Feed the-register The Register

The Register

Link https://www.theregister.com/
Feed http://www.theregister.co.uk/headlines.atom
Copyright Copyright © 2024, Situation Publishing
Updated 2024-10-07 21:31
Inside the Black Hat network operations center, volunteers work in geek heaven
NOC, NOC ... Who's there? Black Hat Every summer, pandemics permitting, a group of volunteers gather in a Las Vegas hotel to run one of the more unusual examples of IT infrastructure on the planet: the Black Hat network operations center....
Google Chrome to shield encryption keys from promised quantum computers
QC crypto-cracking coming in 5, 10, maybe 50 years, so act ... now? Google has started deploying a hybrid key encapsulation mechanism (KEM) to protect the sharing of symmetric encryption secrets during the establishment of secure TLS network connections....
Curiosity finds evidence of wet and dry seasons on ancient Mars
Scientists: Martian mud cracked in a manner that only happens after repeated cycles of drying The Mars Curiosity rover continues to make discoveries that shed light on the early days of the Red Planet, this time having found evidence that the unforgiving dust world once experienced seasonal weather patterns and flooding....
Veilid: A secure peer-to-peer network for apps that flips off the surveillance economy
It's like Tor and IPFS had sex and produced this thing' DEF CON Infosec super-band the Cult of the Dead Cow has released Veilid (pronounced vay-lid), an open source project applications can use to connect up clients and transfer information in a peer-to-peer decentralized manner....
Judge denies HP's plea to throw out all-in-one printer lockdown lawsuit
AiO devices won't scan or fax without ink, and plaintiffs say IT giant illegally withheld that info from buyers HP all-in-one printer owners, upset that their devices wouldn't scan or fax when low on ink, were handed a partial win in a northern California court this week after a judge denied HP's motion to dismiss their suit....
FTX crypto-clown Sam Bankman-Fried couldn't even do house arrest. Now he's in jail
Feds argue leaks to press amount to witness tampering Sam Bankman-Fried (SBF), former chief executive of crypto-disaster FTX, who has been awaiting trial for his firm's failure while in home detention with his family, has been sent to jail for attempting to intimidate witnesses....
Amazon's latest directive: Report to the office 'cos we're watching you
Worker bees protest that they were read the riot act even when they did come in Amazon has contacted staff it says are not clocking into the office three days a week "even though your assigned building is ready," according to a leaked memo which warns them they're falling short of expectations....
Virgin Galactic sends oldest-ever Brit and first mother-daughter duo into space-ish
Depending on where you draw the line Virgin Galactic successfully launched its first-ever private commercial spaceflight on Thursday, flying three space tourists to altitudes high enough to experience zero-gravity conditions for a few minutes....
Tinker Tailor Soldier Pi? Asus's 'NUC-sized' SBC aims to out-Pi the Raspberry
Bigger, bolder, and brimming with ports for hobbyists and devs alike Asus has released a new addition to its Tinker Board line of Arm-based single-board computer (SBC) systems, giving hobbyists and embedded developers another design option with a plethora of ports....
Microsoft: Codesys PLC bugs could be exploited to 'shut down power plants'
What are these gadgets running, Windows? Ka-boom-tsch Fifteen bugs in Codesys' industrial control systems software could be exploited to shut down power plants or steal information from critical infrastructure environments, experts have claimed....
Amazon's rumored investment in Arm's IPO might be good insurance
What benefits the chip designer will trickle down to AWS's Graviton team Analysis One of Amazon Web Services' key differentiators is its use of custom silicon, including Arm CPUs throughout its cloud infrastructure....
Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out
Anyone with sizable audience in this surveillance economy is invited to stuff their add-ons with tracking and ads Interview In the past nine years, Oleg Anashkin, a software developer based in San Jose, California, has received more than 130 solicitations to monetize his Chrome browser extension, Hover Zoom+....
HashiCorp's new license is still open source-ish, just with less free lunch
Software house transitions to BSL, and fundies are furious HashiCorp, the vendor of Vagrant, Terraform, and a number of other deployment-automation tools, is changing its software license to the Business Source License. You can still get the source code, but it's not technically FOSS any more....
Linux project's first full version has all the subtlety of a Rhino in a China shop
An option if Ubuntu interim releases are too slow, easy and stable for your liking The first release of Rhino Linux brings the rolling release model of Arch Linux to an Ubuntu base, along with the do-it-yourself ethos....
Want to pwn a satellite? Turns out it's surprisingly easy
PhD student admits he probably shouldn't have given this talk Black Hat A study into the feasibility of hacking low-Earth orbit satellites has revealed that it's worryingly easy to do....
Electoral Commission had internet-facing server with unpatched vuln
ProxyNotShell vulnerability could be how UK body got pwned, suggests infosec expert The hacking of the UK's Electoral Commission was potentially facilitated by the exploitation of a vulnerability in Microsoft Exchange, according to a security expert....
