Sign up for our Technology Newsletter 
Are Cloud Services A Risk?
Security experts have warned that the cloud could suffer the same kind of collapses that plague the financial system. Bryan Ford at Yale University in New Haven says that the full risks of this migration have yet to be explored. Complex systems, such as the Cloud, can fail in many unexpected ways and outlines various simple scenarios in which a cloud could come unstuck.
He said that a cloud could experience a full meltdown that could threaten any business. Ford said that while individual systems on a cloud might play nice, if you have other application providers in the same cause problems for another. He came up with a scenario were two conflicting load balancing programs operate with the same refresh period and when these periods coincide, the control loops start sending the load back and forth between the virtual servers in a positive feedback loop.
He said that “This simplistic example might be unlikely to occur in exactly this form on real systems—or might be quickly detected and “?xed” during development and testing—but it suggests a general risk.” Ford said that similar problems happened during ?nancial industry crashes.
AMD Aims For The Cloud
Advanced Micro Devices on Tuesday is expected to announce new Opteron 3200 series chips for low-end servers, which the company believes will give it a competitive edge over Intel in the cloud server arena.
The three Opteron 3200 chips are for use in single-socket servers for Web hosting and cloud applications, according to a company presentation. The chips have up to eight processor cores, clock speeds of up to 3GHz, and draw between 45 watts and 65 watts of power.
The new chips are based on the Bulldozer processor architecture, which is also in the Opteron 6200 16-core processors and FX-series gaming chips. The Opteron 3200 launch comes after AMD in late February announced it would pay US$334 million to acquire SeaMicro, which offers dense and power-efficient servers for cloud computing environments.
AMD’s chips will likely compete against Intel’s Xeon E3 series chips, which are used in SeaMicro’s SM10000-XE server. Intel worked with SeaMicro on the server, but analysts have said that AMD will ultimately swap Intel’s chips with its own chips.
AMD is pitching the Opteron 3200 as a “low-cost-per-core” product. The chips are priced between US$99 and $129, while Intel’s E3 chips are priced between $189 and $885. MSI, Tyan, Fujitsu and Dell are expected to launch Web servers and dense systems based on the chips.
AMD’s expanded product line provides an entry point to new markets, said Jim McGregor, chief technology strategist at In-Stat.
But the Opteron 3200 could be a misfit in servers if competing on price versus performance-per-watt, McGregor said. There is a growing interest in deploying low-power servers in data centers to cut energy costs, but the Opteron 3200 chips are comparatively power-hungry for such installations.
WordPress Attacked By Hackers
March 14, 2012 by admin
Filed under Around The Net
Comments Off on WordPress Attacked By Hackers
Security outfit Websense said that more than 200,000 infected pages that redirect users to websites displaying fake antivirus scans have been created. The latest compromises are part of a rogue antivirus distribution campaign that has been going on for months, the Websense researchers said.
Cybercriminals gangs have switched to drive-by download attacks that exploit vulnerabilities in outdated browser plug-ins to automatically download and install their rogue software. The large number of infected Web pages seen in this campaign is an indication that these scams still work. Vulnerable websites are a rich source of opportunity for cybercriminals. More than 85 percent of the compromised sites were located in the US, but their visitors were geographically dispersed.
Google Had Developed Own Currency
March 5, 2012 by admin
Filed under Smartphones
Comments Off on Google Had Developed Own Currency
Google once contemplated the idea of issuing its own currency, to be called Google Bucks, company Executive Chairman Eric Schmidt said on stage at the Mobile World Congress in Barcelona,Spain on Tuesday.
At the end of his keynote speech, Schmidt hit on a wide array of topics in response to audience questions. “We’ve had various proposals to have our own currency we were going to call Google Bucks,” Schmidt said.
The idea was to implement a “peer-to-peer money” system. However, Google discovered that the concept is illegal in most areas, he said. Governments are typically wary of the potential for money laundering with such proposals.
“Ultimately we decided we didn’t want to get into that because of these issues,” Schmidt said.
He also hinted that Google might be preparing for a battle in China once its acquisition of Motorola is complete.
“Google’s been willing to take on China pretty well,” he said in response to a question about whether Google expected to continue to ignore theft of Motorola intellectual property in China, as Motorola has been doing. The acquisition hasn’t closed yet, Schmidt noted. “We’ve taken a pretty strong position on IP. We are well aware of the issues and we are considering your question,” he said.
Google is still waiting for some government approvals of its proposed acquisition of Motorola.
Hacked Companies Still Not Alerting Investors
February 9, 2012 by admin
Filed under Around The Net
Comments Off on Hacked Companies Still Not Alerting Investors
At least a half-dozen major U.S. companies whose computer networks have been breached by cyber criminals or international spies have not admitted to the incidents despite new guidance from securities regulators urging such disclosures.
Top U.S. cybersecurity officials believe corporate hacking is widespread, and the Securities and Exchange Commission issued a lengthy “guidance” document on October 13 outlining how and when publicly traded companies should report hacking incidents and cybersecurity risk.
But with one full quarter having elapsed since the SEC request, some major companies that are known to have had significant digital security breaches have said nothing about the incidents in their regulatory filings.
