ArduinoMania

Smart clocks are ideal devices for the bedroom, as they give key information like the time and temperature but often have no intrusive cameras. If you're looking for a deal on a good one, Lenovo's Smart Clock Essential with Alexa is on sale right now at Amazon for $50, or $20 (29 percent) off the regular $70 price. 

The Smart Clock Essential with Alexa came out early this year to replace the previous model, with the main additions being a new pogo docking pin on the bottom and, well, support for Alexa instead of Google Assistant. It features an attractive, fabric-covered design in colors "Mistry Blue" and "Clay Red," both of which are on sale. On the top edge there are four buttons: volume buttons, a button for activating the assistant, and another for setting an alarm. There's also a USB port for charging.

It neither streams video nor has a camera, though it of course has a mic and speakers so that you can listen to music/podcasts or make voice calls. The entire front face is a dedicated 4-inch LED display, displaying the time, weather, real-time decibel levels and more in white text on a deep black background. 

The docking accessories still aren't available, but once they arrive, you'll have two options. One is a basic pad with room for both the clock and another wireless-charging like a phone, while the other is what Lenovo calls the Ambient Light Dock, which doubles as a nightlight. It'll be available for $30 in two whimsical designs with either a sea lion and a squid, along with eight different lighting modes and a rainbow of colors — so it could work great in a kid's room. 

Millions of WordPress sites have received a forced patch over the past few days, Ars Technica has reported. The reason is a vulnerability in UpdraftPlus, a popular plugin that allows users to create and restore website backups. UpdraftPlus developers requested the mandatory patch, as the vulnerability would allow anyone with an account to download a website's entire database. 

The bug was discovered by Jetpack security researcher Marc Montpas during a security audit of the plugin. "This bug is pretty easy to exploit, with some very bad outcomes if it does get exploited," he told Ars Technica. "It made it possible for low-privilege users to download a site's backups, which include raw database backups." 

He told UpdraftPlus developers about the bug on Tuesday last week, they fixed it a day later and started force-installing the patch shortly after that. 1.7 million sites had received it as of Thursday, out of 3 million-plus users.

The main flaw was that UpdraftPlus didn't correctly implement WordPress's "hearbeat' function by properly checking to see if users had administrative privileges. Another issue was a variable used to validate admins that could be modified by untrusted users. Jetpack provided more details about how a hack could work in a blog post.

WordPress was previously breached earlier this year, but it was done indirectly via a GoDaddy hack that exposed 1.2 million accounts. If you're running WordPress with the UpdraftPlus plugin, you should definitely confirm that the plugin updated automatically to 1.22.4 or later on the free version, or 2.22.4 and up on the premium app. 

Capcom has announced the development Street Fighter 6, the next chapter in the iconic fighting series, IGN has reported. It also released a teaser trailer featuring Ryu and Luke, a key DLC character appearing at the end of Street Fighter V.

The game was announced following Capcom's Pro Tour fighting game exhibition via a countdown website. There was no other information, though the trailer graphics suggest the new title might use a more realistic character style. Capcom said it would have more news coming in the summer of 2022. 

Released in 2016, Street Fighter V was the first title in the series to use a full story mode, but it got off to a rough start due to server problems and limited content. It was eventually a success however, thanks in large part to the subsequent Champion and Arcade editions. 

Along with the Street Fighter 6 news, Capcom unveiled a new fighting game compilation with titles including Darkstalkers: The Night Warriors, Vampire Hunter 2:Darkstalkers' Revenge and Hyper Street Fighter II: The Anniversary Edition. It arrives on June 24th on PS4, Xbox, PC and Nintendo Switch.

Fortnite developer Epic Games confirmed this weekend it will transition most of its US-based contingent workers to full-time positions with benefits. The news comes after The Verge obtained an internal memo detailing the company’s plans. Epic spokesperson Elka Looks said the studio plans to hire “a few hundred” existing contractors, and that most of those workers currently serve as quality assurance testers. Epic will directly employ those individuals and they’ll have access to the company’s benefits plan.

Looks also noted the company will still hire contingent workers to fill “short-term needs,” and the memo The Verge obtained said Epic would not extend the full-time employment offer to some workers. “There are a few exceptions in which it makes sense for both the worker and Epic to maintain contingent worker status,” the document said, according to the outlet.

