OpenWrt Sysupgrade flaw let hackers push malicious firmware images

OpenWrt Sysupgrade flaw let hackers push malicious firmware images

Router attack

A flaw in OpenWrt’s Attended Sysupgrade feature used to build custom, on-demand firmware images could have allowed for the distribution of malicious firmware packages.

OpenWrt is a highly customizable, open-source, Linux-based operating system designed for embedded devices, particularly network devices like routers, access points, and other IoT hardware. The project is a popular alternative to a manufacturer’s firmware as it offers numerous advanced features and supports routers from ASUS, Belkin, Buffalo, D-Link, Zyxel, and many more.

The command injection and hash truncation flaw was discovered by Flatt Security researcher ‘RyotaK’ during a routine home lab router upgrade.

The critical (CVSS v4 score: 9.3) flaw, tracked as CVE-2024-54143, was fixed within hours of being disclosed to OpenWrt’s developers. However, users are urged to perform checks to ensure the safety of their installed firmware.

Poisoning OpenWrt images

OpenWrt includes a service called Attended Sysupgrade that allows users to create custom, on-demand firmware builds that include previously installed packages and settings.

“The Attended SysUpgrade (ASU) facility allows an OpenWrt device to update to new firmware while preserving the packages and settings. This dramatically simplifies the upgrade process: just a couple clicks and a short wait lets you retrieve and install a new image built with all your previous packages,” explains an OpenWrt support page.

“ASU eliminates the need to make a list of packages you installed manually, or fuss with opkg just to upgrade your firmware.”

RyotaK discovered that the sysupgrade.openwrt.org service processes these inputs via commands executed in a containerized environment.

A flaw in the input handling mechanism originating from the insecure usage of the ‘make’ command in the server code allows arbitrary command injection via the package names.

A second problem RyotaK discovered was that the service uses a 12-character truncated SHA-256 hash to cache build artifacts, limiting the hash to only 48 bits.

The researcher explains that this makes brute-forcing collisions feasible, allowing an attacker to create a request that reuses a cache key found in legitimate firmware builds.

By combining the two problems and using the Hashcat tool on an RTX 4090 graphics card, RyotaK demonstrated that it’s possible to modify firmware artifacts to deliver malicious builds to unsuspecting users.

Python script used for overwriting legitimate firmware builds
Python script used for overwriting legitimate firmware builds
Source: Flatt Security

Check your routers

The OpenWrt team immediately responded to RyotaK’s private report, taking down the sysupgrade.openwrt.org service, applying a fix, and getting it back up in 3 hours on December 4, 2024.

The team says it’s highly unlikely that anyone has exploited CVE-2024-54143, and they have found no evidence that this vulnerability impacted images from downloads.openwrt.org.

However, since they only have visibility for what happened in the last 7 days, it is suggested that users install a newly generated image to replace any potentially insecure images currently loaded on their devices.

“Available build logs for other custom images were checked and NO MALICIOUS REQUEST FOUND, however due to automatic cleanups no builds older than 7 days could be checked. Affected server is reset and reinizialized from scratch,” explains OpenWrt.

“Although the possibility of compromised images is near 0, it is SUGGESTED to the user to make an INPLACE UPGRADE to the same version to ELIMINATE any possibility of being affected by this. If you run a public, self-hosted instance of ASU, please update it immediately.”

This issue has existed for a while, so there are no cut-off dates, and everyone should take the recommended action out of an abundance of caution.

OpenWrt Sysupgrade flaw let hackers push malicious firmware images Read More
A New Formula for Pi Is Here. And It’s Pushing Scientific Boundaries.

A New Formula for Pi Is Here. And It’s Pushing Scientific Boundaries.

the greek letter pi the symbol of the mathematical constant

blackdovfx//Getty Images
  • While building a simpler model for particle interactions, scientists made a sleek new pi.
  • Representations of pi help scientists use values close to real life without storing a million digits.
  • The making of the new pi involved using a series, which is a structured set of terms that either converge to one expression or diverge.

In new research, physicists uses principles from quantum mechanics to build a new model of the abstract concept of pi. Or, more accurately, they built a new model that happens to include a great new representation of pi. But what does that mean, and why do we need different representations of pi?

Because quantum mechanics looks at the tiniest particles, one at a time, even simple questions can have complex answers that require massive computing power. Rendering high-tech video games and movies like Avatar can take days or more, and that’s still not at the level of reality. In this new paper, published in the peer-reviewed journal Physical Review Letters, physicists Arnab Priya Saha and Aninda Sinha describe their new version of a quantum model that reduces complexity but maintains accuracy.

As detailed in their paper, Saha and Sinha combined two existing ideas from math and science: the Feynman diagram of particle scattering and the Euler beta function for scattering in string theory. What results is a series—something represented in math by the Greek letter Σ surrounded by parameters.

Series can end up generalizing into overall equations or expressions, but they don’t have to. And while some series diverge—meaning that the terms continue to alternate away from each other—others converge on one approximate, concrete result. That’s where pi comes in. The digits of pi extend into infinity, and pi is itself an irrational number, meaning it can’t be truly represented by an integer fraction (the one we often learn in school, 22/7, is not very accurate by 2024 standards).

But it can be represented pretty quickly and well by a series. That’s because a series can continue to build out values well into the tiniest digits. If a mathematician compiles a series’ terms, they can use the resulting abstraction to do math that isn’t possible with an approximation of pi that’s cut off at 10 digits by a standard desk calculator. A sophisticated approximation enables the kind of nanoscopic particle work that inspired these scientists in the first place.

“In the early 1970s,” Sinha said in a statement from the Indian Institute of Science, “scientists briefly examined this line of research, but quickly abandoned it since it was too complicated.”


But math analysis like this has come a long way since the 1970s. Today, Sinha and Saha are able to analyze an existing model and remodel it with altered terms. They’re able to build a sequence and see that it converges on the value of pi within far fewer terms than expected, making it easier for scientists to run the series and then use that for further work.

All of that requires decades of foundational work in the field and large bodies of work showing that certain mathematical moves work where other ones don’t. It’s a comment on the ongoing and collaborative nature of math theory, even when what results is a working model that might help scientists. Our ability to meaningfully approximate has grown in tandem with our ability to solve complex problems outright.

