itwbennett writes: Cisco Systems has released critical software updates for its Nexus 3000 and 3500 switches to remove a default administrative account with static credentials that could allow remote attackers access to a bash shell with root privileges, meaning that they can fully control the device. The account is created at installation time by the Cisco NX-OS software that runs on these switches and it cannot be changed or deleted without affecting the system's functionality, Cisco said in an advisory. The affected devices are: Cisco Nexus 3000 Series switches running NX-OS 6.0(2)U6(1), 6.0(2)U6(2), 6.0(2)U6(3), 6.0(2)U6(4) and 6.0(2)U6(5) and Cisco Nexus 3500 Platform switches running NX-OS 6.0(2)A6(2), 6.0(2)A6(3), 6.0(2)A6(4), 6.0(2)A6(5) and 6.0(2)A7(1).

Lucas123 writes: By 2020, surgical robotics sales are expected to almost double to $6.4 billion, at the same time robots are becoming easier to use. One new robot is so easy to use that even med students can achieve proficiency with a few tries, according to Umamaheswar Duvvuri, director of head and neck surgery at the University of Pittsburgh Medical Center. The robot, a snake-like endoscope that can be directed into any shape through the relative orientations of its linkages, requires only one incision, reducing the number from several involved in typical laparoscopic procedures. Older, and more popular surgical robotic systems, such as the da Vinci Surgical System, are now being tested by physicians who are at controls more than 1,000 miles away. Probably a lot of the same misgivings that people have about autonomous cars apply here, too.

Freshly Exhumed writes: A series of posts on the Project Sputnik developers' forum at Dell indicate that hardware on a soon to be released XPS 13 Developer Edition laptop will support Thunderbolt 3 USB Type C, which has been tested on the device with video and USB 3.1 on non-dock devices, although Dell's Type C docks are not yet supported. Intel has already implemented Thunderbolt 3 drivers in the Linux kernel, so this Dell initiative represents a first for a physical implementation on a consumer platform.

Lucas123 writes: Samsung announced it is now shipping the world's highest capacity 2.5-in SSD, the 15.38TB PM1633a. The new SSD uses a 12Gbps SAS interface and is being marketed for use in enterprise-class storage systems where IT managers can fit twice as many of the drives in a standard 19-inch, 2U rack compared to an equivalent 3.5-inch drive. The PM1633a sports random read/write speeds of up to 200,000 and 32,000 IOPS, respectively. It delivers sequential read/write speeds of up to 1,200MBps, the company said. The SSD can sustain one full drive write (15.38TB) per day, every day over its life, which Samsung claims is two to ten times more data than typical SATA SSDs based on planar MLC and TLC NAND flash technologies. The SSD is based on Samsung's 48-layer V-NAND (3D NAND) technology, which also uses 3-bit MLC flash. Also at Hot Hardware

AmiMoJo writes: VESA has finalized and released the DisplayPort 1.4 spec, which can drive 60Hz 8K displays and supports HDR color modes at 5K and 8K. The physical interface used to carry DisplayPort data -- High Bit Rate 3 (HBR3), which provides 8.1Gbps of bandwidth per lane -- is still the same as it was in DisplayPort 1.3. The new standard drives higher-resolution displays with better color support using Display Stream Compression (DSC), a "visually lossless" form of compression that VESA says "enables up to [a] 3:1 compression ratio." This data compression, among other things, allows DisplayPort 1.4 to drive 60Hz 8K displays and 120Hz 4K displays with HDR "deep color" over both DisplayPort and USB Type-C cables. USB Type-C cables can provide a USB 3.0 data connection, too.

New submitter ricardinho writes: Research done at the University of Twente, in the Netherlands, shows that paying thousands of dollars for a professional drone does not guarantee that the device will be hack proof. These professional drones are commonly used across various industries to perform daily critical operations, such as surveillance and recon missions by law enforcement authorities. During his research, student Nils Rodday discovered that a professional drone could be compromised in multiple ways (PDF). One of these attack vectors investigated by the student is much more sophisticated than those used to compromise recreational drones that cost few hundreds of dollars and are not expected to be strongly secured. By reverse engineering the drone's operation and firmware, the student found ways to obtain key information that is used to validate the communication on the telemetry link between the drone and its remote controllers. This allowed for a Man-in-the-Middle attack in which the hacker could take full control of the attacked drone from a distance of up to 2 km. Manufacturers of professional drones are blindly trusting XBee chips for the communication between devices. These chips however are not meant to be used in sensitive devices and this flaw can compromise any sort of operation that the drones are deployed for. In addition, the solution is not simple since a firmware update patch cannot be simply released, but manufacturers have to actually recall the devices for in-house upgrades. Perhaps even more surprising is the cost of the described attack: 40 dollars is enough for an attacker to take full control of a $30,000 drone. Nils will explain and demonstrate his hacking into a professional drone during talks at RSA conference in San Francisco and Black Hat Asia in Singapore.

