Sunday, 18 November, 2018

Nearly 'all modern computers' affected by cold boot attack, researchers warn

Cold boot attack leaves Apple Dell and Lenovo laptops at risk of data theft Cold boot attack leaves Apple Dell and Lenovo laptops at risk of data theft
Roberta Sherman | 16 September, 2018, 16:41

There's no immediate fix available for the new vulnerability, F-Secure said.

Finnish cyber-security company F-Secure have discovered a flaw with almost all modern desktops and latops that allow hackers to potentially steal sensitive information from your locked devices.

Many, many moons ago a vulnerability was discovered which would let you grab some or all of the data last written to RAM.

"Typically, organizations aren't prepared to protect themselves from an attacker that has physical possession of a company computer", says F-Secure's principal security consultant Olle Segerdahl.

F-Secure said that although the exploit requires some extra steps to the classic cold boot attack, it's proven to be effective against every modern laptop tested. However, Segerdahl and his team have discovered a way to disable the overwrite process and revive the decade-old cold boot attack method.

Man reportedly eats strawberry with needle inside, police confirm 4 ‘contamination’ incidents
So, after months of picking and planting, devastated farmers have seen hundreds of thousands of berries simply go to waste. Investigators have also now confirmed a fourth contamination incident as having occurred in a punnet of strawberries.

These attacks have been known since 2008, and most computers today have a safety measure where it removes the data stored on RAM to prevent hackers from stealing sensitive information.

The attacker then plugs in a USB stick containing a Linux operating system and boots the machine from that. Cold boot attacks involve rebooting a computer without following a proper shutdown process, then recovering data that remains briefly accessible in the RAM after the power is lost. It added, "Using a simple hardware tool, an attacker can rewrite the non-volatile memory chip that contains these settings, disable memory overwriting, and enable booting from external devices".

According to the researchers, "nearly all" modern computers are vulnerable to the attack, including laptops from major manufacturers such as Dell, Lenovo, and even Apple.

Interestingly, the vulnerability can not be fixed easily, and according to F-Secure, companies should be ready to deal with such attacks. Sleep mode and cold/hard reboots save critical information in the ram of the device. And although the researchers have shared their findings with Microsoft, Intel and Apple, mitigations are still a work in progress.

F-Secure advises everyone to always either shut down or hibernate their laptop, never just place it in sleep mode.

Govt to stick to 3.3% fiscal deficit target: Arun Jaitley
The government had in the budget projected direct tax collection of Rs 11.5 lakh crore for 2018-19 fiscal. He also said the government will maintain the 100% capital expenditure for the year without any cut.

The researchers said cold boot attacks like this could provide a consistent way for threat actors to steal data because it works across platform.

The researchers say that their attack is reliable on Windows machines that are already running or do not require a PIN.

Apple responded by pointing to the latest generation of Macs, which have the T2 chip that do the encryption separately from the CPU and makes such an attack more hard to execute.

Apple claims that Macs with the T2 chip are immune to cold boot attacks - though this only includes the iMac Pro and 2018 MacBook Pro models - and suggested users with other Mac devices set a firmware password.

Over 895,000 without power as Florence batters Carolinas
Grey clouds hovered over the stadium, with the wind picking up enough to blow around papers and knock ballcaps off heads. The swift-water rescues on Saturday morning were mostly of people who hadn't heeded those orders, said Burgaw Fire Capt.