“Doing this kind of work, although it may not see an immediate application in daily life, gives the pure pleasure of doing theory for the sake of doing it,” Sinha said in the statement.

A New Formula for Pi Is Here. And It’s Pushing Scientific Boundaries. Read More
Man travels 5,468 miles every week to completely different country because it's 'cheaper' than living by university

Man travels 5,468 miles every week to completely different country because it’s ‘cheaper’ than living by university

Man travels 5,468 miles every week to completely different country because it's 'cheaper' than living by university

Guangli Xu, from China, took to Douyin to share his mammoth commute

A man travelled almost 5,500 miles every single week to a completely different country because it was ‘cheaper’ than living in his university city.

Some of us are guilty of complaining about a 30-minute journey to work via bus or car, but imagine having to go to the airport, head through security and board a plane for the morning commute.

I feel tired just saying it, but for Guangli Xu it’s very much been a reality.

The 28-year-old went viral after sharing his mammoth commute on Douyin – the Chinese version of TikTok.

Each return trip took three days in total, beginning with Xu leaving his home in the Shandong province of eastern China at around 7am to the capital city of Jinan for the airport.

Guangli Xu's commute is mammoth (Douyin)

Guangli Xu’s commute is mammoth (Douyin)

This is where he would take a layover flight to Melbourne in Australia, arriving the next day in time for class at RMIT University, where he studied art management.

Xu would go back to China on the third day, with a friend putting him up while studying in Australia.

Speaking about his weekly travels, Xu told SBS Mandarin: “A round trip takes about 72 hours. One way is about 10 to 13 hours on the plane.”

Xu previously lived in Melbourne after spending eight years studying in the Aussie city, including an undergraduate degree in game design.

But for his final semester in 2024, Xu decided to move back home and become an ‘international commuter’.

“I usually leave for Melbourne on Monday mornings and can be back home [in China] by Wednesday evenings,” he added.

“The overall cost is not much different. But I think the money is better spent [in China] because the overall cost here is lower.”

Xu commuted to Melbourne from China (Getty Stock Image)

Xu commuted to Melbourne from China (Getty Stock Image)

In one video, Xu calculated one trip cost him around $930, which included the flight, taxi and food.

While it may sound like a big hassle, Xu’s research on the feasibility of the commute and the temptation to spend more time with his nearest and dearest made him commit to the plan.

“I found that the flight routes between China and Australia are frequent, with multiple airlines operating, so I gave it a try … It turned out to be quite feasible and I haven’t encountered any major issues,” he added.

“I prefer the environment and convenience in China. After living abroad for so many years, I also wanted to spend more time with my family.”

Xu completed his studies for the semester back in October and doesn’t expect to return to Australia for a while.

Man travels 5,468 miles every week to completely different country because it’s ‘cheaper’ than living by university Read More
New Science Could Save the Maple Syrup Industry From a Sticky Situation

New Science Could Save the Maple Syrup Industry From a Sticky Situation

detail of maple sap
A technological revolution has transformed the ancient tradition of sugar making—with big implications for local economies and ecosystems imperiled by climate change.

Gear-obsessed editors choose every product we review. We may earn commission if you buy from a link. Why Trust Us?

Aaron Wightman was almost born in a sugarhouse.

It was early April, and his parents were boiling maple sap in the Western New York shack where they produced syrup and other maple-flavored goods. “It was pretty rustic,” Wightman says, “with just enough power for some lightbulbs.” In other words, not the ideal place for his mother to go into labor.

Fortunately, the labor pains turned out to be a false alarm, and Wightman was born a few days later in the hospital—but it wasn’t long before he was back in the sugarhouse. As a toddler, he crawled near the steamy wood-fired boilers his father tended over, sometimes all night. By the time he was 10 years old, Wightman was trudging through the woods, collecting hundreds of sap-filled buckets by hand.

Most of us, when we think about maple syrup, picture rosy-cheeked New Englanders dressed in buffalo plaid, tree trunks slung with galvanized buckets, and steam pouring from a rudimentary shack tinseled with icicles. As it turns out, our imaginations are a little outdated. These days, maple sugaring is less of a handicraft and more of a science, as new equipment has enabled producers to make more maple syrup—and money—faster and easier, no all-nighters necessary.

Wightman has graduated from the family sugarhouse to the Cornell Maple Program, where he oversees 7,800 tapped trees across four miles of an experimental forest outside of Ithaca, New York. During sugaring season, the program’s Arnot Maple Lab produces 400 gallons of syrup a day, a volume unthinkable just two decades ago, now made possible by state-of-the-art technology.

portrait

Justin Kaneps

Sugar maker Aaron Wightman is working to understand how climate change could impact the color, flavor, and taste of maple syrup.

It may seem like niche science, but Wightman believes maple has a wide-reaching potential to satisfy America’s insatiable sweet tooth and buoy local economies. What’s more, a sugar bush—the term for a forest used to produce maple sap—is a part of a fully intact ecosystem, as opposed to other forms of sugar farming, which dismantle ecosystems. But he’s far from the first person to realize these benefits. In fact, sugaring is one of the only Indigenous methods of agriculture still happening in America today.

In the last three decades, production of maple syrup in the United States has soared by 350 percent, according to Wightman, with sugar bushes popping up in Oregon, Iowa, and West Virginia. Producers in the Northeast, meanwhile, are trying new things: incorporating modern technology into Native foodways, for instance, or managing their sugar bushes for biodiversity. For his part, Wightman wants to keep the sap flowing as the climate changes.

To figure out how to do that, he and his colleagues have established the Cornell Maple Climate Network, an unprecedented regional effort to collect data that will help producers—and their trees—survive the largest existential threat they’ve ever faced.

American maple syrup almost went extinct. In 1993, sugar makers in New York State, the second-largest producer in the U.S. behind Vermont, made only 180,000 gallons of syrup. A century earlier, in 1890, the number was more than 450,000 gallons. “It had almost faded away as an industry,” Wightman says.

