|
January 4, 2018, 1:15 AM
|
Mediagazer
memeorandum
WeSmirchTop News
| Google Online Security Blog: |
Google's Project Zero says it discovered three variants of CPU attack, affecting AMD, ARM, and Intel; Android devices with latest security update are safe — Last year, Google's Project Zero team discovered serious security flaws caused by “speculative execution,” a technique used by most modern processors …
More:
Project Zero, Google Help, Microsoft Azure Cloud …, TechCrunch, Ars Technica, TheStreet, CNET, International Business Times, The Keyword, USA Today, Bloomberg, On MSFT, Neowin, Liliputing, iMore, Mashable, Softpedia News, CNBC, 9to5Google, SlashGear, Android Open Source Project, Silicon Valley Business …, and LWN.net
Tweets: @stevesi, @fioraaeterna, @stevesi, @mjg59, @lizthegrey, @andrewwrites, @rlove, @grittygrease, @k8em0, @campuscodi, @laparisa, @selenalarson, and @tomwarren
| Meltdown and Spectre: |
Official webpage for the Meltdown and Spectre CPU vulnerabilities, which has links to research papers and an FAQ — Bugs in modern computers leak passwords and sensitive data. Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs …
More:
SiliconANGLE, Android Central, SecurityWeek, The Register, Gizmodo, Business Insider, CNET, TechCrunch, GeekWire, TechSpot, US-CERT, CNNMoney, Neowin, Quartz, Softpedia News, The Tech Report, BleepingComputer.com, iMore, and Laptop Mag
Tweets: @nicoleperlroth, @agl__, @dnvolz, @migueldeicaza, @malwarejake, @micahflee, @stephennellis, @briankrebs, and @ow
| New York Times: |
Researchers say there is no known fix for Spectre CPU flaw; Meltdown flaw affects almost all Intel CPUs, requires software patch that could cause slowness — SAN FRANCISCO — Computer security experts have discovered two major security flaws in the microprocessors inside nearly all of the world's computers.| Zack Whittaker / ZDNet: |
Researchers discover vulnerabilities, dubbed Meltdown and Spectre, that let hackers steal data from running apps on most Intel chips, some ARM and AMD chips — Most Intel processors and some ARM chips are confirmed to be vulnerable, putting billions of devices at risk of attacks.
More:
PostgreSQL news, ZDNet, Errata Security, Phoronix, Tom's Hardware, MSPoweruser, Mashable, The Hacker News, NBC Bay Area, The Verge, ExtremeTech, Engadget, MacRumors, Tom's Guide, and On MSFT
Tweets: @k8em0, @internetofs**t, @brainsmoke, @nicoleperlroth, @nicoleperlroth, @zackwhittaker, @swiftonsecurity, @nicoleperlroth, @gossithedog, @nicoleperlroth, @aallan, @erratarob, @tomwarren, @kimzetter, @mattblaze, @pwnallthethings, @nicoleperlroth, @martinsfp, @tomwarren, @internetofs**t, and @ow
| Spectreattack.com: |
Researchers wrote a Spectre attack in JavaScript that violates browser sandboxing and reads data from the address space of the browser process running it — Modern processors use branch prediction and speculative execution to maximize performance. For example, if the destination …
| Juli Clover / MacRumors: |
Intel's memory access design flaw was partially addressed by Apple in macOS 10.13.2, released Dec. 6, with additional tweaks in next update, currently in beta — A serious design flaw and security vulnerability discovered in Intel CPUs has reportedly already been partially addressed by Apple …
More:
AppleInsider, CNBC, Mercury News, Android Police, 9to5Mac, Softpedia News, Patently Apple, TheStreet, MacDailyNews, Mashable, DSLreports, AskWoody, Redmond Pie, Windows Central, and Engadget. Tweets: @aionescu
| Ina Fried / Axios: |
Intel says CPU flaws not limited to its own chips, exploits can't corrupt/modify data but can access sensitive data, is working with AMD and ARM to find fixes — A soon-to-be-disclosed and massive chip flaw affects more than just Intel chips, according to both sources familiar with the issue and Intel itself.
More:
Barron's Online, Fortune, Wired, Techdirt, BBC, Reuters, Windows Central, BleepingComputer.com, BGR, The DigitalOcean Blog, TheStreet, Reuters, On MSFT, MSPoweruser, The Next Web, Patently Apple, Gizmodo, Axios, PCWorld, CNBC, ExtremeTech, EE Times, SlashGear, Engadget, iDownloadBlog.com, Neowin, Liliputing, The Mac Observer, VentureBeat, Softpedia News, Ars Technica, TechCrunch, Naked Security, BleepingComputer.com, Cult of Mac, iMore, CNBC, The Tech Report, Seeking Alpha, GeekWire, ZDNet, iPhone Hacks, Axios, International Business Times, MacRumors, TechCrunch, CNBC, BGR India, The Verge, Business Insider, Business Insider, HackRead, and iPhone in Canada Blog
Tweets: @nicoleperlroth, @sai, @cloud_opinion, @eastdakota, @timgostony, @nicoleperlroth, @internetofs**t, @dguido, @internetofs**t, @dinabass, @nicoleperlroth, @nicoleperlroth, @nicoleperlroth, @gossithedog, @never_released, @suka_hiroaki, @inafried, @gossithedog, @rhhackett, @donal888, @selenalarson, @inafried, @marypcbuk, @erratarob, @erratarob, @inafried, @erratarob, @erratarob, and @iiamit. Thanks:@inafried
| Tom Warren / The Verge: |
Microsoft issued a rare out-of-band security patch today to protect against Intel, AMD, ARM flaws; sources say patch will be applied automatically on Windows 10 — Microsoft is issuing a rare out-of-band security update to supported versions of Windows today.
