More stories

  • in

    China passes new laws to hit back at foreign sanctions

    Lawmakers in Beijing have enacted laws banning people from complying with foreign sanctions against China. The new laws were passed against the backdrop of the US and EU continuing to prohibit companies from working with Chinese companies due to issues ranging from human rights, military, and technology. Passage of the new legislation means that multinational companies with any presence in China must now navigate China’s sanctions along with those that have been issued by Western countries. The new laws provide Beijing with powers to target companies involved in implementing foreign sanctions by seizing their assets, prohibiting or restricting transactions, and denying or cancelling visas. The ban extends to company employees as well, and even the spouses and immediate family members of certain individuals who are on the newly created “counter control” list that was enacted as part of the laws. On the same day, China’s lawmakers also passed new data security laws that strengthen the government’s control over digital information. Although the full text of the newly passed laws has not been released yet, the laws will provide a broad framework for future rules on internet services, such as how certain types of data must be stored and handled locally.

    Since the new year, Beijing has been cracking down on how tech companies operate, which has led to Alibaba being fined $2.7 billion, Ant Group becoming a financial holding company that is overseen by China’s central bank as part of efforts to appease regulatory concerns, and 33 mobile apps being called out for more user data than it deemed necessary when offering services. China’s internet regulator, the Cyberspace Administration of China (CAC), in March also released regulations that prohibit mobile app developers from refusing to offer basic services to consumers who did not want to provide personal data that were unnecessary for the provision of such services. Related Coverage More

  • in

    Hackers selling access to FIFA matchmaking servers and other games after EA attack

    Gaming giant Electronic Arts has been hacked and the cyberattackers are now selling access to the company’s games and servers, according to screenshots of underground hacking forums obtained by Motherboard. Messages found on the hacking forums indicate the attackers took 780 GB of data from the company and have full access to FIFA 21 matchmaking servers, FIFA 22 API keys and some software development kits for Microsoft Xbox and Sony. They also purport to have much more, including the source code and debugging tools for Frostbite, which powers EA’s most popular games like Battlefield, FIFA, and Madden.”You have full capability of exploiting on all EA services,” one attacker’s message said, noting that there are hundreds of million of registered EA users around the world and nearly nine million FIFA users. The messages included samples of what was stolen and indicate that the attackers are selling the batch of data and access for $28 million. In a statement to ZDNet, an EA spokesperson said it was not a ransomware attack and claimed a “limited amount of game source code and related tools were stolen” during the attack. The company said it does not expect any impact to its games or business. “No player data was accessed, and we have no reason to believe there is any risk to player privacy,” the EA spokesperson said. “We are actively working with law enforcement officials and other experts as part of this ongoing criminal investigation.” The cyber research and intelligence team for BlackBerry shared screenshots with ZDNet of the notes from someone behind the attack.
    BlackBerry
    Eric Milam, vice president of Research and Intelligence at BlackBerry, said EA was probably targeted because “saying you hacked EA is like saying you hacked Blizzard.” With the source code of multiple video games, the attackers could compile and sell a game before it comes out, as well as add their own backdoors to certain games. Something like this would “give them access to a lot of computers.”

    “Source code allows for review of everything that’s there without the need to reverse engineer. The source code could also help them understand the type of security around information and payment exchanges,” Milam said. “The source code could contain hardcoded credentials, keys, etc which can be used elsewhere or allow additional remote code capabilities.”EA is far from the first gaming company to be hacked, with both Capcom and CD Projekt suffering from attacks in the last year. CD Projekt disclosed a ransomware attack in February and Capcom announced a hack in November that is now having far-reaching legal consequences for the company. EA itself was hacked in 2011 and had to deal with a slate of vulnerabilities discovered in 2019. Rajiv Pimplaskar, chief risk officer for cybersecurity company Veridium, said that like Capcom, there could be several downstream consequences such as loss of customer account credentials, biographic data, and more on top of the intellectual property losses.”EA makes over $2.7 billion from microtransactions or in-game purchasing. App developers today have a higher responsibility to protect consumers and need to increasingly incorporate digital identity, authentication and privacy measures at a code level for improving cyber defense and mitigating fallout from such forms of theft,” Pimplaskar added. Erich Kron, security awareness advocate at KnowBe4, told ZDNet it was strange that the attackers did not attempt to ransom the data back to EA before selling it on the open market. He noted that the proprietary information found in the leak may be valuable to competitors or may include information or vulnerabilities that could be used in future attacks against EA products or customers with installed EA games. Many experts added that the theft of game source code was particularly damaging for a company like EA, which has popular brands like FIFA, Madden, Battlefield, Star Wars: Jedi Fallen Order, The Sims, and Titanfall. “Game source code is highly proprietary and sensitive intellectual property that is the heartbeat of a company’s service or offering. Exposing this data is like virtually taking its life,” said Saryu Nayyar, CEO of Gurucul. “The heartbeat has been interrupted and there’s no telling how this attack will ultimately impact the life blood of the company’s gaming services down the line.” More

