"Six years after decommissioning USS Enterprise, the world's first nuclear-powered aircraft carrier, the U.S. Navy is still figuring out how to safely dismantle the ship," reports Popular Mechanics. schwit1 tipped us off to their report: The General Accounting Office estimates the cost of taking apart the vessel and sending the reactors to a nuclear waste storage facility at up to $1.5 billion, or about one-eighth the cost of a brand-new aircraft carrier.

The USS Enterprise was commissioned in 1961 to be the centerpiece of a nuclear-powered carrier task force, Task Force One, that could sail around the world without refueling.... The Navy decommissioned Enterprise in 2012 and removed the fuel from the eight Westinghouse A2W nuclear reactors in 2013. The plan was to scrap the ship and remove the reactors, transporting them by barge from Puget Sound Naval Base down the Washington Coast and up the Columbia River, then trucking them to the Department of Energy's Hanford Site for permanent storage. However, after decommissioning the cost of disposing of the 93,000-ton ship soared from an estimated $500-$750 million to more than a billion dollars. This caused the Navy to put a pause on disposal while it sought out cheaper options. Today the stripped-down hull of the Enterprise sits in Newport News, Virginia awaiting its fate.
"Although the Navy believes disposing of the reactors will be fairly straightforward, no one has dismantled a nuclear-powered carrier before...

"Whatever the Navy ends up doing, this will only be the first of many nuclear-powered carrier disposals."

"Some x86 CPUs have hidden backdoors that let you seize root by sending a command to an undocumented RISC core that manages the main CPU," Tom's Hardware reports, citing a presentation by security researcher Christopher Domas at the Black Hat Briefings conference in Las Vegas. The command -- ".byte 0x0f, 0x3f" in Linux -- "isn't supposed to exist, doesn't have a name, and gives you root right away," Domas said, adding that he calls it "God Mode." The backdoor completely breaks the protection-ring model of operating-system security, in which the OS kernel runs in ring 0, device drivers run in rings 1 and 2, and user applications and interfaces ("userland") run in ring 3, furthest from the kernel and with the least privileges. To put it simply, Domas' God Mode takes you from the outermost to the innermost ring in four bytes. "We have direct ring 3 to ring 0 hardware privilege escalation," Domas said. "This has never been done.... It's a secret, co-located core buried alongside the x86 chip. It has unrestricted access to the x86."

The good news is that, as far as Domas knows, this backdoor exists only on VIA C3 Nehemiah chips made in 2003 and used in embedded systems and thin clients. The bad news is that it's entirely possible that such hidden backdoors exist on many other chipsets. "These black boxes that we're trusting are things that we have no way to look into," he said. "These backdoors probably exist elsewhere." Domas discovered the backdoor, which exists on VIA C3 Nehemiah chips made in 2003, by combing through filed patents.
"Some of the VIA C3 x86 processors have God Mode enabled by default," Domas adds. "You can reach it from userland. Antivirus software, ASLR and all the other security mitigations are useless."

Yesterday, Facebook said it's banning websites that host and share blueprints of 3D-printed guns. "Sharing instructions on how to print firearms using 3D printers is not allowed under our Community Standards," said a spokesperson in an email statement. "In line with our policies, we are removing this content from Facebook." BuzzFeed was first to report the news: The move comes amid a rush by states to block these instructions from being posted. A July settlement between the State Department and Defense Distributed, an open-source organization that created the first completely 3D-printed gun, cleared the way for the group to publish the gun code. However, that was stalled when a federal judge on July 31 granted a temporary nationwide injunction that prevented Defense Distributed from uploading the plans. The injunction prevents Defense Distributed from publishing the plans. But the instructions are widely available online, on sites such as CodeIsFreeSpeech.com -- which hosts plans for parts of an AR-15, a Beretta, and Defense Distributed's Liberator. Attempts to post the site on a user's News Feed, through Facebook's Messenger app, or on Instagram (which Facebook owns) produce a variety of error messages. Other sites that host the files can still be posted through Facebook. Specifically, Facebook says that 3D-printed guns violate the regulated goods section of the social giant's community standards, which limits gun sales and exchanges to licensed dealers.

