Some ATMs Still On XP

Cyber-criminals have been cutting holes into European cash machines in order to infect them with malware.

The holes were cut so that the hackers could plug in USB drives that installed their code onto the ATMs. Details of the attacks on an unnamed European bank’s cash dispensers were presented at the hacker-themed Chaos Computing Congress in Hamburg, Germany.

The thefts came to light in July after the lender involved noticed several its ATMs were being emptied. The bank discovered the criminals were vandalising the machines to use the infected USB sticks. Once the malware had been transferred, they patched the holes up. This allowed the same machines to be targeted several times without the hack being discovered.

The attackers could take the highest value banknotes in order to minimise the amount of time they were exposed. Interestingly the software required the thief to enter a second code in response to numbers shown on the ATM’s screen before they could release the money and the thief could only obtain the right code by phoning another gang member and telling them the numbers displayed. This stopped the criminals going alone.

Source

Raspberry PI Breaks Record

Sinclair ZX80 and runaway success story, the Raspberry Pi might be about to get its own monitor after a Kickstarter campaign to create a low cost 9in screen for it has exceeded its $90,000 goal in a single weekend.

The HDMIPi monitor from startup Raspi.tv presently stands at $100,996 on Kickstarter, an increase of $8,000 in just the last four hours. The concept behind the monitor is to create something small and affordable but with maximum 1920×1080 resolution. Even though the project has had to scale down its ambitions to 1200×800 resolution to fit the business plan, Raspberry Pi fans have flocked to crowdfund the device.

Put in perspective, that’s higher than HD 720p resolution, or as they describe it, “slightly better resolution than the 720p HD footage on BBC iPlayer”.

Monitor cases will be available in a variety of colours, designed by none other than Paul Beech, who designed the original Raspberry Pi logo.

Although primarily designed for the Raspberry Pi, the HDMIPi is a standard HDMI monitor and can be used for other devices – Android sticks, video cameras, games consoles and beyond.

Raspi.tv has pledged to ship orders in February 2014, delays permitting, and is already working on enhancements. It has described touch functionality as something that might become available as a bolt-on at a later date, saying that “enough people have mentioned it that we are sitting up and taking notice”.

As ever with the Raspberry Pi ecosystem, everything is a bit Ryanair, and power supplies, surrounds and so on are not automatically included, though of course, in the true DIY spirit, you can always make your own.

Source

ATM Malware Found In Mexico

A malicious software program identified in ATMs in Mexico has been improved and translated into English, which suggests it may be used elsewhere, according to security vendor Symantec.

Two versions of the malware, called Ploutus, have been discovered, both of which are engineered to empty a certain type of ATM, which Symantec has not identified.

In contrast to most malware, Ploutus is installed the old-fashioned way — by inserting a CD boot disk into the innards of an ATM machine running Microsoft Windows. The installation method suggests that cybercriminals are targeting standalone ATMs where access is easier.

The first version of Ploutus displays a graphical user interface after the thief enters a numerical sequence on an ATM’s keypad, although the malware can be controlled by a keyboard, wrote Daniel Regalado, a Symantec malware analyst, on Oct. 11.

Ploutus is programmed for a specific ATM model since it assumes there is a maximum of four cassettes per dispenser in the ATM. It then calculates the amount of money that should be dispensed based on the number of bills. If any of the cassettes have less than the maximum number of 40 bills, it releases whatever is left, repeating that process until the ATM is empty.

Kevin Haley, director of Symantec Security Response, said in an interview earlier this month that the attackers have deep knowledge of the software and hardware of the particular ATM model.

“They clearly know how this machine worked,” he said.

The source code of Ploutus “contains Spanish function names and poor English grammar that suggests the malware may have been coded by Spanish-speaking developers,” Regalado wrote.

In a new blog post, Regalado wrote that the attackers made Ploutus more robust and translated it into English, indicating the same ATM software can be exploited in countries other than Mexico.

The “B” variant of Ploutus has some differences. It only accepts commands through the keypad but will display a window showing the money available in the machine along with a transaction log as it dispenses cash. An attacker cannot enter a specific number of bills, so Ploutus withdraws money from the cassette with the most available bills, Regalado wrote.

Symantec advised those with ATMs to change the BIOS boot order to only boot from the hard disk and not CDs, DVDs or USB sticks. The BIOS should also be password protected so the boot options can’t be changed, Regalado wrote.

Source

New USB Chip Developed

Silicon Motion says it has begun shipping samples of a new USB 3.0 controller chip for flash drives that could boost performance by up to 50%.

