Archivo del Autor: Belen De Leon

Feast your eyes on the first interstellar comet ever directly observed

The solar system has another interstellar visitor, but there’s no question of this one being an alien spacecraft. It’s a true comet and the first we’ve ever confirmed that comes from interstellar space, and the Hubble Space Telescope captured some amazing imagery of it. Good thing, too — because it’s never coming back.

You probably remember ‘Oumuamua as the interstellar object that launched a thousand headlines — mostly around the idea that it could be an alien ship of some kind. Needless to say that hypothesis didn’t really pan out, but honestly the object was interesting enough without being an emissary from another world.

This new comet, called 2I/Borisov (not as catchy), was first identified in August by an amateur astronomer named Gennady Borisov, who lives in Crimea. Studies by other near-Earth object authorities observed its trajectory and concluded that it did indeed come from interstellar space.

How do they know? Well, for one thing, it’s going 110,000 miles per hour, or 177,000 kph. “It’s traveling so fast it almost doesn’t care that the Sun is there,” said UCLA’s David Jewitt, who leads the Hubble team watching 2I/Borisov. (Note that in the gif above, the streaks don’t indicate its speed — those are from the Earth spinning.)

Basically the angle it’s coming in, plus the speed at which it’s traveling, mean it can’t possibly be in even a super-wide orbit of the Sun. It’s just passing through — and in early December will be less than 200 million miles from the Sun. It’s not on track to hit anything, fortunately, which would be a truly cosmic coincidence, so in a couple months it’ll be gone again.

But its short visit is ample opportunity to study its makeup, which appears to be very similar to our own “local” comets. Although it would be cool for 2I/Borisov to be super weird, its similarity is interesting in itself — it suggests that comet formation in other solar systems is not necessarily different.

It is, however, very different from ‘Oumuamua, which appeared to be an inert, oblong rock. Interesting in its own way, but comets are so dynamic: clouds of dust and ice surrounding a much smaller core. Very picturesque, even if the tails don’t always point the way you think they should.

Note that these interstellar visitors are actually thought to be quite common, with perhaps thousands in the solar system at any given moment. But few are big and bright enough to be detected and studied.

Hubble will continue observing 2I/Borisov through January and perhaps beyond. If it’s never going to return, we want to gather as much data as possible while we can.

Source: TechCrunch

The FrankOne is a simple and portable coffee brewing gadget

The FrankOne coffee maker, fresh off a successful crowdfunding campaign, is now available for purchase, and I got a chance to test out one of the first run of these funky little gadgets. While it won’t replace my normal pourover or a larger coffee machine, it’s a clever, quick and portable way to make a cup.

Designer Eduardo Umaña pitched me the device a little more than a year ago, and I was taken by the possibility of vacuum brewing — and the fact that, amazingly, until now no one from Colombia had made a coffee maker (it’s named after Frank de Paula Santander, who kicked off the coffee trade there). But would the thing actually work?

In a word, yes. I’ve tested the FrankOne a few times in my home, and, while I have a couple reservations, it’s a coffee making device that I can see myself actually using in a number of circumstances.

The device works quite simply. Ground coffee goes in the top, and then you pour in the hot (not boiling!) water and stir it a bit — 30-50 seconds later, depending on how you like it, you hit the button and a pump draws the liquid down through a mesh filter and into the carafe below. It’s quick and almost impossible to mess up.

The resulting coffee is good — a little bit light, I’d say, but you can adjust the body with the size of the grounds and the steeping time. I tend to find a small amount of sediment at the bottom, but less than you’d get in a cup of French press.

Because it’s battery powered (it should last for ~200 cups and is easily recharged) and totally waterproof, cleaning it is a snap, especially if you have a garbage disposal. Just dump it and rinse it, give it a quick wipe and it’s good to go. It gets a bit more fussy if you don’t have a disposal, but what doesn’t?

I can see this being a nice way to quickly and simply make coffee while camping — I usually do a French press, but sometimes drip, and both have their qualities and limitations. The FrankOne would be for making a single cup when I don’t want to have to stand by the pourover cone or deal with disassembling the French press for cleaning.

