Sign up for our Technology Newsletter 
DDoS Attacks Rising
One in five UK businesses experienced a DDoS attack last year according to a new survey.
Analytics firm Neustar said that while the percentage is significantly lower than that experienced by their US equivalents it is still fairly high. More than 22 percent of the 381 organisations participating in the annual trends study reported DDoS attacks, compared to 35 percent experiencing the same in a separate study carried out among US firms in 2012.
Neustar set out to measure revenue ‘risk per hour’ which is a measure of what it might cost a business in a particular sector to experience DdoS downtime. They found that the majority of organisations reckoned this at less than $1,500 per hour.
Most of the rest put it somewhere between $1,500 and $15,000 although one in four financial services firms put the number at $250,000 per hour. This cost included brand damage and unexpected customer service calls.
Oracle Issues Massive Security Update
Oracle has issued its critical patch update advisory for July, plugging a total of 89 security holes across its product portfolio.
The fixes focus mainly on remotely exploitable vulnerabilities in four widely used products, with 27 fixes issued for the Oracle Database, Fusion Middleware, the Oracle and Sun Systems Product Suite and the MySQL database.
Out of the 89 security fixes included with this update, the firm said six are for Oracle Database, with one of the vulnerabilities being remotely exploitable without authentication.
Oracle revealed that the highest CVSS Base Score for these database vulnerabilities is 9.0, a score related to vulnerability CVE-2013-3751, which affects the XML Parser on Oracle Database 11.2.0.2 and 11.2.0.3.
A further 21 patched vulnerabilities listed in Oracle’s Critical Patch Update are for Oracle Fusion Middleware; 16 of these vulnerabilities are remotely exploitable without authentication, with the highest CVSS Base Score being 7.5.
As for the Oracle and Sun Systems Products Suite, these products received a total of 16 security fixes, eight of which were also remotely exploitable without authentication, with a maximum CVSS Base Score of 7.8.
“As usual, Oracle recommends that customers apply this Critical Patch Update as soon as possible,” Oracle’s director of Oracle Software Security Assurance Eric Maurice wrote in a blog post.
Craig Young, a security researcher at Tripwire commented on the Oracle patch, saying the “drumbeat of critical patches” is more than alarming because the vulnerabilities are frequently reported by third parties who presumably do not have access to full source code.
“It’s also noteworthy that […] every Oracle CPU release this year has plugged dozens of vulnerabilities,” he added. “By my count, Oracle has already acknowledged and fixed 343 security issues in 2013. In case there was any doubt, this should be a big red flag to end users that Oracle’s security practices are simply not working.”
Baidu Acquires App Maker
July 26, 2013 by admin
Filed under Around The Net
Comments Off on Baidu Acquires App Maker
Baidu Inc, China’s top search engine, plans to purchase app store 91 Wireless for $1.9 billion to strengthen its position in the country’s highly competitive mobile computing sector.
Baidu will buy a 57.4 percent stake in 91 Wireless, one of China’s earliest appstores, from NetDragon Websoft Inc for $1.09 billion, and the remainder from other shareholders, both companies said on Tuesday.
“It’s good for Baidu because if you look at mobile, currently apps are more popular than mobile sites because Internet download speeds are slow. So with the acquisition of this appstore, Baidu can work more closely with the apps developer and be able to enhance further their search capabilities,” said Elinor Leung, an analyst with CLSA in Hong Kong.
China’s mobile Internet market is expected to double to about 300 billion yuan ($48 billion) in 2014 from 150 billion yuan in 2012, with the number of active mobile Internet users rising to 749 million from 521 million during the same period, according to research firm Analysys International.
NetDragon’s shares lost as much as a fifth of their value on Tuesday and were down 18 percent at HK$19.74 at 0305 GMT (11.05 p.m ET)
NetDragon also said in a statement that it would scrap the planned spinoff and listing of 91 Wireless on Hong Kong’s secondary Growth Enterprise Market if the acquisition is finalized.
WiLan Loses In Court
July 25, 2013 by admin
Filed under Around The Net
Comments Off on WiLan Loses In Court
Wi-Lan has suffered defeat in its patents trial against Alcatel Lucent, Ericsson, HTC and Sony, as a Texas court decided that the firms did not infringe its patents.
Wi-Lan filed a lawsuit against Alcatel Lucent, Ericsson, HTC and Sony in 2010 claiming the firms infringed patents that relate to data transmission over wireless networks. However a Texas court ruled that the four firms did not infringe Wi-Lan’s patents and found one patent Wi-Lan asserted against HTC and two it asserted against Alcatel Lucent invalid.
Wi-Lan had asserted that Alcatel Lucent and Ericsson infringed three patents, none of which claims were upheld by the court. The firm also asserted that HTC and Sony infringed another patent, and there the court not only judged against infringement but invalidated the patent.