The company said the new SM3267 integrated controller is expected to deliver up to 160MB/s read, and 60MB/s write speeds through a single channel; that would be a 30% to 50% performance improvement over today’s USB 3.0 flash drive technology.

Even though the USB 3.0 specification has the capability to support 4.8Gbps throughput speeds, the speed of a USB 3.0-enabled flash drive is dictated by the speed of the accessing flash devices in the drive. Today, most consumer-USB 3.0 flash drives support about 100MB/s read speeds.

We are pleased to announce that SM3267 has received design-ins from most of our current USB controller customers, including many top-tier OEMs, and we expect SM3267-based USB 3.0 flash drives will be commercially available starting in the fourth quarter of 2013,” Wallace Kou, CEO of Silicon Motion, said in a statement.

The new integrated chip will also be able to run at lower voltages, from 5 volts to 1.2 volts, enabling a 25% to 30% lower USB flash drive device temperature compared with other USB 3.0 flash controller products in the market, Silicon Motion said.

The new IC will support the vast majority of NAND flash technology, including new triple-level cell (TLC), multi-level cell (MLC), high speed Toggle, and ONFI DDR NAND manufactured by Samsung, Toshiba, SanDisk, SK Hynix, Micron and Intel.

The new chip has already passed both USB-IF compliance testing and WHCK (Windows Hardware Certification Kit) tests for Windows 7 and Windows 8.

The new IC is available in a Chip-on-Board (COB) and in a 48-pin QFN green package.

Source

Samsung’s Eight-core Chip Goes Hacking

A Samsung eight-core chip used in some Galaxy S4 mobile devices is now available for hackers to play with on a developer board from South Korea-based Hardkernel.

Hardkernel’s Odroid XU board has incorporated Samsung’s eight-core Exynos 5 Octa 5410 chip, which is based on ARM’s latest processor designs. Samsung recently announced a new eight-core chip, the Exynos 5 Octa 5420, which packs faster graphics and application processing than the 5410. The 5420 has not yet been shipped yet, however.

The Odroid board is priced at $149 through Aug. 31, after which it will be offered for $169. Samsung for many months has said that a board with an eight-core chip would be released, and has shown prototype developer boards at conferences.

Odroid-XU will provide developers an opportunity to write programs tuned for Samsung’s octa-core chip, which has been a source of controversy. Analysts have said the eight-core design is overkill for small devices like smartphones and tablets, which need long battery life.

The eight-core chip design also takes up a lot of space, which prevented Samsung from putting LTE radios inside some Galaxy S4 models. Qualcomm, which hesitantly moved from the dual core to the quad-core design on its Snapdragon chips, on Friday criticized eight-core chips, calling the idea “dumb.”

Despite the criticism, the board will give developers a first true glimpse of, and an opportunity to write and test applications for, ARM’s Big.Little design. The design combines high-power cores for demanding applications with low-power cores for mundane tasks like texting and calling.

Samsung’s iteration of Big.Little in the Exynos 5 Octa 5410 chip combines four processors based on ARM’s latest Cortex-A15 processor design, which incorporates four low-power Cortex-A7 CPUs. The Cortex-A15 is ARM’s latest processor design and succeeds the previous Cortex-A9 core, which was used in popular smartphones like Apple’s iPhone and the Galaxy S3. Samsung said the eight-core chip provides a balance of power and performance, with the high-power cores kicking in only when necessary.

The board has an Imagination Technologies PowerVR SGX544MP3 graphics processor, 2GB of low-power DDR3 DRAM, two USB 3.0 ports and four USB 2.0 ports. Other features include Wi-Fi, Ethernet and optional Bluetooth. Google’s Android 4.2 operating system is preloaded, and support for other Linux distributions like Ubuntu is expected soon. The board has already been benchmarked on Ubuntu 13.04.

Source

Kingston Goes 1TB

Kingston Technology is claiming the world’s highest capacity USB 3.0 flash drive with the one terabyte (1TB) Datatraveler HyperX Predator 3.0.

Announced by the company’s Kingston Digital Europe affiliate, the Datatraveler HyperX Predator 3.0 is shipping now in a 512GB model, with the 1TB capacity set to be available later in the first quarter.

The new drive is also slated as the fastest USB 3.0 flash drive in the Kingston storage line, with read speeds of up to 240MB/s and write speeds of 160MB/s, according to the firm.

“The large capacity and fast USB 3.0 transfer speeds allow users to save time as they can access, edit and transfer applications or files such as HD movies directly from the drive without any performance lag,” said Ann Keefe, Kingston regional director for the UK and Ireland.

