which is bad, but not the gravest injustice in the universe. It’s bad because people are listening to such horrible garbage just because it’s available. And they really, truly, don’t have to.

#John #Grishams #Legal #Drama #Real #Life #Fight #Audiobooks #YouTubeArtificial intelligence,Audiobooks,Books,intellectual proper">John Grisham’s New Legal Drama Is a Real Life Fight Against AI Audiobooks on YouTube
                There’s an argument to be made that audiobooks are the finest form of content. You take a book—already off to a good start—and you get to have someone read it right into your ears. And when I say “someone” I mean the GOATs in the voice game. I could cite examples of celebrities you never knew narrated audiobooks, but here’s a sample of Werner Herzog narrating his memoir Every Man for Himself and God Against All that I think speaks for itself: [embed]https://www.youtube.com/watch?v=P4IQSvi3pXU[/embed] What could be better than this? Not only are audiobooks heaven, you can probably get all the audiobooks you want for free (and legally) by getting yourself a library card and using your local library’s preferred app (Libby, perhaps). I say all that, because given all the easy and free access to high quality audiobooks, why in the world would anyone listen to a John Grisham audiobook presented like this?

 Don’t click that link. Instead of the actual audiobook, which is read wonderfully by Michael Beck, it will take you to a YouTube video consisting of an AI narrator reading Grisham’s recent hit novel the Widow, and the narration plays under 13 hours of AI slop video—simulated stock footage of fake vacations, basically. It looks like the video they display under the lyrics on Hell’s karaoke machine. I don’t have any science to back this up, but it will definitely give you brain cancer.

 As the New York Times points out, 80,000 lost souls listened to the Widow this way. And Grisham is pissed about it. “The thieves and pirates who steal my work and try to profit from it, in any format, should be punished civilly and criminally […] And in this particular example, YouTube is complicit because it’s clear they know what is happening and refuse to stop it,” Grisham told the Times in an email. He should really write about this. YouTube, for its part, says the video is still up because there hasn’t been a takedown request, and that it doesn’t proactively police for copyright violations. “For more than two decades, we’ve built systems that help rights holders manage and control their copyrighted content — investing continuously to make sure those systems evolve as new threats emerge,” Jack Malon, a YouTube spokesperson, wrote to the Times.

 If you’ve ever had a YouTube video flagged for a copyright violation, it may have been because of a feature called Content ID that music publishers absolutely love. It allows copyright holders to crawl YouTube and automatically detect copyrighted content. At times, Content ID has been a valuable moneymaking scheme for copyright holders, who were able to zero in on incidental—or even accidental—uses of copyrighted material, especially music, and by making a claim, monetize other people’s videos. It can’t do this anymore, but this is the sort of thing YouTube’s copyright system has been designed to support. As the Times points out, Content ID isn’t great at finding AI-narrated audiobooks. The audio waveform of the content is not the same as the audio the publisher owns, which makes it tricky to know what to even scan for. The author holds a copyright on the text, which can be slightly changed by the creator of the YouTube video while still leaving the book largely intact—good enough for casual listeners anyway. This leaves publishers and authors to navigate the takedown process manually, which seems, judging from the fact that the Widow is still up, to just not be happening.

 That’s a pity. And I don’t mean because it’s robbing John Grisham of audiobook sales, which is bad, but not the gravest injustice in the universe. It’s bad because people are listening to such horrible garbage just because it’s available. And they really, truly, don’t have to.      #John #Grishams #Legal #Drama #Real #Life #Fight #Audiobooks #YouTubeArtificial intelligence,Audiobooks,Books,intellectual proper

Libby, perhaps).

I say all that, because given all the easy and free access to high quality audiobooks, why in the world would anyone listen to a John Grisham audiobook presented like this?

Don’t click that link. Instead of the actual audiobook, which is read wonderfully by Michael Beck, it will take you to a YouTube video consisting of an AI narrator reading Grisham’s recent hit novel the Widow, and the narration plays under 13 hours of AI slop video—simulated stock footage of fake vacations, basically. It looks like the video they display under the lyrics on Hell’s karaoke machine. I don’t have any science to back this up, but it will definitely give you brain cancer.

As the New York Times points out, 80,000 lost souls listened to the Widow this way. And Grisham is pissed about it. “The thieves and pirates who steal my work and try to profit from it, in any format, should be punished civilly and criminally […] And in this particular example, YouTube is complicit because it’s clear they know what is happening and refuse to stop it,” Grisham told the Times in an email. He should really write about this.