Epic’s decision to convert many of its QA testers to full-time employees comes at a moment when workers in similar positions at Activision Blizzard’s Raven Software work to unionize. In December, the studio laid off a dozen QA testers, leading to a walkout involving both full-time employees and contractors. Last month, those workers said they would unionize with the Communication Workers of America, and asked the troubled publisher to voluntarily recognize their group. Activision did not do that and instead moved to reorganize the studio in a way that critics of the company claim is designed to thwart those efforts.

With less than a week before Elden Ring’sFebruary 25th release date, publisher Bandai Namco has shared a new “Overview” trailer detailing the many systems of FromSoftware’s latest action RPG. The clip features nearly six minutes of edited gameplay footage for fans to check out. And if you’ve been trying to avoid spoilers but still want to see what From’s latest project will offer, this is probably your best chance to do so.

Notably, the trailer offers a glimpse of not just the game’s open-world environment, but the many dungeons that you’ll have a chance to explore during your adventures, including the so-called “legacy” ones that feature the same dense level design that has been a hallmark of FromSoftware games since Demon’s Souls. The clip also offers a look at item crafting, player customization and cooperative play, among other elements.

Elden Ring will be available to play on PlayStation 4, PS5, Xbox One, Xbox Series X/S and PC. FromSoftware first announced the title back at E3 2019. A Song of Ice and Fire author George R. R. Martin helped Dark Souls and Bloodborne mastermind Hidetaka Miyazaki create the world of the game. After years of waiting, fans will finally get to see the fruits of that collaboration for themselves. 

Following months of reports, Google has confirmed its battery-equipped Nest Doorbell and Cam devices won't charge when they're subjected to extreme cold weather. "At temperatures below freezing, the lithium-ion battery in your Google Nest camera or doorbell won't be able to charge," the company said in a recently published support document spotted by 9to5Google.

According to Google, the battery versions of the Nest Doorbell and Cam can operate at temperatures as low as minus four degrees Fahrenheit (minus 20 degrees Celsius), provided their batteries have power left. That said, those cells won't charge at temperatures below the freezing mark. What's more, Google warns they may drain faster than usual in cold weather, with battery life potentially halved when the devices are near their operating limit.

The company recommends you bring your Nest Doorbell or Cam indoors in those situations. The warmer the battery gets, the faster it will charge, according to Google. You can look to the Home app to know if you should take your devices inside. The software will display a notification that says "Charging paused" or "Charging slowly," with a lengthy estimated charging time, when cold weather is negatively affecting them.

One other thing to note is that freezing temperatures may impact your Nest devices even if they're wired to your home's electrical system. That's because the Nest Doorbell still draws on its battery for power even when it has an electrical connection. At temperatures below the 32 degrees Farhenheit mark, the trickle charge coming from the wire won't help the battery. And once it dies, you'll need to bring the device inside to charge it once again. By contrast, the Nest Cam can operate with an empty battery as long as it's wired to your home, but should you lose power and the battery is dead, it won't work anymore until you charge it again. In short, if you're cold, there's a good chance your Nest device is too. Bring it inside for a break from the desolate winter. 

NFT marketplace OpenSea is investigating a “phishing attack” that has left more than two dozen of its users without access to some of their most valuable digital tokens. On late Saturday evening, panic hit the platform when someone stole hundreds of NFTs.

Over several hours that afternoon, the attacker targeted 32 accounts and obtained 254 tokens, according to a spreadsheet compiled by Blockchain security service PeckShield. Among the stolen NFTs are tokens from the Bored Ape Yacht Club and Azuki collections. One estimate by Molly White, the creator of the Web3 is Going Great blog, pegged the haul at 641 Ethereum (approximately $1.7 million at the time of this article).

“We have confidence that this was a phishing attack,” said Devin Finzer, the co-founder and CEO of OpenSea, in a tweet posted early Sunday morning. “We don’t know where the phishing occurred, but we’ve been able to rule out a number of things based on our conversations with the 32 affected users.”

According to Finzer, OpenSea determined its website was not a vector for the attack, nor did someone exploit a previously unknown vulnerability in the platform’s NFT minting, buying, selling and listing features. “Interaction with an OpenSea email is not a vector for attack,” said Finzer. “In fact, we are not aware of any of the affected users receiving or clicking links in suspicious emails.”

We’ve reached out to OpenSea for comment.

As noted by The Verge, the attack likely took advantage of an aspect of the Wyvern Protocol. Many Web3 platforms, including OpenSea, use the open-source standard to underpin their contracts. One Twitter thread suggests those targeted in the phishing campaign may have signed a partial agreement that allowed the attacker to transfer the NFTs without any Ethereum changing hands. Linking to the thread, Finzer said it presented a scenario that was “consistent with our current internal understanding” of the situation.