Doug Field, the former VP of Mac hardware who left Apple to become Tesla's chief vehicle engineer, has returned to Cupertino. Field is reportedly working on the company's secretive "Project Titan" self-driving car program. The Verge reports: Field ran Tesla's vehicle production and engineering, but CEO Elon Musk took over responsibility for production this year after the company failed to meet its initial first-quarter goal for the Model 3. Field then took a leave of absence in May, and subsequently left the company altogether in June. Project Titan has reportedly been scaled back considerably from its initial scope, with hundreds of people leaving the division as Apple is said to focus on seeking carmaker partners for its self-driving software. [Daring Fireball's John Gruber] speculates that Field's return to Titan suggests Apple could still have an interest in producing vehicles itself, while cautioning that employees do move between the two companies regularly.

An anonymous reader quotes a report from Wired: The connected devices you think about the least are sometimes the most insecure. That's the takeaway from new research to be presented at the DefCon hacking conference Friday by Ricky Lawshae, an offensive security researcher at Trend Micro. Lawshae discovered over two dozen vulnerabilities in Crestron devices used by corporations, airports, sports stadiums, and local governments across the country. While Crestron has released a patch to fix the issues, some of the weaknesses allowed for hackers to theoretically turn the Crestron Android touch panels used in offices and hotel rooms into spy devices.

Lawshae quickly noticed that these devices have security authentication protections disabled by default. For the most part, the Crestron devices Lawshae analyzed are designed to be installed and configured by third-party technicians, meaning an IT engineer needs to voluntarily turn on security protections. The people who actually use Crestron's devices after they're installed might not even know such protections exist, let alone how crucial they are. Crestron devices do have special engineering backdoor accounts which are password-protected. But the company ships its devices with the algorithm that is used to generate the passwords in the first place. That information can be used by non-privileged users to reverse engineer the password itself, a vulnerability simultaneously identified by both Lawshae and Jackson Thuraisamy, a vulnerability researcher at Security Compass. There were also over two dozen other vulnerabilities that could be exploited to do things like transform them into listening devices. In addition to being able to remotely record audio via the microphones to a downloadable file, Lawshae was also able to remotely stream video from the webcam and open a browser and display a webpage to an unsuspecting room full of meeting attendees. "Crestron has issued a fix for the vulnerabilities, and firmware updates are now available," reports Wired.

New submitter rokahasch writes: Starting today, August 10th, most users of the Dropbox desktop app on Linux have been receiving notifications that their Dropbox will stop syncing starting November. Over at the Dropbox forums, Dropbox have declared that the only Linux filesystem supported for storage of the Dropbox sync folder starting the 7th of November will be on a clean ext4 file system. This basically means Dropbox drops Linux support completely, as almost all Linux distributions have other file systems as their standard installation defaults nowadays -- not to mention encryption running on top of even an ext4 file system, which won't qualify as a clean ext4 file system for Dropbox (such as eCryptfs which is the default in, for example, Ubuntu for encrypted home folders).

The thread is trending heavily on Dropbox' forums with the forum's most views since the thread started earlier today. The cries from a large amount of Linux users have so far remained unanswered from Dropbox, with most users finding the explanation given for this change unconvincing. The explanation given so far is that Dropbox requires a file system with support for Extended attributes/Xattrs. Extended attributes however are supported by all major Linux/Posix complaint file systems. Dropbox has, up until today, supported Linux platforms since their services began back in 2007. A number of users have taken to Twitter to protest the move. Twitter user troyvoy88 tweets: "Well, you just let the shitstorm loose @Dropbox dropping support for some linux FS like XFS and BTRFS. No way in hell im going to reformat my @fedora #development station and removing encryption no way!"

Another user by the name of daltux wrote: "It will be time to say goodbye then, @Dropbox. I won't store any personal files on an unencrypted partition."