  • in

    Best Wi-Fi extender 2021: Boost your home office Wi-Fi

    Weak spots from a poor signal and dead zones can affect your online experience and overall productivity if you’re working or studying. After all, network interruptions and connection issues can distract you from the actual task at hand. Investing in the best Wi-Fi extender may be worth the cost. The right Wi-Fi extender expands your coverage area and frees you to work outside the router’s standard coverage range.  You may be pleasantly surprised to find out that the latest generation of best Wi-Fi extenders are fairly affordable and are capable of rebroadcasting speeds of up to 6Gbps. Several users within the network can simultaneously stream 4K/8K-quality media or play multiplayer games with no lag or buffering — even if it’s from an upstairs corner bedroom that used to suffer from connectivity issues. While the best Wi-Fi extender can dramatically cut down on weak signal issues, it relies on the quality of your router. The extender only rebroadcasts what’s available. If you’re in search of faster speeds, purchasing the latest extender with Wi-Fi 6 won’t work unless the router is delivering that speed. Luckily, most extenders are universally compatible and you can always upgrade your router to improve your home network’s performance. The following Wi-Fi extenders for home or office were chosen based on ease of setup, features, universal compatibility, price and performance. To lengthen their usage life, some of the best Wi-Fi extender devices that made the cut are future-ready, with Wi-Fi 6 for faster speeds, which is the next generation of wireless connectivity.

    Best overall

    Features: Wi-Fi 6, dual-band, Seamless Smart Roaming, four 1GB LAN portsRange: 2,500sq ft, 30 devicesPrice: $249.99If you’re in search of a robust Wi-Fi extender that handles a variety of devices, the Netgear Nighthawk EAX80 Wi-Fi Extender is the one. It’s the priciest one on the list, but the Netgear comes with features that rivals don’t offer. The EAX80 is optimized for all Wi-Fi 6 routers, providing the fastest form of wireless internet you can buy at this time. The dual-band technology can give you up to 6Gbps performance, which is ideal even for the heaviest-duty 4K/8K Ultra-HD streaming and multi-player gaming. As far as our picks for extenders go, the EAX80 is capable of delivering the fastest speeds. However, it needs to be said that if high speeds are important to you, upgrading your router may also be necessary. An extender will not improve your network’s speed — it can only work with what the router outputs. Set up is easy — Netgear claims it takes five minutes or less. Best of all, this Wi-Fi extender creates a mesh network. Mesh networks are an upgraded form of extenders that create one Wi-Fi network for your home or office instead of several smaller ones. This means that you can move around without getting disconnected, as would be the case with non-mesh extenders. You won’t even have to set up a new network — the Netgear EAX80 works with your current SSID name through its Seamless Smart Roaming function.

    $250 at Amazon

    Cheapest Wi-Fi extender

    Features: Wall plug-in, one LAN port, indicator lightsRange: 1,200sq ft, up to 25 devicesPrice: $29.99On the other side of the cost spectrum, you have the TP-Link RE230, our pick for the cheapest Wi-Fi extender. For $30 or less, you can get a solid device that rivals what more expensive Wi-Fi extenders can do.Set up is also simple. The extender works with nearly all routers, making it a modular solution when you need to extend range while traveling. Simply plug the device in at a wall outlet. Press the WPS setup button on your router and the button on the extender for about one second. You should see the RE230’s light change to a solid light that indicates the connection is a success. Perhaps the biggest challenge here is having a second party push on the RE230’s button at the same time if it’s located out of reach from the router, which it most probably will be. Once it’s paired, the RE230 will broadcast over its networks in 2.4 and 5GHz bands. The TP-Link RE230 doesn’t have Wi-Fi 6 compatibility (or the speeds that come with it), but for less than $30, you have a low-profile, easy-to-use Wi-Fi extender that gets the job done reliably. In fact, it’s so affordable you could add a couple of extras throughout your home or office to ensure a strong signal from some of the most Wi-Fi-challenged areas.

    $30 at Amazon

    Best compact solution

    Features: Dual-band, 1GB LAN port, Spot Finder technology, seamless roaming available with certain routersRange: Up to 10,000sq ftPrice: $89.99The Linksys RE7000 is small but powerful. It’s designed to extend your coverage up to an impressive 10,000sq ft. Next-Gen AC Wi-Fi and multi-user MIMO (Multi-User, Multiple-Input, Multiple-Output) technology make it easy for all devices to be connected at the same time without buffering or lag. In addition, the extender’s dual Wi-Fi bands of 5GHz and 2.4GHz can deliver combined speeds of up to 1.9Gbps. You would think that such a powerful extender would look like a large brick, but it actually plugs into a single power outlet. Setting up your RE7000 is easy. Push the connect button and let it sync to the router. Take advantage of the RE7000’s Spot Finder feature using your laptop or smart device, which helps you find the best place to plug the extender in, take care of dead spots and optimize performance overall.You can also count on seamless roaming with one caveat — it does not integrate with every router. To enjoy smooth Wi-Fi connections without the drop between networks when moving around, you would need to purchase a Linksys MAX-STREAM router. Otherwise, you may get disconnected once you’re out of the coverage area. It’s more of an inconvenience than a dealbreaker. If you’re disconnected for being out of range, find the strongest available Linksys extender network in the zone or reconnect to the router. You may only have to do it once — most devices nowadays can remember networks and connect automatically once you’re within range.