There were a few reasons for the decline. When the Second Industrial Revolution arrived in the early 20th century, agricultural production as a whole plummeted, and maple syrup—which was often a side hustle for dairy or beef farmers—was no exception. Meanwhile, consumers began choosing the cheaper, mass-produced sugar that was flooding the market. (The average American consumes about 7.5 tablespoons of added sugar each day, most of it derived from sugar cane and sugar beets.)

But by far the biggest challenge facing the declining industry was the herculean task of collecting, transporting, and boiling sap.

By the 1990s, factory farming and the convenience of ultra-processed ingredients had transformed much of our food systems—yet producing maple syrup remained stubbornly laborious. Harvesting maple sap required trudging through the woods, drilling a tap into and hanging a bucket onto hundreds if not thousands of trees, and then waiting patiently for the right climatic conditions to strike.

Sap begins to flow in late winter when daytime temperatures rise above freezing but fall back below it at night, a freeze-thaw cycle that creates pressure in the tree. After a good sap run, farmers had to rush to collect the sap, which can spoil if it becomes too warm.

Once the sap had been retrieved, the grunt work may have been over, but the long job of processing it was just beginning. When it dribbles from the tree, sap is anywhere from 1 to 3 percent sugar. To make maple syrup, sap must be boiled down to a much sweeter 66 percent sugar, a process that took hours.

sap hoses leading to facility

Justin Kaneps

Tangles of green hose stretch across Dan Weed’s sugar bush, ferrying sap to his facility for processing.

After the long boil, the syrup has to be filtered to remove so-called sugar sand (harmless bits of concentrated minerals that ruin the look of the finished product), a feat that sugar makers used to accomplish with cloth or paper filters, like the ones used in drip coffee makers. This final step was arduous and sticky—but necessary for a food famous for its golden translucence. “The technology just wasn’t there to process it efficiently,” Wightman says, noting that it takes about 40 gallons of sap to make one gallon of syrup. “You’d boil all night long and maybe you made some money at the end—but usually not. So until the 1990s, if you were tapping a couple thousand trees, that was considered huge.”

But that decade marked a turning point for the industry. Shiny, souped-up equipment suddenly made syrup-making at scale a viable enterprise. Powerful reverse-​osmosis (RO) machines hit the market, which cut down significantly on production time by condensing the sugar in the sap. Meanwhile, commercial evaporators (also called boilers because they do just that—boil the remaining water from the sap) became supercharged, running on propane and fuel oil instead of endless cords of firewood. Even filtering got easier, as vacuum-powered presses that pushed the finished syrup through a series of ultrafine sieves became widely available.

“The machines in this room totally transformed industry,” Wightman says, looking around his Cornell laboratory. I’d come to visit the Arnot Maple Lab on a windy day in early March. The 4,200-square-foot space was opened in 2021 and replaced Cornell’s original sugarhouse, which lacked heat, reliable water, and a bathroom. The new lab, on the other hand, is full of instrument panels and gleaming steel, the new workhorses of a very old tradition.

Tucked away in their own room are the lab’s two reverse-osmosis machines, which, like boilers, are designed to increase sugar content. These machines—nicknamed Maverick and Goose, after the Top Gun characters—are each composed of a control board atop two blue filters, fed by two cylindrical tanks the size of hot-water heaters and an interstate system of tubes entering and exiting from every direction. It’s a far cry from tin buckets and wood-fired stoves.

In other industries, RO machines are typically used to remove particulates from drinking water. Maple producers use them to remove water from particulates—in this case, sugar molecules. To accomplish this, the machines force sap through a porous membrane with holes large enough for water to pass through, but not the sugar. The smallest RO machines bring sugar levels from about 2 percent to 4, which may not sound like much but cuts boiling time in half. Wightman likes to run his RO machines as high as they will go, until the sap is about 20 percent sugar.

After a trip through the RO machine, the concentrated sap then flows to one of the lab’s two high-efficiency evaporators. In the Northeast, wood-fired evaporators used to be the site of communal gatherings, as all-night boils turned into a breakfast of hot dogs cooked in bubbling sap. Today, these rigs, which run on fuel oil and cost upwards of $100,000 per unit, look a bit like chrome train engines, with covered boiling pans up front that recycle steam to the unit’s backside to preheat incoming sap.

While sugar makers still tap and untap trees by hand, plastic tubing has replaced buckets, and vacuum tubing systems mean sugarhouses no longer need to be built on low ground, where gravity could beckon the sap. When Wightman gives me a tour of Cornell’s sugar bush, where blue and green tubing weaves in and out of century-old maples, he points to a vacuum sensor hung from a tree that resembles the controller for a remote-controlled car.

These sensors let staff know when there’s a leak somewhere in the miles of tubing—usually caused by a hungry squirrel or a fallen branch—and what line it’s in. While machines have replaced almost every aspect of maple production, “leak hunting is a continuous task,” Wightman says. “Ideally we have someone out looking every day.”

That means when he’s not in the lab or speaking to producers, Wightman still gets to spend some time in the woods. These are the hours he cherishes most.

Pure maple syrup used to require three ingredients: “good sap, good wood, and good luck,” writes Michael Lange, anthropologist and Champlain College professor in his book Meanings of Maple: An Ethnography of Sugaring. These days, sugar makers might argue there’s a new item on that list: “good equipment.”

This new equipment has made sugar making less backbreaking, according to Dan Weed, owner of Schoolyard Sugarbush, but not necessarily simpler. In today’s industry, in addition to being a farmer, Weed says, “you have to be an expert plumber, an electrician, and an IT specialist all in one.” (For all his technological savvy, Weed hasn’t abandoned the basics. He gets his forecasts from the Farmer’s Almanac and often uses the “Jones Rule of 86,” a shortcut to estimate total gallons of sap required to produce one gallon of syrup: Divide 86 by the sugar content of sap (so for 2 percent sugar: 86 ÷ 2 = 43 gallons of sap).