It’s also, I am told by Umaña, great for cold brew. I didn’t have the heart to tell him that I don’t really like cold brew, but I know many do, and Umaña promises the FrankOne works wonders in a very short time — four minutes rather than an hour. I haven’t tested that, because cold brew tastes like bitter chocolate milk to me, but I sincerely doubt he would mention it as many times as he did if it didn’t do what he said.

There are, I feel, three downsides. First, you’re pretty much stuck with using the included glass carafe, because the device has to create a seal around the edge with its silicone ring. It didn’t fit in my biggest mug, but you might find an alternative should the carafe (which I have no complaints about — it’s attractive and sturdy) crack or get lost.

Second, it doesn’t produce a lot of coffee. The top line as indicated in the reservoir is probably about 10-12 ounces — about the size of a “tall” at a coffee shop. Usually that’s a perfect amount for me, but it definitely means this is a single-serving device, not for making a pot to share.

And third, for the amount of coffee it produces, I feel like it uses a lot of grounds. Not a crazy amount, but maybe 1.5-2x what goes into my little Kalita dripper — which is admittedly pretty economical. But it’s just something to be aware of. Maybe I’m using too much, though.

I reviewed the Geesaa a little while back, and while it’s a cool device, it was really complex and takes up a lot of space. If I wanted to give it to a friend I’d have to make them download the app, teach them about what I’d learned worked best, share my “recipes” and so on. There was basically a whole social network attached to that thing.

This is much, much easier to use — and compact, to boot. It’s a good alternative to classic methods that doesn’t try to be more than a coffee maker. At $120 it’s a bit expensive, but hey, maybe you spend that on coffee in a month.

And by the way, you can use the discount code “TC” at checkout to get 10% off — this isn’t a paid post or anything, Umaña’s just a nice guy!

Source: TechCrunch

Inside the shutdown of the ‘world’s largest’ child sex abuse website

This morning, the Justice Department announced that it had brought charges against the administrator and hundreds of users of the “world’s largest” child sexual exploitation marketplace on the dark web.

For me, it marked the end of a story I’ve wanted to write for two years.

In November 2017, I was working for CBS as the security editor at ZDNet. A hacker group reached out to me over an encrypted chat claiming to have broken into a dark web site running a massive child sexual exploitation operation. I was stunned. I had previous interactions with the hacker group, but nothing like this.

The group claimed it broke into the dark web site, which it said was titled “Welcome to Video,” and identified four real-world IP addresses of the site, said to be different servers running this supposedly behemoth child abuse site. They also provided me with a text file containing a sample of a thousand IP addresses of individuals who they said had logged in to the site. The hackers boasted about how they siphoned off the list as users logged in, without the users’ knowledge, and had more than a hundred thousand more — but they would not share them.

If proven true, the hackers would have made a major breakthrough in not only discovering a major dark web child abuse site, but could potentially identify the owners — and the visitors to the site.

But at the time, we could not prove it.

My then editor-in-chief and I discussed how we could approach the story. A primary concern was that the dark web site was already under federal investigation, and writing about it could jeopardize that effort.

But we also faced another headache: There was no legal way we could access the site to verify it was what the hackers claimed.

The hackers gave me a username and password for the site, which they said they had created just for me to verify their claims. But we could not access the site for any reason — even for journalistic reasons and in a controlled environment — for fear that the site may display child abuse imagery. Only federal agents working an investigation are allowed to access sites that contain illegal content. While journalists have a lot of flexibility and freedoms, this was not one of them.

After a call with several CBS lawyers, we decided that there was no legal way to write the story without verifying the site’s contents, something we legally weren’t able to do.

The story was dead, but the site wasn’t.

One thing the lawyers couldn’t tell me is if I should report the findings to the government. That was ultimately my decision to make. It’s a bizarre situation to be in. As a cybersecurity and national security reporter, the government all too often is “the nemesis,” often a target of journalistic inquisitions and investigations. But while journalists are told to report and observe and not get involved, there are exceptions. Risk to life and child exploitation are top of the list. A journalist cannot idly stand by knowing there could be a car bomb sitting outside a building, ready to detonate. Nor can one dismiss the idea of a child abuse site continuing to operate on the dark web.

I spoke with a well-known journalist to ask for ethical advice. We agreed to speak on background, from reporter to reporter. Having never faced a situation like this, my primary concern was to ensure I was on the right moral, ethical and legal side of things. Was it right to report this to the feds?