YouTube, for its part, says the video is still up because there hasn’t been a takedown request, and that it doesn’t proactively police for copyright violations. “For more than two decades, we’ve built systems that help rights holders manage and control their copyrighted content — investing continuously to make sure those systems evolve as new threats emerge,” Jack Malon, a YouTube spokesperson, wrote to the Times.

If you’ve ever had a YouTube video flagged for a copyright violation, it may have been because of a feature called Content ID that music publishers absolutely love. It allows copyright holders to crawl YouTube and automatically detect copyrighted content. At times, Content ID has been a valuable moneymaking scheme for copyright holders, who were able to zero in on incidental—or even accidental—uses of copyrighted material, especially music, and by making a claim, monetize other people’s videos. It can’t do this anymore, but this is the sort of thing YouTube’s copyright system has been designed to support.

As the Times points out, Content ID isn’t great at finding AI-narrated audiobooks. The audio waveform of the content is not the same as the audio the publisher owns, which makes it tricky to know what to even scan for. The author holds a copyright on the text, which can be slightly changed by the creator of the YouTube video while still leaving the book largely intact—good enough for casual listeners anyway.

This leaves publishers and authors to navigate the takedown process manually, which seems, judging from the fact that the Widow is still up, to just not be happening.

That’s a pity. And I don’t mean because it’s robbing John Grisham of audiobook sales, which is bad, but not the gravest injustice in the universe. It’s bad because people are listening to such horrible garbage just because it’s available. And they really, truly, don’t have to.

#John #Grishams #Legal #Drama #Real #Life #Fight #Audiobooks #YouTubeArtificial intelligence,Audiobooks,Books,intellectual proper">John Grisham’s New Legal Drama Is a Real Life Fight Against AI Audiobooks on YouTubeJohn Grisham’s New Legal Drama Is a Real Life Fight Against AI Audiobooks on YouTube
                There’s an argument to be made that audiobooks are the finest form of content. You take a book—already off to a good start—and you get to have someone read it right into your ears. And when I say “someone” I mean the GOATs in the voice game. I could cite examples of celebrities you never knew narrated audiobooks, but here’s a sample of Werner Herzog narrating his memoir Every Man for Himself and God Against All that I think speaks for itself: [embed]https://www.youtube.com/watch?v=P4IQSvi3pXU[/embed] What could be better than this? Not only are audiobooks heaven, you can probably get all the audiobooks you want for free (and legally) by getting yourself a library card and using your local library’s preferred app (Libby, perhaps). I say all that, because given all the easy and free access to high quality audiobooks, why in the world would anyone listen to a John Grisham audiobook presented like this?

 Don’t click that link. Instead of the actual audiobook, which is read wonderfully by Michael Beck, it will take you to a YouTube video consisting of an AI narrator reading Grisham’s recent hit novel the Widow, and the narration plays under 13 hours of AI slop video—simulated stock footage of fake vacations, basically. It looks like the video they display under the lyrics on Hell’s karaoke machine. I don’t have any science to back this up, but it will definitely give you brain cancer.

 As the New York Times points out, 80,000 lost souls listened to the Widow this way. And Grisham is pissed about it. “The thieves and pirates who steal my work and try to profit from it, in any format, should be punished civilly and criminally […] And in this particular example, YouTube is complicit because it’s clear they know what is happening and refuse to stop it,” Grisham told the Times in an email. He should really write about this. YouTube, for its part, says the video is still up because there hasn’t been a takedown request, and that it doesn’t proactively police for copyright violations. “For more than two decades, we’ve built systems that help rights holders manage and control their copyrighted content — investing continuously to make sure those systems evolve as new threats emerge,” Jack Malon, a YouTube spokesperson, wrote to the Times.

 If you’ve ever had a YouTube video flagged for a copyright violation, it may have been because of a feature called Content ID that music publishers absolutely love. It allows copyright holders to crawl YouTube and automatically detect copyrighted content. At times, Content ID has been a valuable moneymaking scheme for copyright holders, who were able to zero in on incidental—or even accidental—uses of copyrighted material, especially music, and by making a claim, monetize other people’s videos. It can’t do this anymore, but this is the sort of thing YouTube’s copyright system has been designed to support. As the Times points out, Content ID isn’t great at finding AI-narrated audiobooks. The audio waveform of the content is not the same as the audio the publisher owns, which makes it tricky to know what to even scan for. The author holds a copyright on the text, which can be slightly changed by the creator of the YouTube video while still leaving the book largely intact—good enough for casual listeners anyway. This leaves publishers and authors to navigate the takedown process manually, which seems, judging from the fact that the Widow is still up, to just not be happening.

