Kindle Fire Raises Privacy Concerns

Amazon told a Massachusetts congressman that the Silk browser in its Kindle Fire tablet doesn’t pose a privacy threat to customers, but the lawmaker wasn’t satisfied with that statement.

U.S. Rep. Ed Markey (D-Mass.), the co-chairman of a congressional caucus on consumer privacy, on Tuesday released the results of questions he had put to Amazon CEO Jeff Bezos in October about Silk and the data it collected.

Markey wasn’t happy with Amazon’s answers.

“Amazon’s responses to my inquiries do not provide enough detail about how the company intends to use customer information, beyond acknowledging that the company uses this valuable information,” said Markey in a statement.

“Amazon states ‘Customer information is an important part of our business,’ but it is also important for customers to know how the company uses their personal information,” Markey continued. “Amazon is collecting a massive amount of information about Kindle Fire users, and it has a responsibility to be transparent with its customers. I plan to follow-up with the company for additional answers on this issue.”

Silk, which is based on the open-source WebKit engine, connects to Amazon’s cloud service and servers by default. The service will handle much of the work of composing Web pages, pre-rendering and pre-fetching content, and squeezing the size of page components, a way, claimed Amazon, to speed up browsing on low-powered devices like the Kindle Fire.

Source….

Comcast Starts IPv6 Network Rollout

Comcast has begun the production rollout of its new IPv6 service, with 100 customers upgraded in San Francisco’s East Bay in one week.

IPv6 is an upgrade to the Internet’s main communications protocol, which is called IPv4. IPv6 features an expanded addressing scheme that can support billions of devices connected directly to the Internet at faster speeds and lower cost than IPv4, which is running out of addresses.

Comcast began an IPv6 trial 18 months ago and is a leader in the deployment of IPv6-based services among U.S. ISPs.

The production rollout began on Oct. 31. It offers customers “native dual-stack service,” which means Comcast is supporting both IPv6 and IPv4 services.

The initial subscribers of Comcast’s production-quality IPv6 service have stand-alone computers running Microsoft Windows 7, Windows Vista or Apple Mac OS X that are connected directly to a Comcast cable modem. Comcast plans to support IPv6 for customers with home routers at a later date.

Source

AMD To Slash A 10th Of Its Workforce

Advanced Micro Devices Inc revealed a plan on Thursday to save about $200 million of operating costs in 2012 by cutting 10 percent of its global workforce and streamlining internal business processes.

The layoffs mark the first major move by Chief Executive Rory Read, who took the helm in August to try to galvanize a microprocessor maker that has bled market share to larger rival Intel Corp, while missing out on the mobile device boom.

“It’s not too surprising given the operating background of the new CEO and this is exactly what you’d bring an outsider in to do, but their problems go far deeper right now,” said Alex Gauna, an analyst at JMP Securities.

The layoffs should be completed in 2012′s first quarter, AMD said in a statement. Savings generated could help bankroll research and expansion into areas such as low-power chips, emerging markets and cloud computing next year.

In late September AMD, a distant second to Intel in selling microprocessors that are the brains of PCs, warned of manufacturing problems manufacturing it new 32 nanometer Llano chips as well as older 45 nanometer chips.

Source….

HP Makes Changes At The Top

HP has appointed former Boeing Company executive John Hinshaw as CIO.

In the newly created role of EVP of Global Technology and Business Processes, Hinshaw will oversee IT and shared and administrative services, including indirect and services procurement. Hinshaw also will be in charge of optimising business processes across the company.

Hinshaw was previously VP and general manager of Boeing Information Solutions at The Boeing Company, where he was responsible for running a new business.

Prior to Boeing, Hinshaw was SVP and CIO at Verizon Wireless. Earlier in his career he also served as a consultant with Accenture.

Hinshaw will join HP as a member of its executive council on 15 November, reporting to HP president and CEO Meg Whitman.

Meanwhile, HP also announced that Craig Flower has been promoted to SVP and CIO. Flower will be responsible for data management, application architecture, global business intelligence, sales, and product development and engineering applications. Flower has held a wide range of IT management positions within HP since 1984.

Source….

China’s Supercomputer Uses Homegrown Chips

China has built its latest supercomputer based entirely on homegrown microprocessors, a major move towards breaking the country’s reliance on Western technology for high-performance computing.

China’s National Supercomputer Center in Jinan debuted the computer last Thursday, according to a report from the country’s state-run press. The supercomputer uses 8,704 “Shenwei 1600″ microprocessors, which were developed by a design center in Shanghai, called the National High Performance Integrated Circuit Design Center.

Details of the microprocessors and the design center were not immediately available.

The supercomputer has a theoretical peak speed of 1.07 petaflops (quadrillion floating-point calculations per second), and a sustained performance of 0.79 petaflops when measured with the Linpack benchmark. This could place it at number 13 in the world’s top 500 supercomputing list. Photos of the chips used and the supercomputer’s data center can be found here.

China’s Shandong Academy of Sciences built the computer. Officials of the academy could not be immediately reached for comment on Monday.

A report from The New York Times said the supercomputer’s name in English was the Sunway BlueLight MPP.

Source…

Apple Blasted For Not Blocking Stolen Certificates

A security researcher blasted Apple for what he called “foot dragging” over the DigiNotar certificate fiasco, and urged the company to act fast to update Mac OS X to protect users.

“We’re looking at some very serious issues [about trust on the Web] and it doesn’t help matters when Apple is dragging its feet,” said Paul Henry, a security and forensics analyst with Arizona-based Lumension.

