Thomas Hawk posted a photo:
Thomas Hawk posted a photo:
date stamped on slide, July 1989, handwritten on slide, “July 9, 1989, Fairbanks, Alaska"
Zon, water, beschutting tegen wind en een goede pit. Meer heb je niet nodig om een reuzenpompoen te laten groeien. Het is al meer dan tien jaar de passie van Jan Scheffe. Hij heeft als doel om de allergrootste en zwaarste van het land te kweken. Met het NK pompoen kweken voor de deur is het de vraag of hij dit jaar misschien kan winnen.
"The Register has a story about a Windows backdoor that waits silently in memory for a 'magic packet' before springing into action," writes Slashdot reader fred133. "No outgoing traffic, just waiting..." From the report: Like a sleeper cell awaiting activation, a never-before-seen Windows backdoor dubbed Sleepwalker waits silently in memory for one specifically crafted network packet to wake it up and deliver commands using the malware's 23-instruction language. The commands can do everything from running code directly in memory to moving data off the computer. Malware researcher Dominik Reichel discovered the passive backdoor, which also has its own command language, and detailed Sleepwalker in a technical analysis on Monday. "What makes it worth writing up is what that packet carries: not a readable command, but a short program written in a command language of the backdoor's own design," Reichel said. "Its 23 instructions cover scheduling, several ways to move data, staged file delivery and running code directly in memory. Recovering the encryption key is not enough to understand one of these programs. The internal command language must be reverse engineered as well."
In addition to having its own command language, it's also notable that the remote host can be a VMware VMCI target instead of a normal network address. "Taken as a whole, the approach here is consistent with a targeted, well-resourced operation rather than an opportunistic one," Reichel wrote. The malware, hidden inside a 64-bit Windows DLL file, impersonates Microsoft's dpapi.dll, part of Windows' data protection API for protecting sensitive data. It exports the same seven functions as the real dpapi.dll, but attempts to forward calls to a file named dpapisvc.dll, which is not a real Windows component. The file also has a forged ESET Management Agent version resource, and loads via side-loading into ERAAgent.exe, the Windows executable for ESET Management Agent. After confirming that its host process is named ERAAgent.exe, Sleepwalker goes to sleep inside the computer's memory, which also helps it remain hidden from traditional anti-virus tools.
Unlike most backdoors, which call back to an attacker-controlled command-and-control (C2) server and start receiving commands, Sleepwalker lies in wait, checking every packet that passes through the network looking for a specific pattern - this is called a magic packet. Once it sniffs out a packet that matches the exact pattern, the backdoor decrypts the data and treats it as a command. "Because the backdoor never sends anything out on its own and does not open any obvious listening port by default, tools that watch for connections to known-bad domains or unusual outbound traffic will not see anything unusual," Reichel wrote. "The absence of outbound connections to known-bad infrastructure does not rule out an infection, either. A machine can be fully compromised by this backdoor while producing nothing at all for a network monitor to flag."
In addition to having its own command language, it's also notable that the remote host can be a VMware VMCI target instead of a normal network address. "Taken as a whole, the approach here is consistent with a targeted, well-resourced operation rather than an opportunistic one," Reichel wrote. The malware, hidden inside a 64-bit Windows DLL file, impersonates Microsoft's dpapi.dll, part of Windows' data protection API for protecting sensitive data. It exports the same seven functions as the real dpapi.dll, but attempts to forward calls to a file named dpapisvc.dll, which is not a real Windows component. The file also has a forged ESET Management Agent version resource, and loads via side-loading into ERAAgent.exe, the Windows executable for ESET Management Agent. After confirming that its host process is named ERAAgent.exe, Sleepwalker goes to sleep inside the computer's memory, which also helps it remain hidden from traditional anti-virus tools.
Unlike most backdoors, which call back to an attacker-controlled command-and-control (C2) server and start receiving commands, Sleepwalker lies in wait, checking every packet that passes through the network looking for a specific pattern - this is called a magic packet. Once it sniffs out a packet that matches the exact pattern, the backdoor decrypts the data and treats it as a command. "Because the backdoor never sends anything out on its own and does not open any obvious listening port by default, tools that watch for connections to known-bad domains or unusual outbound traffic will not see anything unusual," Reichel wrote. "The absence of outbound connections to known-bad infrastructure does not rule out an infection, either. A machine can be fully compromised by this backdoor while producing nothing at all for a network monitor to flag."