    $90 at Amazon

    Best for obstructions and thick walls

    Features: Dual-band, 2GB LAN ports Range: 5300sq ftPrice: $109.99Sometimes size isn’t the issue; the building is the problem. Some homes and offices feature thick concrete walls or structures such as steel stairways or large columns that wreak havoc on a network’s signal strength. You may need a powerline adaptor to get Wi-Fi to the furthest corners or around a major structure.Powerline adaptors send signals through existing electrical wiring instead of the air. Netgear’s is fast — it offers Gigabit speeds to ensure that multiple devices, gaming and 4K HD streaming all happen lag-free. It’s built with an electrical outlet on the front of the plug-in device, so you don’t sacrifice the limited power outlets in a room. And it’s noise filtered, so it does not affect connectivity speeds.The only drawback is the wired nature of this solution. You may finally get connectivity in areas that seemed impossible before, but you would need to connect the device that needs a signal through one of the two high-speed Ethernet ports. Fortunately, most smart TVs, games consoles and computers have an ethernet port. However, you may not be able to connect your smart devices or newer-generation Macbook. 

    $110 at Amazon

    Best for seamless roaming

    Features: Dual-band, Seamless Smart Roaming, 1 0/100/1000 gigabit Ethernet portRange: 1,500sq ft, up to 25 devicesPrice: $89.99Range extenders do a great job of expanding your network’s reach. However, you may have to connect to different SSIDs as you move throughout the coverage area. A mesh network system eliminates the extra “EXT” networks and handles the transition smoothly behind the scenes by routing your connection as needed.D-Link’s Wi-Fi Mesh Range Extender expands your network as soon as you plug it into an outlet and pair it with your router. For a seamless experience that allows you to move within the range without disconnecting, you’ll need to use a D-Link router. Considering how popular they are, you may already have one, although you may want to upgrade to some of D-Link’s latest, which include 6G Wi-Fi connectivity, such as the EXO Smart Mesh Wi-Fi Router.The small extender’s dual-band technology is compatible with older wireless devices that operate on 2.4GHz. For newer devices, 5G delivers the fastest speeds. The DIR-LIX1870’s Wi-Fi speeds are as much as 300Mbps in the 2.4GHz band and 1,733Mbps on 5GHz). In addition, you can plug your wired device into the Gigabit Ethernet port. Plus, the extender is compatible with voice control, so you can conveniently use Alexa, and Google Assistant commands to manage it.

    $90 at Amazon

    Easiest to set up

    Features: Dual-band, two high-gain antennas, Wi-Fi 6, 2GB Ethernet port, OneMesh router compatible, connection strength indicator lightRange: 1,500sq ft, up to 30 devicesPrice: $99.99The RE605X is one of the simplest and most effective Wi-Fi extenders available at the moment. Plus, it’s Wi-Fi-6 ready to match the speeds your router is capable of delivering. If you’re a heavy 4K/HD streaming user, the adjustable, high-gain antennas can hit up to 1.8Gbps thanks to 5GHz AX and 2.4Ghz AC dual bands. Installation is quick. Plug it in somewhere near a dead zone or area with dismal connectivity and adjust the antennas to improve signal strength. You will know when you hit the right spot based on the signal strength light. The range extender is compatible with all routers, Wi-Fi-enabled devices and access points including the latest-generation AX devices. In addition, you can set up a seamless home system by adding a OneMesh-compatible router. When you do, you can roam without worrying about disruptions to your signal.

    $100 at Amazon

    Best router/Wi-Fi extender in one

    Features: Dual/tri-band combination, 2GB LAN connectors per extender, three-pack bundleRange: Up to 5,000 square feetPrice: $350We round off the best Wi-Fi extenders with an all-in-one solution that works as a router, extender and mesh network. Although many individuals already have a router they own or lease through their internet provider, those looking to upgrade their home or business completely should look at this bundle. It comes with a router and two extenders which can be set up in opposite areas of the home or location. Wireless mesh networking can be complicated since the router and extenders need to play well together to deliver connectivity wherever you may be seamless. Linksys simplifies the process by providing a free iOS or Android app that can help you set up the Velop mesh network in just a few minutes. Connect the router, plug in the extenders in an area with poor connectivity and link the devices or nodes through the app. Once it’s all set up, you can move around without manually connecting to the extender’s network for the zone. The process happens automatically behind the scenes, so you can focus on surfing or streaming without worrying about dropping off a network and searching for a new one.

    $350 at Amazon

    How does a Wi-Fi extender work?