Magento shopping cart attack targets critical vulnerability revealed in early 2022
Really? You didn't bother to patch a 9.8 severity critical flaw? Ecommerce stores using Adobe's open source Magento 2 software are being targeted by an ongoing exploitation campaign based on a critical vulnerability that was patched last year, on February 13, 2022....
Co-founder of Yandex – Russia's Google clone – denounces war on Ukraine
Arkady Volozh is working with refugee engineers, of which there are plenty Arkady Volozh, co-founder of Russian Google analog Yandex, has denounced Russia's invasion of Ukraine....
Zoom's new London hub – where 'remote work' meets 'we need you back in the office'
Collaboration, cohesion, and irony all under one roof Zoom is underscoring its mandated return to the physical workplace by opening a London "engagement hub" that it reckons will cater for the needs of hybrid, office and remote workers....
Lock-in to legacy code is a thing. Being locked in by legacy code is another thing entirely
Welcome to the coding couch. We hope you sleep well On Call As Friday rolls around and the prospect of fleeing the office looms, The Register brings you another instalment of On Call, our weekly reader-contributed stories in which techies are asked to help - but too often end up needing to help themselves....
Think International Space Station dust is obviously free of bad chemicals? Wrong
No one's in danger but we may need to rethink some cabin materials The International Space Station has perhaps a bit of a housekeeping issue on its hands. Analysis of dust samples from its air filters suggest astronauts are likely exposed to higher levels of dangerous chemicals than those of us stuck on Earth, on average....
US Cyber Command boss says China's spooky cyber skills still behind
Paul Nakasone rates the Middle Kingdom a 'pacing challenge' The boss of US Cyber Command has opined that China's cyber and surveillance capabilities are not ahead of, or even comparable to, to those of the United States....
Oracle shrinks its on-prem cloud into a single rack
Big Red rigs start at 552 fourth-gen EPYC cores and 150TB storage, can scale to 6,624 cores and 3.4PB Oracle has squeezed the on-prem version of its cloud into a version that fits into a single datacenter rack if required....
Alibaba says demand for cloud has dipped – which improved its profits
What? How? Chinese tech giant Alibaba has reported tiny revenue growth, but a 106 percent surge in earnings for its cloud services, despite a marked slowdown in demand....
New Zealand supermarket's recipe-generating AI takes toxic output to a new level
Some of its suggestions are poison. Others - like banana and tomato tea - might as well be An AI recipe generation bot released by New Zealand discount supermarket chain Pak'nSave has raised eyebrows for recommending home cooks whip up chlorine gas cocktails, bleach rice, and combine ....
Chinese web giants go on $5B Nvidia shopping spree to fuel AI ambitions
In the ML arms race, GPUs are the ammunition China's largest web and cloud providers are lining up to buy as many Nvidia GPUs as they can while they still can get their hands on them....
Infosec imposter syndrome is real. Here's something that can help
Talk about an insider threat Black Hat Imposter syndrome plagues people across all professions - including the cybersecurity industry - and it's not going to get any better until individuals are willing to share their struggles and find tools to help overcome these feelings of inadequacy....
CISA boss says US alliance with Ukraine over past year is closer than Five Eyes
And America should stop worrying about balloons and focus on what's important Black Hat The head of the US government's Cybersecurity and Infrastructure Security Agency (CISA) has extolled the ongoing relationship between America and Ukraine barely a year into a crucial security information sharing pact....
Don't shoot! DARPA wants to capture future spy balloons in one piece
Being blasted with a missile and plummeting 60,000 feet can do a real number on hardware, it turns out DARPA wants to be ready the next time a foreign spy balloon does a tour of the US, so it's launching a program to figure out how to capture one and its payload instead of simply shooting it out of the sky....
Microsoft OneDrive a willing and eager 'ransomware double agent'
No one will suspect such a trustworthy executable Black Hat There's a rather serious ransomware vulnerability in Microsoft's desktop operating system, according to research out this week. It's nigh undetectable, uses a fully legitimate workflow to encrypt files, and comes pre-installed on all new Windows systems: OneDrive....
There's a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack
Especially on Apple gear, uni team says A couple of techniques collectively known as TunnelCrack can, in the right circumstances, be used by snoops to force victims' network traffic to go outside their encrypted VPNs, it was demonstrated this week....
Viasat probe into ailing $700M satellite casts shadow over Q1 results
'We understand the risks involved in space systems, and have insurance' Satellite operator Viasat says problems with its first ViaSat-3 deployment have created unanticipated biz challenges that may disrupt commercial prospects in the short term....