Weed’s production facility is crowded with complicated-looking machinery, a setup Wightman admittedly envies. He had sent me to chat with Weed, who’s the president of the New York State Maple Producers Association and an enthusiastic adopter of cutting-edge technology.

worker in facility

Justin Kaneps

Dan Weed, who has been producing maple since 1993, collects sap from 240 tapped maple trees on his property.
machines used to release sap from hoses to storage tanks

Justin Kaneps

The blue releasers in Weed’s shop are designed to release sap from the pressurized tubes and into one of his 7,000-gallon storage tanks.

Weed, who resembles an off-duty Santa with a round nose and friendly blue eyes, led me on a tour of the various machines that the sap—which he collects from 47,000 taps spread across four counties in Southern New York—goes through once it reaches his sugarhouse.

The first stop is what appears to be, to my novice’s eyes, a blue barrel lying on its side fed by a tangle of plastic tubes. This is the releaser, and it does just that. It releases the sap from Weed’s vacuum system and pumps it back outside into one of his three 7,000-gallon storage tanks. When those tanks get full enough, the sap will be sent into Weed’s RO machines, the “wicked expensive” ones he can monitor via cell phone while he’s out making deliveries. “I can pull over and look at the sugar content, the pressure,” he says, a bit of bemusement on his face even now.

When he started producing syrup in 1989, Weed used a toboggan to get the sap he collected from 240 taps back to his sugarhouse, a structure he built himself. Inside, he boiled sap all night on a wood-fired evaporator that processed about five gallons of syrup per hour. Today, his rig runs on natural gas and boils off 600 gallons in the same amount of time.

After the boiling process, Weed used to filter his syrup with wool cone filters pinned to a clothesline, a process he describes with a smile and one word: “messy.” Today, just as it does at Wightman’s lab, the syrup in his sugarhouse is pushed through an accordion-shaped filter press until it’s nearly translucent.

Here in the Empire state, maple is an agritourism darling, the star of late-winter festivals everywhere. During my visit to New York, Weed was getting ready for New York State Maple Weekend, a sugarhouse crawl across the state, when hundreds of visitors cram into his business to learn how syrup gets from Weed’s woods to their breakfast table.

Weed says most people aren’t interested in his RO machine, but rather come to indulge in some regional nostalgia. He admits to some artifice. “We try to pull out the authentic things, the old neck yoke, the old evaporator.” For one weekend a year, the scene at Schoolyard Sugarbush looks more like it does on its syrup bottles than in real life.

In late March, about a week after Weed and Wightman mark the end of their sugaring season, Angela Ferguson’s is just beginning. As supervisor of the Onondaga Nation Farm outside of Syracuse, New York, Ferguson operates on a different scale—her goal is simply to feed her community—and a different schedule.

While Weed taps his maples during the first days of each new year, Ferguson’s crew doesn’t head out to the sugar bush until they hear the “big thunder,” as she calls it, a distinctive thunderclap that erupts from an early spring storm. It is impossible to miss, she says: “It rolls across the whole sky, rattles the windows, wakes you up.” That’s when she knows the trees have woken up and are ready to give their sap.

Individuals involved in syrup production with steam and equipment in a woodworking setting

Mike Greenlar

Angela Ferguson, the supervisor of the Onondaga Nation Farm oustide Syracuse, New York, has blended technology and tradition to ensure the sap keeps flowing.

The very first drops of sap that Ferguson collects are for the Nation’s opening ceremony, an Onondaga tradition in which, as she explains, “we give thanks for the trees’ gifts, for letting us have a relationship with them.” During the ceremony, every member of the community takes a sip of the season’s inaugural sap, even the babies.

The Onondaga’s relationship with maple trees, which they regard as the leader of all the trees in the forest, is a very long one. Legend has it that sugar-making knowledge was born in the Haudenosaunee Confederacy (called the Six Nations by the English and the Iroquois Confederacy by the French) when an Iroquois chief left his tomahawk in a maple tree overnight, causing sap to leak from its bark. In the morning, his wife used the sap to boil meat for dinner, imbuing it with a new sweetness.

For centuries, Native people heralded the arrival of sap as much-needed nourishment in the depths of winter. To reduce the water content—what is today accomplished with an RO machine—they placed the sap in shallow troughs and allowed it to freeze overnight. Each morning, they removed a thick layer of ice, leaving more concentrated sap behind. Eventually, Native sugar makers boiled this concentrated sap down in large kettles—but rarely into syrup. Instead, they hardened it into soft cakes of sugar, which could be stored for years.

Ferguson sees her work as a continuation of this tradition. “In 2024, I’m still doing what my ancestors have done for thousands of years, but we’re also adapting.” She now uses plastic tubing, which festoons the Nation’s sugar bush, as well as an industrial-sized evaporator, which Ferguson got in a trade with the nearby Seneca Nation for seven of the Onondaga’s buffalo.

Ferguson founded Seven Buffalo Maple Company three years ago, but the name is a bit of a misnomer; the syrup is given away to community members. “It’s not a business venture,” she says, “but a spiritual and cultural one.”

Lots of people on the reservation had been tapping trees in their backyards for years, but the Nation’s sugaring efforts were individual and scattershot. Ferguson wanted to reconnect with communal and ancestral ways, while also producing enough to feed everyone—with a little left over to save. The tubing and evaporator allow her to do this with more ease and efficiency, but she’s not interested in optimization for optimization’s sake. For instance, she has no interest in installing a vacuum system to pull sap from the 600 or so maples in her sugar bush. “I want whatever naturally flows to be given to us,” she explains, “I don’t want to be extractive by pulling it out.”

In April, when the sap does stop flowing, the Onondaga celebrate with a closing ceremony. The 2024 sugaring season will be shorter than usual, but for Ferguson, it’s about time spent, not gallons made. “We have these gifts from nature, and we are supposed to come and receive them, so they don’t ever leave us.”

high efficiency evaporators

Justin Kaneps

High-efficiency evaporators in Wightman’s lab have replaced the old-fashioned boilers of yore.

Ferguson isn’t the only sugar maker concerned about doing things the right way to ensure the future of the crop. Wightman says that even five years ago, when he brought up the threat of climate change to a group of producers, “I used to get a lot of folded arms, a lot of people arguing with me.” That is no longer the case, he says. A recent survey found that 89 percent of sugar makers have already experienced the negative effects of climate change. New England is one of the fastest-warming regions in the U.S., a trend that had forced maple producers to revise the timetables they have followed for centuries.