    A Wi-Fi extender works as a relay or middle man between your device (a smartphone, TV,  game console or computer) and the router. It receives the internet signal from the router and broadcasts it further along, expanding how far you can access your internet connection. Wi-Fi extenders are useful in larger homes or workspaces or when you want to add internet connectivity outdoors.

    Do Wi-Fi extenders work with any router?

    Most of the best Wi-Fi extenders are universally compatible, meaning they work with nearly any router. However, older routers may be slower. It could be worth upgrading to a newer-generation model for an improvement in range and speed, even before you add the extender. Keep in mind that while most extenders work with most routers, your connection could drop in and out as you move through range zones. To avoid the inconvenience of a temporary disconnection, choose an extender with smart seamless roaming from the same brand as your router. 

    What’s the difference between mesh Wi-Fi and a Wi-Fi extender?

    A Wi-Fi extender simply rebroadcasts your signal further away from the router itself. They essentially boost your coverage to areas that typically don’t have coverage because they are too far from the router to receive a stable signal. However, to achieve this, you may need to connect to the extender’s own network. This means that if you want to move back and forth, you may need to connect and disconnect from the router’s SSID and the extender’s. Although it’s a small inconvenience, you may want to set up a Wi-Fi mesh. Mesh Wi-Fi connects multiple devices into one seamless network. Instead of having several networks comprised of the router and each extender, you have one. As you move about, your devices will connect to whatever “node” is available seamlessly and without disruptions.

    Can I have more than one Wi-Fi extender on my network?

    You can connect as many Wi-Fi extenders as you need to a single router. However, extenders need to link to the router itself. Daisy-chaining, which means one extender is connected to the router and the rest connect to a subsequent extender may not work as effectively. If you’re dealing with a very large space, you are better off buying an extender with a powerful range instead of daisy-chaining several lower-range versions together. 

    Where do I put a Wi-Fi extender?

    You can use a Wi-Fi extender anywhere you need a signal boost. It could be the bedrooms on the second floor of a home or an outdoor area where you like to work from. Most models will have suggestions in the manual of where best to place the extender. Some extenders, such as the Linksys RE7000 even help you find the right place. In general, position the extender halfway between the dead zone and router.

    ZDNet Recommends More

  • in

    The most versatile hardware-encrypted USB flash key awarded highest FIPS validation

    At a time when data loss can be damaging to businesses, and penalties for breaching GDPR, FISMA, FERPA and HIPAA harsh, having a way to keep information safe and secure when on the move is more important than ever. The Aegis Secure Key 3NXC was first introduced in July 2020 and was the only hardware-encrypted flash key that was compatible with USB-C without needing a USB-A to USB-C adapter. It built on Apricorn’s Secure Key 3z and Aegis Secure Key 3NX, taking the same proven form-factor and physical keypad but making it compatible with modern devices.Today, the drive received FIPS 140-2 level 3 validation (certification #3943) by NIST, certifying its use in industries and institutions such as healthcare, finance, and defense, and that it complies with the most stringent data security regulations.The drive really is a one-stop solution. Because there are no drivers to install, the drive is totally OS agnostic and perfectly at home on Windows, Linux, Mac, Android, Chrome, iPadOS on the iPad Pro, and embedded systems, as well as other equipment equipped with a powered USB port and storage file system.Must read: I just found my lost AirTag… you’ll never guess where it went

    AEGIS SECURE KEY 3NXC TECH SPECS:No software, which means there’s nothing to hackComplete cross platform compatibilityBuilt-in keypadBrute force attack protectionAll authentication takes place within the deviceAll data, passwords and encryption keys are 256-bit encrypted at restNo host computer is involved in setup, authentication or encryptionNo default PINs IP68 rated against water and dust damage.Separate administrator and user accessRead-only options that can be enforced by the administrator or set by the user if allowed by policyHighly configurable with policy such as time out values, data recovery PINs, and programmable PIN lengthsAbility to automatically configure multiple devices remotely using Apricorn’s Aegis Configurator tool.Prices from $59 for 4GB storage

    View Now at Amazon

    “Our research has shown that sixty percent of IT professionals agree that remote work conditions have created data security issues within their organizations,” said Kurt Markley, U.S. Managing Director, Apricorn. “One of the fastest, most economical safeguards they could put in place quickly is the 3NXC. Both the NX and NXC were designed to accommodate smaller next-gen devices — like mobile phones, laptops, and tablets — that employees are using more and more to access privileged data while working remotely. It remains the first and only USB-C hardware-encrypted flash drive on the market and is now the only one to carry FIPS validation.”
    When I started using Aegis hardware, my main concern was that the unique built-in keypad would wear out over time. However, in my experience, the polymer-coated buttons are incredibly wear-resistant. I have this and other similar drives that have been in regular usage for two years, and the keypads on all of them are still like new.