Security meltdowns on your smartphone are often self-inflicted: You clicked the wrong link, or installed the wrong app. But for millions of Android devices, the vulnerabilities have been baked in ahead of time, deep in the firmware, just waiting to be exploited. Who put them there? Some combination of the manufacturer that made it, and the carrier that sold it to you. From a report: That's the key finding of new analysis from mobile security firm Kryptowire, which details troubling bugs preloaded into 10 devices sold across the major US carriers. Kryptowire CEO Angelos Stavrou and director of research Ryan Johnson will present their research, funded by the Department of Homeland Security, at the Black Hat security conference Friday. The potential outcomes of the vulnerabilities range in severity, from being able to lock someone out of their device to gaining surreptitious access to its microphone and other functions. They all share one common trait, though: They didn't have to be there. [...] "The problem is not going to go away, because a lot of the people in the supply chain want to be able to add their own applications, customize, add their own code. That increases the attack surface, and increases the probability of software error," Stavrou says. "They're exposing the end user to exploits that the end user is not able to respond to." Security researchers found 38 different vulnerabilities that can allow for spying and factory resets loaded onto 25 Android phones. That includes devices from Asus, ZTE, LG and the Essential Phone, which are distributed by carriers like Verizon or AT&T.

Owen Williams, writing for Motherboard: Thursday, at a flashy event in New York, Samsung unveiled yet another phone: the Galaxy Note 9. Like you'd expect, it's rectangular, it has a screen, and it has a few cameras. While unveiling what it hopes will be the next hit, it unknowingly confirmed something we've all been wondering: the smartphone industry is out of ideas. Phones are officially boring: the only topic that's up for debate with the Galaxy Note 9 is the lack of the iconic notch found on the iPhone X, and that it has a headphone jack. The notch has been cloned by almost every phone maker out there, and the headphone jack is a commodity that's unfortunately dying. However, the fact that we're comparing phones with or without a chunk out of the screen or a hole for your headphones demonstrates just how stuck the industry is.

It's clear that there's nothing really to see here. Yeah, the Note is a big phone, and it has a larger battery too. It's in different colors, it's faster than last year, and it has wireless charging. Everything you see here is from a laundry list of features that other smartphone manufacturers also have, and the lack of differentiation becomes clearer every year. It's the pinnacle of technology, and it's a snooze-fest. This isn't exclusively a Samsung problem: Every manufacturer from Apple to Xiaomi faces the same predicament. The iPhone's release cycle that Apple trained the world to be accustomed to, with splashy yearly releases and million-dollar keynotes, is clearly coming to an end as consumers use their existing phones for longer every year.

Alongside the Galaxy Note 9 and Galaxy Home Speaker, Samsung took the wraps off its new Galaxy Watch wearable at its Unpacked event in New York City. VentureBeat reports: Beyond coming in rose gold, silver, and midnight black colors, it can be had in two sizes -- the prior Gear S3 size is now called "46mm" and will start at $349.99, while a smaller-sized model is called "42mm" and will start at $329.99. Both will be available starting August 24, solely in the specific size and color configurations shown below. Samsung is also using improved glass: Gear S3 watches used Corning's Gorilla Glass SR+ and were IP68 rated for 10-foot, 30-minute water and dust resistance. The Galaxy Watch upgrades to Corning Gorilla DX+ glass and promises to keep the AMOLED screen underneath fully water-safe; it's rated for 5 ATM (165-foot/50-meter) submersion with IP68 and MIL-STD-810G certifications.

A disappointment in the new model is a reduction in its payment capabilities. The Gear S3 included both NFC and swipe-style magnetic secure transaction (MST) support to enable a wide array of Samsung Pay wireless purchases, but the Galaxy Watch drops MST support and only works with NFC. Not surprisingly, however, it does support Bluetooth 4.2 and 802.11b/g/n Wi-Fi. While continuing the use of a Tizen operating system from the Gear S3, Galaxy Watch packs a more powerful dual-core Exynos 9110 processor running at 1.15GHz. As was the case with the Gear S3 Frontier, the Galaxy Watch is available in Bluetooth-only and LTE versions, now promising LTE support across over 30 carriers in more than 15 countries. On stage, Samsung promised that the Galaxy Watch can be used for "several" days between charges; a subsequent press release said that it's actually "up to 80+ hours with typical usage" on the 46mm model, which has a 472mAh battery, versus "45+ hours" from the 270mAh battery of the 42mm model. Each model promises at least twice the longevity "with low usage."