“Today, our season is over before we would have even tapped,” says Wightman, who used to spend April next to his dad in the family’s sugarhouse. These days, the trees in Cornell’s forest begin budding (the checkered flag of the sugaring world) in late March. His experience is not unique. Most producers say their seasons are starting and ending much earlier than they used to, and multiple peer-reviewed studies have predicted that tapping seasons will grow shorter by the end of the century.

Climate change also brings with it more severe weather, like high winds that bring down trees that sever tubing lines, as well as winter heat waves that clog lines prematurely. Warmer temperatures will also affect sap chemistry—and possibly the taste of syrup—and invite invasive species and new plant diseases into the woods.

That’s why Wightman and Adam Wild, his Cornell counterpart who heads up the university’s Uihlein Maple Research Forest in Lake Placid, have launched the Cornell Maple Climate Network, setting up monitoring stations across the Northeast, Midwest, and Canada to collect valuable data about the relationship between the Acer saccharum (sugar maple) and its environment.

“We want to understand every factor that influences production,” Wightman explains when he shows me the solar-powered monitoring station in the woods outside the lab, where a tapped maple has been injected with temperature and pressure probes. Meanwhile, sensors take in a smorgasbord of data: air and soil temperature, atmospheric pressure, precipitation, among others. It’s a simple and accessible setup. Wightman says he and Wild used off-the-shelf, Internet of Things technology to assemble the monitoring stations.

For now, the project aims to gather baseline knowledge of how climate affects sap flow, sugar content, and overall yield, data that will inform strategies for sugar makers contending with climate change. “For example, if we learn that there are soil-moisture thresholds during the growing season that correlate to sugar content, we can start thinking about water-management strategies in the sugar bush,” Wightman says. “If the data shows a strong relationship between soil temperature and sap yield, that could be used in developing sugar bush management prescriptions around evergreen species that shade the forest floor.”

It may come as a surprise that, despite humans’ long and delicious relationship with maple trees, scientists still don’t completely understand what makes a maple tree’s sap flow. “Tree physiology is something we’re still working on,” says Wightman. By amassing vast tomes of data from around the maple-growing region, he and Wild hope to unravel that mystery so they can provide guidance to producers about where and when—and eventually what—to tap in a climate-changed world.

bottled maple syrup

Justin Kaneps

On that last point, while maple trees are known for their hardiness—Wightman says they can “heal their own wounds” after the annual tapping season—that resilience may not translate in a warming world plagued by pests and pathogens. Both Wightman and Wild are raising experimental sugar bushes of birch and beech trees, sap-producing species that might better tolerate a volatile future.

There have always been financial incentives for protecting the long-term health of the sugar bush ecosystem—most sugar maples aren’t tap-worthy until they’re about 40 years old—but there are countless other benefits, too. While sweeteners like sugarcane and sugar beets require vast tracts of cleared land, chemical fertilizers, and a staggering amount of water, sugar bushes sequester carbon, filter groundwater, and support other crops besides maple. Wightman grows currants, pawpaw, and elderberry in the lab’s sugar bush.

And the family farms these forests stand on often serve as an intact ecosystem where other plants and animals can still thrive. Wightman and the team at Cornell recently teamed up with Audubon New York to launch the Bird-Friendly Maple certification program, which encourages producers to manage their sugar bushes to optimize breeding and foraging opportunities for forest birds, a class of birds in steep decline.

The ecosystem’s resilience paired with the technological advances that have supercharged maple production have so far shielded sugar makers from the worst of the climate-induced pain. But that won’t always be the case.

The last few sugaring seasons have been unpredictable for producers in New England, a reminder that all the modern equipment in the world is no match for the whims of nature.

That’s why Weed, whose sugarhouse is decked out in all the latest maple gadgets, believes the producers should continually return to their roots—literally. “We need to put our hands in the dirt,” he says. By that he means sugar makers must take good care of their most important resource—their forest.

“People tend to think that pristine means unmanaged. But that’s not true,” Weed argues. Sugar makers can enhance their woods’ resilience to natural disturbances by managing for invasive species, removing diseased trees, and cultivating trees other than maples. “It takes a lot of time and money to accomplish, but those woods will be so much better off in 20 years,” he says.

In the meantime, Wightman is using the woods in his charge to find ways to make life easier for producers like Weed, both now and in the future. This is the kind of work that Wightman, who calls himself “an idea guy,” came to Cornell to take on. “I wanted to do something big here,” he says, and a day at the lab—with its Top Gun equipment and ambitious experiments—is proof he’s doing just that.

Despite those bells and whistles, Wightman admits it’s the rustic old sugarhouse in Western New York—the one he was almost born in—where he most feels the magic of sugar making, its long history, and promising future.

“When I boil there, and step outside and see the stars, I think that this is the exact same experience my grandfather had, and his father and his father. I feel really connected,” he says. “I love that intergenerational feeling, that feeling of carrying-on of tradition.”

It’s a tradition he’s working diligently to protect.

New Science Could Save the Maple Syrup Industry From a Sticky Situation Read More
Body language expert explains how Pete Davidson can attract so many women

Body language expert explains how Pete Davidson can attract so many women

Body language expert explains how Pete Davidson can attract so many women

From Kim Kardashian to Kate Beckinsale, Pete Davidson has quite an impressive dating history

A body language expert has revealed the ‘refreshing’ reason why Pete Davidson attracts some of the most beautiful celebs.

Comedian Pete Davidson has dated some of Hollywood’s most attractive women, but is the saying really true that ‘some women can be laughed into bed’?

A body language expert has claimed that his humor can only take him so far and there are a number of qualities that would make Davidson attractive to others.

His former partners include the likes of Kate Beckinsale, Margaret Qualley, Kaia Gerber, Emily Ratajkowski, Ariana Grande and Kim Kardashian.

While the expert cheekily claimed that he is a man who ‘continually punches above his weight’, some of his most unique qualities could be super desirable to a woman craving some stability.