    The 3NXC comes in a broader range of capacities, ranging from 4GB to 128GB. This translates into savings for those who don’t need high-capacity storage drives, and prices range from $59 to $179. More

  • in

    Researchers create an 'un-hackable' quantum network over hundreds of kilometers using optical fiber

    Researchers from Toshiba have successfully sent quantum information over 600-kilometer-long optical fibers, creating a new distance record and paving the way for large-scale quantum networks that could be used to exchange information securely between cities and even countries. Working from the company’s R&D lab in Cambridge in the UK, the scientists demonstrated that they could transmit quantum bits (or qubits) over hundreds of kilometers of optical fiber without scrambling the fragile quantum data encoded in the particles, thanks to a new technology that stabilizes the environmental fluctuations occurring in the fiber.  This could go a long way in helping to create a next-generation quantum internet that scientists hope will one day span global distances.  The quantum internet, which will take the shape of a global network of quantum devices connected by long-distance quantum communication links, is expected to enable use-cases that are impossible with today’s web applications. They range from generating virtually un-hackable communications, to creating clusters of inter-connected quantum devices that together could surpass the compute power of classical devices. 

    Quantum Computing

    But in order to communicate, quantum devices need to send and receive qubits – tiny particles that exist in a special, but extremely fragile, quantum state. Finding the best way to transmit qubits without having them fall from their quantum state has got scientists around the world scratching their heads for many years. One approach consists of shooting qubits down optical fibers that connect quantum devices. The method has been successful but is limited in scale: small changes in the environment, such as temperature fluctuations, cause the fibers to expand and contract, and risk messing with the qubits.  This is why experiments with optical fiber, until now, have typically been limited to a range of hundreds of kilometers; in other words, nowhere near enough to create the large-scale, global quantum internet dreamed up by scientists. 

    To tackle the instable conditions inside optical fibers, Toshiba’s researchers developed a new technique called “dual band stabilization”. The method sends two signals down the optical fiber at different wavelengths. The first wavelength is used to cancel out rapidly varying fluctuations, while the second wavelength, which is at the same wavelength as the qubits, is used for finer adjustments of the phase. Put simply, the two wavelengths combine to cancel environmental fluctuations inside the fiber in real time, which according to Toshiba’s researchers, enabled qubits to travel safely over 600 kilometers. Already, the company’s team has used the technology to trial one of the most well-known applications of quantum networks: quantum-based encryption. Known as Quantum Key Distribution (QKD), the protocol leverages quantum networks to create security keys that are impossible to hack, meaning that users can securely exchange confidential information, like bank statements or health records, over an untrusted communication channel such as the internet. During a communication, QKD works by having one of the two parties encrypt a piece of data by encoding the cryptography key onto qubits and sending those qubits over to the other person thanks to a quantum network. Because of the laws of quantum mechanics, however, it is impossible for a spy to intercept the qubits without leaving a sign of eavesdropping that can be seen by the users – who, in turn, can take steps to protect the information. Unlike classical cryptography, therefore, QKD does not rely on the mathematical complexity of solving security keys, but rather leverages the laws of physics. This means that even the most powerful computers would be unable to hack the qubits-based keys. It is easy to see why the idea is gathering the attention of players from all parts, ranging from financial institutions to intelligence agencies. Toshiba’s new technique to reduce fluctuations in optical fibers enabled the researchers to carry out QKD over a much larger distance than previously possible. “This is a very exciting result,” said Mirko Pittaluga, research scientist at Toshiba Europe. “With the new techniques we have developed, further extensions of the communication distance for QKD are still possible and our solutions can also be applied to other quantum communications protocols and applications.” When it comes to carrying out QKD using optical fiber, Toshiba’s 600-kilometer mark is a record-breaker, which the company predicts will enable secure links to be created between cities like London, Paris, Brussels, Amsterdam and Dublin.  Other research groups, however, have focused on different methods to transmit qubits, which have enabled QKD to happen over even larger distances. Chinese scientists, for example, are using a mix of satellite-based transmissions communicating with optical fibers on the ground, and recently succeeded in carrying out QKD over a total distance of 4,600 kilometers. Every approach has its pros and cons: using satellite technologies is more costly and could be harder to scale up. But one thing is for certain: research groups in the UK, China and the US are experimenting at pace to make quantum networks become a reality. Toshiba’s research was partially funded by the EU, which is showing a keen interest in developing quantum communications. Meanwhile, China’s latest five-year plan also allocates a special place for quantum networks; and the US recently published a blueprint laying out a step-by-step leading to the establishment of a global quantum internet.  More

