It looks like MITM attacks aren’t the only things ripping off SSL certificates these days, it looks like Sony’s PS3 is capable of the act as well!
In a recent study conducted with more than 200 PlayStation 3 consoles, researchers were able to create a secure sockets layer certificate for absolutely any web page. The forged certificates were made through a proof-of-concept attack. This particular attack runs by generating millions of possible certificates, and once a pair that contains a special collision in the MD5 hash is found, a legitimate website certificate is requested from one of the authorities that relies on only MD5 to generate signatures. These certificates have been accepted by every major browser.
“This break is major,” stated Karsten Nohl, cryptography expert and researcher at the University of Virginia. “It definitely is the most wide-scale attack, because anything short of patching all browsers in the world to not accept the certificates, there's nothing you can do to prevent it.”
Still, there’s no stated fix for the issue today. Let’s just hope that since the researchers possess the information on how the attack is conducted, they’ll be able to make one soon.
When the people won’t come to the politics, you’ve got to bring the politics to the people. At least, this is the idea that the Israeli Consulate in New York took with a “Citizen’s Press Conference” yesterday.
David Saranga, Consul of Media and Public Affairs took questions regarding the situation in Israel and Gaza from Twitter users yesterday from 1-3pm, all directly from their Twitter page. You can check out all the action here.
All in all, this is a pretty cool step. From how active the page was it’s easy to see that the consulate had plenty of questions to answer, and that good amounts of people were eager to get involved.
So you thought you were safe inside your precious little calendar, eh? Well think again!
It looks like hackers have found a way to break into your Gmail account, all by preying on your Google Calendar. The attack comes in the form of a simple calendar email notification telling you that your account will be deleted unless you submit your Google username, password and date of birth. Generally, the emails come from a “customerserviceXXXX@gmal.com” (where the X’s represent a random number) address, so be sure and keep your eyes out.
Luckily, the fix for this is entirely on your end. Just be sure and watch whom you’re getting your email from. Major companies generally won’t ask you for your information and anyone that does so, has deplorable intentions.
Think Intel's Atom processor is only good for use in nettops and netbooks? So does Intel, who currently restricts the use of its low power processors to netbooks with up to 10.2-inch panels. But HP sees a bigger future for the Atom processor and is reportedly in discussions with Intel about using the chip maker's Atom CPU in mini-note PC models.
Asus and Acer lead the pack in netbook shipments and combined the two companies claim nearly 70 percent of the market, according to DisplaySearch. HP sits at a distant third with its Mini 1000 netbook, which managed to grab just 5.8 percent of the market in 2008. HP hopes to be a bigger player in the little notebook market by adding to its netbook line in 2009, including an 11.6-inch model in Q2 2009 and a 13.3-inch model in June 2009, DigiTimes says.
Negotiations between Intel and HP could reach a conclusion by the end of next month.
Remember the scene in War of the Worlds where everyone's electronics inexplicably just stop working? It turned out to be an alien invasion intent on harvesting the human race that was causing all the ruckus. We're fairly confident there aren't any buried alien war machines in real life, so why then are hundreds of users suddenly complaining about failed Zune players?
According to Gizmodo, the failures are permeating all across the country starting at about midnight last night. Owners claiming to be affected by the as-yet unexplained glitch are reporting that their Zune players freeze while loading and become completely unresponsive, turning their music player into little more than a high tech paperweight.
With the New Year only a day away, users have begun referring to the failures as the Y2K9 bug. However, any relation to the calendar year would likely be coincidental given that the players started giving up the ghost a day before the new year rings in.
Seemingly ruling out the possibility of a widespread hoax, Microsoft has released a statement regarding the failures:
"We are aware that customers with the Zune 30GB are experiencing issues with their Zune device. We are actively working now to isolate the issue and develop a solution to address it. We will keep customers informed on next steps via the support page on zune.net (zune.net/support)."
Hit the jump and let us know if you've experienced the same issue.
Intel may have the nettop and netbook markets cornered with its Atom processor, but that could quickly change if PC manufacturers become enamored with VIA's Nano processor, which has been shown to hold its own in benchmarking next to the much more popular Atom. Giving PC makers a nudge, VIA plans to launch its next-generation Nano 3000-series CPU in the third quarter of 2009, with engineering samples being made available in Q1 2009, according to DigiTimes. The new chip will be produced under Fujitsu's 65nm manufacturing process and will be the first Nano processor to support SSE4 instructions.
Also on tap is a dual-core Nano. A previous roadmap showed the two-cored chip going into production in June 2010, which could give Intel a significant headstart should the company decide to port its existing dual-core Atom 330 CPU over to netbooks instead of just nettops. But now it appears VIA will have engineering samples available in the second half of 2009, with mass production to begin by the end of 2009 or very early 2010.