Ariana Grande and Pete Davidson in 2018 (Nicholas Hunt/Getty Images for MTV)

Ariana Grande and Pete Davidson in 2018 (Nicholas Hunt/Getty Images for MTV)

According to body expert Judi James, who spoke to the Daily Mail, the comedian’s edginess, easygoing nature, and dating history make him a highly-sought after bachelor.

Particularly to those ‘fresh out of relationships’.

“In a world of controlling ex’s this could be like therapy for the women,” she said.

James added: “Not only does Pete look like a man who is continually punching above his weight, he acts like it too with his body language.

“He tends to look star-struck in a very flattering way.

“The more beautiful a woman is the more she tends to attract the arrogant narcissist. Pete looks like the opposite, which could be refreshing.”

The body expert went on to explain how humor could also be Davidson’s secret weapon.

Kim Kardashian and Pete Davidson at the 2022 Met Gala (Gotham/Getty Images)

Kim Kardashian and Pete Davidson at the 2022 Met Gala (Gotham/Getty Images)

“Jokes can be as powerful as muscles when taking somebody down and Pete’s ability to crack great one-liners might be super-attractive, especially if he’s bringing a toxic ex down to size,” she said.

James also noted that because he’s been linked to many beautiful women in the past, it’s likely propelled his status in the dating scene.

She said many potential suitors might think, ‘Who would not be interested in dating the man who dated Kim Kardashian?’

The body language expert added that with the likes of Machine Gun Kelly and Travis Barker, dating the rebellious yet laid-back guy seems to be the trend.

Ratajkowski once opened up about why she and other women find Davidson so attractive.

While appearing on Late Night with Seth Meyers, the model-turned-author said: Guys are like, ‘Wow. What’s that guy got?’ And I’m like, I mean, he seems super charming.

“He’s vulnerable. He’s lovely. His fingernail polish is awesome.

“He looks good!”

Ratajkowski added he also has a ‘super great relationship with his mom’.

Body language expert explains how Pete Davidson can attract so many women Read More
A Single Mutation Could Send a Catastrophic Contagion From Birds to Humans

A Single Mutation Could Send a Catastrophic Contagion From Birds to Humans

What could happen if avian flu crosses the species barrier?

drop of black and green paint slides on a white canvas
Jose A. Bernat Bacete//Getty Images
  • A new study by biologists from the Scripps Research Institute shows that a bird flu virus is just a single mutation away from having human-ready receptors.
  • If the H5N1 virus does make the switch, it could lead to widespread infection rates in humans.
  • Thus far, the virus has been limited in humans.

According to a new study published in the journal Science by Scripps Research Institute biologists, the avian H5N1 virus has the potential to quickly shift from a bird flu to a human flu. The authors wrote that the pathogen, which first popped up in North America in 2021, is just a “single mutation” away from being able to infect humans with the same efficacy it can currently infect other animals.

“In nature, the occurrence of this single mutation could be an indicator of human pandemic risk,” according to an editorial note attached to the paper. The study showed that just one mutation—the amino acid glutamine transforming into leucine, specifically at “residue 226 of the virus hemagglutinin”—was enough to make the switch from avian to human.

Each virus has a certain kind of cell that it is best at infecting. In order to latch onto a host, that host has to have the proper receptors for the virus to attach to. Birds and humans have different receptors on their cells, which means that a virus requires just the right match to pick the lock of the cell, so to speak, to be easily transferrable.

Since its discovery in 2021, the H5N1 virus has been able to bond with receptors in avian species, marine mammals, and even (occasionally) humans. By 2024, that virus was spreading widely in the country’s dairy cattle population, causing mild cases in over 50 people.

Those human infections raised concerns about the capability for bovine-to-human (or even human-to-human) transmission, despite the fact that the virus was still best suited to avian receptors. The concern, understandably, is the potential for a pandemic if the disease becomes broadly and easily transmissible to and between humans.

“For a new pandemic H5N1 virus, we know that it has to switch receptor specificity from avian-type to human-type,” the study authors wrote. “So, what will it take?” Apparently, just one mutation.

“The initial infection is what we’re concerned about to initiate a pandemic,” Paulson said, according to Scientific American, “and we believe that the weak binding that we see with this single mutation is at least equivalent to a known human pandemic virus.”

The Paulson-led research team synthesized the genetic sequence for the strain of bird flu found in a Texas dairy worker—the first human known infected with the H5N1 virus—and then examined proteins on the outer surface of the virus, where it links to the cell membrane of its host. To find the right docking equipment, so to speak, the team researched past examples of the avian flu jumping to humans, and found that a change from glutamine to leucine in position 226 would switch the virus into a mode compatible with easily infecting human biology.

Many of the human cases of the virus came from dairy workers repeatedly exposed to the virus, which likely overpowered the cells by entering through the eyes and nose in great numbers. For a quick and easy spread, the virus must transmit via infected droplets traveling in the air from a sneeze or cough. “In this context, the virus needs to be able to recognize human-type receptors to bind to cells in the human airway in amounts sufficient to cause infection,” Paulson said.

While this hasn’t yet happened in the H5N1, it has occurred in the past. And if the change does occur now, it could spark a quick-moving avian flu virus ready-made for humans to pass along to one another.

Plenty of variables remain—including whether this mutation will ever even occur—and predicting the severeness or concern over the H5N1 is only speculative. But it’s good to know what we’re up against, should that one little switch occur.

A Single Mutation Could Send a Catastrophic Contagion From Birds to Humans Read More
Infectious virus samples go missing in major lab launching urgent investigation

Infectious virus samples go missing in major lab launching urgent investigation

Infectious virus samples go missing in major lab launching urgent investigation

Three vials containing three separate deadly viruses have vanished without trace from a public health lab

An urgent investigation has been launched in Australia after three infectious virus samples vanished from a public health lab.

At Queensland’s government’s Public Health Virology Laboratory, three vials went missing of Hendra virus, lyssavirus and hantavirus, and they still remain unaccounted for, the state government has confirmed.

Hendra virus commonly affects horses and is rarely passed over to humans, but the Australian Department of Agriculture, Fisheries and Forestry states on its website that when contracted, it more often than not results in death.