  • in

    Best internet speed test 2021: Test your connection

    As everyone knows, working from home (WFH) has been the norm for the past year. Enterprises are now gearing up for hybrid working arrangements and that means home internet connections remain critical for people who need to hop on a Microsoft Teams or Zoom video call while the kids are homeschooling, playing Fortnite, or watching Netflix. Home broadband connections were put to the test during the initial COVID-19 phase of pandemic lockdowns around the globe as employees en masse logged in from managed and BYOD devices to business applications, Office 365, and Google Workspace over VPNs. Broadband speeds are a top concern for Americans. US President Joe Biden’s $100 billion plan to bring affordable, reliable, high-speed broadband to all households could be a game-changer, but massive infrastructure projects take time and FTTH projects often falter. The net neutrality debate is back on the agenda too with a Biden appointee Jessica Rosenworcel leading the Federal Communications Commission as the acting chairwoman. This has implications for Netflix, Amazon, Google, and Microsoft plus all the major ISPs, from AT&T to T-Mobile. Broadband speed tests could become a bigger part of the political debate about investing in America’s broadband infrastructure.  Rosenworcel noted that during the pandemic some Americans were sitting in parking lots using free Wi-Fi signals while students were falling in the “homework gap” because their broadband was too slow to join remote classes.Here are five broadband speed tests that ZDNet considers trustworthy. But to get a true picture of your broadband speed, you’ll likely need to run the tests multiple times and check results across different devices throughout the day. 

    Customizing your speed test is a strength

    Speedtest from Ookla, which also owns outage site, Downdetector, was one of the first broadband speed tests and offers a snapshot of download and upload speeds to an ISP via its website or a lightweight app for Windows 10 or macOS. It’s also available in 17 languages and if you set up an account, you can keep track of your speeds over time. The service displays the current download and upload speeds, and measurements for ‘ping’, ‘jitter’, and packet loss. There are also options to change the local server that the ISP speed test is conducted with — a configuration option that most other tests lack. Plus, results can be shared on social media.   Ookla has some helpful explanatory notes for people who aren’t familiar with the ping test. It’s a latency test. Ookla says that less than 59 milliseconds (MS) ping is very good for online games. The FCC wants satellite broadband providers to deliver latency of below 100 ms to bid for a slice of its Rural Digital Opportunity Fund (RDOF). SpaceX says its Starlink satellites will provide a latency of 20ms to 40ms.   Also, if your Speedtest records 250 Mbps, you should be able to download a 1GB file in 30 seconds. 25 Mbps should be good for 4k video streaming.      Its website is useful for those who are curious enough to learn why a test on a mobile device returns a different result to a laptop or a device that’s physically connected to a router.  Each test taken with Speedtest uses Ookla’s server network of over 14,000 servers and reports back on key network health metrics, Nick Turner, a technical trainer at Ookla, tells ZDNet. “There are Speedtest servers in virtually every country and major population center worldwide,” Turner said.  He argues that Ookla’s distributed server network makes it more accurate than many other tests. “This enables us to more easily select ‘nearby’ servers or combinations of servers that are capable of delivering the sufficient bandwidth necessary to discover the most accurate maximum speeds to the device in question. Since our founding in 2006, an unparalleled total of more than 35 billion tests have been taken with Speedtest.”Pros:   It’s a general purpose broadband speed test in use since 2006   It’s not from an ISP or a service provider    Users can select the host server from which to test their ISP’s speed test Cons:   The site uses tech-lingo that some people might not understand    It’s full of ads and ad trackers 

    View Now at Oookla Speedtest

    A speed test for a specific web application

    The Google Stadia online gaming platform has hit a few bumps since launching in 2019, but it is a massive platform and the company knows that consumer broadband speeds are critical for adoption.Google recommends a download speed of no less than 10 Mbps to stream games on Stadia, but recommends faster speeds for displays with a resolution higher than 720p HD. It teamed up with open source project Measurement Lab or M-Lab to run its speed test. The project is led by teams at Code for Science & Society and Google. The Google Stadia web interface is pretty simple — literally a one-click task at Google’s Projectstream website from the “Check Now” button. It’s focussed on Stadia users and so, for accuracy, it recommends people use the device and network where they want to play and have a strong wi-fi or Ethernet connection. It also recommends halting current downloads and file-sharing, and closing tabs that are streaming video. The measurement takes less than 30 seconds to complete and returns similar results to Ookla. At the least, it confirms whether you’ll have a decent experience when gaming on Stadia.However, as Google notes, the test only provides a general indication of the quality of a connection and does not guarantee Stadia will work. Other factors include the device, ISP, and other activities that are consuming bandwidth.Pros:   It’s a general purpose broadband speed test in use since 2006   It’s not from an ISP or a service provider    Users can select the host server from which to test their ISP’s speed test Cons:   The site uses tech-lingo that some people might not understand    It’s full of ads and ad trackers compared to other tests

    View Now at Stadia speed test

    Can you trust your ISP’s speed test?