Read more of this story at Slashdot.
WASHINGTON (ANP/AFP) - De Amerikaanse president Donald Trump heeft opnieuw uitgehaald naar de regering van Iran. Hij stelt dat zij met het doden van demonstranten verantwoordelijk is voor een gigantische humanitaire crisis die "moet worden gestopt".
"De falende Islamitische Republiek Iran betaalt grote delen van haar leger niet uit, terwijl ze tegelijkertijd betogers doodt, zelfs wanneer die niet eens aan het demonstreren zijn, op een schaal die we nog nooit eerder hebben gezien", aldus Trump op zijn platform Truth Social. Hij verklaart dat de crisis "nu" moet worden beëindigd.
De precieze aanleiding voor Trumps bericht is niet duidelijk, maar het aantal executies in Iran is toegenomen sinds de oorlog op 28 februari begon. De oorlog begon met Amerikaans-Israëlische aanvallen op Iran. In januari vonden in Iran massademonstraties plaats tegen de regering, waarbij duizenden mensen werden gedood. Er worden nog altijd mensen ter dood gebracht voor die demonstraties.
KYIV (ANP/RTR) - Oekraïne heeft wat extra Patriot-luchtverdedigingsraketten gekregen, zegt president Volodymyr Zelensky. Bondgenoten hebben volgens hem ook luchtafweerbatterijen voor de korte afstand toegezegd en raketten waarmee gevechtsvliegtuigen Russische drones en kruisraketten kunnen neerhalen.
Het gaat om een klein aantal van de schaarse Patriots, zei Zelensky tegen de Oekraïense omroep Suspilne. Hij liet in het midden wie de geavanceerde Amerikaanse raketten schenkt. Oekraïne vraagt al lange tijd met klem om Patriots, die ook opgewassen zijn tegen de moeilijkst te onderscheppen Russische projectielen. Omdat Oekraïne er geregeld zonder zit, hebben de Russische zogeheten ballistische raketten vaak vrij spel.
Behalve wat Patriots krijgt Oekraïne volgens Suspilne AMRAAM-raketten en meer Franse Crotale-luchtverdedigingssystemen met bijbehorende raketten.
Rusland bestookt Oekraïense steden vrijwel dagelijks. Oekraïne vreest opnieuw een winter zonder verwarming en stroom.
DUBLIN (ANP) - De Ierse luchtvaartmaatschappij Ryanair haalt fel uit naar het kabinet-Jetten vanwege het "volledige falen" om iets te doen aan de "schadelijke" Nederlandse vliegtaks. De maatschappij zegt niet verder te willen groeien in Nederland zolang deze "nep-groene belasting" niet wordt afgeschaft.
"De begroting voor 2027 biedt de regering-Jetten een duidelijke kans om eindelijk de Nederlandse vliegtaks af te schaffen en jaren van achteruitgang op het gebied van bereikbaarheid, toerisme en werkgelegenheid terug te draaien", meldde Ryanair dinsdag.
Volgens de luchtvaartmaatschappij hebben passagiers en luchthavens in Nederland te maken met de hoogste vliegbelasting van Europa. Tegelijkertijd verlagen concurrerende landen hun vliegtaksen om daarmee vliegverkeer, toeristen en banen aan te trekken.
Volgens Ryanair verliezen Nederlandse luchthavens steeds meer passagiers aan buitenlandse luchthavens net over de Nederlandse grens.
Kenya Glasgow and her toddler died after lightning struck in Margate, near Fort Lauderdale
A mother and her toddler were killed recently by a lightning strike in south Florida, local authorities said.
The tragedy happened in Margate, near Fort Lauderdale, on Sunday. The victims were Kenya Glasgow, 31, and her two-year-old daughter, named in media reports as Kennedi.
Continue reading...News comes day after 12 people were arrested over crash in which car drove wrong way along dual carriageway
Five more people have been arrested by detectives investigating the events leading up to the crash on the A66 that killed seven people, including two police officers.