“A small number of people have been infected with the virus, from infected horses. Tragically 4 of the 7 people who were infected have died. Five of these people were veterinary health professionals,” it explains.

The vials went missing from a public health laboratory in Queensland, Australia (Getty stock)
The vials went missing from a public health laboratory in Queensland, Australia (Getty stock)

Then you have lyssavirus, which is picked up through Australian bats – it is basically a form of rabies.

The Department of Health in the southeastern state of Victoria, in Australia, writes: “Early symptoms are flu-like and can include fever, headache, fatigue and malaise. Symptoms quickly progress to muscle weakness, sensory changes, confusion, convulsion, and loss of consciousness.

“Australian bat lyssavirus infection is almost always fatal, with death usually occurring within 1 to 2 weeks of symptoms starting. All three human cases resulted in death.”

Finally, the last missing vial contains Hantavirus – a study of recent outbreaks labeled it ‘very lethal’ and is ‘zoonotic’, which means it is transferable between animals and humans.

The three vials containing deadly viruses have been missing since August last year (Getty stock)

The three vials containing deadly viruses have been missing since August last year (Getty stock)

“In the year 2020, 833 cases of hantavirus infection had been reported, with 35% mortality rate in the US,” the report states.

However, the Australian government has urged residents that the missing vials are not a threat to humanity, and that they could have simply just been ‘destroyed’ rather than thrown out in general waste.

“It’s difficult to conceive of a scenario whereby the public could be at risk,” Chief health officer of Queensland Dr John Gerrard explained.

“It’s important to note that virus samples would degrade very rapidly outside a low temperature freezer and become non-infectious.”

Queensland's Chief health officer Dr John Gerrard urged residents not to panic (Dan Peled/Getty Images)

Queensland’s Chief health officer Dr John Gerrard urged residents not to panic (Dan Peled/Getty Images)

An investigation has been launched into the missing vials – which disappeared back in August last year – and Queensland Minister for Health Tim Nicholls said it will ensure a breach like this will not happen again.

“With such a serious breach of biosecurity protocols and infectious virus samples potentially missing, Queensland Health must investigate what occurred and how to prevent it from happening again,” Nicholls said.

“The department has advised me it has taken all necessary steps since being made aware of the breaches, including notifying regulators. The investigation is the next step in this process.”

“The Part 9 Investigation will ensure nothing has been overlooked in responding to this incident and examine the current policies and procedures in operation today at the laboratory.”

Infectious virus samples go missing in major lab launching urgent investigation Read More
Doctor explains the harmful effects not having sex can have on the human body

Doctor explains the harmful effects not having sex can have on the human body

Doctor explains the harmful effects not having sex can have on the human body

Dr Tara Suwinyattichaiporn says there are a range of both physical and mental health problems a lack of sex can cause

Ever wondered what can happen to your body if you stop having sex? Well, one expert has weighed in on the range of problems lack of action in the bedroom can cause.

Dr Tara Suwinyattichaiporn, a professor, podcaster, columnist and sex and relationship expert from California has revealed both men and women can suffer a host of issues after forgoing sex for a month or two.

Her dire warning comes as a 2021 study by California University revealed Gen Z are having less sex than any generation in history, with 38 percent of young people between 18 to 30 reporting that they hadn’t had any sexual partners in the previous year.

A lack of sex can cause a range of problems (Getty stock photos)

A lack of sex can cause a range of problems (Getty stock photos)

Speaking to DailyMail.com, Dr Tara said men who are sexually inactive could end up with a rare condition called penile atrophy, where penile tissue becomes less elastic and causes it to shrink by one to two centimetres.

The Celebs Go Dating co-host warned those abstaining from sex are at risk of a range of physical symptoms, like penile and vaginal atrophy – painful sex and shrinking genitals – which could begin to manifest in as little as six months.

Sexually inactive men are also at heightened risk of prostate cancer as the Urology Care Foundation found carcinogens can build up in the prostate over time while other studies show ejaculation may prevent the cancer from taking hold because it flushes out the harmful chemicals that build up in the semen.

Penis shrinkage is not what you want to hear (Getty stock photos)

Penis shrinkage is not what you want to hear (Getty stock photos)

The science behind how long it takes for the penis to shrink, however, appears to still be up for debate as Tobias Kohler, assistant professor of urology at Southern Illinois University School of Medicine, told WebMD that it comes down to a lack of regular erections.

Meanwhile, women who go without sex for months could suffer from vaginal atrophy, making intercourse uncomfortable and painful.

This is because sex promotes blood flow and lubrication down there, so when the vaginal tissues become thin and dry – which can shorten the vaginal canal – penetration becomes more difficult.

But our mental health is just as important as our physical health and Dr Tara said the lack of human touch and physical intimacy can give our oxytocin and dopamine levels a beating, resulting in insecurities, lower self-esteem, irregular emotions and infidelity.

Sympathetic communication is key (Getty stock photos)

Sympathetic communication is key (Getty stock photos)

Another study revealed people with unmet sexual needs can become frustrated, irritable and even aggressive, brought on by either not having an available partner or engaging in unsatisfying sexual activities.

The 2021 study added this frustration could lead to a heightened risk of crime ‘associated with relief-seeking, power-seeking, revenge-seeking and displaced frustration’.

How to address sex problems with your partner

While sexual droughts in relationships are normal, sex therapist Sari Cooper advised partners approach the situation with ‘softness’.

She said couples in a ‘dry spell’ sometimes blame one another, pursue their partner with ‘continuos criticism’, ask their partner to open up the relationship or end up cheating.

To dodge these myriad of problems, couples who are enduring a lengthy lull should first address their stress levels with yoga, tai-chi or meditation.

Scheduling regular date nights with your partner can also help.

If that fails, Sari said couples who feel stuck in a sexless relationship and unable to communicate should seek out a certified sex therapist.

Doctor explains the harmful effects not having sex can have on the human body Read More
Hundreds of Vials of Deadly Viruses Missing After Lab Breach

Hundreds of Vials of Deadly Viruses Missing After Lab Breach

Hundreds of vials containing live viruses have gone missing from a laboratory in Australia, sparking an investigation.

