October 9, 2025

Prime Day speaker offers are nonetheless accessible: Save on JBL, Bose, Final Ears and extra

Amazon Prime Day is almost over, however our audio consultants are nonetheless sifting via Amazon for bargains on one of the best good audio system, soundbars and transportable blueetooth audio system. We’re at all times able to argue this high-quality audio system are a worthwhile funding, including new dimensions to any type of leisure — and with these offers on high audio system from JBL, Bose, Beats, Marshall and extra, there isn’t any excuse to not improve. Whether or not you are constructing a everlasting setup on your residence theater or chaining transportable audio system collectively to blast dance tunes via an out of doors social gathering venue, we guess you may discover some offers to like on this curated listing.

Greatest Prime Day bluetooth speaker offers

JBL Xtreme 2 for $150 (17 p.c off): This deal is an effective way to get ahold of the JBL Xtreme 2, an previous favourite from 2018 we nonetheless love. An Xtreme 2 can get louder than you’d anticipate from a transportable speaker, placing out 40 watts at most, and stays charged for round 15 hours.
JBL Flip 6 for $100 (23 p.c off): The JBL Flip 6 is a stable selection for an all-around bluetooth speaker, performing effectively in any room or on the go. It sounds good at virtually any frequency and quantity, runs for 12 hours on a single cost and is almost unimaginable to break with falls, mud or water.
JBL Go 3 for $35 (30 p.c off): The JBL Go 3 is an honest and extremely inexpensive carabiner speaker for all of your outside adventures — as is its sister product, the Go 3 Eco, which is constructed from recycled supplies. It is clearly not probably the most highly effective speaker at 4.2 watts, however it has a surprisingly good purposeful vary. Plus, the design appears to be like good on any belt or backpack.
Beats Capsule for $119 (34 p.c off): This Bluetooth speaker from Apple subsidiary Beats earned a rating of 83 in our evaluation and at the moment holds a spot in our purchasing information. It’s not one of the best uncooked worth in the marketplace, and it may well battle at most quantity, however it typically pumps out robust bass with out sounding imbalanced. A trendy and waterproof design, ample battery life and the flexibility to play lossless audio over a USB-C cable add to the enchantment. This sizable low cost matches the bottom value we’ve tracked.
Final Ears Miniroll for $47 (41 p.c off): Miniroll is the smallest speaker from Final Ears, however it punches far above its weight, beginning with UE’s trademark large quantity buttons. Whereas sufficiently small to slot in a denims pocket, its mixture of a driver and radiator manages about 85 decibels. A Miniroll can run for about 12 hours on a single cost.
Final Ears Increase 4 for $95 (37 p.c off): The UE Increase 4 is a balanced speaker that does effectively wherever. Take it tenting (it is waterproof and a cost lasts for 15 hours), to a celebration (it places out loud 360 diploma sound) or make it a part of a everlasting residence system by chaining it with different UE audio system — one in every of these plus two Minirolls or Wonderbooms would come fairly near full {surround} sound.
Final Ears Everboom for $231 (15 p.c off): The Everboom is the center floor of the UE line, with extra highly effective output than the Wonderboom and extra portability than the Hyperboom. Its 360 diploma sound pairs with an Outside Increase characteristic to work higher exterior, although it is not fairly as spectacular within the center ranges.
Bose SoundLink Flex for $99 (34 p.c off): We have hardly ever seen the Bose SoundLink Flex this low cost, so now could be the time to snap up this high-fidelity outside speaker. It is sufficiently small to hold in a single hand and might be operated from as much as 30 toes away through the Bose Join app. We have additionally discovered it easy and enjoyable to make use of for hands-free cellphone calls throughout breaks within the music.
Bose SoundLink Revolve+ for $179 (40 p.c off): The SoundLink Revolve+ line, Bose’s unique upright 360-degree audio system, proceed to pack a punch. This present mannequin incorporates a 17-hour battery life, IP55 water resistance and the flexibility to hook up with a sensible speaker to increase your digital assistant’s vary.
Bose SoundLink Max for $299 (25 p.c off): The Bose SoundLink Max could put you in thoughts of a basic boombox, with its removable deal with and thudding base. However inside it is all fashionable, with a 50-watt output, an efficient vary of 52.6Hz and a 20-hour rechargeable battery. It even comes with a 3.5mm AUX enter to hook up with a turntable, in the event you actually need to embrace your interior 90s DJ.
Anker Soundcore 2 for $28 (38 p.c off): This bigger speaker would not appear like a lot, however it’s powerful, waterproof and versatile. It is received a broad vary of optimum pitch, efficient throughout 70 Hz from bass to treble, and 12 watts of output. Whereas it is transportable and sounds good open air, its extensive design means it may well additionally substitute for a soundbar in your house theater.
Soundcore Choose 4 Go for $18 (20 p.c off): The Soundcore Choose 4 Go weighs solely 9.3 ounces, which makes the remainder of its specs much more spectacular: 20 hours of battery life, IP67 waterproofing and sound that fills rooms. It even sounds fairly good in compact outside areas, greater than able to serenading an out of doors desk or livening up a pool social gathering.
Soundcore Movement 300 for $56 (30 p.c off): The Soundcore Movement 300 is a full-frequency champ, with clear sound within the larger ranges and fairly heavy bass. Its adaptive audio characteristic adjustments output relying on whether or not the speaker is at the moment mendacity down, standing on finish or hanging out of your belt loop. It is also small and lightweight sufficient to hold in your pocket or clip to your backpack.
Marshall Emberton II for $100 (44 p.c off): Marshall, the previous warhorse of the audio world, continues to crush it with the transportable and bluetooth-ready Emberton II. Though it appears to be like like an vintage, it is something however, with 360-degree sound and over 30 hours of battery life from a single cost — all weighing somewhat greater than 1 / 4 of a pound.
Marshall Acton III for $200 (33 p.c off): Marshall not too long ago re-engineered the Acton’s speaker setup by angling the tweeters outward. It paid off, particularly within the Acton III, which now delivers a pleasingly extensive soundscape. At 6.3 pounts, it is not technically transportable, however the design makes it straightforward to maneuver round — and for the eco-conscious, it is manufactured from 70 p.c recycled supplies.