Isao writes: It (apparently) has been known that blue light damages eyes and accelerates macular degeneration. A new article on Phys.org may have identified how this happens. It seems that unlike other light colors, blue causes a necessary molecule (retinal) to permanently kill photoreceptor cells. "The researcher found that a molecule called alpha Tocopherol, a Vitamin E derivative and a natural antioxidant in the eye and body, stops the cells from dying," reports Phys.org. "However, as a person ages or the immune system is suppressed, people lose the ability to fight against the attack by retinal and blue light." The authors will continue their research and recommend filtering and blue-light reduction in the meantime. The study has been published in the journal Scientific Reports.

The smart assistant that nobody asked for will be the brains of a new speaker Samsung is launching later this year. The Galaxy Home speaker will rival Apple's HomePod, while standing apart from competitors like Amazon's Echo and Google's Home with a promise of higher-quality audio. The Verge reports: The Galaxy Home looks like a strange vase or statue that might go on a table in the corner of your home. It's wrapped in fabric and elevated by three stout metal legs. It has a flat top with control buttons on it for skipping tracks and changing the volume. The speaker is supposed to deliver surround sound-style audio using six built-in speakers and a subwoofer. It also includes eight far-field microphones for detecting voice input. You'll be able to say "Hi, Bixby" to activate Samsung's assistant and ask it to start playing music or a number of other tasks. Samsung indicated that it'd be able to do many of the same things Bixby can do on a phone. Samsung is expected to share more details about the product at a developer conference in early November.

Intel has unveiled its new 3D NAND solid-state drive (SSD) "ruler" form factor storage for data-center servers. From a report: The chip giant first set out this form factor a year ago, based on the Enterprise & Datacenter Storage Form Factor (EDSFF) standard for server makers to cut cooling costs and offer a more efficient format than SSDs in the classic 2.5 inch size. Intel describes the new ruler-shaped Intel SSD DC P4500, which is 12 inches by 1.5 inches, and a third of an inch thick, as the world's densest SSD. Server makers can jam up to one petabyte (PB) -- or a thousand terabytes (TB) -- of data into 1U server racks by lining up 32 of these 32TB Intel rulers together. So, instead of the decades-old 2.5-inch square SSD drives inherited from and designed for disk-based storage, Intel now has long and skinny sticks, thanks to flash. The new shape allows it to optimize SSD storage density, cooling, and power for data centers.

The Galaxy Note 9 touts a slightly larger 6.4-inch end-to-end screen, a 4,000mAh battery that promises "all-day" use, and a minimum 128GB of storage -- there's also a 512GB version that, with 512GB microSD cards, can give you a full terabyte of space. It runs Android 8.1 Oreo -- not Android Pie, which Google and Essential rolled out to some of their devices earlier this month. Engadget: Samsung is also bringing over welcome improvements from the Galaxy S9 family, including stereo speakers and the variable aperture f/1.5-2.4 primary camera (there's a second camera on the back, of course). This year, though, the most conspicuous change revolves around the S Pen. This is Samsung's first S Pen to incorporate Bluetooth, and that lets you do a whole lot more than doodle on the screen. You can use it as a remote control for selfies and presentations, and Samsung is providing a toolkit to let app developers use the pen for their own purposes. And no, you don't need to load it with batteries or plug it into a charger -- it'll top up just by staying in your phone. The base model of the Note 9, featuring 128GB of storage and 6GB of RAM, is priced at $999. The other variant will set you back by $1,250. Preorders begin on August 10th, and the phone will be available on August 24th at all major carriers or direct (and unlocked) from Samsung. CNET writes about the camera sensors on the new handset: The Galaxy Note 9 keeps the same hardware setup as the Galaxy S9 Plus. That is, dual 12-megapixel cameras on the back, one of them that automatically changes aperture when it detects the need for a low-light shot. (Samsung calls this dual aperture, and it's also on both S9 phones.) There's also an 8-megapixel front-facing camera for your selfies. What's different is AI software that analyzes the scene and quickly detects if you're shooting a flower, food, a dog, a person. There are 20 options the Note 9's been trained on, including snowflakes, cityscapes, fire, you get it. Then, the camera optimizes white balance, saturation and contrast to make photos pop.