More:
The Verge, Windows Central, Neowin, On MSFT, AskWoody, Business Insider, SlashGear, and Digital Trends
Tweets: @swiftonsecurity, @tomwarren, @tomwarren, and @m8urnett
| Amazon Web Services, Inc.: |
AWS: all but a small percentage of EC2 instances are patched, remaining will be within hours; says customers must also patch their instance operating systems — AWS is aware of recently disclosed research regarding side-channel analysis of speculative execution on modern computer processors …
| Thomas Fox-Brewster / Forbes: |
More:
eWeek, BleepingComputer.com, SecurityWeek, and bit-tech.net
Tweets: @swiftonsecurity, @iblametom, @aionescu, and @internetofs**t
| Dan Primack / Axios: |
Sources: Spotify confidentially filed IPO documents with the SEC at the end of December; indications are the company wants to list in Q1 — Music streaming giant Spotify confidentially filed IPO documents with the SEC at the end of December, Axios has learned from multiple sources.
More:
Reuters, Bloomberg, Los Angeles Times, CNNMoney, New York Times, Slate, VatorNews, NPR, Android Authority, The Guardian, Digital Trends, Engadget, International Business Times, Android Central, Crunchbase News, Mashable, Wall Street Journal, The FADER, SiliconANGLE, Tubefilter, CNBC, Silicon Valley Business …, Neowin, Gizmodo, RAIN News, hypebot, USA Today, Windows Central, TechCrunch, MacDailyNews, Deadline, The Next Web, CNET, Fortune, Variety, GeekWire, The Wrap, iPhone in Canada Blog, and Cult of Mac
Tweets: @chrismessina and @joshconstine
| Joe Shields / AnandTech: |
Dell updates XPS 13 laptop with 13.3" 4K InfinityEdge touch display, 8th Generation Intel Quad Core i5/i7, 2 Thunderbolt 3 ports, available January 4 from $999 — Dell is releasing a few new items at CES 2018 starting with its brand new XPS 13 laptop today.
More:
The Verge, Engadget, ZDNet, Digital Trends, VentureBeat, Ars Technica, PCWorld, Gizmodo, and Windows Central
| Sarah Perez / TechCrunch: |
Apple announces that its $99 developer program membership is now available at no cost to nonprofits, accredited educational institutions, government entities — Apple announced today it will begin allowing select publishers to waive the membership fees associated with its App Developer Program.
More:
Apple Developer, MacRumors, iDownloadBlog.com, The Mac Observer, Softpedia News, iMore, and AppleInsider
| Emil Protalinski / VentureBeat: |
Lenovo updates ThinkPad lineup with Intel 8th-gen CPUs and USB-C power adapters, with new T and X models shipping in January and L models in February — Ahead of the Consumer Electronics Show in Las Vegas today, Lenovo unveiled updates to its laptop lineups: its ThinkPad X, ThinkPad T, and ThinkPad L series.
More:
The Verge, AnandTech, Digital Trends, Laptop Mag, BGR, and CNET
Sponsor Posts
Subquadratic:
Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.
Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens.
Cloudflare:
Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running them. 100+ sessions, workshops, and speakers from OpenAI, Arm, and Cloudflare across AI, security, and performance.
Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running them. 100+ sessions, workshops, and speakers from OpenAI, Arm, and Cloudflare across AI, security, and performance.
Zoho:
Automate your scheduling workflows with Zoho Calendar — Your calendar can do more than schedule meetings Creating a calendar event takes only a few seconds. But scheduling is rarely just about creating the event.
Automate your scheduling workflows with Zoho Calendar — Your calendar can do more than schedule meetings Creating a calendar event takes only a few seconds. But scheduling is rarely just about creating the event.
IDrive:
Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.
Protecting your Cloud Applications Data — Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.Featured Podcasts
Invest Like the Best:
Gabe Stengel - Building Investing Superintelligence
The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.
Subscribe to Invest Like the Best.
Grit:
Inside the AI Startup Making Customer Support 65% Cheaper
Grit explores what it takes to create, build and scale world-class organizations.
Subscribe to Grit.
Lenny's Podcast:
90 minutes of unfiltered product advice from Snap and Discord's product chief | Peter Sellis
Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.
Subscribe to Lenny's Podcast.
Big Technology Podcast:
AI Doom Backlash Arrives, Anthropic & OpenAI IPO Outlook, Frontier Business Momentum Slows
The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.
Subscribe to Big Technology Podcast.
Channels with Peter Kafka:
AI Wants to Shop for You. What Could Go Wrong?
Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.
Subscribe to Channels with Peter Kafka.
Sources:
Baseten's CEO on why every company will want to own its AI
Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.
Subscribe to Sources.
About This Page
This is a Techmeme archive page. It shows how the site appeared at 1:15 AM ET, January 4, 2018.
The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.
From Mediagazer
Bloomberg:Kaitlan Collins / @kaitlancollins:
NPR:
Upcoming Tech Events
More News
| Chaim Gartenberg / The Verge: |
More:
ZDNet, Digital Trends, 9to5Mac, CNET, Reuters, FierceWireless, and Axios
| Washington Post: |
More:
Peter O'Kelly's Reality Check. Tweets: @dandrezner, @evacide, @bing_chris, @drewconway, @w7voa, @ericgeller, @robertmlee, and @kylegriffin1
| Johana Bhuiyan / Recode: |
More:
VentureBeat, SiliconANGLE, New York Times, Reuters, South China Morning Post, The Verge, Mashable, Axios, TechCrunch, TechCrunch, and CNBC