Cleveland police made the announcement after 12 people were arrested on Monday.
Continue reading...The Guardian’s picture editors select photographs from around the world
Continue reading...Local media report discovery by German investigators after attempted attack on cargo and military logistics hub
German investigators uncovered a third drone and suspected military explosives thought to be connected to an attempted attack on Leipzig airport, local media have reported.
The drone was discovered in Kabelsketal, just to the west of the airport, along with about 50g (1.8oz) of a suspected military explosive on 14 August, 10 days after the unsuccessful sabotage. Leipzig airport is a cargo and military logistics hub used by Nato and Ukraine’s Antonov Airlines for transporting military supplies.
Continue reading...There are countless initiatives around the world that can inspire people and spur them into action. Amid the devastation of the climate crisis, our journalists strive to highlight these stories of hope
The news is very often about the bad things (especially if you’re on the Guardian’s environment desk). Wildfires, floods, tipping points, billionaires making huge profits and buying themselves island refuges for the apocalypse … And yet, ticking along beside that is the steady pulse of what the rest of humanity is doing in response to the climate crisis. From housing developments with no cars to buildings made out of hemp, all over the planet, people are ploughing ahead and changing their neighbourhoods and cities and world.
But as news stories typically need to be about new developments or things people didn’t previously know about, it can be hard to cover all those brilliant initiatives being undertaken in the background – no matter how cheering they are. Which is why, back in 2023, we decided to ignore the usual rules about what constitutes “news” and start writing about them anyway. Readers, we knew, would like to hear about them.
Climate campaign 2026: help us reach 30,000 acts of support
Continue reading...Self-described misogynist and his brother, Tristan, are playing role to generate income from online attention, Miami court filing says
Andrew Tate rented supercars and borrowed a yacht to appear “uberwealthy” and generate online engagement, his lawyer has said.
Legal representatives for the self-described misogynist social media influencer and his brother, Tristan Tate, have claimed the pair deliberately portray themselves as far wealthier than they are because their “business model depends on online attention”.
Continue reading...
Social
Jongens we gaan edgen voor Wouter Koolmees - beter bekend als Koolmezen. Het nieuwe kortingsplan is nog moeilijker dan zomer/winterijd, maar we gaan toch een poging doen. September is de drukste reisperiode van het jaar, dus dan gaat-ie in. De zogeheten 'PrijsTijd Deal korting' is dus niet de gebruikelijke korting die in daluren buiten de spits om geldt, maar een nieuw soort korting die geldt op momenten buiten daluren buiten de spits. Zoals vóór 07:30 of na 08:30, in plaats van vóór 06:30 of of na 09:00. Tot zover kristalhelder natuurlijk! Maar slecht nieuws makker want kaartjes met 'PrijsTijd Deal korting' moet je een dag van te voren bestellen en de korting is afhankelijk van hoeveel dagen je van te voren boekt maximaal 30%, in tegenstelling tot de korting van maximaal 60% op dezelfde 'PrijsTijd Deal korting' die vanaf september 2024 al beschikbaar was van 9:00 tot 16:00 en van 18:30 uur tot 06:30 - niet te verwarren met de gebruikelijke daluurkorting die je niet van te voren hoef te bestellen. Afijn, zie je op 't perron en spreek je in de stiltecoupé - wat samen met de Efteling overigens het laatste stukje soeverein Nederlands grondgebied is.
Lekker Koolmezen!
Social
Asked about the Boeing Globemaster on Tuesday morning, the Kremlin claimed that it had no information about the aircraft's arrival.
Pierre Gasly added points to Alpine's tally in an upgraded A526 at the Dutch Grand Prix, but it proved to be a tougher day for team mate Franco Colapinto.
Het gerechtshof oordeelde dat Thijs Hermans deels toerekeningsvatbaar was toen hij in 2019 drie wandelaars doodstak. Hermans wil dat zijn zaak herzien wordt. De advocaat-generaal adviseert nu aan de Hoge Raad de veroordeling in stand te houden.
/s3/static.nrc.nl/wp-content/uploads/2026/08/25132710/250826OND_2035511491_thijsH.jpg)