Recommended

  • Hurricance Florence: Watch the storm close in from space

    Hurricance Florence: Watch the storm close in from space

    By tomorrow afternoon, the center of Florence is expected to be across western SC . Calls for help multiplied as the wind picked up and the tide rolled in.
    Delta II set for final launch after almost  30 years

    Delta II set for final launch after almost 30 years

    Importantly, the laser will measure the slope and height of the ice, not just the area it covers. The scheduled time was 5:46 a.m. but it had a 40-minute launch window.
    Man dies after shark attack off Cape Cod

    Man dies after shark attack off Cape Cod

    Shortly after, he was rushed to the Cape Cod Hospital by officials with Wellfleet Fire Department but succumbed to his injuries. However, shark sightings around the Cape have reportedly been more frequent this year, leading to several beach closings.
  • Nigerian Finance Minister resigns over forged papers

    Nigerian Finance Minister resigns over forged papers

    The Daily Trust reports that Adeosun resigned on Friday, but not sure when the minister submitted her resignation letter. Adeosun did not comment on the claims initially, prompting criticism from her opponents.

    Florence 'unloading epic amounts of rainfall' in North Carolina

    Rescued families were delivered to shelters, where approximately 20,000 people across the state were housed on Saturday. The White House said yesterday President Donald Trump had approved making federal funding available in some counties.
    'Relentless rains' continue as Florence almost  stalls over Carolinas

    'Relentless rains' continue as Florence almost stalls over Carolinas

    Officials in SC said a 61-year-old woman died when her auto struck a tree that had fallen across a highway near the town of Union. Charlotte and Asheville in North Carolina, and Roanoke, Virginia, could also be in for heavy rains as Florence plods inland.
  • Suspect Identified as Border Patrol Agent in Serial Murder Case

    Suspect Identified as Border Patrol Agent in Serial Murder Case

    In fact, Ortiz allegedly had a fifth victim, a woman who escaped and helped police track down her assailant, the CBS report said. Alaniz said authorities were planning on filing four murder charges and one charge of aggravated kidnapping against Ortiz.
    Tracking Hurricane Florence as it bears down on U.S. East Coast

    Tracking Hurricane Florence as it bears down on U.S. East Coast

    The American government is ready to deal with the aftermath of the hurricane but people should get out of the way, Trump said. Emergency declarations were in force in Georgia, South and North Carolina, Virginia, Maryland and the District of Columbia.
    Hurricane Florence may hit North Carolina

    Hurricane Florence may hit North Carolina

    Overall, risky storm surge is possible all the way from Edisto Beach, South Carolina, to the North Carolina/Virginia border. President Donald Trump both touted the government's readiness and urged people to get out of the way.
  • Record-breaking Thomas Tuchel undecided on PSG team to face Liverpool

    Record-breaking Thomas Tuchel undecided on PSG team to face Liverpool

    They also have Champions League experience and reached last season's final. "It will be a big test for us, but we are confident". "I know 10", Tuchel said to Canal + Sport when asked about his selection plans for the trip to Anfield.
    Zlatan Ibrahimovic scores to reach 500 goals for club and country

    Zlatan Ibrahimovic scores to reach 500 goals for club and country

    It was Ibrahimovic's 17th goal in 18 league appearances for the MLS side as his remarkable career continues. Since then, the former Swedish global has scored 17 goals for the MLS side in 22 appearances.
    Florence expected to bring 'catastrophic' flooding to Carolinas

    Florence expected to bring 'catastrophic' flooding to Carolinas

    Mayor Beach Mayor Brenda Bethune told CNN traffic out of the SC city has more than quadrupled as residents and visitors evacuate. Officials had warned before the storm that the rains could risk tainting waterways with murky coal ash and toxic hog waste.

Kavanaugh vote moving forward despite allegations Kavanaugh vote moving forward despite allegations Feinstein was preparing to lead Democratic questioning of Kavanaugh during his confirmation hearing. The Senator took these allegations seriously and believed they should be public.

Maryland Task Force One heads south to help prepare for Hurricane Florence Maryland Task Force One heads south to help prepare for Hurricane Florence As of Saturday , about 676,000 homes and businesses were without power in North Carolina, along with 119,000 in SC . There is now a hurricane warning in effect from the Santee River in SC to the Outer Banks in North Carolina.