Featuring a casing made of zinc alloy for shock resistance and high-end design, the Datatraveler HyperX Predator 3.0 also comes with a custom Kingston key ring and a HyperX valet keychain.

The new drive is fully certified for Superspeed USB 3.0 operation, while keeping backwards compatibility with USB 2.0 to allow it to be used with older computer hardware.

Source…

Raspberry Pi Gets A Store

Raspberry Pi Foundation has opened a store to enable users to easily download applications that run on the credit-card sized computer.

The Raspberry Pi Foundation said it partnered with Indiecity and Velocix to create a store for applications that run on the Raspberry Pi computer. The Foundation said that the store itself is an application that runs under its Raspbian Linux distribution and at launch has 23 applications available for download.

The Raspberry Pi Store contains games such as Freeciv alongside applications such as Libreoffice and Asterisk. The Raspberry Pi Foundation said its store accepts compiled binaries, Python code, images, audio and video.

The Raspberry Pi Store will allow developers to charge for applications, with the Foundation saying that it hopes to see a mix of hobbyist and commercial software. The Foundation also asked users that download applications to review them in order to improve the results put out by its recommendations system.

While the Raspberry Pi was initially intended to help teach people how to program, the device has gained wider popularity due to the fact that its hardware can run many typical PC desktop applications. The Foundation’s Raspberry Pi Store will make it easier for users to find and install applications on the device, which can only be a good thing for the Raspberry Pi Foundation and Linux adoption.

Source…

2TB USB Thumb Drive On The Horizon?

According to a video posting on YouTube of memory card maker Transcend and Industrial Technology Research Institute (ITRI) have joined forces to produce a USB 3.0 flash drive with up to 2TB of capacity.

The drive, described as measuring as long as a human thumb and slightly thicker than a penny, was video taped at the Display Taiwan 2011 technology show. The model on display had only 16GB, but the display states that it’s capable of scaling to 2TB.

Read more…

10-Inch Tablets For $299?

Taiwan’s Micro-Star International unveiled two new Android-based tablets at Computex this week that appear much sleeker than the WindPad tablets it has manufactured in the past.

The WindPad Enjoy 10 and Enjoy 7, which are being shown in a location further away from the show floor, will start shipping to retailers at the end of July, priced at $299 for the 10-inch version and $199 for the 7-inch version, said MSI product manager Rory Chen.

The tablets on show here were running the 2.3 Gingerbread version of Android. MSI hopes to start using the 3.0 Honeycomb Android OS on the tablets later this year, but it’s unlikely to be available with the first devices that go on sale.

The Enjoy 10 isn’t as thin and light as the iPad 2, and a spec sheet shows the new tablets have no 3G option — only Bluetooth and Wi-Fi. It’s also behind the iPad in other areas such as memory and storage. But the Enjoy 10′s $299 price tag makes it considerably cheaper than Apple’s tablet, which starts at $499 for the Wi-Fi-only model.

Read More…..

Laptop Users Still Prefer USB Modems

Mobile data users still overwhelmingly prefer USB modems for keeping PCs and other devices connected while on the go, but they may turn more to built-in cellular radios and portable Wi-Fi hotspots over the few years, according to ABI Research.

Despite the growing market for connected tablets and the availability of laptops and netbooks with high-speed cellular modules built in, worldwide shipments of USB modems still surpass embedded 3G and 4G modules by three to one, ABI said in a report Monday. But by 2016, that ratio may change to near an even split, said ABI analyst Jeff Orr.

Mobile operators including AT&T, Verizon Wireless and Clearwire give consumers the option of buying a laptop or netbook with an integrated cellular module. Those computers let subscribers go online almost anywhere without using up a USB port or carrying around a separate piece of hardware that sticks out of the side of the system.

Built-in modems lock buyers into one carrier or network technology for the life of the device, which most consumers and enterprises don’t want, Orr said. They buy USB modems because they can be easily discarded when a better network comes along, he said. Prices are low and often there is no early termination fee for getting out of the carrier data contract.  “That device becomes almost disposable,” he said.

One problem with built-in modems is that wireless technology changes faster than most users want to change computers. For example, the past three years — a typical PC lifetime — have seen the construction of both a WiMax and an LTE network in many cities around the U.S., offering 10 times or more the speed of 3G networks.

The market for embedded modems is still fairly small, according to ABI. In 2010, only about 5% of laptops worldwide shipped with built-in cellular modems, Orr said. Among netbooks, 17% came with modems, but overall shipments were much smaller for netbooks than for laptops. Meanwhile, 40% of tablets came with such modems, but the overall tablet market was smaller still.

Read More….

« Previous Page