The answer was simple and expected: Yes, it was right to report the information to the authorities, so long as I protected my source. Protecting your sources is one of the cardinal rules of journalism, but my source was a hacker group — it was not the dark web site itself. After all, I was working under the assumption that the authorities would not care much for the source information anyway.

I reached out to a contact at the FBI, who passed me on to a special agent at a field office. After a brief phone call, I emailed the four IP addresses slated to be the dark web site’s real-world location, and the list of the thousand alleged users of the site.

And then silence. I heard nothing back. I followed up and asked, but the agent warned that if the site became — or was already — subject to investigation, there was little, if anything, they could say.

I recall the hackers were frustrated. After I told them I wouldn’t be writing the story, we are no longer communicating.

Weeks went by. I felt just as frustrated at the lack of insight into what I had only guessed or hoped was progress by the federal agents.

I recall running the list of IP addresses that the hackers gave me through a resolver, which provided some limited insight into who might be visiting the dark web site. We found individuals access the dark web site from the networks of the U.S. Army Intelligence, the U.S. Senate, the U.S. Air Force and the Department of Veterans Affairs, as well as Apple, Microsoft, Google, Samsung and several universities around the world. We could not identify, however, specific individuals who accessed the site. And because the dark web is anonymized, it’s likely that not even companies knew their staff were accessing this site.

How could they possibly let this go, I thought to myself, wondering whether the FBI agent had acted on the information I handed over. If there was an investigation it would take time and effort, and the wheels of government seldom move quickly. Would I ever know whether the perpetrators would ever be caught?

Today, two years later, I got my answer.

U.S. prosecutors said in the indictment, filed in August 2018 but unsealed Wednesday, that the dark web site — confirmed as “Welcome to Video” — had some 250,000 user-uploaded graphic images and videos of children who were being sexually abused. The government called it the “largest darknet child pornography website” in a press release.

This morning, after news of the site’s removal had been reported, I rifled through the documents posted on the Justice Department’s website and found a screenshot of the site, with the full web address in the address bar. It was a match. For the first time since the hackers told me of the dark web site, I went to the Tor browser and pasted in the address. It loaded — with the government’s “website seized” notice staring back at me.

According to the indictment, federal agents began investigating the site in September 2017, two months before the hackers breached the site. The site’s administrator, Jong Woo Son, had been running the operation from his residence in South Korea since 2015. The indictment said the main landing page to the site contained a security flaw that let investigators discover some of the IP addresses of the dark web site — simply by right-clicking the page and viewing the source of the website.

It was a major error, one that would trigger a chain of events that would ensnare the entire site and its users.

Prosecutors said in the indictment that they found several IP addresses: 121.185.153.64 and 121.185.153.45. One of the IP addresses the hackers gave me was 121.185.153.114 — an address on the same network subnet as the dark web site.

It was long-awaited confirmation that the hackers were telling the truth. They did in fact breach the site. But whether or not the government knew about the breach remains a mystery.

Some five months after I contacted the FBI, the government obtained a warrant to seize and dismantle the dark web site. It’s believed the indictment was kept under seal until today in order to arrest, charge and prosecute individuals suspected of being involved in the site.

In total, there were 337 arrests, including a former Homeland Security special agent and a Border Patrol officer.

Authorities were able to rescue 23 children who were being actively abused.

I reached out to the federal agent this morning, and was told the FBI was not involved in the investigation. The Internal Revenue Service’s Criminal Investigation division, which investigates and prosecutes financial crimes, and the Homeland Security Investigations unit, which largely deals with human smuggling, child trafficking and related computer crimes, were credited with the work.

While authorities from the U.K. and South Korea contributed to the investigation, sources say the IRS received an anonymous tip that kickstarted it.

From there, the IRS used technology to trace bitcoin transactions, which the dark web site used to profit from the child exploitation videos. Users would have to pay in bitcoin to download content or upload their own child exploitation videos. The government also launched a civil forfeiture case to seize the bitcoins allegedly used by 24 individuals in five countries who are accused of funding the site.

The hacker group has not been in touch since we broke off communications. Publishing a story about the hack two years ago may have caused irreparable harm to the government’s investigation, potentially sinking it entirely. It was a frustrating time, not least being in the dark and not knowing if anyone was doing anything.

I’ve never been so glad to walk away from a story.

Source: TechCrunch