Mariachi wearing gunman kill 5, wound 8 in Mexico City Mariachi wearing gunman kill 5, wound 8 in Mexico City Mexico City has experienced less of the drug violence that plagues cartel strongholds in other regions of the country. At least five people have been killed after gunmen dressed as a mariachi band opened fire in a Mexico City plaza.

Experts disagree on whether Dallas officer could be credible Experts disagree on whether Dallas officer could be credible Guyger was tested for drugs and alcohol after the incident but the findings of those tests have not been released. Hall has placed Amber Guyger , who has been with the department almost five years, on paid administrative leave.

Formula One present vehicle design concepts for the 2021 season Formula One present vehicle  design concepts for the 2021 season Formula 1 has revealed images of its 2021 vehicle concepts that are now in development with the aim of producing closer racing. The designs have a strong family resemblance to current cars, but feature farings near the wheels to clean up the airflow.

Champions League Pep Guardiola Makes Shocking Statement on Manchester City's Performance Champions League Pep Guardiola Makes Shocking Statement on Manchester City's Performance Bernardo Silva , Gabriel Jesus , Raz [Raheem Sterling] - the other ones are young - and he will grow up. The buildup to the goal was a beauty mixed with a string of passes.

Dutch ousted Russians for alleged attempt to hack Swiss lab Dutch ousted Russians for alleged attempt to hack Swiss lab The men will also be charged with possession of novichok, a deadly Soviet-era poison that's banned by the Chemical Weapons Act. The Dutch defence department declined to comment. "Two Russian spies arrested in the Netherlands and deported to Russia".

Trump declares himself victim in Hurricane Maria death toll Trump declares himself victim in Hurricane Maria death toll Earlier this week, Mr Trump hailed the United States response in Puerto Rico as "an incredible, unsung success ". That led the cable news coverage that evening, further angering the president, according to one of the people.

Huawei's CEO says foldable smartphones could replace computers Huawei's CEO says foldable smartphones could replace computers Richard Yu told German newspaper Die Welt that Huawei was "already working on it". One analyst said the commercial appeal of foldable displays was unclear.

OSU's Nick Bosa out vs. TCU with injury OSU's Nick Bosa out vs. TCU with injury Trailing 14-13 by the middle of the match, the Buckeyes pulled out all of the stops to ensure a win in Arlington's At&T Stadium. Ohio State standout defensive end Nick Bosa left the No. 4 Buckeyes' game against No. 15 TCU with an injury on Saturday night.

Toyota reveals mildly hot Yaris GR Sport with sharp handling Toyota reveals mildly hot Yaris GR Sport with sharp handling The GR Sport is exclusively a five-door and will be available with Yaris's standard 1.5-litre hybrid electric powertrain. In fact the new Yaris Sport GR is the Toyota apology before the European buyers who have not got a Toyota Yaris GRMN .

SANA: Syrian air defenses shoot down several Israeli missiles SANA: Syrian air defenses shoot down several Israeli missiles Israeli warplanes attacked Damascus International Airport late Saturday night, according to the Syrian Arab News Agency ( SANA ). Syria often attributes airstrikes on military bases to Israel, but the Jewish state only rarely confirms such strikes.

As storm nears, FEMA chief says he will cooperate with separate probe As storm nears, FEMA chief says he will cooperate with separate probe A senior DHS official familiar with conversations on Long's future told CNN, "He has never been asked to resign". Since he took control of FEMA a year ago , Long has allegedly been using a government driver to take him home.

Coastal residents wait, watch as Florence's fury begins Coastal residents wait, watch as Florence's fury begins Rain intensity will pick up, as will wind speed and the storm surge is expected to reach up to 13 feet in some areas. State Department of Transportation Sec. "Against my better judgment, due to emotionalism, I evacuated", he said.

Liverpool - Premier League - 15 September 2018 Liverpool - Premier League - 15 September 2018 The Brazilian was forced off in the 74th minute following a battle with Jan Vertonghen and then sent for further examination. I haven't seen it back, I only saw the situation from 60 yards away so I've no clue what exactly happened.