Greatest Prime Day good speaker offers

Amazon Echo Pop for $25 (38 p.c off): The Echo Pop is Amazon’s smallest and most cost-effective good speaker, resembling an Echo Dot sliced in half. It is somewhat quiet, and doubtless greatest for extending Alexa’s vary relatively than serving as the first host on your digital assistant. In a smaller room, although, that is as handy and clear-sounding as every other Echo you may use.
Amazon Echo Spot for $45 (44 p.c off): Aside from maybe the Pop, no Amazon Echo matches higher on a bedside desk than the Spot. Its user-friendly design incorporates each a speaker and a digital show — so it is recognizable as a basic alarm clock, however with rather more info on the display and much better sound high quality. That is the bottom value we have ever seen it promote for.
Sonos Period 100 for $180 (10 p.c off): The Sonos Period 100 is a improbable good speaker for a fair higher value. It is not solely loud — it additionally sounds good at any quantity, it doesn’t matter what platform you are streaming audio from. It could join through bluetooth or bodily strains, and makes use of TruePlay to tune the sound to your present location utilizing included mics.
Sonos Period 300 for $379 (21 p.c off): In our full evaluation of the Sonos Period 300, we discovered that it is simple to arrange and sounds unimaginable. It consists of the thrilling spatial audio characteristic that makes music sound prefer it’s coming from in all places — whereas it would not at all times work, it is exhilarating when it hits. The Period 300 may even routinely tune sound to your location, and also you now not want an iPhone for this characteristic to work.