Unlike Microsoft, which updated Windows Tuesday to block all SSL (secure socket layer) certificates issued by DigiNotar, Apple has not updated Mac OS X to do the same.

DigiNotar, one of hundreds of firms authorized to issue digital certificates that authenticate a website’s identity, admitted on Aug. 30 that its servers were compromised weeks earlier. A report made public Monday said that hackers had acquired 531 certificates, including many used by the Dutch government, and that DigiNotar was unaware of the intrusion for weeks.

Because almost all the people who were routed to a site secured with one of the stolen certificates were from Iran, many experts suspect that the DigiNotar hack was sponsored or encouraged by the Iranian government, which could use them to spy on its citizens.

Microsoft isn’t the only software maker to block all DigiNotar certificates: Google, Mozilla and Opera have also issued new versions of their browsers — Chrome, Firefox and Opera — to completely, or in Opera’s case, partially prevent users from reaching websites secured with a DigiNotar certificate.

Users of Safari on Mac OS X, however, remain at risk to possible “man-in-the-middle” attacks based on the fraudulently obtained certificates.

Because Safari relies on the underlying operating system to tell it which certificates have been revoked or banned entirely, Apple must update Mac OS X. The Windows edition of Safari, which has a negligible share of the browser market, taps Windows’ certificate list: That version is safe to use once Microsoft’s Tuesday patch is applied.

Read More….

Microsoft: Stolen SSL Certs No Good

Microsoft has officially stated that a digital certificate stolen from a Dutch company could not be used to force-feed customers malware through its Windows Update service.

The company’s assertion came after a massive theft of more than 500 SSL (secure socket layer) certificates, including several that could be used to impersonate Microsoft’s update services, was revealed by Dutch authorities and several other affected developers.

“Attackers are not able to leverage a fraudulent Windows Update certificate to install malware via the Windows Update servers,” said Jonathan Ness, an engineer with the Microsoft Security Response Center (MSRC), in a Sunday blog post. “The Windows Update client will only install binary payloads signed by the actual Microsoft root certificate, which is issued
and secured by Microsoft.”

Seven of the 531 certificates now known to have been fraudulently obtained by hackers in July were for the domains update.microsoft.com and windowsupdate.com, while another six were for *.microsoft.com.

Read More…..

RIM Heads To The Cloud

Canada’s Research In Motion (RIM) will take the wraps off of a new cloud-based social music sharing service called BBM Music, as companies begin to bet on entertainment delivered over the Internet that incorporates social networking features.

Research in Motion, the maker of BlackBerry phones, said select music from Universal Music Group, Sony Music Entertainment, Warner Music and EMI would be available for the users.

A closed beta trial of the BBM Music service is starting on today in Canada, the United States and the UK, the company stated.

The music service is expected to be commercially available to customers later this year for a monthly subscription of $4.99 in a number of countries, it said.

Read more…

Radio Antennas Made Fashionable

Ohio State University researchers armed with sewing machines and computers have designed a way to weave radio antennas into clothing in an effort to give wearers more flexible and reliable communications capabilities.

Utilizing plastic film and metallic thread, the researchers are attempting to outfit American soldiers with better and less intrusive wireless technology, though they say the hands-free design could be applicable to others, including police, firefighters and the elderly.

The researchers outline their antenna design in the journal IEEE Antennas and Wireless Propagation Letters. They acknowledge the concept of wearable antennas isn’t new (combine what they’re doing and some of the invisibility cloak designs that would be woven into clothing and you’d really have something!).

But the OSU researchers claim their design is an improvement over past efforts in that it boosts antenna range fourfold by utilizing a computer controller that fits on a belt and works with multiple antennas that can send and receive signals in all directions. Network coding that coordinates communications among antennas also plays a key role.

Read More….

AES Encryption Cracked

CRYPTOGRAPHY RESEARCHERS have identified a weakness in the Advanced Encryption Standard (AES) security algorithm that can crack secret keys faster than before.

The crack is the work of a trio of researchers at universities and Microsoft, and involved a lot of cryptanalysis – which is somewhat reassuring – and still does not present much of a real security threat.

Andrey Bogdanov, from K.U.Leuven (Katholieke Universiteit Leuven), Dmitry Khovratovich, who is full time at Microsoft Research, and Christian Rechberger at ENS Paris were the researchers.

Although there have been other attacks on the key based AES security system none have really come close, according to the researchers. But this new attack does and can be used against all versions of AES.

This is not to say that anyone is in immediate danger and, according to Bogdanov, although it is four times easier to carry out it is still something of an involved procedure.

Recovering a key is no five minute job and despite being four times easier than other methods the number of steps required to crack AES-128 is an 8 followed by 37 zeroes.

“To put this into perspective: on a trillion machines, that each could test a billion keys per second, it would take more than two billion years to recover an AES-128 key,” the Leuven University researcher added. “Because of these huge complexities, the attack has no practical implications on the security of user data.” Andrey Bogdanov told The INQUIRER that a “practical” AES crack is still far off but added that the work uncovered more about the standard than was known before.

“Indeed, we are even not close to a practical break of AES at the moment. However, our results do shed some light into the internal structure of AES and indicate where some limits of the AES design are,” he said.

He added that the advance is still significant, and is a notable progression over other work in the area.

“The result is the first theoretical break of the Advanced Encryption Standard – the de facto worldwide encryption standard,” he explained. “Cryptologists have been working hard on this challenge but with only limited progress so far: 7 out of 10 for AES-128 as well as 8 out of 12 for AES-192 and 8 out of 14 rounds for AES-256 were previously attacked. So our attack is the first result on the full AES algorithm.”

Read More…

« Previous Page — Next Page »