harrymcc writes: Toymaker Anki, whose Cozmo robot has been a hit, has announced its next bot: Vector. Though it looks a lot like Cozmo, it packs far more computational power -- Cozmo relied on a phone app for smarts -- and utilizes deep-learning tech in the interest of giving Vector a subtler, more engaging personality. Over at Fast Company, Sean Captain has a deep dive into the software engineering that went into the effort. Vector is being powered by a quad-core Qualcomm Snapdragon 212 chip, and has cartoon eyes displayed on a 184 x 96-pixel screen. The robot actually scans its environment via a single 720p wide-angle camera mounted below the screen. "Cozmo springs to attention when you call its name, making twittering sounds, and lifting its bulldozer-like arms up and down," writes Captain. "If you ignore Cozmo, the bot gets more in your face, or makes loud, obnoxious snoring sounds."

While Vector can connect to the internet and display weather information, set timers, and speak answers to various questions, it's the social and visual intelligence that people may fall in love with the most. Vector is able to detect people and interact with them, even when faces aren't visible. Computer vision technical director Andrew Stein and his team "trained a convolutional neural network (CNN) -- a popular deep-learning AI technology that mimics the brains visual cortex," reports Captain. "Using the often blurry and distorted footage that Vector's camera captures as he moves around, Stein has been teaching the CNN to detect people from the back or the side, for instance, up to about 10 feet away."

After earning the moniker "tech's most secretive startup" from Wired and telling Forbes in 2016 it was going to ship its system "soon-ish," the company is finally releasing the $2,295 Magic Leap One. For now, it will be available for purchase in limit U.S. markets. CNET: It includes a high-powered, moon pie-shaped computer called the Lightpack, a handheld remote called Control and a steampunk-inspired headset with round lenses and patented optics. That's called Lightwear. There's just one thing: Regular folks like us aren't the intended audience. At least not yet. This "Creator Edition," says CEO Abovitz, is part of a "controlled market release" in just a handful of cities in the United States for the developers and creative types Magic Leap will woo this year and next. The goal: for those makers to dream up the experiences (aka content) it needs to convince us to become Leapers. The company is already showing investors and partners prototypes of its smaller (and hopefully less expensive) Magic Leap Two and Magic Leap Three, but won't say when they'll be released. Magic Leap, valued at $6.3 billion as of two months ago, counts Google, Alibaba, Warner Bros, AT&T, and several top Silicon Valley venture capital firms and about a dozen other big names as its investors. More about the product going on sale here.

The processor that makes your laptop or cell phone work was fabricated using quartz from this obscure Appalachian backwater. From a report: Alex Glover is a recently retired geologist who has spent decades hunting for valuable minerals in the hillsides and hollows of the Appalachian Mountains that surround Spruce Pine, North Carolina. Spruce Pine is not a wealthy place. Its downtown consists of a somnambulant train station across the street from a couple of blocks of two-story brick buildings, including a long-closed movie theater and several empty storefronts. The wooded mountains surrounding it, though, are rich in all kinds of desirable rocks, some valued for their industrial uses, some for their pure prettiness. But it's the mineral in Glover's bag -- snowy white grains, soft as powdered sugar -- that is by far the most important these days. It's quartz, but not just any quartz. Spruce Pine, it turns out, is the source of the purest natural quartz -- a species of pristine sand -- ever found on Earth.

This ultra-elite deposit of silicon dioxide particles plays a key role in manufacturing the silicon used to make computer chips. In fact, there's an excellent chance the chip that makes your laptop or cell phone work was made using sand from this obscure Appalachian backwater. "It's a billion-dollar industry here," Glover says with a hooting laugh. "Can't tell by driving through here. You'd never know it." In the 21st century, sand has become more important than ever, and in more ways than ever. Most of the world's sand grains are composed of quartz, which is a form of silicon dioxide, also known as silica. High-purity silicon dioxide particles are the essential raw materials from which we make computer chips, fiber-optic cables, and other high-tech hardware -- the physical components on which the virtual world runs.