Queensland Health Minister Tim Nicholls announced today that 323 samples of live viruses—including Hendra virus, Lyssavirus and Hantavirus—went missing in 2021 in a “serious breach of biosecurity protocols.”

The breach was discovered in August 2023, with nearly 100 of the missing vials containing Hendra virus, which is deadly. Two of the vials contained hantavirus, while 223 vials contained samples of lyssavirus.

lab virus vials missing
Stock image of vials in a laboratory (main) and virus particles (inset). Hundreds of vials containing samples of deadly viruses have gone missing from a lab in Australia. ISTOCK / GETTY IMAGES PLUS

Hendra virus was first discovered in the mid-1990s after infecting and killing several horses in Australia. Only a handful of humans have caught the disease after being infected by horses, but a large proportion of infected people died.

“Hendra virus has a 57 percent fatality rate in humans and has had a devastating impact on those who have been infected, their families and on the veterinary and equine industries in areas where the virus spills over,” Raina Plowright, a professor at the department of public and ecosystem health at Cornell University’s College of Veterinary Medicine, previously told Newsweek.

Hantavirus is carried by rodents and can cause Hantavirus Pulmonary Syndrome (HPS), which has a mortality rate of around 38 percent, while lyssavirus is similar to rabies and also has a very high mortality rate.

The lab has not been able to conclude if the viruses were destroyed or removed from secure storage, but they do not appear to have been stolen.

“There is nothing to suggest that these have been taken from the laboratory. Secondly […] we don’t have any evidence that Hendra virus has been weaponized in any way in any research laboratory,” Nicholls said at a press conference.

“Of course, all this kind of research is taken in secret, but we are not aware that this has been weaponized in any way. The process of weaponizing a virus is very sophisticated, and is not something an amateur does.”

The samples appear to have gone unaccounted for after a freezer they were being stored in at Queensland’s Public Health Virology Laboratory broke down.

“It’s this part of the transfer of those materials that is causing concern,” Nicholls said, as reported by local news ABC.

“They were transferred to a functioning freezer without the appropriate paperwork being completed. The materials may have been removed from that secure storage and lost, or otherwise unaccounted-for.”

According to a statement from the Queensland government, there is “no evidence of risk to the community from the breach,” as the viruses would have degraded very quickly and subsequently become harmless to humans.

“It’s difficult to conceive of a scenario whereby the public could be at risk,” Queensland Chief Health Officer John Gerrard said in the statement.

“It’s important to note that virus samples would degrade very rapidly outside a low temperature freezer and become non-infectious.

Gerrard notes that the samples were incredibly unlikely to have been thrown away in geeral waste, and were probably destroyed in an autoclave as per usual lab protocol.

“Importantly, no Hendra or Lyssavirus cases have been detected among humans in Queensland over the past five years, and there have been no reports of Hantavirus infections in humans ever in Australia,” Gerrard explained.

An investigation into the breach has been initiated, which hopes to find out exactly how these viruses went missing and what prevented the discovery of the breach for nearly two years.

“With such a serious breach of biosecurity protocols and infectious virus samples potentially missing, Queensland Health must investigate what occurred and how to prevent it from happening again,” Nicholls said in the statement.

“The Part 9 Investigation will ensure nothing has been overlooked in responding to this incident and examine the current policies and procedures in operation today at the laboratory,” he said.

“I’m advised Queensland Health has taken proactive measures since discovering the breaches including retraining staff to ensure ongoing compliance with required regulations and an audit of all relevant permits to ensure accountability and correct storage of materials.”

Hundreds of Vials of Deadly Viruses Missing After Lab Breach Read More
Home Alone viewers are only just realizing who plays the police officer at start of movie

Home Alone viewers are only just realizing who plays the police officer at start of movie

Home Alone may be 34 years old, but fans are spotting new things all the time

Despite being over three decades old, some Home Alone fans are only just realizing who plays the police officer at the start of the movie.

The classic Christmas film is 34 – yep, 34-years-old. Feeling old right now?

Home Alone has withstood the test of time and is regarded by many as one of the best festive flicks out there, with some households even watching the film multiple times in the build-up to the big day.

That’s how good it really is.

Nonetheless, fans are still spotting things regarding Home Alone to this very day – particularly involving the policeman at the start of the movie.

The copper can be seen at the very start of the movie – in fact right at the start – as we see him while the opening credits are still rolling.

The McCallister household is, of course, a pretty mad one as the family prepare to leave for Paris the next day, and the policeman can be seen on numerous occasions trying to get someone’s attention.

However, he is repeatedly told the parents are not around to assist.

Home Alone has cemented it's place as a Christmas classic (20th Century Fox)

Home Alone has cemented it’s place as a Christmas classic (20th Century Fox)

“All kids, no parents, probably a fancy orphanage,” we hear him say. Eventually, the cop manages to catch the attention of Kevin’s dad and warns him that there are ‘a lot of burglaries around the holidays’, so he wants to make sure the family is taking the proper precautions.

The dad confirms the family has automatic timers for the lights and locks on the doors, and his wife then spills the beans that the family will be leaving for their holiday the following morning – all of which is information that might just prove useful to someone planning to rob the house.

To be honest, the identity of the police officer isn’t exactly hidden in the movie, but apparently a number of viewers didn’t notice who he really was.

You see, the cop isn’t just a cop, but also a robber – none other than one of our Wet Bandits, Harry.

The police officer at the start of the movie is actually Harry, one of the Wet Bandits (20th Century Studios)

The police officer at the start of the movie is actually Harry, one of the Wet Bandits (20th Century Studios)

If you’re one of the people who thought that was obvious, then you’re probably in disbelief about the fact that anyone missed it.

But they did, and they took to Twitter to admit it.

“Just found out the “cop” from home alone was THE ROBBER IN THE MOVIE i’m a f***ing idiot,” one baffled person wrote, while a second wrote: “did u guys know the cop from home alone was also the robber.”

Both the cop and the robber are brought to life by Joe Pesci, and once you realize that it becomes clear that Harry was even more surprised to find Kevin at home, knowing that his entire family had planned to go away for the holidays.

Home Alone viewers are only just realizing who plays the police officer at start of movie Read More