It has not yet been decided whether the dual-core Nano will use Fujitsu's 45nm manufacturing process or Taiwan Semiconductor Manufacturing Company's (TSMC's) 40nm process. But no matter which direction VIA takes its dual-core Nano part, the company could put itself in a favorable position if it doesn't run into any delays and makes its two-core chip available for use in netbooks, which have become increasingly powerful as of late.
We still don't know what exactly Sony has up its sleeve, only that "On the 9th of January you will change the way you look at laptops. Forever." Or at least that's what the mysterious tagline read on Sony's pre-launch website before the company inexplicably took it down.
But while the countdown has been whisked away, Sony continues to tease one picture at a time. The latest shots to make it to the web show a full size keyboard like the one on the Vaio TZ, along with a track stick. Not much else is visible from the cryptic pics.
It looks like we'll have to wait for CES for the full skinny. In the meantime, we're left with speculation and leaked specs. According to preliminary reports, the notebook that will apparently knock everyone's socks off will be the smallest in Sony's lineup, likely a netbook running an Intel Atom processor. The presumed netbook will come with an 8-inch LED backlit screen with a 1600x768 resolution, and either a 60GB HDD or 128GB SDD, if reports hold true.
Although the official release of Beta 1 of Windows 7 isn't expected until early January, a leaked copy of what looks like Beta 1's been making the rounds on the Internet for a few days. ZDNet's Ed Bott (a one-time colleague of mine back in the days of Windows Me) has spent some "quality time" with the build, and reports some interesting tidbits from the EULA:
The revision ID at the end of the EULA is: Win7_B.1_PRO_NRL_en-US - so it sure sounds like Beta 1 is on the loose.
There's no limit on the number of installs you can perform, but they stop working on August 1.
Redmond says you can't use Beta 1 in a production environment.
You can install Beta 1 in a virtual machine instead of a normal installation, but only one VM per hardware device.
Potential privacy concerns (such as Customer Experience Improvement Program and automatic error reporting) are turned on by default, but you can turn them off if you prefer.
Beta 1 must be activated.
Releasing benchmark test results to third parties without Microsoft's prior written agreement is not permitted.
If you've already fired up Beta 1, what surprises have you discovered? Hit Comment after the jump and tell us about it.
Blu-ray might not be cheap, but LG is doing everything it can to make the high-definition technology more appealing to consumers still feeling burned over HD-DVD's seemingly untimely demise. LG's BD300 already integrates Netflix-streaming capability, and not only will that carry over to LG's upcoming Blu-ray players in the first half of 2009, but the company says it will also add CinemaNow and YouTube functionality to its new decks.
"As millions of U.S. consumers view and download movies or TV shows through the Internet, they are demanding easier ways to access content and more home entertainment options," said Tim Alessi, director of product development, LG Electronics USA. "From Blu-ray to instant streaming from Netflix to CinemaNow and YouTube, LG is bridging the gap between packaged media and video-on-demand services to provide entertainment solutions for consumers' demand for content."
Blu-ray sales haven't exactly been scorching since HD-DVD's kicked the bucket, with consumers seemingly content to make do with upconverting DVD players. But as broadband service continues to get faster, streaming media has started to emerge as a viable contender in the high definition movie market, leaving many to wonder if digital downloads can co-exist with Blu-ray. It appears so, if LG's upcoming lineup is any indication.
No pricing or availabilty information on the new players has yet been mentioned.
Forgive us if we're starting to sound like a broken record, but AMD continues to find itself struggling to stay afloat. The chip maker's list of financial woes just keeps piling on, and to date we've witnessed high level executives jumping ship, a new CEO take the reins, billions of dollars in quarterly losses, a Phenom(enal) flop (compared to pre-release hype), a major shift in business operations by splitting into separate design and manufacturing companies, and now another round of layoffs.
AMD has been cutting employees more frequently than some people cut their hair. Earlier this year, the Santa Clara chip maker reduced its workforce by 10 percent, and more recently, the company said it would be cutting another 500 jobs to reduce costs. Now AMD is saying it plans to issue another 100 pink slips, for a grand total of 600 job cuts in this quarter alone.
The additional layoffs means AMD will record $70 million in restructuring charges instead of the $50 million it had previously expected. More charges are expected in the first half of 2009, though AMD didn't say what they would amount to.
Here's hoping Phenom II kicks ass and finally reverses the company's fortunes. If not, one has to wonder just how long AMD can keep this up.