Epic snub by Supreme Court in battle to escape Apple App Store payment prison
This fight over IAP is getting, dare we say, unreal Apple gets to maintain its App Store monopoly, at least for now, after the US Supreme Court rejected a bid from Epic Games to lift a court-ordered stay that would force Apple to let devs go outside the App Store for processing in-app purchases (IAPs)....
Microsoft 365 guest accounts + Power Apps = security nightmare
A login, a PA trial license, and some good old hacking are all that's needed to nab SQL databases Black Hat Microsoft 365 guest accounts aren't nearly as secure as Redmond would lead customers to believe, as low-code security expert Michael Bargury demonstrated at Black Hat....
Shifting to two-factor auth is hard to do. GitHub recommends the long game
Slow and steady wins this race with users Black Hat Getting people to use multi-factor authentication is surprisingly tough - or unsurprisingly, depending on your opinion of IT users. In any case, GitHub is managing it by playing the long game....
NASA to test potential 400Mbps laser link for Mars
High bandwidth comms experiment to fly with Psyche asteroid mission in October NASA hopes to launch a near-infrared laser transceiver to test a system that could one day be used to communicate with astronauts on Mars....
Google AI red team lead says this is how criminals will likely use ML for evil
Prompt injection, data poisoning just to name a couple DEF CON Artificial intelligence is an equalizer of sorts between security defenders and attackers....
Have you ever suspected your colleague doesn't hope this email finds you well?*
Grrrrrrr.... Why are you sending 15 bloody messages in 10 seconds? Stop pressing return Poll It was international coworking day this week, which quite a few corporates used to get people excited about coming into the office again....
GNOME 45 beta: Less buggy, more colorful, and still not your grandma's desktop
Codenamed Riga after the venue for this year's GUADEC conference GNOME 45 has just graduated from alpha test to beta, and will see final release late next month. Here is what to expect....
Get your staff's consent before you monitor them, tech inquiry warns
Plus: British government's push to reform data protection is working against the cause Companies that monitor their employees should only do so after they consult with and get consent from the staffers they are watching or tracking....
Larry Ellison a major contributor to Blair Institute vaccine database plan
A relationship forged in UK government IT continues to blossom Software magnate Larry Ellison is a leading contributor to the policy institute built by former UK prime minister Tony Blair....
Infosys launches 'sonic identity' – an aural logo to 'reinforce brand purpose'
It's a 'digital metaphor' that signals the sound of opportunity, apparently LogoWatch Indian tech services giant Infosys has launched a "sonic identity" that The Register's irregular marketing column Logo Watch feels compelled to cover because the outfit has described it as the "auditory equivalent of its blue visual identity and logo."...
Most distant observed star is blue – and it isn't alone
Light from Earendel takes 12.9 billion years to reach Earth, and it's serendipitous the JWST can see it at all It was a little more than a year ago that NASA's Hubble Space Telescope spotted the most distant star ever observed: the 12.9 billion light-years-away Earendel....
Biden administration restricts US investment in tech China's military might employ
Venture capital is helping Beijing arm and Washington wants that to stop US president Joe Biden on Wednesday issued an executive order restricting stateside investors from sinking their funds into Chinese firms developing certain technologies, as part of an effort to prevent such products being used by China's military....
India launches contest to build homegrown web browser
Almost certainly based on a FOSS engine, but with tweaks for the nation's particular needs India's government has decided the nation needs an indigenous web browser and has launched the Indian Web Browser Development Challenge (IWBDC) to make it happen....
Lawsuit: We've got the stats to prove Twitter ax fell unfairly on older, female engineers
Seven ex-tweeps bring the receipts, as the kids say Twitter has been sued by seven former employees who allege they were discriminated against on the basis of sex, age, race, and/or for taking medical leave....
Ukraine's Victor Zhora: Russia's cyber 'war crimes' will continue after ground invasion ends
International laws needed 'to bring accountability' govt chief tells The Reg Black Hat Ukraine's cybersecurity boss Victor Zhora says he expects Russia's online attacks against his country - including cyber "war crimes" - will continue long after the physical war ends unless increased international pressure is applied....
Never mind room temperature, LK-99 slammed as 'not a superconductor at all'
It may actually be the anti-superconductor, quips one research team Enthusiasm over the purported room temperature superconductor LK-99 is waning further as more research teams are unable to reproduce the original findings. In fact, one at a US university has concluded it is not a superconductor at all....
Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks
It's like a nesting doll of security flaws AMD processor users, you have another data-leaking vulnerability to deal with: like Zenbleed, this latest hole can be to steal sensitive data from a running vulnerable machine....
US Supreme Court allows 'ghost guns' to fall under federal purview
3D printers beware, Biden's on the Build-Your-Own-Blunderbuss beat The Biden administration's crackdown on 3D-printed gun parts can be allowed to be enforced, at least temporarily, after the US Supreme Court voted to let the rule to stand....
...137138139140141142143144145146...