Fixing Dirty Pipe: Samsung rolls out Google code faster than Google

The Pixel 6 Pro.

Enlarge / The Pixel 6 Pro. (credit: Ron Amadeo)

Dirty Pipe is one of the most severe vulnerabilities to hit the Linux kernel in several years. The bug lets an unprivileged user overwrite data that is supposed to be read-only, an action that can lead to privilege escalation. The bug was nailed down on February 19, and for Linux flavors like Unbuntu, a patch was written and rolled out to end users in about 17 days. Android is based on Linux, so Google and Android manufacturers need to fix the bug, too.

It has been a full month since the Linux desktop rollout, so how is Android doing?

According to the timeline given by Max Kellermann, the researcher who discovered the vulnerability, Google fixed Dirty Pipe in the Android codebase on February 23. But the Android ecosystem is notoriously bad at actually delivering updated code to users. In some sense, Android’s slowness has helped with this vulnerability. The bug was introduced in Linux 5.8, which was released in August 2020. So why didn’t the bug spread far and wide across the Android ecosystem over the last two years?

Read 7 remaining paragraphs | Comments

Canoo wins NASA’s Artemis crew transport vehicle contract

Canoo's lifestyle vehicle will be too small to fit NASA's needs, but perhaps the Artemis Crew Transport Vehicle will look like a stretched-out version of this van.

Enlarge / Canoo’s lifestyle vehicle will be too small to fit NASA’s needs, but perhaps the Artemis Crew Transport Vehicle will look like a stretched-out version of this van. (credit: Canoo)

When astronauts finally return to the Moon with NASA’s Artemis project, their journey to the launchpad will be fully electric. The space agency has been looking for a replacement for its early 1980s-era Astrovan, and this week it awarded a contract to electric vehicle startup Canoo.

NASA had a number of requirements for the Artemis transport vehicle when it issued the contract opportunity in 2021.

The agency said it would consider both commercial and non-commercial vehicles but that the crew transport vehicle must produce zero emissions and be designed and built according to current federal vehicle safety standards. The vehicle also needs to be able to carry a driver, four suited-up astronauts, and three extra personnel.

Read 4 remaining paragraphs | Comments

Russia threatens Wikipedia with fines over “false information”

Russian President Vladimir Putin in 2021.

Enlarge / Russian President Vladimir Putin in 2021. (credit: RAMIL SITDIKOV/SPUTNIK/AFP via Getty Images)

Roskomnadzor, Russia’s censorship authority, issued another demand on Tuesday for Wikipedia to remove what it called “unreliable socially significant information.” The agency warned that failure to comply could lead to fines of up to 4 million rubles ($50,000).

The Wikimedia Foundation did not immediately respond to an email from Ars seeking comment. But the organization made its stance plain last month after the Russian government made similar demands. A March 3 statement on the Wikimedia website declared that “we will not back down in the face of efforts to censor and intimidate members of our movement.”

When Russia invaded Ukraine, the government tightened its already strict media censorship regime. In early March, President Vladimir Putin signed legislation prohibiting the publication of “fake news.” Violators could face prison terms of as long as 15 years. Passage of the law led a number of Western media organizations to suspend reporting in Russia.

Read 7 remaining paragraphs | Comments

Canary Islands eruption didn’t act as we expected—we can now ask why

The Cumbre Vieja volcano's eruption was complicated and not entirely what experts expected.

Enlarge / The Cumbre Vieja volcano’s eruption was complicated and not entirely what experts expected. (credit: Andreas Weibel)

Last fall’s Cumbre Vieja volcanic eruption in the Canary Islands was surprising for several reasons. Most predominantly, the eruption did not cause tsunamis to spread across the Atlantic Ocean, as some experts had predicted. But for volcanologists, the eruption displayed several other unexpected features that may help experts better forecast which volcanos are most at risk of calamitous eruptions, allowing for better long-term planning for La Palma and similar volcanic regions.

Researchers are still in the early phases of analyzing the wealth of data they collected during the nearly three-month-long eruption (85 days and eight hours, to be precise). But as highlighted in a recent perspective article, the eruption may answer a number of ongoing questions while raising several new ones—particularly about its surprise finale.

Rare learning opportunity

The 2021 Cumbre Vieja eruption lasted longer and produced more lava (over 200 million m3) than any other in La Palma’s recorded history. This long duration, combined with the relatively convenient location of the Canary Islands, provided a rare opportunity for researchers around the world to study the volcano’s progress in detail. The observations included geophysical and geochemical measurements—before, during, and after the eruption—as well as insights into the magma flow below ground and the lava paths above.

Read 9 remaining paragraphs | Comments

Find the soul