Greatest Prime Day soundbar offers

JBL Bar 300 for $250 (38 p.c off): The Bar 300, a part of JBL’s 2023 soundbar explosion, is a mighty but low cost soundbar with an built-in subwoofer. Regardless of being small, it manages to create a theatrical expertise by working each Dolby Atmos and MultiBeam. Its voice sharpening algorithm is very good at making dialogue clearer (for these of us who at all times should placed on the subtitles).
Amazon Hearth TV Soundbar Plus for $150 (40 p.c off): One of many most cost-effective soundbars you may ever see, the Hearth TV Soundbar Plus gives a noticeable increase to your TV’s audio high quality, even when it would not attain Dolby Atmos heights. It is easy, however that makes it a breeze to arrange — all you need to do is plug in a single HDMI cable.
Sony Bravia Theater Bar 6 for $498 (29 p.c off): The Sony Bravia Theater Bar 6 is a part of Sony’s Dolby Atmos soundbar lineup. It stands out from that line as a terrific entry level, balancing theatrical sound with outlined dialogue by adjusting outputs via machine studying. It is able to remodeling regular stereo into {surround} sound via automated up-mixing.
Roku Streambar for $69 (31 p.c off): The Roku Streambar is already inexpensive, however this deal places it inside anybody’s attain. It is also economical when it comes to area — as we famous in our full evaluation, it is concerning the measurement of an egg carton, however nonetheless manages to present off near-surround sound.

This text initially appeared on Engadget at https://www.engadget.com/audio/audio system/prime-day-speaker-deals-are-still-available-save-on-jbl-bose-ultimate-ears-and-more-083538046.html?src=rss

Macs Disconnect from SMB Share: "STATUS_NETWORK_SESSION_EXPIRED (0xc000035c)"

Apple

admin

October 9, 2025

Macs Disconnect from SMB Share: "STATUS_NETWORK_SESSION_EXPIRED (0xc000035c)"

I’ve some Ubuntu Servers working Samba with Winbind. Every little thing is okay, however Macs will randomly disconnect in a single day, or at some irregular interval.

On the servers, Samba logs this as two occasions:

1: ../source3/smbd/service.c:1050(close_cnum) 2: closed connection to service knowledge

By matching timestamps on the Macs I can see they log the drops as:

kcm DEPRECATED USE in libdispatch shopper: Setting timer interval to 0 requests a 1ns timer, did you imply FOREVER (a one-shot timer)?; set a breakpoint on _dispatch_bug_deprecated to debug

By analyzing timestamps I’ve decided that that is the one occasion logged on the Mac purchasers’ aspect. Right here is an instance shopper that has a shell script writing to a textual content file on a share each ten seconds:

You may see the connection was alive at 08:59:46 within the textual content file on the left, and in /var/log/system.log there’s solely a single related message.

I requested on the Samba checklist serve about it and have been advised the Macs are merely closing the connections.

Replace:

Wireshark evaluation reveals some extra info:

Errors from above (Line 4):

STATUS_NETWORK_SESSION_EXPIRED
SATATUS_INVALID_PARAMETER
STATUS_NETWORK_NAME_DELETED

Right here is the ultimate SMB2 message (second from backside): Negotiate Protocol Response:

As if to confound, there’s an NT Standing: STATUS_SUCCESS messages in there (see annotation).

Here’s what Microsoft says in regards to the error:

If the Standing area within the SMB2 header is
STATUS_NETWORK_SESSION_EXPIRED, the shopper MUST try and
reauthenticate the session that’s recognized by the SessionId within the
SMB2 header, as laid out in part 3.2.4.2.3. If the
reauthentication try succeeds, the shopper MUST retry the request
that failed with STATUS_NETWORK_SESSION_EXPIRED. If the
reauthentication try fails, the shopper MUST fail the operation and
terminate the session, as laid out in part 3.2.4.23.

Is there a script I can run to only renew the session in a cron job?

Finish replace

Different varieties purchasers will hold the connections open ceaselessly, so it does certainly seem to be solely Macs are doing this. The OS variations range from OS X 10.12 to macOS Catalina, utilizing numerous flavors of SMB2 to SMB3.

Any concept how I can start to grasp why the macs are doing this, or any recommendations on getting them to maintain the connections alive?

The Mac purchasers are working jobs that depend on a persistent connection.

Extremely related to know, however initially omitted as I used to be on the lookout for a workaround:

I’ve a few dozen of those servers (largely Ubuntu 18.04; Samba 4.7.6) working advantageous for the previous a number of years. Three of them had automated updates put in, and these three have the difficulty of the Macs disconnecting. I am holding again letting the opposite servers restart for the updates, and the Macs is not going to drop connections to the non-updated servers.

As a take a look at I setup a server to 16.04 to see if and older model of Ubuntu Server would pose the identical problem. Surprisingly it has the identical downside utilizing a unique model of Samba (4.3.11). I should do the take a look at once more, with out letting 16.04 set up the most recent safety updates, in an effort to affirm my suspicions that these are the reason for the issue.

