Day: January 12, 2018

AMD Is Releasing Spectre Firmware Updates To Fix CPU Vulnerabilities

An anonymous reader quotes a report from The Verge: AMD’s initial response to the Meltdown and Spectre CPU flaws made it clear “there is a near zero risk to AMD processors.” That zero risk doesn’t mean zero impact, as we’re starting to discover today. “We have defined additional steps through a combination of processor microcode updates and OS patches that we will make available to AMD customers and partners to further mitigate the threat, ” says Mark Papermaster, AMD’s chief technology officer. AMD is making firmware updates available for Ryzen and EPYC owners this week, and the company is planning to update older processors “over the coming weeks.” Like Intel, these firmware updates will be provided to PC makers, and it will be up to suppliers to ensure customers receive these. AMD isn’t saying whether there will be any performance impacts from applying these firmware updates, nor whether servers using EPYC processors will be greatly impacted or not. AMD is also revealing that its Radeon GPU architecture isn’t impacted by Meltdown or Spectre, simply because those GPUs “do not use speculative execution and thus are not susceptible to these threats.” AMD says it plans to issue further statements as it continues to develop security updates for its processors. Read more of this story at Slashdot.

Original post:
AMD Is Releasing Spectre Firmware Updates To Fix CPU Vulnerabilities

Ocean waves can hurl boulders 2.5X the weight of the Statue of Liberty

That rock you see above? It’s 620 tons, over 2.5 times the weight of the Statue of Liberty. Yet some powerful wave in the North Atlantic was mighty enough to lift it out of the sea and plop it onto land. Everyday ocean waves are way more powerful than we ever thought: This is the conclusion of a fascinating paper by geoscientist Ronadh Cox and her research group . Scientists long knew there were unusually huge rocks hurled ashore around the world, but generally they assumed they’d been tossed up by tsunamis, rare tectonic events. Nope. It looks like regular ‘ol storm-waves can manage these sorts of feats. Cox and her group took a bunch of before-and-after photos of the northwest coast of Ireland around the time of a 2013-2014 storm cluster, and identified several boulders that the storms had thrown ashore. They were huuuuuuuge! No wonder Homer called Poseidon the “earth-shaker” . The paper is here online in full , and is both layperson-parsable and seriously gripping. Given that global warming is pouring evermore energy into the oceans, we’re going to need to reassess just how powerful coastal waves can get, as Cox points out in this story about her work: “Why bother with this study?” Cox knew members of the audience might be asking. If these deposits are formed by storms, then we can better understand storm dynamics and coastal processes. This information will be important as global climate changes cause storms to become more frequent and intense. The research could also help to constrain tsunami models elsewhere. “But from my perspective, it’s just cool. It’s just fun,” added Cox.

More here:
Ocean waves can hurl boulders 2.5X the weight of the Statue of Liberty

Federal prosecutors say that Ohio man used MacOS malware that covertly operated cameras and mics and exfiltrated porn searches for 13 years

An indictment in the US District Court for the Northern District of Ohio’s Eastern Division alleges that Phillip R Durachinsky created a strain of MacOS “creepware” called Fruitfly, which was able to covertly operate the cameras and microphones of infected computers as well as capturing and sharing porn searches from the infected machines; the indictment alleges that Durachinsky used the software for 13 years, targeting individuals, schools, and federal agencies including the Department of Energy. (more…)

Read More:
Federal prosecutors say that Ohio man used MacOS malware that covertly operated cameras and mics and exfiltrated porn searches for 13 years

Skype is adding an option for encrypted conversations

Soon, your chats on Skype can be just as secure as conversations on Signal, the service used by US Senators. Microsoft is integrating the open source Signal protocol, used by WhatsApp, Google, Facebook and Signal itself, into test versions of Skype as ‘ Private Conversations ‘ for end-to-end encrypted communications. There are a few restrictions: You can’t turn an existing chat into a Private Conversation, and must start each one by sending a request to one of your contacts. They don’t carry over between devices, so if you switch platforms, you’ll have to send a whole new request. And finally, Private Conversations are currently available in preview only for Skype Insiders, the service’s beta tester community. Via: Windows Central Source: Signal blog , Skype: Private Conversations

Link:
Skype is adding an option for encrypted conversations