GitHub Fixes NPM Bugs That Leaked Private Package Names

GitHub has fixed several flaws with npm packages that leaked private names and let attackers publish new versions of a package they didn’t have rights to.

The data leak was identified by GitHub on October 26th and by the 29th, all records containing private package names were deleted from the npm’s replication database. Although, GitHub does warn that despite this, the replicate.npmjs.com service is consumed by third parties who may, therefore, continue to retain a copy or “may have replicated the data elsewhere.”

Brave Browser Introduces Native Crypto Wallet Called 'Brave Wallet'

On Tuesday Brave introduced a native wallet within its browser that doesn’t require an extension called Brave Wallet.

Unlike most crypto wallets, the Brave Wallet does not require extensions; it’s browser-native, reducing security risks and reliance on extra CPU and memory. Users can transact with almost any crypto asset with superior safety and performance, as well as connect with other wallets and Web3 DApps. The Brave Wallet will soon be available on our mobile apps as well.

Apple Maps in Germany And Spain Lets Users Report Accidents and Hazards

The new feature in Apple Maps that lets users reports accidents and hazards is now available to users in both Germany and Spain, 9to5 Mac said. The feature is rolling out in various countries around the world and was already available in Australia, Brazil, Singapore, the United Kingdom, and the U.S. It’s nice to see the app developing like this, having lagged behind its rival from Google for a number of years.

Germany is the latest country to add support for reporting incidents using Apple Maps. This feature launched alongside iOS 14.5 and is slowly expanding globally. As spotted by Macerkopf, with this feature now live in Germany, users can report an accident and danger zones on a new menu of the app. Unfortunately, as spotted by a Reddit user, it’s not possible to use the speed check option, which is available in other countries.

Qualcomm Sets Out Apple Silicon Competitor

Qualcomm is preparing for battle with Cupertino and its M-series chips. It laid out its competition to Apple Silicon for Windows device, which will launch in 2023, The Verge reported. Perhaps most interesting of all is the fact that those working on this project used to work for Apple.

Dr. James Thompson, Qualcomm’s chief technology officer, announced the plans for the new chips at the company’s 2021 investor day event, with the goal of getting samples to hardware customers in about nine months ahead of product launches with the new chip in 2023. The new chip will be designed by the Nuvia team, which Qualcomm had bought earlier this year in a massive $1.4 billion acquisition. Nuvia, notably, was founded in 2019 by a trio of former Apple employees who had previously worked on the company’s A-series chips.

How The Script For 'CODA' Was Written in ASL

In a new interview with Gold Derby, Sian Heder discussed how she learned American Sign Language (ASL) and wrote CODA in it. I confess that it didn’t occur to me that such a movie would have to be scripted in this way, although it makes total sense when Ms. Heder explains it. The discussion gives another indication of the pioneering work by both cast and crew to make the film, which is available on Apple TV+.

It’s a “hugely different” process to write in ASL because it “has no written form.” Heder learned ASL in the process of making the film, but at first, “I wrote in English, and I wrote the way that I’ve written every script, where I’m talking out loud to myself and playing every part and really hearing the characters.” Then she and the film’s ASL consultants “went line by line through the script, every piece of dialogue, and we would go back and forth and discuss, and [ASL master Alexandria Wailes] would show me possible sign choices.” That process from the initial English-language script to the finished film was “really amazing,” Heder says. “People talk about that feeling as a writer where you watch your words come to life. And this was the most literal form of that.”

Amazon Prime Video Now Available in the Mac App Store

Starting today, Prime Video is rolling out a native macOS app allowing customers to stream and download Prime Video content on Macs for offline viewing in the app. This includes licensed titles and Amazon Originals such as, The Tomorrow War, Coming 2 America, The Boys, The Marvelous Mrs. Maisel and The Wheel of Time (premiering Nov 19). Prime Video customers worldwide with Big Sur 11.4 and above can download the app for free on the Mac App Store. The Prime Video macOS app streaming experience will also include: Picture-in-Picture (allows viewers to play video content in a resizable floating window that isn’t blocked by other windows), Search/browse functionality, In-app transactions (TVOD purchases/rentals), Amazon’s growing line-up of live sports globally, including Thursday Night Football and the English Premier League (where available).

New 'BotenaGo' Targets Routers and Smart Home Devices in Devastating Attack

AT&T Alien Labs discovered malware it dubs BotenaGo. It affects millions of routers and Internet of Things devices found with smart homes. The “devastating” part comes from the fact that it uses over 30 separate exploits due to insecure devices.

The BotenaGo malware starts by initializing global infection counters that will be printed to the screen, informing the hacker about total successful infections. It then looks for the ‘dlrs’ folder in which to load shell scripts files. A loaded script will be concatenated as ‘echo -ne %s >> ‘. If the ‘dlrs’ folder is missing, the malware will stop and exit at this point. For the last and most important preparation, the malware calls the function ‘scannerInitExploits’, which initiates the malware attack surface by mapping all offensive functions with its relevant string that represent the targeted system.