![]() |
Anatomy of OpenBSD's OpenSMTPD hijack hole: How a malicious sender address can lead to remote pwnage
by Shaun Nichols on (#4YMZ0)
Function accidentally returns OK instead of no-way Code dive The OpenBSD project's OpenSMTPD can be potentially hijacked by a maliciously crafted incoming email.…
|
The Register
Link | https://www.theregister.com/ |
Feed | http://www.theregister.co.uk/headlines.atom |
Copyright | Copyright © 2025, Situation Publishing |
Updated | 2025-08-30 07:01 |
![]() |
by Kieren McCarthy on (#4YMT1)
Paranoid stance comes as Interior Department website falls over The US government has indefinitely grounded its fleet of roughly 800 drones over ill-defined fears of Chinese espionage.…
|
![]() |
by Kieren McCarthy on (#4YMT3)
Knock knock knock: Give us the money! Knock knock knock: Give us the money! Apple and Broadcom have been told to pay the California Institute of Technology (Caltech) a beefy billion bucks for ripping off three of the US university's Wi-Fi patents.…
|
![]() |
by Thomas Claburn on (#4YMMW)
Azure am glad we got into the computer rental business, says CEO Microsoft on Wednesday made noise about inclusivity, trust, and sustainability, while also gleefully noting that it had banked about $1.5bn more than expected in its second quarter of its fiscal 2020 year.…
|
![]() |
by Robbie Harb on (#4YMMY)
How can a border fee be due when no borders were involved, orgs complain A bunch of tech companies are suing the US government, alleging it illegally charged them an extra $350m in visa fees.…
|
![]() |
by Kieren McCarthy on (#4YMMZ)
For an organization accused of being 'all talk, no action', there's not even enough talking – to its own employees The United Nations’ European headquarters in Geneva and Vienna were hacked last summer, putting thousands of staff records at miscreants' fingertips. Incredibly, the organization decided to cover it up without informing those affected nor the public.…
|
![]() |
by Thomas Claburn on (#4YMD9)
Telecoms giant denies everything, Germans put in order anyway America warned Germany Huawei's cheap'n'cheerful 5G gear was effectively bugged by Beijing's spies and leaking secrets to agents, it is claimed. The US government's evidence of this alleged espionage has not been shared publicly, we note.…
|
![]() |
by Matthew Hughes on (#4YMDB)
Incredible fondleslab world first Samsung has lifted the lid on the Galaxy Tab S6 5G – a revamp of last year's model with a built-in 5G radio. Although this is a fairly modest upgrade, it is the world's first 5G tablet.…
|
![]() |
by Paul Kunert on (#4YMDD)
Cook quizzed on supply chains, widens revenue guidance for second quarter Apple is in talks with suppliers located in Wuhan, China, to “mitigate†any disruption to production caused by the coronavirus outbreak, said CEO Tim Cook.…
|
![]() |
by Matthew Hughes on (#4YM4W)
You've fscked us, says Uncle Sam Yesterday it was decided that certain "high-risk" vendors, cough, cough, Huawei, will be permitted to contribute towards the UK's 5G network in a limited way.…
|
![]() |
by Richard Speed on (#4YKWC)
Microsoft tries its best to forget 2018's sh!tshow as Surface Go finds its feet AdDuplex's first set of figures for 2020 show that just over two-thirds of Windows 10 PCs are running 2019 software builds.…
|
![]() |
by Matthew Hughes on (#4YKWE)
Just keep 'em out the core and keep supply chains diverse, ja? It's not just the UK government that's wrestling with the decision to permit Huawei's gear on the 5G network. Across Europe, a similar debate has raged. Can Huawei, which many in intelligence circles believe to be inextricably linked to the Chinese government, be trusted to power the next generation of mobile telephony and data? Today, we got our answer: kinda.…
|
![]() |
by Gareth Corfield on (#4YKWG)
A curious tale of Bitcoin exchanges and the High Court A Canadian insurance business struck by ransomware paid off the crooks via a cyber insurance policy – and their English reinsurers, having shelled out 109.25 Bitcoins, want it back from the alleged blackmailers.…
|
![]() |
by Tim Anderson on (#4YKWJ)
Still 'work in progress' but that's a huge vote of confidence The WireGuard VPN protocol, which is smaller, faster and easier to configure than IPsec, has been merged into Linus Torvalds' git repository for version 5.6 of the Linux kernel, the next release.…
|
![]() |
by Tim Anderson on (#4YKJ9)
209 incidents since 2014, say Freedom of Information figures The NHS has suffered 209 successful ransomware attacks since 2014, according to new figures based on Freedom of Information requests, but with a dramatic improvement since 2017, the year WannaCry ransomware hit the health service.…
|
![]() |
by Robbie Harb on (#4YKJB)
