|
January 3, 2018, 10:30 PM
|
Mediagazer
memeorandum
WeSmirchTop News
| Google Online Security Blog: |
Google's Project Zero says it discovered three variants of CPU attack, affecting AMD, ARM, and Intel; Android devices with latest security update are safe — Last year, Google's Project Zero team discovered serious security flaws caused by “speculative execution,” a technique used by most modern processors …
More:
Google Help, Project Zero, TechCrunch, Microsoft Azure Cloud …, TheStreet, CNET, USA Today, Bloomberg, iMore, Ars Technica, Business Insider, 9to5Google, Mashable, Android Open Source Project, The Keyword, On MSFT, Softpedia News, Neowin, CNBC, SlashGear, Liliputing, and LWN.net
Tweets: @lizthegrey, @mjg59, @andrewwrites, @laparisa, @grittygrease, @k8em0, @campuscodi, @rlove, @selenalarson, and @tomwarren
| New York Times: |
Researchers say there is no known fix for Spectre CPU flaw; Meltdown flaw affects almost all Intel CPUs, requires software patch that could cause slowness — SAN FRANCISCO — Computer security experts have discovered two major security flaws in the microprocessors inside nearly all of the world's computers.| Meltdown and Spectre: |
Official webpage for the Meltdown and Spectre CPU vulnerabilities, which has links to research papers and an FAQ — Bugs in modern computers leak passwords and sensitive data. Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs …
More:
ARM Developer, Gizmodo, The Register, Business Insider, TechCrunch, GeekWire, CNNMoney, SecurityWeek, Quartz, iMore, Softpedia News, The Tech Report, BleepingComputer.com, Android Central, and Laptop Mag
Tweets: @migueldeicaza, @briankrebs, @ow, @malwarejake, @stephennellis, and @micahflee
| Zack Whittaker / ZDNet: |
Researchers discover vulnerabilities, dubbed Meltdown and Spectre, that let hackers steal data from running apps on most Intel chips, some ARM and AMD chips — Most Intel processors and some ARM chips are confirmed to be vulnerable, putting billions of devices at risk of attacks.
More:
PostgreSQL news, Phoronix, Engadget, Tom's Hardware, The Verge, MSPoweruser, The Hacker News, MacRumors, Mashable, ExtremeTech, Tom's Guide, Windows Central, Neowin, On MSFT, CNBC, and SiliconANGLE
Tweets: @brainsmoke, @k8em0, @internetofs**t, @nicoleperlroth, @nicoleperlroth, @swiftonsecurity, @zackwhittaker, @aallan, @erratarob, @nicoleperlroth, @tomwarren, @mattblaze, @pwnallthethings, @kimzetter, @ow, @internetofs**t, @tomwarren, @martinsfp, @gossithedog, @nicoleperlroth, and @nicoleperlroth
| Juli Clover / MacRumors: |
Intel's memory access design flaw was partially addressed by Apple in macOS 10.13.2, released Dec. 6, with additional tweaks in next update, currently in beta — A serious design flaw and security vulnerability discovered in Intel CPUs has reportedly already been partially addressed by Apple …
More:
AppleInsider, CNBC, Android Police, TheStreet, Mercury News, 9to5Mac, Patently Apple, Softpedia News, Mashable, MacDailyNews, DSLreports, AskWoody, Business Insider, Cult of Mac, and Redmond Pie. Tweets: @aionescu
| Spectreattack.com: |
Researchers wrote a Spectre attack in JavaScript that violates browser sandboxing and reads data from the address space of the browser process running it — Modern processors use branch prediction and speculative execution to maximize performance. For example, if the destination …
More:
lkml.org, Mozilla Security Blog, and CNET
| Ina Fried / Axios: |
Intel says CPU flaws not limited to its own chips, exploits can't corrupt/modify data but can access sensitive data, is working with AMD and ARM to find fixes — A soon-to-be-disclosed and massive chip flaw affects more than just Intel chips, according to both sources familiar with the issue and Intel itself.
