Author: admin

  • CPU vulnerability remediation status update – especially Spectre

    Intel has a quartet of lawsuits vying for the attention of its lawyers. Heard that AMD might have lawsuits. However so called install the remediation CPU patch looks amazed the windows OS user. I am using window 7 instead of windows 10. Perhaps I just did the windows update this morning. It behind my seen…

  • The hunt for red october – Nautilus and Neuron by Turla Group

    The ncsc.gov.uk advisory urge UK citizen and business enterprise staying alert for Turla group malware. The similar of alert announced 2 months ago. Per alert subject provided by NCSC the malware changed it shape already. But the attack target remain unchanged, the malware target Microsoft products especially Exchange mail server and IIS web server. Perhaps…

  • Will China block access to all personal VPN services by Feb 2018?

    IT guys busy all the time even though at home and therefore sometimes they might forget somethings. There are 2 big things being happen at the end of this month. Heads up that PCI-DSS version 3.1 will be obsolete at the end of the month (31st Jan 2018). The version 3.2 will be effective on…

  • The “retpoline” x86 mitigation technique for variant # 2

    We heard that vendor recommend install the patch into your server, workstation and notebook within this month. In regards to meltdown and Spectre technical white paper. We known the design weakness are divided into 3 parts. This variant 2 – branch target injection flaw might the easy one to resolve in comparing the remains 2…

  • A replay attack capable detected by Microsoft event ID

    Perhaps Meltdown and Spectre CPU design weakness headache the IT guy this month. Sounds like the overall environment covered with mist! But the sunrise will be raised finally to get rid the dark. Can you remember that replay attack on WPA2 Wifi network last year? You did OS version upgrade and change the authentication method…

  • VMware Response to Speculative Execution security issues (Spectre and Meltdown)

    About 14 hours ago VMware official announce the products mitigation plan in regards to CPU design vulnerabilities (Spectre and Meltdown). Even though mitigation plan has been released. For recent chip design weakness, once the patches are applied, developers have to rewrite code to support the patch. Perhaps VMware programming team cannot address the problem in…

  • Bitcoin empire is coming!

    All the world perhaps unhappy with existing financial world. Cyyptocurrency became stronger and stronger. We seen last year the cypto currency market activities especially Ethererum, Bitcoin told the world they have market support. Kodak pioneer jump to this hot area. (KODK)’s stock surged as much as 125% in trading after the announcement. Apparently there are…

  • Protect against the chipset vulnerabilities known as Spectre and Meltdown, but encountered problem in AMD chips

    Microsoft release patch this week objectives Windows operating system mitigations to protect against the chipset vulnerabilities known as Spectre and Meltdown. A problem encountered on AMD chip after patch installed. The system not boot. Microsoft suspected that the root causes by AV software. For  more details, please see below informative diagram for reference. The reference…

  • Spectre attack works on non-Intel processors – status update by Apple 8th Jan 2018

    In order to avoid the effects of Spectre (CVE-2017-5753 and CVE-2017-5715), Apple announced solution (patching) to mitigate this vulnerabilities. It was surprise that the result looks different from the security analysis report findings. It looks that no significant performance slow down and not require to re-design CPU. However Apple computer address the problem this time…

  • CPU and machines not vulnerable to “meltdown and “Spectre” vulnerabilities.

    The Chinese mantra “time can tell” looks like a witness to modern hardware and software development industry. As we know IBM mainframe (s390) and Sun SPARC given the feeling to the world in last decase was that they are far away from modern technologies. Even though S390 contains LPAR function allow multuple OS platform operation…