If you take a look here at Google’s Project Zero bug-tracker, you’ll see that Google has disclosed a bug in the Microsoft Edge browser that is kind of nasty. It centers around the just-in-time compiler that Microsoft’s Edge browser uses to execute JavaScript. In short, the bug makes it possible to predict the memory space it is about to use. Once an attacker knows about that memory, they could pop their own code in there as Edge executes instructions of their choice rather than JavaScript in the web page the browser was rendering. That of course leads to pwnage.
However, Microsoft is struggling to fix this as detailed in this post that the company put up. They hope to have something by March 13th, but that would be outside the 90 day window and 14 day grace period that Google gives companies to fix stuff. Thus now that this is public, you can fully expect that bad guys on the Internet will be figuring out ways to make attack code that will pwn users of the Edge browser. Thus for the time being, you might want to use another browser until this gets fixed.
Intel Facing 32 Lawsuits Over CPU Flaws
Posted in Commentary with tags Intel on February 20, 2018 by itnerdLife is not good for Intel at the moment as the Spectre and Meltdown CPU flaws which to be clear are #EpicFails on the part of Intel, have resulted in 32 class-action suits filed against Intel. This comes via their annual SEC filing. What’s interesting about these lawsuits is this:
Additionally, three further shareholder lawsuits were filed, claiming that Intel’s board and corporate officers committed breach of duty in connection to the disclosure of the security flaws and failed to act in relation to alleged insider trading. In November last year, Intel CEO Brian Krzanich sold all the Intel stock he was allowed to sell. This stock sale has provoked speculation about insider trading, though Intel maintains that Krzanich’s actions were unrelated to the security issues.
That’s got to get Intel’s attention. Hopefully for their sake, Intel has great lawyers on their side. Otherwise this could really impact Intel’s bottom line.
Leave a comment »