More:
Business Insider, Fortune, Wired, Barron's Online, Techdirt, Windows Central, Gizmodo, BGR, The Next Web, Reuters, PCWorld, Reuters, Patently Apple, The DigitalOcean Blog, TheStreet, Gizmodo, CNBC, The Guardian, ExtremeTech, EE Times, MSPoweruser, BleepingComputer.com, On MSFT, Axios, Engadget, iDownloadBlog.com, HotHardware, Neowin, Liliputing, The Mac Observer, VentureBeat, Softpedia News, SlashGear, TechCrunch, Silicon Valley Business …, Naked Security, BleepingComputer.com, iMore, Ars Technica, CNBC, The Tech Report, GeekWire, ZDNet, Cult of Mac, Axios, iPhone Hacks, The Verge, International Business Times, TechCrunch, Silicon Republic, CNBC, MacRumors, Seeking Alpha, BGR India, Business Insider, HackRead, Security Affairs, iPhone in Canada Blog, Tech Times, SiliconANGLE, Help Net Security, and TechSpot
Tweets: @sai, @eastdakota, @nicoleperlroth, @dinabass, @internetofs**t, @nicoleperlroth, @internetofs**t, @nicoleperlroth, @nicoleperlroth, @cloud_opinion, @nicoleperlroth, @timgostony, @dguido, @suka_hiroaki, @gossithedog, @inafried, @gossithedog, @rhhackett, @erratarob, @erratarob, @never_released, @erratarob, @erratarob, @inafried, @iiamit, @donal888, @inafried, and @marypcbuk. Thanks:@inafried
| Tom Warren / The Verge: |
Microsoft issued a rare out-of-band security patch today to protect against Intel, AMD, ARM flaws; sources say patch will be applied automatically on Windows 10 — Microsoft is issuing a rare out-of-band security update to supported versions of Windows today.
More:
Windows Central, The Verge, Business Insider, On MSFT, Neowin, SlashGear, AskWoody, and Digital Trends
Tweets: @swiftonsecurity, @tomwarren, @tomwarren, and @m8urnett
| Amazon Web Services, Inc.: |
AWS: all but a small percentage of EC2 instances are patched, remaining will be within hours; says customers must also patch their instance operating systems — AWS is aware of recently disclosed research regarding side-channel analysis of speculative execution on modern computer processors …
| Dan Primack / Axios: |
Sources: Spotify confidentially filed IPO documents with the SEC at the end of December; indications are the company wants to list in Q1 — Music streaming giant Spotify confidentially filed IPO documents with the SEC at the end of December, Axios has learned from multiple sources.
More:
Recode, Reuters, Los Angeles Times, Bloomberg, Slate, VatorNews, New York Times, NPR, Android Authority, CNNMoney, 9to5Mac, The Guardian, Engadget, CNBC, Wall Street Journal, Digital Trends, International Business Times, Android Central, Crunchbase News, Mashable, Tubefilter, SiliconANGLE, Silicon Valley Business …, The FADER, Neowin, Gizmodo, RAIN News, USA Today, Windows Central, hypebot, TechCrunch, Deadline, The Next Web, CNET, Fortune, Variety, GeekWire, The Wrap, MacDailyNews, Cult of Mac, iPhone in Canada Blog, Business Insider, Seeking Alpha, CNBC, Tech Times, TechSpot, VentureBeat, and Billboard
Tweets: @chrismessina, @joshconstine, @pkafka, and @reutersbiz
| Mary Jo Foley / ZDNet: |
Microsoft acquires Pittsburgh-based Avere Systems, a hybrid cloud storage vendor for Windows and Linux, will integrate its technology with Azure cloud — Microsoft plans to integrate Avere's file system and caching technologies for Windows and Linux clients with its Azure cloud.
More:
The Official Microsoft Blog, SiliconANGLE, Avere Systems, EnterpriseTech, VentureBeat, Business Insider, CNBC, Windows Central, MSPoweruser, The Register, CRN, Neowin, TechCrunch, Seeking Alpha, GeekWire, On MSFT, and PE Hub Blog. Tweets: @julwhite
| Sarah Perez / TechCrunch: |
Apple announces that its $99 developer program membership is now available at no cost to nonprofits, accredited educational institutions, government entities — Apple announced today it will begin allowing select publishers to waive the membership fees associated with its App Developer Program.