Defense contractor Lockheed Martin Corp, for example, said last May that it had fended off a “significant and tenacious” cyber attack on its networks. But Lockheed’s most recent 10-Q quarterly filing, like its filing for the period that included the attack, does not even list hacking as a generic risk, let alone state that it has been targeted.
A Reuters review of more than 2,000 filings since the SEC guidance found some companies, including Internet infrastructure company VeriSign Inc and credit card and debit card transaction processor VeriFone Systems Inc, revealed significant new information about hacking incidents.
Yet the vast majority of companies addressing the issue only used new boilerplate language to describe a general risk. Some hacking victims did not even do that.
Symantec Admits Network Was Hacked
Symantec today reversed course away from earlier statements regarding the theft of source code of some of its flagship security products, now admitting that its own network was breached.
In a statement provided to the Reuters news service, the security software giant acknowledged that hackers had broken into its network when they stole source code of some of the company’s software.
Previously, Symantec had denied that its own network had been breached, and instead pointed fingers at an unnamed “third party entity” as the attack’s victim. Evidence posted by a hacker nicknamed “Yama Tough” — a self-proclaimed member of a gang calling itself “Lords of Dharmaraja” — indicated that the information was obtained from a server operated by the Indian government.
Two weeks ago, Symantec spokesman Cris Paden said that the hacker made off with source code of Symantec Endpoint Protection 11.0 and Symantec Antivirus 10.2, enterprise products between five and six years old.
Big Blue Still The Patent King
As technology companies start to stockpile patents so that they can see off their rivals IFI Claims Patent Services, a company that maintains global patent databases, has clocked the outfits with the most weapons in any patent war.
More than 224,505 utility patents were awarded in the U.S. last year, jumping two percent over the previous year’s record-breaking tally of 219,614 patents. IBM has always had the most patents, probably because it has been around the longest. The company was granted 6,180 utility patents, up nearly five percent from 2010. Samsung was the number two 4,894 patents, followed by Canon at 2,821 patents, Panasonic with 2,559 and Toshiba with 2,483 utility patents.
Microsoft, which held on to the third spot in 2010, is in the sixth place with 2,311 utility patents granted last year, According to IFI CEO Mike Baycroft global companies, and especially Asian ones, are collecting U.S patents at a dizzying pace, and now Asian firms hold eight of the top 10 slots in the 2011 ranking.
Do You Trust Data-recovery Providers?
Comments Off on Do You Trust Data-recovery Providers?
Data-recovery service providers are tasked with saving important data for you when something goes wrong — a drive crashes or storage device is dropped, and no backup is available. But do you trust them with the important data you let them recover or could they actually be a source for a data breach?
A survey of 769 IT professionals published this week finds those surveyed need to find out more about the third-party data-recovery services their organizations use. For example, according to the survey, 67% felt that encryption they had in place protected their organizations from data loss or theft during the data recovery process. But encryption keys are often handed over to the third-party data recovery service provider as part of the process, according to the study done by Ponemon Institute.
Ponemon’s “Trends in Security of Data Recovery Operations” report says of the 87% of survey respondents who said their organization had at least one data breach in the past two years, “21% say the breach occurred when a drive was in the possession of a third-party data service provider.”
Symantec’s Virus Code Hacked
Symantec is looking into an Indian hacking group’s claims that it accessed source code used in the company’s flagship Norton Antivirus program.
A spokesman for the company on Thursday said that one claim by the group was false, while another is still being investigated.
Meanwhile, the Indian group, which calls itself Lords of Dharmaraja, has threatened to publicly disclose the source code very soon.
On Wednesday, the group posted on Pastebin what it claimed was confidential documentation related to Norton AntiVirus source code. A review of the material showed what appears to be a description of an application programming interface (API) for Symantec’s AV product.
The group also posted what it claimed was the complete source code tree file for Norton Antivirus. That document appears to have been taken down.
‘Yama Tough,’ the hacker who posted the documents, released at least two more on Google+ allegedly related to Symantec source code. One of the documents appears to be a detailed technical overview of Norton Anti-Virus, Quarantine Server Packaging API Specification, v1.0. The other document, from 2000, describes a Symantec Immune System Gateway Array Setup technology.
.
IBM’s Watson Shows Up For Work
IBM’s Watson supercomputer is about to start work evaluating evidence-based cancer treatment options that can be delivered to the doctors in a matter of seconds for assessment.
IBM and WellPoint, which is Blue Cross Blue Shield’s largest health plan, are developing applications that will essentially turn the Watson computer into an adviser for oncologists at Cedars-Sinai’s Samuel Oschin Comprehensive Cancer Institute in Los Angeles, according to Steve Gold, director of worldwide marketing for IBM Watson Solutions.
Cedars-Sinai’s historical data on cancer as well as its current clinical records will be ingested into an iteration of IBM’s Watson that will reside at WellPoint’s headquarters. The computer will act as a medical data repository on multiple types of cancer. WellPoint will then work with Cedars-Sinai physicians to design and develop applications as well as validate their capabilities.
Dr. M. William Audeh, medical director of the cancer institute, will work closely with WellPoint’s clinical experts to provide advice on how the Watson may be best used in clinical practice to support increased understanding of the evolving body of knowledge on cancer, including emerging therapies not widely known by physicians.
IBM announced earlier this year that healthcare would be the first commercial application for the computer, which defeated two human champions on the popular television game show Jeopardy! in February.