Bug in Grammarly browser extension exposes virtually everything a user ever writes

The Grammarly browser extension, which has about 22 million users, exposes its authentication tokens to all websites, allowing any to access all the user’s data without permission, according to a bug report from Google Project Zero’s Tavis Ormandy.

The high-severity bug was discovered on Friday and fixed early Monday morning, “a really impressive response time,” Ormandy wrote.

Grammarly, launched in 2009 by Ukrainian developers, looks at all messages, documents and social media posts and attempts to clean up errors so the user is left with the clearest English possible. The browser extension has access to virtually everything a user types, and therefore an attacker could access a huge trove of private data.

Exploitation is as simple as a couple of console commands granting full access to everything, as Ormandy explained. The company has no evidence that the vulnerability was exploited.

The vulnerability affected Chrome and Firefox. Updates are now available for both browsers.

Source: Bug in Grammarly browser extension exposes virtually everything a user ever writes

Japan successfully launches world’s smallest satellite-carrying rocket

KAGOSHIMA – Japan successfully launched on Saturday the world’s smallest satellite-carrying rocket following a failed attempt in January last year, the nation’s space agency said.

The rocket about the size of a utility pole, measuring 10 meters in length and 50 centimeters in diameter, lifted off from the Uchinoura Space Center in Kagoshima Prefecture and delivered its payload to its intended orbit, according to the Japan Aerospace Exploration Agency.

The No. 5 vehicle of the SS-520 series carried a microsatellite weighing about 3 kilograms developed by the University of Tokyo to collect imagery of the Earth’s surface.

The launch was aimed at verifying JAXA’s technology used to launch small rockets made with commercially available components at lower cost amid growing global demand for microsatellites. The agency used components found in home electronics and smartphones for the rocket.

JAXA launched the No. 4 vehicle on Jan. 15 last year, but terminated its flight shortly after liftoff due to a communications problem. The agency found that vibrations during liftoff caused a short circuit, leading to a loss of power in the data transmitter.

For Saturday’s launch, the agency made more than 40 improvements to prevent a recurrence.

Source: Japan successfully launches world’s smallest satellite-carrying rocket | The Japan Times

Exoplanets from another galaxy spotted

The Kepler Space Telescope has found oodles of exoplants, but now astroboffins have spotted the first exoplanets outside our galaxy.

A group of astroboffins from the University of Oklahoma has become the first to demonstrate exoplanet observations in another galaxy – one that’s 3.8 billion light years away, or one-third of the distance across the observable universe.

The discovery by a team led by professor Xinyu Dai and postdoc Eduardo Guerras, found the planets’ signatures in the spectrum of a gravitationally-microlensed galaxy behind the black hole quasar RXJ 1131−1231.

Gravitational microlensing refers to the phenomenon, predicted by Einstein, that gravity can bend light, resulting in an apparent magnification if the bodies are aligned the right way (from the point of view of the observer).

As the university explains, they believe the planets range in estimated mass from about the size of the moon, through to Jupiter-sized.

Their paper, published in Astrophysical Journal Letters and available here at the arXiv pre-print service, explains that the unbound planets they saw caused “Fe Kα line energy shifts” in the spectrum of RXJ 1131−1231.

They found the line shifts in Chandra X-ray Observatory images of the quasar, and in the paper said what they observed “has never been observed in a non-lensed AGN” [active galactic nucleus – El Reg].

The paper also explains that the researchers focussed on unbounded planets – that is, planets wandering around their galaxies rather than being part of a solar system – because planets orbiting stars don’t show up separately from their hosts.

There are around 2,000 moon-to-Jupiter sized planets for each main sequence star in their observations, the researchers wrote, which equates to trillions of stars per galaxy.

Source: Exoplanets from another galaxy spotted – take that, Kepler fatigue! • The Register

Intel’s new Vaunt smart glasses actually look good

There is no camera to creep people out, no button to push, no gesture area to swipe, no glowing LCD screen, no weird arm floating in front of the lens, no speaker, and no microphone (for now).

From the outside, the Vaunt glasses look just like eyeglasses. When you’re wearing them, you see a stream of information on what looks like a screen — but it’s actually being projected onto your retina.

The prototypes I wore in December also felt virtually indistinguishable from regular glasses. They come in several styles, work with prescriptions, and can be worn comfortably all day. Apart from a tiny red glimmer that’s occasionally visible on the right lens, people around you might not even know you’re wearing smart glasses.

Like Google Glass did five years ago, Vaunt will launch an “early access program” for developers later this year. But Intel’s goals are different than Google’s. Instead of trying to convince us we could change our lives for a head-worn display, Intel is trying to change the head-worn display to fit our lives.

Source: Exclusive: Intel’s new Vaunt smart glasses actually look good – The Verge