EU regulators plan to study whether there is a need for action in the push for a common mobile phone charger following a lack of progress by phone makers towards this goal, EU competition chief Margrethe Vestager said. From a report: The European Commission has been pushing for a common charger for nearly a decade as it cited the more than 51,000 tons of electronic waste yearly from old chargers as well as the inconvenience to consumers. iPhone and Android users have long complained about using different chargers for their phones.

Critics scoffed Apple when the company priced the iPhone X at $1,000. But the way the market has responded to it, there is a good chance that the upcoming flagship smartphones from Apple and those of its rivals -- Samsung, Google, and HTC -- will be pricier. From a column: The critics were wrong. Apple CEO Tim Cook said in July that the iPhone X had outsold every other Apple device in each week since it went on sale Nov. 3, 2017. With strong iPhone X sales, Apple proved that mainstream buyers are willing to pay almost as much, if not more, for their cell phones as they would for a powerful laptop. And with rumors of an even pricier 2018 iPhone X Plus-style phone coming down the pike this September, Apple's moves to usher in the era of the $1,000 phone may just be getting underway. Apple isn't alone in boosting mobile phone prices ever higher. Creeping prices on high-end handsets from Samsung, Huawei and even "value" darling OnePlus signal that price hikes are here to stay. In just two years, the cost of Samsung's Galaxy phone for US buyers has spiked 15.1 percent from the Galaxy S7 in 2016 to this year's Galaxy S9, while the Huawei P series has climbed 33 percent since 2016 -- and that doesn't even account for the existence of a "Pro" model. [...] The trend of increasingly costly handsets in the top tier underscores the cell phone's importance as an everything-device for communication, work, photography and entertainment. And as processing power, camera technology, battery life and internet data speeds improve generation after generation, the value people attach to a phone is sure to swell.

An anonymous reader quotes Fast Company: In seven years, the island nation of Samoa plans to run on 100% renewable electricity. Over the last year, the local utility has worked with Tesla to install a key piece of that plan -- battery storage, and also a software system that can control Samoa's entire electricity supply. In the past, like many islands, the country ran mostly on imported, expensive, and polluting diesel power. As recently as 2012, the country brought in 95 million liters of diesel. Spurred by the cost and the threat of climate change -- Samoa is at particular risk from sea level rise and new outbreaks of climate-related diseases -- the country has been ramping up the use of renewables, with five large solar plants, a wind farm, and hydropower plants. But as renewable energy grew, the grid struggled with reliability.

"It had gotten to the point where just the solar, combined, could provide over half of the entire peak demand for the island, but they were having quite a few challenges managing that efficiently," says JB Straubel, Tesla's chief technical officer.... Tesla installed two of its "Powerpack" battery systems, and also developed and implemented island grid controller software that can control both the batteries and all of the power plants. "If a big cloud comes over the island and the solar drops very quickly, we can control the battery to make up the difference so we don't have to start a generator immediately, and we don't have to keep a generator running even when it might not be needed," says Straubel.

Apple will reportedly ditch the 3.5mm to Lightning port headphone dongle with this year's iPhone models. Apple notoriously dropped the headphone jack from the iPhone 7 in 2016. It has included a headphone adapter with every iPhone since to help curb public unease. The Verge reports: The research note claims that Cirrus Logic, a supplier for the dongle has "confirmed" that it won't be included in the box alongside the new iPhones. Apple has been trying to transition away from wired headphones entirely with its AirPods and lineup of wireless Beats headphones, so the move isn't entirely surprising. The dongle was always meant as a stopgap while customers adjusted to the new, headphone jack-less reality that Apple imposed on the world. Apple will almost certainly continue to sell the dongle -- which costs $9 -- separately for users who still want it. But if the report is true (which, again, remains to be seen), it's hard to imagine that customers will take the news well. The Barclays research note was first spotted by Mac Rumors.