    As the US leader in gigabit internet, Comcast’s Xfinity xFi broadband speed test is a popular choice for Americans. The speed test itself operates similarly to Google’s speed test, but the site has some pointers for customers wanting to explore why the speed results might not match the user’s plan. These are helpful but feel defensive, as if they were written to help reduce customer support calls for why a broadband isn’t as fast as advertised.    On the other hand, it provides more context about factors that can affect the home connection, such as an old home gateway lowering available bandwidth. The result also explains what the device being tested can do, such as streaming 4K video. The site prioritizes download speeds but does have a “Show more” option to see upload speeds, latency, the internet protocol, and where the host server is located.    Results may vary depending on where you’re located. The test designed purely for American internet users.   Pros:   The results are consistent with other speed tests   It’s dead simple to use and there are no ads    Test servers are located in the US Cons:   It is a test operated by an ISP    The information it provides appears to help reduce support calls

    View Now at Xfinity xFi speed test

    A test for Netflix’s CDN

    The good thing about Netflix’s Fast.com broadband speed is that it is run by Netflix, which has an interest in its customers having a fast enough connection to stream its content. There are no lingering questions about potential bias from speed tests run by ISPs. Plus the tests are international, using servers where Netflix has installed appliances for its giant content delivery network (CDN).  Netflix has a vast CDN called Netflix Open Connect, which relies on Open Connect appliances installed within ISPs that peer with Netflix. That CDN is built around the principle of moving content closer to users and is how it delivers a fast streaming experience. Hence, the Fast.com test is designed to test the connection between a person’s device and Netflix’s CDN servers. That means the results are specific to Netflix’s own network, which makes sense for the company but also means it looks at speeds from a particular perspective.   The Fast website keeps things simple by only showing the download speed. In my tests, it reported slower speeds than Oookla’s Speedtest. And it produced wildly different results between wifi tests on a 2017 macOS MacBook Pro (160Mbps) and an iPhone 12 (330 Mbps), with both on a modern router’s 5GHz frequency.But on Fast.com you don’t even need to click ‘Go’; just opening the site in a browser tab starts the test. There’s also a “Show more” option, which provides latency speeds and upload speeds, as well as where the servers used in the test are located.  Pros:   It’s designed to test the speed of your connection to Netflix’s servers   There are no ads    It’s relevant to your connection wherever you’re streaming Netflix from Cons:   It’s not really designed to test your ISP’s connection speed    Results are specific to Netflix infrastructure 

    View Now at Netflix Fast.com

    Take two speed tests for yourself and one for the country

    The FCC in April launched the FCC Speed Test app. It’s available as an Android app in the Google Play Store and an iOS app in Apple’s App Store. That means you can’t run the test from your desktop, but you are taking part in an important project for the commission to get a clearer picture of broadband quality across America. The test produces results once you press the button to start the test in the mobile app. The data collected is used to help the FCC improve its broadband maps. Under the Trump administration, Microsoft argued the FCC was severely overestimating how many residents had access to fast broadband. Microsoft’s data suggested almost half of America’s population had access to speeds of at least 25 Mpbs rather than the 24 million estimated in the FCC’s maps. Data is shared with the FCC’s Measuring Broadband America research program, an important national project that will help determine where funding is allocated in years to come. It’s a case where broadband speed tests aren’t just about your own connection speed, but the state of broadband across the nation. “To close the gap between digital haves and have nots, we are working to build a comprehensive, user-friendly dataset on broadband availability,” said acting chairwoman Jessica Rosenworcel. “Expanding the base of consumers who use the FCC Speed Test app will enable us to provide improved coverage information to the public and add to the measurement tools we’re developing to show where broadband is truly available throughout the United States.”

    View Now at FCC Speed Test app

    Why do you need to check your internet speed?

    Speed tests are useful to remote workers who might need to figure out whether a poor connection is due to the ISP or something else, such as the home router, an internet routing issue, or even the device they’re testing from — be it a laptop, desktop or a smartphone. The tests can also be handy when disputing an ISP’s claimed speeds for a subscription. 

    Are some internet speed tests more reliable or trustworthy than others?

    Results can vary widely between broadband speed tests and day-to-day due to changing network conditions. ZDNet considers the five five broadband speed tests above to be reliable and trustworthy. But to get a true picture of your broadband speed, you’ll likely need to run the tests multiple times and check results across different devices throughout the day.

    How did we choose these internet speed tests?

    ZDNet doesn’t vouch for one test over another. As explained, there are multiple broadband speed tests and people should . Some of them are designed to test a connection for a particular online service, such as Netflix or Stadia, while others can help customer dispute speed claims with ISPs, and the FCC’s speed test might help fill broadband gaps in the community. 

    Are there other internet speed tests worth considering?

    OpenSignal for cellular networks

    OpenSignal started out with mobile speed tests and regularly produces reports about 4G and 5G speed results around the world. It crowdsources its results and now also returns results for wifi speeds, but its focus is squarely on the mobile experience. 

    ZDNet Recommends More

  • in

    This new hacking group has a nasty surprise for African, Middle East diplomats

    A recently-discovered advanced persistent threat (APT) group is targeting diplomats across Africa and the Middle East. 