Alcatel Lucent and HTC both said that Wi-Lan was trying to stretch its patents to cover technology in their devices.
Sally Julien, a spokeswoman for HTC said, “HTC believes that Wi-Lan has exaggerated the scope of its patent in order to extract unwarranted licensing royalties from entities who have been focused on bringing innovation forward in their own products.”
Kurt Steinert, an Alcatel Lucent spokesman said, “We think this validates our belief that Wi-Lan was stretching the boundaries of its patents, and the jury confirmed that belief.”
Wi-Lan has managed to get several companies to license its technology including Dell and Panasonic, and in May it initiated legal proceedings against Blackberry over a patent relating to Long Term Evolution network technology. However in this case the firm did not prevail against two large telecom equipment companies and two big smartphone makers.
Microsoft Drops The Surface
Microsoft has dropped the prices on its Surface RT tablets by as much as 30%, with the entry-level 32GB model selling for $349.
The 64GB Surface RT was also discounted by $150, and now sells for $449, or 25% off its former price.
When Microsoft launched the tablet, it sold the 32GB device for $499 and the 64GB configuration for $599.
Microsoft started selling the Surface RT at the lower prices Sunday, as did some of its U.S. retail partners, including Best Buy and Staples. On its website, Staples noted that the discounted prices are valid until July 20, and only while supplies last.
Microsoft’s website, however, listed no caveats, hinting that the lower prices might be permanent or at least will be honored for longer than one week.
The prices are another attempt by Microsoft to clear its existing inventory in preparation for a second-generation line of Windows RT devices. Previously, Microsoft had launched multiple deals to rid itself of the poor-selling tablet, most recently in June when it slashed prices by 60% in a bid to get universities and K-12 schools to buy the device.
Earlier, it kicked off a buy-a-Surface-RT-get-a-free-cover deal that ran until June 30. And at several conferences, including June’s TechEd North America and this month’s Microsoft Partner Conference, the company sold attendees a 64GB Surface RT for $100, 83% off list price.
Today’s sale prices were nearly Microsoft’s cost, which according to estimates of the tablet’s component prices, runs the company at least $284 for the 32GB Surface RT.
Microsoft has not abandoned Windows RT, the pared-down operating system that powers the Surface RT, but virtually every third-party OEM has either pointedly ignored the OS or publicly announced that they would not support it with devices of their own. Instead, the OEMs have flocked to Windows 8 Pro, even though some analysts question the value of touch devices on a platform whose biggest selling point is legacy software that doesn’t support touch.
Microsoft has not revealed sales figures for the Surface line — which also includes the Surface Pro, powered by Windows 8 Pro — but estimates by research firms like IDC have been lackluster.
Xen Project To Support ARMv8
Xen Project will release the Xen 4.3 hypervisor later today with support for ARMv7 and ARMv8 hardware.
The Xen Project overseen by The Linux Foundation produces an open source hypervisor that is a popular alternative to KVM. The project will release the Xen 4.3 hypervisor today with support for ARM servers, performance improvements and a technology preview of Open Vswitch.
The Xen Project is backed by a number of big firms including AMD, Cisco, Google, Intel and Samsung, and is one of the first hypervisors to support ARMv8 based processors along with the ARMv7 architecture. The Xen Project said it has been working with ARM server vendor Calxeda to validate Xen 4.3 on its ARMv7 and ARMv8 servers.
For the Xen Project, ARM server support, in particular ARMv8 support, will be key as servers using the architecture start to appear later this year and in volume during 2014. Given that Amazon Web Services, arguably the biggest cloud service provider around, is supporting the Xen Project, ARMv8 support in the hypervisor could be painful for VMware as it tries to compete against a free, industry supported alternative.
Lars Kurth, community manager for the Xen Project said, “The ARM server support is an exciting development for the community and we’re excited about the opportunities this will bring to customers.”
Xen 4.3 also includes improvements to power efficiency by using the MWAIT extension for processors such as Intel’s Sandy Bridge, Ivy Bridge and Haswell.
Linux Foundation VP and COO Mike Woster talked up the importance of virtualisation to the Linux and open source community. He said, “Virtualization is important to Linux and the open source community and the Xen Project is helping companies realize new levels of scalability and efficiency in areas such as cloud computing.
“With the latest release of Xen Project, organizations can advance their cloud computing strategies to deliver on customer expectations for their enterprise environments.”
The Xen 4.3 hypervisor was released yesterday.
Tech Hiring Up This Year
July 22, 2013 by admin
Filed under Around The Net
Comments Off on Tech Hiring Up This Year
Hiring of technology professionals has been increasing since the first half of this year, with new IT hires accounting for about 10% of all the job growth in the U.S. in June, according to two independent assessments.
Total tech employment reached 4.47 million in June, an increase of 22,600 jobs from the prior month, or a .51% gain, according to TechServe Alliance, an IT services industry group which tracks employment data month-to-month. The total excludes tech manufacturing employment.