Although I believe one thing in Ubuntu’s core modified, I’m asking right here since solely Macs are affected.

On various Macs with OSes from 10.12 to Catalina I’ve tried testing them with their default settings, and all doable mixtures of adjustments to /and so on/nsmb.conf:

[default] signing_required=no protocol_vers_map=[see manpage for nsmb.conf (linked below)]

manpage for nsmb.conf

I’ve additionally tried disabling all sleep and powersaving choices, and even utilizing a pleasant cafffinate wrapper, KeepingYouAwake, to implement this.

On the server I’ve tried following the recommendation of one other sysadmin on the #macosx freenode channel, kode54, who shared how they ultimately acquired a steady connection.

The recommendation did not assist–effectively I have never totally tried it because it requires putting in a model of Samba from a PPA for a model of Samba maintained by the Linux for Faculties Challenge–however knowledgeable me of vfs_fruit and the actual fact that there’s a developmental effort of extending Samba by means of an additional bundle for, partially, coping with Macs. It additionally led me to discover a web page on Samba’s wiki discussing difficulties with Macs and server-side workarounds: Configure Samba to Work Higher with Mac OS X

It is tough for me to strive putting in prompt Samba PPA as a result of these servers are fileservers partially solely, and are usually at all times getting used for compute jobs that may take days to run (neuroimaging processing). They have been constructed for compute jobs, and do storage virtually as a side-effect of the dual-socket, high-memory density, server choices additionally taking place to be the servers with the big variety of drive bays (16+).

I am hoping to strive different choices earlier than changing into totally negatively disruptive.

Since not one of the server-side choices are serving to–I have been making an attempt the flags in numerous mixtures no to avail–I’m hoping that the Apple neighborhood could have some workaround for me.

Any means of preserving a persistent connection, regardless of the place the difficulty could originate, can be extremely beneficial.

Go to sleep whereas binge-watching? This Google TV characteristic could be for you

Mobile

admin

October 9, 2025

Go to sleep whereas binge-watching? This Google TV characteristic could be for you

Google TV Streamer remote in hand controlling TV

C. Scott Brown / Android Authority

TL;DR

An Android Authority teardown has revealed that Google TV might examine should you’re nonetheless watching a channel.
Google TV would run these checks should you haven’t used your distant shortly.
The platform would then cease taking part in the channel should you don’t reply to the immediate.

Some streaming companies, like Netflix, supply a pop-up to examine should you’re nonetheless watching a sequence. That is particularly helpful should you’ve fallen asleep. Now, we’ve found that Google TV itself might get the same immediate.

We dug right into a current model of the Google TV Dwelling app for the Google TV platform (model 1.0.815784074-735113) and found the platform might quickly examine should you’re nonetheless watching TV. The strings point out a couple of snippets of textual content, seen under.

Simply checking in. This channel will cease taking part in since you haven’t used the distant shortly
Are you continue to watching?
Hold watching

Don’t need to miss the very best from Android Authority?

It is a fairly sensible characteristic, though it’s unclear how lengthy the platform will take to examine in with you. The primary textual content snippet above additionally mentions that the “channel will cease taking part in.” In different phrases, Google TV won’t enter sleep mode instantly. Nonetheless, the platform does dip into sleep mode after some time should you’re not taking part in any media or interacting with it. So it stands to cause that in case your present channel stops taking part in by way of this new characteristic, your Google TV gadget will ultimately fall asleep anyway.

Moreover, the snippet’s reference to a “channel” means that this characteristic won’t apply to all video content material. However we’ll want to attend for more information to substantiate this.

⚠️ An APK teardown helps predict options which will arrive on a service sooner or later primarily based on work-in-progress code. Nonetheless, it’s doable that such predicted options could not make it to a public launch.

Thanks for being a part of our group. Learn our Remark Coverage earlier than posting.

Novoloop’s upcycled plastic takes a step nearer to manufacturing

Technology

admin

October 9, 2025

Novoloop’s upcycled plastic takes a step nearer to manufacturing

Plastic recycling startup Novoloop has inked a take care of a significant producer to provide its upcycled thermoplastic polyurethane at business scale, TechCrunch has completely discovered.