 That’s a pity. And I don’t mean because it’s robbing John Grisham of audiobook sales, which is bad, but not the gravest injustice in the universe. It’s bad because people are listening to such horrible garbage just because it’s available. And they really, truly, don’t have to.      #John #Grishams #Legal #Drama #Real #Life #Fight #Audiobooks #YouTubeArtificial intelligence,Audiobooks,Books,intellectual proper

There’s an argument to be made that audiobooks are the finest form of content. You take a book—already off to a good start—and you get to have someone read it right into your ears. And when I say “someone” I mean the GOATs in the voice game. I could cite examples of celebrities you never knew narrated audiobooks, but here’s a sample of Werner Herzog narrating his memoir Every Man for Himself and God Against All that I think speaks for itself:

What could be better than this?

Not only are audiobooks heaven, you can probably get all the audiobooks you want for free (and legally) by getting yourself a library card and using your local library’s preferred app (Libby, perhaps).

I say all that, because given all the easy and free access to high quality audiobooks, why in the world would anyone listen to a John Grisham audiobook presented like this?

Don’t click that link. Instead of the actual audiobook, which is read wonderfully by Michael Beck, it will take you to a YouTube video consisting of an AI narrator reading Grisham’s recent hit novel the Widow, and the narration plays under 13 hours of AI slop video—simulated stock footage of fake vacations, basically. It looks like the video they display under the lyrics on Hell’s karaoke machine. I don’t have any science to back this up, but it will definitely give you brain cancer.

As the New York Times points out, 80,000 lost souls listened to the Widow this way. And Grisham is pissed about it. “The thieves and pirates who steal my work and try to profit from it, in any format, should be punished civilly and criminally […] And in this particular example, YouTube is complicit because it’s clear they know what is happening and refuse to stop it,” Grisham told the Times in an email. He should really write about this.

YouTube, for its part, says the video is still up because there hasn’t been a takedown request, and that it doesn’t proactively police for copyright violations. “For more than two decades, we’ve built systems that help rights holders manage and control their copyrighted content — investing continuously to make sure those systems evolve as new threats emerge,” Jack Malon, a YouTube spokesperson, wrote to the Times.

If you’ve ever had a YouTube video flagged for a copyright violation, it may have been because of a feature called Content ID that music publishers absolutely love. It allows copyright holders to crawl YouTube and automatically detect copyrighted content. At times, Content ID has been a valuable moneymaking scheme for copyright holders, who were able to zero in on incidental—or even accidental—uses of copyrighted material, especially music, and by making a claim, monetize other people’s videos. It can’t do this anymore, but this is the sort of thing YouTube’s copyright system has been designed to support.

As the Times points out, Content ID isn’t great at finding AI-narrated audiobooks. The audio waveform of the content is not the same as the audio the publisher owns, which makes it tricky to know what to even scan for. The author holds a copyright on the text, which can be slightly changed by the creator of the YouTube video while still leaving the book largely intact—good enough for casual listeners anyway.

This leaves publishers and authors to navigate the takedown process manually, which seems, judging from the fact that the Widow is still up, to just not be happening.

That’s a pity. And I don’t mean because it’s robbing John Grisham of audiobook sales, which is bad, but not the gravest injustice in the universe. It’s bad because people are listening to such horrible garbage just because it’s available. And they really, truly, don’t have to.

#John #Grishams #Legal #Drama #Real #Life #Fight #Audiobooks #YouTubeArtificial intelligence,Audiobooks,Books,intellectual proper

When you think of Memorial Day sales, you probably think of mattresses and other home goods. And while those items are definitely discounted, now is also a good time to purchase tech. Personally, I’m not buying anything right now unless it’s discounted—and fortunately many of our top picks are. Whether you’re shopping for a power bank, a new pair of headphones, or some other gadget, I’ve rounded up the best Memorial Day deals for your perusal. We’ll update this article again on Monday.

Check out our buying guides for more recommendations, including the best headphones, the best laptops, and the best cheap phones. You might also want to check out our additional Memorial Day deals coverage.

Updated May 24: We’ve checked prices, removed expired deals, added 5 new deals, and ensured accuracy throughout.