While there’s still much about the attack we don’t know, what is clear is that it couldn’t have come at a worse time for OpenSea. On Friday, the company introduced a new smart contract and asked people to migrate their assets. It has also been the subject of recent controversy, first starting with an employee who resigned for using insider information to profit on NFT drops and then more recently over the prevalence of tokens that are fake, plagiarized or spam on its platform. 

Truth Social, Donald Trump’s Twitter-like social media platform, will launch in the App Store on February 21st, according to Reuters. The date comes courtesy of a post seen by the outlet on a test version of the network. Responding on Friday to a question from a beta user on when the platform would open to the public, a verified account tied to Truth Social chief product officer “Billy B” told people to mark the 21st on their calendars.

“We’re currently set for release in the Apple App Store for Monday, February 21st,” the executive said, according to Reuters. Incidentally, the 21st marks the Presidents' Day holiday in the US.

Provided the network doesn’t suffer a hiccup like the one it did last fall when a prankster claimed the “donaldjtrump” username and posted an image of defecting pig, the launch will mark Trump’s return to social media. Twitter and Facebook banned the former president following the January 6th attack on the US Capitol.

Before a test version of Truth Social was pulled down last fall, the website’s code showed it ran on a mostly unmodified version of open-source software Mastodon. In October, the Software Freedom Conservancy accused The Trump Media and Technology Group (TMTG) of violating Mastodon’s AGPLv3 license by not sharing the platform’s source code. The website added a dedicated section containing a ZIP archive of its source code two weeks later.

Based on the posts seen by Reuters, Truth Social won’t stray too far from the Twitter formula. People can use the network to post “Truths,” the platform’s equivalent to tweets, and it's possible to reshare posts on one's timeline to expand their reach. The executive who answered questions from beta users said the company was working on a verification policy that it would publish “in the coming weeks.” He also mentioned TMTG was also working on a direct messaging feature that would come later.

When Microsoft announced it would spend $68.7 billion to buy Activision Blizzard to bolster its Xbox gaming division, the news came as a surprise to many. For months, the troubled publisher had been in headlines stemming from the workplace sexual harassment lawsuit filed by California’s fair employment agency in July. The bad press hit a fever pitch on November 16th after The Wall Street Journal published a report that asserted Activision CEO Bobby Kotick had not only known about many of the incidents of sexual harassment that had occured at the company but had also acted to protect those who were responsible for the abuse.

Days after that article came out, Xbox chief Phil Spencer reportedly told employees he was “distributed and deeply troubled by the horrific events and actions” that allegedly took place at Activision Blizzard and that Microsoft would re-evaluate its relationship with the publisher. It’s one day after that email that Spencer called Kotick to start the process that would end with Microsoft announcing plans to buy Activision Blizzard some two months later, according to a US Securities and Exchange Commission filing first spotted by CNBC.

Starting on page 31 of the document, Microsoft devotes nearly 10 pages detailing the timeline of its talks with Activision. According to the filing, Spencer told Kotick during their November 19th phone call that “Microsoft was interested in discussing strategic opportunities” between the two companies and asked if he had time to talk to Microsoft CEO Satya Nadella the following day. That Saturday, November 20th, Nadella made it clear Microsoft hoped to purchase the publisher, stating the company was “interested in exploring a strategic combination with Activision Blizzard.”

It turns out the quick pace at which the talks moved was mainly due to all the other companies interested in buying up Activision Blizzard after its stock dived in November. At least four other companies contacted the publisher about a possible acquisition. None of them are named in the SEC filing. However, one notably wanted to just buy Blizzard. Activision didn’t move forward with that option because the company’s board of directors deemed the sale would have been too difficult to pull off.

The document also details the terms of the purchase agreement. If the deal doesn’t go through due to antitrust complications, Microsoft has agreed to pay Activision Blizzard a termination fee of up $3 billion. A few years ago, that’s a possibility Microsoft probably wouldn’t have had to worry about too much, but 2022 finds the company in a very different regulatory environment. At the start of the month, NVIDIA abandoned a $40 billion bid to buy ARM after the Federal Trade Commission sued to block the purchase. President Biden appointed Lina Khan, the Commission’s current chair, to the position on the strength of her experience in antitrust law. When the NVIDIA-ARM deal fell through, the agency specifically noted it was "significant" because it "represents the first abandonment of a litigated vertical merger in many years."