If Western Link had a report card, it'd definitely be under the C Brit energy regulator Ofgem has opened an investigation into National Grid and Scottish Power's operations on the Western Link subsea cable.…
|
![]() |
by Richard Speed on (#4YKJD)
Ours is on its way – a fortnight after B-Day There's good news and bad news for those seeking to commemorate the UK's departure from the European Union on 31 January.…
|
![]() |
by Paul Kunert on (#4YKJF)
Things looking better after that annus horribilis A year ago, as Apple CEO Tim Cook mustered the strength to defend Apple's strategy in the face of shrinking sales and profits, he could have been forgiven for starting the day by privately weeping into his sugar-free cereal and unsweetened almond milk – the breakfast of Valley kings.…
|
![]() |
by Richard Speed on (#4YKBZ)
Also: four years of preparation + four spacewalks = one working Alpha Magnetic Spectrometer? Roundup Welcome to this week's space roundup, with news of a hello to a resurrected instrument, a heart-stopping moment for an old friend and a final farewell to a teenage telescope.…
|
![]() |
by Richard Speed on (#4YKC0)
The Free Software Foundation really set the bar high there Good news everybody! The Free Software Foundation has blown through its self-imposed target of 7,777 signatories in its efforts to persuade Microsoft to make Windows 7 open source.…
|
![]() |
by Katyanna Quach on (#4YKC2)
Best case? They pass within metres of each other at 14.7 km per second There’s a small but distinct chance a defunct NASA infrared telescope and an old US Naval Research Laboratory satellite will crash into each other on Wednesday evening high above Pittsburgh, Philadelphia.…
|
![]() |
by Katyanna Quach on (#4YKC4)
Sometimes a cigar-shaped shadow is just a cigar-shaped shadow A neuropsychologist has warned against using artificial intelligence to detect possible signs of extraterrestrial life in images of distant planets and worlds.…
|
![]() |
by Robbie Harb on (#4YK6Y)
And good luck opting out of that one Ubiquiti Networks is once again under fire for suddenly rewriting its telemetry policy after changing how its UniFi routers collect data without telling anyone.…
|
![]() |
by Thomas Claburn on (#4YK70)
Browser makers keep coming back to the need to please advertisers Enigma At the USENIX Enigma conference on Tuesday, representatives of four browser makers, Brave, Google, Microsoft, and Mozilla, gathered to banter about their respective approaches to online privacy, while urging people not to ask for too much of it.…
|
![]() |
by Kieren McCarthy on (#4YK72)
We're too outraged to do a Bohemian Rhapsody headline It was a devastating blow to the credibility of Europe’s Galileo satellite project: the navigation system fell over during an upgrade in July, requiring a reboot that took six days. Now it appears it officially never happened.…
|
![]() |
by David Gordon on (#4YK2H)
Tune in to hear from Veracode on how to stay secure Webcast What is DevSecOps? Simply put, it is the merging of DevOps and security processes to ensure code is secure from development through to testing and deployment.…
|
![]() |
by Kieren McCarthy on (#4YJY7)
Too bad the Republicans aren't going to agree with her Comment It's troubling how in the past few years some countries have, with increasing zeal, blocked off their own citizens from the internet for gross authoritarian reasons.…
|
![]() |
by Shaun Nichols on (#4YJY9)
'We finished 2019 very strongly – but that is on the strength of the product portfolio' says CEO Lisa Su AMD is touting record quarterly numbers as the chip designer closed out a solid fiscal 2019.…
|
![]() |
by Shaun Nichols on (#4YJQQ)
Hundreds or more said to be chopped worldwide VMware today laid off staff across the globe in various roles and departments.…
|
![]() |
by Kieren McCarthy on (#4YJQR)
And yes, Facebook is involved, as ever Smart-home biz Ring sends its users’ personal app data to a range of analytics and marketing companies, according to an analysis carried out by the Electronic Frontier Foundation (EFF).…
|
![]() |
by Thomas Claburn on (#4YJQT)
Cache(me)Out(side), how 'bout dat? Intel on Monday issued a processor data leakage advisory, describing two chip architecture flaws, one of which it tried to fix twice before.…
|
![]() |
by Shaun Nichols on (#4YJET)
How about that antivirus now, huh? DEF CON is cancelled. For real this time. DEF CON China, that is.…
|
![]() |
by Matthew Hughes on (#4YJEW)
Well, at least it's beefier and cheaper than Motorola's throwback effort Samsung is expected to go public with its next foldable flagship, the Galaxy Z Flip, early next month at its Unpacked event in San Francisco.…
|
![]() |
by Tim Anderson on (#4YJEX)