WIRED Featured Deals:

Sony WH-1000XM5 for $248 ($152 off)

Sony WH-1000MX5 headphones

The Sony WH-1000XM5 have a very frustrating name, but they’re the predecessor to our favorite wireless headphones, and they’re still an excellent pick if you don’t want to shell out for the new WH-1000XM6. They go on sale frequently, but rarely drop this low in price, which comes within $5 of their all-time low. If you’re in the market for over-ear headphones, they’re hard to beat. They’re comfortable, portable, lightweight, and stylish, and they’ll make your music sound great no matter what you like to listen to.

#Memorial #Day #Tech #Deals #Worth #Checkingshopping,deals,memorial day">The Best Memorial Day Tech Deals Worth Checking OutWhen you think of Memorial Day sales, you probably think of mattresses and other home goods. And while those items are definitely discounted, now is also a good time to purchase tech. Personally, I’m not buying anything right now unless it’s discounted—and fortunately many of our top picks are. Whether you’re shopping for a power bank, a new pair of headphones, or some other gadget, I’ve rounded up the best Memorial Day deals for your perusal. We’ll update this article again on Monday.Check out our buying guides for more recommendations, including the best headphones, the best laptops, and the best cheap phones. You might also want to check out our additional Memorial Day deals coverage.Updated May 24: We’ve checked prices, removed expired deals, added 5 new deals, and ensured accuracy throughout.WIRED Featured Deals:Sony WH-1000XM5 for 8 (2 off)The Sony WH-1000XM5 have a very frustrating name, but they’re the predecessor to our favorite wireless headphones, and they’re still an excellent pick if you don’t want to shell out for the new WH-1000XM6. They go on sale frequently, but rarely drop this low in price, which comes within  of their all-time low. If you’re in the market for over-ear headphones, they’re hard to beat. They’re comfortable, portable, lightweight, and stylish, and they’ll make your music sound great no matter what you like to listen to.#Memorial #Day #Tech #Deals #Worth #Checkingshopping,deals,memorial day

mattresses and other home goods. And while those items are definitely discounted, now is also a good time to purchase tech. Personally, I’m not buying anything right now unless it’s discounted—and fortunately many of our top picks are. Whether you’re shopping for a power bank, a new pair of headphones, or some other gadget, I’ve rounded up the best Memorial Day deals for your perusal. We’ll update this article again on Monday.

Check out our buying guides for more recommendations, including the best headphones, the best laptops, and the best cheap phones. You might also want to check out our additional Memorial Day deals coverage.

Updated May 24: We’ve checked prices, removed expired deals, added 5 new deals, and ensured accuracy throughout.

WIRED Featured Deals:

Sony WH-1000XM5 for $248 ($152 off)

Sony WH-1000MX5 headphones

The Sony WH-1000XM5 have a very frustrating name, but they’re the predecessor to our favorite wireless headphones, and they’re still an excellent pick if you don’t want to shell out for the new WH-1000XM6. They go on sale frequently, but rarely drop this low in price, which comes within $5 of their all-time low. If you’re in the market for over-ear headphones, they’re hard to beat. They’re comfortable, portable, lightweight, and stylish, and they’ll make your music sound great no matter what you like to listen to.

#Memorial #Day #Tech #Deals #Worth #Checkingshopping,deals,memorial day">The Best Memorial Day Tech Deals Worth Checking Out

When you think of Memorial Day sales, you probably think of mattresses and other home goods. And while those items are definitely discounted, now is also a good time to purchase tech. Personally, I’m not buying anything right now unless it’s discounted—and fortunately many of our top picks are. Whether you’re shopping for a power bank, a new pair of headphones, or some other gadget, I’ve rounded up the best Memorial Day deals for your perusal. We’ll update this article again on Monday.

Check out our buying guides for more recommendations, including the best headphones, the best laptops, and the best cheap phones. You might also want to check out our additional Memorial Day deals coverage.

Updated May 24: We’ve checked prices, removed expired deals, added 5 new deals, and ensured accuracy throughout.

WIRED Featured Deals:

Sony WH-1000XM5 for $248 ($152 off)

Sony WH-1000MX5 headphones

The Sony WH-1000XM5 have a very frustrating name, but they’re the predecessor to our favorite wireless headphones, and they’re still an excellent pick if you don’t want to shell out for the new WH-1000XM6. They go on sale frequently, but rarely drop this low in price, which comes within $5 of their all-time low. If you’re in the market for over-ear headphones, they’re hard to beat. They’re comfortable, portable, lightweight, and stylish, and they’ll make your music sound great no matter what you like to listen to.

#Memorial #Day #Tech #Deals #Worth #Checkingshopping,deals,memorial day

Post Comment