Home Thomas Claburn

Author: Thomas Claburn (Thomas Claburn)

Post
Epyc crypto flaw? AMD emits firmware fix for server processors after Googler smashes RAM encryption algorithms

Epyc crypto flaw? AMD emits firmware fix for server processors after Googler smashes RAM encryption algorithms

SEV code cracked to leak secret keys Microchip slinger AMD has issued a firmware patch to fix the encryption in its Secure Encrypted Virtualization technology (SEV), used to defend the memory of Linux KVM virtual machines running on its Epyc processors. “Through ongoing collaboration with industry researchers AMD became aware that, if using the user-selectable...

Post

Check your repos… Crypto-coin-stealing code sneaks into fairly popular NPM lib (2m downloads per week)

Node.js package tried to plunder Bitcoin wallets A widely used Node.js code library listed in NPM’s warehouse of repositories was altered to include crypto-coin-stealing malware. The lib in question, event-stream, is downloaded roughly two million times a week by application programmers. This vandalism is a stark reminder of the dangers of relying on deep and...

Post

Facebook’s CEO on his latest almighty Zuck-up: OK, we did try to smear critics, but I was too out-of-the-loop to know

Mark promises independent oversight and AI as Sheryl leans far, far away Analysis Facebook on Thursday (again) reiterated its commitment to fighting misinformation, following a report that the data gathering biz hired a public relations firm, Definers Public Affairs, to promote content that undermine company critics. After announcing that it has ended its relationship with...