More:
Apple Developer, MacRumors, iMore, iDownloadBlog.com, The Mac Observer, Softpedia News, and AppleInsider
Sponsor Posts
Soxton:
Fast, affordable law for startups — Soxton automates startup legal so founders can move faster and sleep better. We handle incorporation, advisor, employment and commercial contracts. Join the waitlist for early access!
Fast, affordable law for startups — Soxton automates startup legal so founders can move faster and sleep better. We handle incorporation, advisor, employment and commercial contracts. Join the waitlist for early access!
F5:
Accelerate AI Adoption at F5's AI Virtual Summit — Learn how to architect, secure, and scale AI for production with real-world insights from industry leaders on June 23. Register now to save your spot.
Accelerate AI Adoption at F5's AI Virtual Summit — Learn how to architect, secure, and scale AI for production with real-world insights from industry leaders on June 23. Register now to save your spot.
Zoho:
Website Traffic Analytics: How to Read Your Data and Take Action — Traffic is up. Sessions look healthy. The dashboard is full of green arrows and yet — conversions are flat, revenue targets are slipping, and the leads coming through aren't closing.
Website Traffic Analytics: How to Read Your Data and Take Action — Traffic is up. Sessions look healthy. The dashboard is full of green arrows and yet — conversions are flat, revenue targets are slipping, and the leads coming through aren't closing.
IDrive:
Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.
Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.Featured Podcasts
Big Technology Podcast:
Will Apple (Finally) Get AI Right At WWDC?, Anthropic's Worry, Microsoft vs. OpenAI
The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.
Subscribe to Big Technology Podcast.
Hard Fork:
Hot I.P.O Summer + What Is A.I. Doing to Math? + HatGPT
The future is already here. Each week, journalists Kevin Roose and Casey Newton explore and make sense of the latest in the rapidly changing world of tech.
Subscribe to Hard Fork.
The Upstarts Podcast:
Vanta's Christina Cacioppo: The Underdog Turning 'Nonsense' Compliance Into A $4.2B Security Standout
Veteran tech reporter Alex Konrad sits down with breakout entrepreneurs taking on the status quo to shake up their fields in AI, design, nuclear energy, space, and more.
Subscribe to The Upstarts Podcast.
Great Chat:
Who are the billboards for?
A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.
Subscribe to Great Chat.
Access:
AI is turning sketches into real-world products
A show about the tech industry's inside conversation, hosted by tech reporter Alex Heath and founder whisperer Ellis Hamburger.
Subscribe to Access.
Tools and Weapons with Brad Smith:
AI's Mythos Moment: Rishi Sunak on preparing governments for AI
Microsoft Vice Chair and President Brad Smith speaks with leaders in government, business, and culture to explore the most critical challenges at the intersection of technology and society.
Subscribe to Tools and Weapons with Brad Smith.
About This Page
This is a Techmeme archive page. It shows how the site appeared at 10:30 PM ET, January 3, 2018.
The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.
From Mediagazer
Jody Godoy / Reuters:Ted Johnson / Deadline:
Anthony D'Alessandro / Deadline:
Upcoming Tech Events
More News
| Steve Kovach / Business Insider: |
More:
The Verge, Kotaku, TechCrunch, Silicon Republic, and Fox News
Tweets: @piamuehlenbeck and @stevekovach
| Washington Post: |
More:
Peter O'Kelly's Reality Check. Tweets: @dandrezner, @evacide, @bing_chris, @drewconway, @w7voa, @ericgeller, @robertmlee, and @kylegriffin1
| Johana Bhuiyan / Recode: |
More:
VentureBeat, New York Times, SiliconANGLE, Reuters, South China Morning Post, TechCrunch, The Verge, Mashable, TechCrunch, Axios, and CNBC
| Ron Miller / TechCrunch: |