The settlement helps nudge the Menlo Park-based Novoloop by way of the so-called “valley of dying” that many local weather tech startups should slog by way of.

Startups that rely on {hardware} are notably prone to stumbling within the valley, the dreaded second once they’ve confirmed their preliminary know-how and haven’t generated adequate revenues from promoting their product.

Underneath the phrases of the deal, Novoloop will provide Huide Science and Expertise with a chemical constructing block used to make thermoplastic polyurethane. Novoloop makes the fabric, referred to as a polyol, from post-consumer polyethylene waste like plastic baggage, one of many hardest supplies to recycle.

Thermoplastic polyurethanes, or TPU, are a kind of plastic that’s utilized in every thing from trainers to medical gadgets.

“For this product line, we now have primarily achieved what can be the business relationship,” Novoloop co-founder and CEO Miranda Wang advised TechCrunch.

At this level, Novoloop is constrained in its potential to produce polyols, Wang stated. Earlier this 12 months in India, the startup commissioned its demonstration plant, which is able to producing tens of tons of the fabric per 12 months.

Techcrunch occasion

San Francisco
|
October 27-29, 2025

The demonstration plant’s capability is adequate to provide sufficient TPU for “main pilot tasks,” Wang stated, together with one for a footwear buyer that will likely be introduced within the coming months. Beforehand, Novoloop equipped Swiss shoe producer On with its Lifecycled materials for the tread of its Cloudprime sneaker.

Offers just like the one with Huide will likely be key for the Novoloop’s progress, Wang stated. “The most important hurdle to profitability is economies of scale,” she stated. “A number of the main target subsequent 12 months will likely be driving loads of these buyer offers to shut in order that we will finance the [commercial-scale] amenities.”

As soon as the offers and financing fall into place, Novoloop expects to have its business plant up and working in early 2028, Wang stated. The primary model ought to be capable of provide sufficient polyols to provide about 16,000 tons of TPU yearly.

“After we can run the supplies at these sorts of volumes, we anticipate to have the ability to be at value parity with virgin TPUs,” she stated.

Hackers Exploit WordPress Websites to Energy Subsequent-Gen ClickFix Phishing Assaults

Cyber Security

admin

October 9, 2025

Hackers Exploit WordPress Websites to Energy Subsequent-Gen ClickFix Phishing Assaults

Cybersecurity researchers are calling consideration to a nefarious marketing campaign focusing on WordPress websites to make malicious JavaScript injections which are designed to redirect customers to sketchy websites.

“Web site guests get injected content material that was drive-by malware like pretend Cloudflare verification,” Sucuri researcher Puja Srivastava mentioned in an evaluation revealed final week.

The web site safety firm mentioned it started an investigation after one among its buyer’s WordPress websites served suspicious third-party JavaScript to website guests, finally discovering that the attackers launched malicious modifications to a theme-related file (“capabilities.php”).

The code inserted into “capabilities.php” incorporates references to Google Advertisements, probably in an try to evade detection. However, in actuality, it capabilities as a distant loader by sending an HTTP POST request to the area “brazilc[.]com,” which, in flip, responds with a dynamic payload that features two parts –

A JavaScript file hosted on a distant server (“porsasystem[.]com”), which, as of writing, has been referenced on 17 web sites and comprises code to carry out website redirects
A chunk of JavaScript code that creates a hidden, 1×1 pixel iframe, inside which it injects code that mimics reliable Cloudflare belongings like “cdn-cgi/challenge-platform/scripts/jsd/fundamental.js” – an API that is a core a part of its bot detection and problem platform

It is value noting that the area “porsasystem[.]com” has been flagged as half of a visitors distribution system (TDS) known as Kongtuke (aka 404 TDS, Chaya_002, LandUpdate808, and TAG-124).

In keeping with info shared by an account named “monitorsg” on Mastodon on September 19, 2025, the an infection chain begins with customers visiting a compromised website, ensuing within the execution of “porsasystem[.]com/6m9x.js,” which then results in “porsasystem[.]com/js.php” to finally take the victims to ClickFix-style pages for malware distribution.

The findings illustrate the necessity for securing WordPress websites and making certain that plugins, themes, and web site software program are stored up-to-date, implementing robust passwords, scanning the websites for anomalies and sudden administrator accounts created for sustaining persistent entry even after the malware is detected and eliminated.