New submitter Serzen writes: According to The Guardian, Microsoft is planning to end fixed console hardware for the Xbox One as a move towards one ecosystem running Unified Windows Applications. The head of the company's Xbox division, Phil Spencer, said that the Universal Windows Platform would be central to the company's gaming strategy. "That is our focus going forward," he told reporters. "Building out a complete gaming ecosystem for Universal Windows Applications." What this could mean is that the Xbox One becomes more like a PC, with Microsoft releasing updated versions at regular intervals with more powerful processors and graphics hardware. In theory, because games will be written as UWAs, older titles will remain compatible with the new machines.

WheezyJoe writes: According to the US Energy Information Administration, solar, wind, and gas dominate new US generating capacity in 2016. This year is notable because it will see the first new nuclear plant brought online in 20 years, contributing 1.1 GigaWatts to the grid. But that contribution will be dwarfed by renewable power sources, which together account for nearly two-thirds of 2016's new capacity. Part of the boom in renewables came because the tax incentives for their installation were in danger of expiring, so utilities rushed to get projects through the pipeline ahead of the end of the year. 9.5GW of capacity is expected to come online from solar -- more than the past three years combined. Another 6.8GW is expected from planned additions of wind power, largely spread across the Great Plains. Of new fossil fuel plants, the vast majority are going to be burning natural gas; there are no planned additions of coal plants.

szczys writes: The NTSC standard has effectively been replaced by newer digital standards, but most televisions still work with these signals. This can be done through a composite video connection, but more fun is to broadcast video directly to your television's analog tuner. This is what cnlohr has been working on, using a lowly ESP8266 module to generate and transmit the color TV signal. This board is a $3 Wi-Fi module. But the chip itself has a number of other powerful peripheral features, including I2S and DMA. This hardware makes it possible to push the TV broadcast out using hardware, taking up only about 10% of processor time. Even more impressive, cnlohr didn't want to recompile and flash (which is a relatively slow process) during prototyping so he used a web worker to implement browser-based development through the chip's Wi-Fi connection. Speaking of chip-abuse in the interest of hyperlocal signal propagation, reader fulldecent writes to point out a project on GitHub that "allows transmission of radio signals from a computer that is otherwise air gapped. Right now this could be useful for playing a quick tune or for pranks. But there are more nefarious uses as this could also be used to exfiltrate information from secure networks."

An anonymous reader writes: Imagine a future where instead of siting through fire alarms with your fingers in your ears, a robot come comes to greet you and guide you out of the building. Researchers at Georgia Tech created an emergency guidance robot and then looked at whether or not people would follow the robot during an emergency. 'The research was designed to determine whether or not building occupants would trust a robot designed to help them evacuate a high-rise in case of fire or other emergency. But the researchers were surprised to find that the test subjects followed the robot's instructions – even when the machine's behavior should not have inspired trust.' The robot first guided people to a meeting room. In some conditions the robot broke along the way to the meeting room. Then, unbeknownst to the subjects, the researchers filled the hallway with smoke and set off the fire alarms. Given the option of going out the way they came or following the robot down an unknown hall, nearly all followed the robot.

MojoKid writes: Even for mainstream users, it's easy to feel the differences between using a PC that has an OS installed on a solid state drive versus a mechanical hard drive. Also, with SSD pricing where it is right now, it's also easy to justify including one in a new configuration for the speed boost. And there's obvious benefit in the enterprise and data center for both performance and durability. As you might expect, Google has chewed through a healthy pile of SSDs in its data centers over the years and the company appears to have been one of the first to deploy SSDs in production at scale. New research results Google is sharing via a joint research project now encompasses SSD use over a six year span at one of Google's data centers. Looking over the results led to some expected and unexpected findings. One of the biggest discoveries is that SLC-based SSDs are not necessarily more reliable than MLC-based drives. This is surprising, as SLC SSDs carry a price premium with the promise of higher durability (specifically in write operations) as one of their selling points. It will come as no surprise that there are trade-offs of both SSDs and mechanical drives, but ultimately, the benefits SSDs offer often far outweigh the benefits of mechanical HDDs.

New submitter Firx writes: My university department has a tradition of selling its used computers and/or repurposing them with Linux for graduate students and science computer labs. With Windows no longer requiring one be able to disable secure boot, my department is writing up a procurement policy to ensure future machines we buy will still have this feature. Part of the draft motion reads: "Be it resolved that computers running or intending to run Microsoft Windows purchased by the department which boot using the Unified Extensible Firmware Interface (UEFI) have the ability to disable the Secure Boot features for both local hard drive and network booting." Is there something further we should be including here and what is the best way to explain the need for this policy to colleagues less technically literate?

MojoKid writes: With so much of the VR buzz revolving around Oculus, HTC and Google lately, it would be easy to forget that Sony has its own competitor coming, called PlayStation VR. And now, as new patents have revealed, the Japanese gaming giant could have a nifty trick up its sleeve, so to speak. It looks like Sony could developing what some could consider a spiritual successor to the Power Glove, that classic late 80s peripheral for the Nintendo Entertainment System. A diagram pulled from the recent patent filing shows this glove's implementation is straight-forward. However, Sony's glove is not going to be bulky like the Power Glove was. The documents also refer to hand flexor sensors that indicate a level of precision tracking at the fingertip level, as well as some sort of cloud network processing offload.