Terms for open-source C++ toolkit tweaked to encourage contribution The Qt Group is making changes to the terms under which its popular open-source Qt library is available to encourage more commercial licensees and a higher level of contribution from users.…
|
![]() |
by Richard Speed on (#4YJ5A)
Only Insiders need apply for now A fresh version of the Windows take on DTrace will allow developers to chase down those pesky low-level bugs without exposing the posterior of their systems to miscreants.…
|
![]() |
by Paul Kunert on (#4YJ5B)
Still seeking some general intelligent action The UK government's procurement arm has floated the creation of a framework to allow public sector techies to buy something that hasn't been invented yet: artificial general intelligence, er... general artificial intelligence.…
|
![]() |
by Robbie Harb on (#4YJ5D)
Department of Fun straps on a holster, strides into the wild west of online gadget users The British government has finally woken up to the relatively lax security of IoT devices, and is lurching forward with legislation to make gadgets connected to the web more secure.…
|
![]() |
by Matthew Hughes on (#4YHTV)
Well, in our non-core networks and sporting a 'high-risk' nametag The British government is set to severely restrict the use of Huawei's cheap kit to a fraction of non-core networks across the UK due to worries about the Chinese vendor's link to China.…
|
![]() |
by Tim Anderson on (#4YHTX)
'Magical,' says Steven Sinofsky on 10th birthday of Apple's fondleslab Former Windows chief Steven Sinofsky has spoken his mind about the launch of Apple's iPad (now celebrating 10 years) and its impact on Microsoft.…
|
![]() |
by Richard Speed on (#4YHTZ)
It's all Boeing to go wrong unless everyone gets to come to the party NASA Administrator Jim Bridenstine has dribbled a little something from the scorn bucket over last week's Authorization Bill, which both postpones boots on the Moon and turns the Lunar Gateway into a "Gateway to Mars."…
|
![]() |
by Richard Speed on (#4YHV0)
Azure Functions 3.0 goes live, Microsoft Search learns some new acronyms, and more Roundup Welcome to another roundup of the Microsoft news you might have missed over the last week, from acronym excitement to Windows 10 updates and Teams-wielding rowers allowing Redmond to stick its oar in.…
|
![]() |
by Robbie Harb on (#4YHV2)
Now patched, but yikes. For our next meeting, let's dial in from a phone box Video-conferencing outfit Zoom had a major vulnerability in its URL scheme that miscreants could exploit to eavesdrop on private meetings.…
|
![]() |
by Richard Speed on (#4YHK0)
Also reckons that it should 'accurately document the data recovery procedure' for metadata corruption. Y'think? Hosting outfit Gandi has published its postmortem regarding this month's outage and concluded that while it still has "no clear explanation", the main problem was "the duration".…
|
![]() |
by Verity Stob on (#4YHK1)
Drinking the Kool-Aid outside the box Stob Did you catch the recent TV version of The War of the Worlds?…
|
![]() |
by Tim Anderson on (#4YHK3)
Scheduled for summer 2020 Zorin, which provides a Linux distro designed to look familiar for migrating Windows and Mac users, has announced a subscription-based management tool for Linux desktops.…
|
![]() |
by Matthew Hughes on (#4YHDW)
Cryptic tweets and likely deets as late May dates revealed Analysis At its upcoming I/O event, Google will almost certainly lift the lid on the latest version of Android – which will most likely be called Android 11 after Mountain View called time on its dessert-themed nomenclature last year.…
|
![]() |
by Kieren McCarthy on (#4YHDY)
Don’t worry: The PM's only going to let the best boffins in... honest British Prime Minister Boris Johnson has announced an unlimited immigration program just days after signing Blighty's agreement to withdraw from Europe.…
|
![]() |
by Shaun Nichols on (#4YH9H)
If printers and nuclear reactors on the internet are fair game, so's the gizmo on your face, we'll concede Enigma You'd think virtual reality's biggest problems right now are breaking into meaningful mainstream adoption, and not making wearers of the headsets look utterly ridiculous. But no, it's possible you are wrong.…
|
![]() |
by Katyanna Quach on (#4YH9K)
As Chinese cities go into quarantine, investors get nervous over the lockdown of the world's workshop Stocks in a bunch of semiconductor companies dipped by four to five per cent on Monday – after China banned travel in and out of the manufacturing hub of Wuhan to isolate the new coronavirus that has already killed more than eighty people.…
|
![]() |
by Thomas Claburn on (#4YH55)
'We all use other people's code' Enigma In a chilly conference room at the San Francisco's Hyatt Regency on Monday, legal and digital security pros convened at USENIX's Enigma conference to hold forth on security, privacy, and related matters.…
|