    Revealed on Thursday by ESET researchers, the state-sponsored group, dubbed BackdoorDiplomacy, has been linked to successful attacks against Ministries of Foreign Affairs in numerous African countries, the Middle East, Europe, and Asia — alongside a smaller subset of telecommunications firms in Africa and at least one charity outfit in the Middle East.BackdoorDiplomacy is thought to have been in operation since at least 2017. The cross-platform group targets both Linux and Windows systems and seems to prefer to exploit internet-facing, vulnerable devices as an initial attack vector.  If web servers or network management interfaces are found which have weak points, such as software vulnerabilities or poor file-upload security, the APT will strike. In one case observed by ESET, an F5 bug — CVE-2020-5902 — was used to deploy a Linux backdoor, whereas, in another, BackdoorDiplomacy adopted Microsoft Exchange server bugs to deploy China Chopper, a webshell.  Once they have obtained entry, the threat actors will scan the device for the purposes of lateral movement; install a custom backdoor, and deploy a range of tools to conduct surveillance and data theft.  The backdoor, dubbed Turian, is thought to be based on the Quarian backdoor — malware linked to attacks used against diplomatic targets in Syria and the US back in 2013. The main implant is capable of harvesting and exfiltrating system data, taking screenshots, and also overwriting, moving/deleting, or stealing files. 

    Among the tools used is network tunnel software EarthWorm; Mimikatz, NetCat, and software developed by the US National Security Agency (NSA) and dumped by ShadowBrokers, such as EternalBlue, DoublePulsar, and EternalRocks.  VMProtect was used in most cases to try and obfuscate the group’s activities.  Diplomats may have to deal with sensitive information handed over through removable drives and storage. To widen the scope of its cyberespionage activities, BackdoorDiplomacy will scan for flash drives and will attempt to copy all files from them into a password-protected archive which is then whisked off to a command-and-control (C2) center via the backdoor.  While BackdoorDiplomacy has been registered as an APT in its own right, there do appear to be other links, or at least, common threads, with other threat groups.  The network encryption protocol used by the APT is almost identical to that used by the Calypso group’s Whitebird backdoor, and this malware was deployed against diplomatic targets in Kazakhstan and Kyrgyzstan during 2017 – 2020. In addition, ESET believes there are commonalities with CloudComputating/Platinum, which has targeted diplomatic, government, and military organizations across Asia in previous years.  Other coding and mechanism clues are similar to Rehashed Rat and MirageFox/APT15.  In other research this month, Check Point Research discovered a novel backdoor developed by Chinese threat actors over the course of three years. The malware, dubbed VictoryDll_x86.dll, was used to compromise a network belonging to a Southeast Asian government’s Ministry of Foreign Affairs.  Previous and related coverage Have a tip? Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0 More

  • in

    Amazon data usage to feature in new UK antitrust probe: report

    Amazon’s data practices are to become subject to UK scrutiny in a new antitrust probe planned by regulators. 

    Amazon Business

    According to sources speaking to the Financial Times, the UK’s Competition and Markets Authority (CMA), a business innovation and antitrust watchdog, intends to launch a formal investigation into the e-commerce giant’s data management and usage.  The FT says that the agency has been watching and analyzing Amazon’s business “for months,” and in particular, has focused on data collection and merchant ranking.  The investigation will seek to answer queries relating to merchant favoritism — and whether or not the platform pushes merchants up the rankings when they use Amazon’s logistics and delivery services.  The “buy box” white panel, critical for consumer purchases and used when there are multiple sellers for the same item, is reportedly of particular interest to the CMA — and whether any anti-competitive behavior exists in how Amazon decides which merchants have access to it.  Amazon describes the buy box as a ‘best-fit’ feature based on customer feedback and service.  “When there are multiple sellers for a product, we feature the best of those offers prominently on the product page, in what’s sometimes referred to as “the buy box,”” the company says. “All of the Amazon retail and independent sellers’ offers compete to be one of the featured offers based on the same criteria, such as low price (inclusive of delivery), fast delivery, a track record of good customer service, and reliability in meeting its delivery promises.”

    The CMA is yet to announce a potential probe into Amazon. However, should it launch, it will follow investigations launched by the European Commission (EC) last year.  The EC said that as Amazon acts as both an online marketplace and retailer, it has access to third-party seller data — and may unfairly use this to its advantage, such as in strategic business decisions.  In addition, the commission opened a second investigation into the buy box and any preferential treatment for vendors that use logistics or delivery services provided by Amazon.  “While we can’t comment on any alleged investigation, we continue to work hard to deliver great value and low prices for customers and support the tens of thousands of UK small and medium-sized enterprises that account for more than half of everything we sell in our online store,” an Amazon spokesperson told ZDNet.  The CMA told us that it “cannot speculate as to which cases it may or may not investigate.” In May, the European Data Protection Supervisor (EDPS) announced an investigation into the use of technology vendor products by the bloc’s major agencies and how citizen data is managed, stored, and protected.  These products include Amazon AWS and Microsoft Azure cloud services. Separately, the agency is also analyzing data protection law compliance and the use of Microsoft Office 365 by European authorities. Previous and related coverage Have a tip? Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0 More