Intels SGX cloud-server security defeated by $30 chip electrical shenanigans
VoltPillager breaks enclave confidentiality, calls anti-rogue data-center operator promise into question Boffins at the University of Birmingham in the UK have developed yet another way to compromise the confidentiality of Intel’s Software Guard Extensions (SGX) secure enclaves, supposed “safe rooms” for sensitive computation.…
Date: 2020-11-14
URL: https://go.theregister.com/feed/www.theregister.com/2020/11/14/intel_sgx_physical_security/
theregister.co.uk
| Google previews Document AI for parsing forms: Just a catch-up with AWS and Azure? (2020-11-05) | Convert a jumble of documents into neatly structured data - if you are lucky Google Cloud Platform is previewing Document AI a new service for automatic extraction of data from documents such as key/value pairs in forms with a choice of parsers and an option to use a custom model Google previews Document AI for parsing forms: Just a catch-up with AWS and Azure? |
| AWS reveals it broke itself by exceeding OS thread limits, sysadmins weren’t familiar with some workarounds (2020-11-30) | First solution: run on bigger servers to reduce chatter in the Kinesis fleet Amazon Web Services has revealed that adding capacity to an already complex system was the reason its US-EAST-1 region took an unplanned and rather inconvenient break last week |
| BBC makes switch to AWS, serverless for new website architecture, observers grumble about the HTML (2020-11-04) | News aggregator says its way more complicated and much harder to parse Updated The BBC website the sixth most popular in the UK has mostly migrated from bit barns to Amazon Web Services AWS with around half the site now rendered on AWS Lambda a serverless platform BBC makes switch to AWS, serverless for new website architecture, observers grumble about the HTML |
| Sopra Steria: Adding up outages and ransomware cleanup, Ryuk attack will cost us up to €50m (2020-11-25) | French IT outsourcer says its overall losses will deepen as direct result Sopra Steria has said a previously announced Ryuk ransomware infection will not only cost it between 40m and 50m but will also deepen expected financial losses by several percentage points |
| Micropayments company Coil distributes new privacy policy with email that puts users' addresses in the ‘To:’ field (2020-11-17) | Hundreds of email addresses exposed customers predictably less-than-thrilled Micropayments company Coil has emailed users its new privacy policy but placed hundreds of their addresses in the To: field and therefore breached their privacy |
| China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies (2020-11-19) | Campaign even targeted branch offices inside China and sought secrets of automotive and engineering companies Broadcoms security subsidiary Symantec has named a China-linked hacking gang known as APT 10 and Cicada as the probable source of a year-long attack on Japanese interests around the world |
| Vivo pushes out X51 5G: Chipper whippersnapper, quite a battery-sapper, but at least the wrapper’s dapper (2020-11-04) | Hip to be square and aimed at the Euro crowd Review First impressions are important and the X51 5G is Vivos inaugural device for the crowded European smartphone market |
| They’ve only gone and bloody done it – yawn – again! NASA, SpaceX send four to ISS (2020-11-16) | First certified commercial crewed spaceflight flies but fuel heaters are acting up NASA and SpaceX are celebrating the successful launch of the first non-experimental commercial crewed launch |
| Google Nest server outage leaves US, European smart homes acting dumb (2020-11-17) | Downtime infuriates customers guess theyll have to just swallow it Nest is down - again |
| End-to-end encryption? In Android’s default messaging app? Don’t worry, nobody else noticed either (2020-11-20) | RCS throws the dice Analysis Google is rolling out end-to-end encryption in the unloved and unwanted Android Rich Communication Services as part of a renewed hope people might use messaging services controlled by the Chocolate Factory |