An anonymous reader writes: Microsoft's HoloLens, touted as the world's 'first and only fully untethered holographic computer' is available today for pre-order and will ship on March 30. The HoloLens Development Edition is available for purchase to qualified developer applicants and will cost $3,000. While the augmented-reality headset is still far from a commercial release to consumers, Microsoft will release six applications that run on the holographic platform – a mix of development tools, games, and user programs. From today, developers can access documentation, guides and tutorials for HoloLens. Additional development tools will be made available when the first HoloLens ship at the end of March, including Visual Studio projects and a HoloLens emulator, which will allow testing of holographic apps on a PC without a physical HoloLens.

An anonymous reader writes: The original Raspberry Pi went on sale four years ago, and more than 8,000,000 units have shipped since then. Raspberry Pi computers are used in schools and universities, in factories and other industrial applications, in home automation and hobby projects, and much more. Today the Raspberry Pi 3 was announced, featuring a 64-bit quad-core ARMv8 CPU clocked at 1.2GHz, making it roughly 10x the speed of the original Pi 1. Many people will be pleased to hear that the Raspberry Pi 3 also features on-board Wi-Fi and Bluetooth, greatly improving the device's connectivity. The new device goes on sale today at the usual price of US $35. (Here's the official announcement itself.)

The usual narrative in the last few years is that robots relentlessly displace humans in today's highly mechanized workplaces (like factories and mines), but sometimes robots' speed and dexterity can't overcome their basic problem -- namely, they're robots. Reader jones_supa writes with this story from The Guardian about why robots aren't always the right tool, excerpting: Bucking modern manufacturing trends, carmaker Mercedes-Benz has been forced to trade in some of its assembly line robots for more flexible humans. The robots cannot handle the pace of change and the complexity of the key customization options available for the company's S-Class saloon at the 101-year-old Sindelfingen plant, which produces 400,000 vehicles a year from 1,500 tons of steel a day. The dizzying number of options for the cars – from heated or cooled cup holders, various wheels, carbon-fibre trims and decals, and even four types of caps for tire valves – demand adaptability, a quality that is still more easily fulfilled by humans than robots.

mdsolar writes: BioSolar and the University of California, Santa Barbara, reinforced a previous international patent application by jointly filing applications in the U.S., Canada and Japan for something called a "multicomponent-approach to enhance stability and capacitance in polymer-hybrid supercapacitors." The BioSolar energy storage approach solves two core problems of conventional lithium-ion battery technology. One is the cost of materials, and the other is the limited capacity of the cathode compared to the anode. BioSolar has solved the cost and capacity problem by developing an inexpensive polymer for the cathode. "Our novel high capacity cathode is engineered from a polymer, similar to that of low-cost plastics used in the household. Through a smart chemical design, we are able to make the polymer hold an enormous amount of electrons. The estimated raw materials cost of our cathode is similar to that of inexpensive plastics, with a very high possible energy density of 1,000 Wh/kg." BioSolar's research also indicates that the new polymer enables batteries to charge and discharge rapidly while far outlasting the lifecycle of conventional lithium-ion energy storage. According to the company, conventional batteries drop down to 80 percent of their storage capacity after 1,000 charge/discharge cycles. When the new polymer is used in a supercapacitor, BioSolar's lab work has demonstrated a lifespan of 50,000 cycles without degradation.

mikejuk writes: Details of the next in the family of the successful Raspberry Pi family have become available as part of FCC testing documents. The Pi 3 finally includes WiFi and Bluetooth/LE. Comparing the board with the Pi 2 it is clear that most of the electronics has stayed the same. A Raspberry Pi with built in WiFi and Bluetooth puts it directly in competition with the new Linux based Arduinos, Intel's Edison and its derivatives, and with the ESP8266 — a very low cost (about $2) but not well known WiFi board. And of course, it will be in competition with its own stablemates. If the Pi 3 is only a few dollars more than the Pi 2 then it will be the obvious first choice. This would effectively make the Pi Zero, at $5 with no networking, king of the low end and the Pi 3 the choice at the other end of the spectrum. Let's hope they make more than one or two before the launch because the $5 Pi Zero is still out of stock most places three months after being announced and it is annoying a lot of potential users.

WheatGrass writes to note that the company T-Platforms has introduced the first mass production unit based upon the Russian Baikal-T1 processor, mentioned here last in 2014. The new Baikal-based workstation is called the "Meadowsweet terminal," according to T-Platform's official website; the feature list says it's running a Debian-based Linux distro. "Congratulations, Russia," Says WheatGrass. (According to Google's translation of this Russian-language story at RG.RU Digital, "[Y]ou can install many conventional applications, such as the LibreOffice office suite, Firefox web browser, and so on, the developers say," but the main use seems to be as a thin client.)

MikeChino writes: New samples taken from groundwater near New York's Indian Point nuclear plant show that contamination levels are 80% higher than previous samples, and experts say the leak is "a disaster waiting to happen." The Indian Point nuclear power plant is located just 25 miles north of New York City, and it is a crucial source of power for the greater metropolitan region.