Similarly, Foote Partners, which researches IT employment trends, reported a gain of 18,200 new tech jobs last month.
These gains are coming at the same time that some tech employers are cutting jobs.
IBM has cut more than 3,000 workers over the past few weeks, struggling Hewlett-Packard is still eliminating jobs, and Symantec is seeing layoffs as well.
The U.S. economy added 195,000 jobs overall in June, according to the Labor Dept.
Foote said that IT employment in the first half of this year is averaging 13,500 new jobs per month.
“While the pace of job creation in the national labor force appears stuck at 7.6% unemployment and new jobs are heavily in part-time positions and low wage full-time segments, IT jobs have been on a sustained growth upswing and wages are holding steady if not growing slightly,” said David Foote, chief analyst, in a statement.
Reports on IT employment figures from analyst can differ widely depending on what U.S. labor department categories are use in the calculations.
Another firm that analyzes the labor market, Janco Associates, reported a gain of 9,900 jobs in June based on the categories it tracks.
Despite the increase in hiring, IT salaries remain flat, said Janco.
“Based on our interviews with over 96 CIOs in the last 30 days, we concluded that CIOs are not in a great hurry to hire new staff except to meet short term needs until they see a clear trend as to what is happening with the economy,” said Janco CEO Victor Janulaitis in a statement.
Janulaitis said that “67% of the CIOs we interviewed do not see any real push to expand staffing over the next 12 months.”
Oracle Changing Berkeley
Oracle has changed the license of its embedded database library, Berkeley DB. The software is widely used as a key-value store within other applications and historically used an OSI-approved strong copyleft license which was similar to the GPL.
Under that license, distributing software that embedded Berkeley DB involved also providing “information on how to obtain complete source code for the DB software and any accompanying software that uses the DB software.”
Now future versions of Berkeley DB use the GNU Affero General Public License (AGPL). This says “your modified version must prominently offer all users interacting with it remotely through a computer network … an opportunity to receive the Corresponding Source of your version.”
This will cause some problems for Web developers using Berkeley DB for local storage. Compliance has not really been an issue because they never “redistributed” the source of their Web apps.Now they will have to make sure their whole Web app is compliant with the AGPL and make full corresponding source to their Web application available.
They also need to ensure the full app has compatible licensing. Practically that means that the whole source code has to be licensed under the GPLv3 or the AGPL.
Collaborating Viruses Showing Up
Two computer viruses are collaborating to defeat clean-up operations. Microsoft researcher Hyun Choi has found that the pair of viruses foil removal by regularly downloading updated versions of their malware partner.
It is the first time that such a defense plan has been noticed before. Choi said that the Vobfus and Beebone viruses, were regularly found together. Vobfus was the first to arrive on a machine, he said, and used different tactics to infect victims. Vobfus could be installed via booby-trapped links on websites, travel via network links to other machines or lurk on USB drives and infect machines they are plugged into.
Once installed, Vobfus downloaded Beebone which enrolled the machine into a botnet. After this the two start to work together to regularly download new versions of each other. If Vobfus was detected and remediated, it could have downloaded an undetected Beebone which can in turn download an undetected variant of Vobfus.
Vobfus become a persistent problem since 2009 when it first appeared.
Red Hat Releases Fedora 19
Red Hat has released Fedora 19, codenamed Schrödinger’s Cat, which has support for 3D printing and is the first to use MariaDB as its default SQL database instead of Oracle’s MySQL.
Red Hat’s Fedora Linux distribution is the testing ground for the firm’s hugely successful Enterprise Linux (RHEL) distribution, and for that reason it heralds what will appear in future releases of RHEL. The firm’s Fedora 19 release brings support for 3D printing through OpenSCAD, Skeinforge, SFACT, Printrun and Repetierhost, and it is the first release to make MariaDB the default SQL database server implementation in place of Oracle’s MySQL.
The Fedora Project was criticised for delaying its Fedora 18 release, however Fedora 19 appeared on time. Fedora’s latest release includes Gnome 3.8 and the capability to enable Gnome Classic, a Gnome 2 type user interface, along with KDE Plasma 4.10 and Mate 1.6, with other window managers such as Xfce and Lxde available in different spins.
As Red Hat sponsors the Fedora Project it is not surprising to see Fedora include Openshift, the firm’s platform as a service infrastructure. Fedora 19 also includes node.js and Ruby 2.0, but arguably its biggest move is away from Oracle’s MySQL to the community maintained MariaDB fork, which suggests that eventually RHEL will make MariaDB its default SQL database implementation.
The Fedora Project has said that work on Fedora 20 has been in active development for several months and it plans to release that in November.
Fedora 19 is available for download from regional mirrors and users can also use Fed Up to upgrade from previous versions of the distribution.