Create ClickFix Pages Utilizing IUAM ClickFix Generator

The disclosure comes as Palo Alto Networks Unit 42 detailed a phishing equipment named IUAM ClickFix Generator that enables attackers to contaminate customers with malware by leveraging the ClickFix social engineering approach and provide you with customizable touchdown pages by mimicking browser verification challenges typically used to dam automated visitors.

“This instrument permits menace actors to create extremely customizable phishing pages that mimic the challenge-response habits of a browser verification web page generally deployed by Content material Supply Networks (CDNs) and cloud safety suppliers to defend in opposition to automated threats,” safety researcher Amer Elsad mentioned. “The spoofed interface is designed to seem reliable to victims, growing the effectiveness of the lure.”

The bespoke phishing pages additionally include capabilities to govern the clipboard, an important step within the ClickFix assault, in addition to detect the working system used with a view to tailor the an infection sequence and serve appropriate malware.

In at the least two completely different circumstances, menace actors have been detected utilizing pages generated utilizing the equipment to deploy info stealers equivalent to DeerStealer and Odyssey Stealer, the latter of which is designed to focus on Apple macOS programs.

The emergence of the IUAM ClickFix Generator provides to a previous alert from Microsoft warning of an increase in industrial ClickFix builders on underground boards since late 2024. One other notable instance of a phishing equipment that has built-in the providing is Affect Options.

“The kits supply creation of touchdown pages with quite a lot of accessible lures, together with Cloudflare,” Microsoft famous again in August 2025. “Additionally they supply development of malicious instructions that customers will paste into the Home windows Run dialog. These kits declare to ensure antivirus and internet safety bypass (some even promise that they’ll bypass Microsoft Defender SmartScreen), in addition to payload persistence.”

It goes with out saying that these instruments additional decrease the barrier to entry for cybercriminals, enabling them to mount subtle, multi-platform assaults at scale with out a lot effort or technical experience.

ClickFix Turns into Stealthy through Cache Smuggling

The findings additionally comply with the invention of a brand new marketing campaign that has innovated on the ClickFix assault system by using a sneaky approach known as cache smuggling to fly underneath the radar versus explicitly downloading any malicious recordsdata on the goal host.

“This marketing campaign differs from earlier ClickFix variants in that the malicious script doesn’t obtain any recordsdata or talk with the web,” Expel Principal Menace Researcher Marcus Hutchins mentioned. “That is achieved by utilizing the browser’s cache to pre-emptively retailer arbitrary knowledge onto the consumer’s machine.”

Expel mentioned it was unable to find out the ultimate payload obtained as a part of the assault. It is also at present not recognized who customers are redirected to the phishing web page, and if it entails methods like malvertising or search engine marketing (website positioning) poisoning.

“The file extracted from the cache is used to arrange a scheduled process, which is about to run after every reboot,” Hutchins advised The Hacker Information. “When the duty runs, it connects to a command-and-control server ready for follow-up instructions.”

Within the assault documented by the cybersecurity firm, the ClickFix-themed web page masquerades as a Fortinet VPN Compliance Checker, utilizing FileFix ways to deceive customers into launching the Home windows File Explorer and pasting a malicious command into the deal with bar to set off the execution of the payload.

The invisible command is designed to run a PowerShell script through conhost.exe. What makes the script stand aside is that it doesn’t obtain any further malware or talk with an attacker-controlled server. As an alternative, it executes an obfuscated payload that passes off as a JPEG picture and is already cached by the browser when the consumer lands on the phishing web page.

“Neither the online web page nor the PowerShell script explicitly downloads any recordsdata,” Hutchins defined. “By merely letting the browser cache the pretend ‘picture,’ the malware is ready to get a whole ZIP file onto the native system with out the PowerShell command needing to make any internet requests.”

“The implications of this system are regarding, as cache smuggling could supply a method to evade protections that will in any other case catch malicious recordsdata as they’re downloaded and executed. An innocuous-looking ‘picture/jpeg’ file is downloaded, solely to have its contents extracted after which executed through a PowerShell command hidden in a ClickFix phishing lure.”

(The story was up to date after publication to incorporate further insights from Expel.)