Thursday 08 December 2011

Facebook Bug Reveals Zuckerberg's Private Photos


 Christo [PCD]    08 Dec : 13:05
 None    Internet

Facebook has since disabled the report tool and is fixing the flaw

Facebook has since disabled the report tool and is fixing the flaw

Saying Facebook has privacy issues is like saying the Earth revolves around the sun; it's just understood at this point. Facebook further solidified that viewpoint today when a flaw allowed users to peek at the private photos of others.

Facebook users were able to access the private photos of others today via a Facebook flaw associated with the "Report Abuse" tool. The flaw was identified by a body building forum earlier in the day.

Using the "Report Abuse" tool, Facebook users were able to flag profile photos as inappropriate. When checking the "nudity or pornography" option as the reason for the photo being inappropriate, Facebook offered the user a "take action by selecting additional photos to include with your report" option. This allowed Facebook users to see a number of extra photos, private or not.

The flaw can be abused by anyone, according to ZDNet, and users who were victims of privacy invasion have no way of knowing what happened. Even Facebook CEO Mark Zuckerberg was a victim of privacy invasion today, as a few of his private photos (which can be seen to the right of this article) were posted online.

Later today, Facebook addressed the issue in a statement and disabled the tool until the flaw is fixed.

Facebook's statement is as follows:

Earlier today, we discovered a bug in one of our reporting flows that allows people to report multiple instances of inappropriate content simultaneously.

The bug, was a result of one of our most recent code pushes and was live for a limited period of time. Not all content was accessible, rather a small number of one’s photos. Upon discovering the bug, we immediately disabled the system, and will only return functionality once we can confirm the bug has been fixed.

What is especially interesting about this new security flaw is that Facebook just settled its major privacy case with the U.S. Federal Trade Commission (FTC) last week, where Facebook agreed to obtain user consent when changes are made to privacy settings as well as 20 years of independent audits.

Sources: ZDNet, imgur


[Submitted by Christo [PCD]]

1 1323341556 Facebo

Click to discuss this news item in the forums

Thursday 27 October 2011

Hackers May Have Stolen Sensitive Defense Info from Japan's Largest Weapons Supplier


 Christo [PCD]    27 Oct : 11:07
 None    Internet

The situation is currently under investigation to see if the information lost was sensitive

The situation is currently under investigation to see if the information lost was sensitive

Japan's largest weapons supplier, Mitsubishi Heavy Industries Ltd, was the target of a cyber attack that was reported in August 2011. Now, the Asahi newspaper reports that sensitive defense information may have leaked due to the hacks.

Mitsubishi Heavy Industries Ltd, which is a partner of Boeing and creates military weapons for Japan, was the target of a hack that may have leaked important defense information such as warplane, helicopter, and nuclear power plant data. Viruses infected eighty computers/servers, while "dozens" of other servers in Japan showed signs of leaks of sensitive information.

Mitsubishi Heavy Industries Ltd was late in reporting the hack, which became publicly known in August. According to Asahi, it is "highly likely" that someone breached the system to steal sensitive data.

The question at hand right now is whether the information taken from Mitsubishi Heavy Industries Ltd's systems was, in fact, sensitive defense information.

According to the Japanese defense ministry, it is unaware of any leaks of sensitive information, but the situation is currently under investigation.

Mitsubishi Heavy Industries Ltd said that information such as IP addresses may have leaked last month, but it is unaware of any leaks in regards to its products.

"The issue is currently under investigation and I cannot comment on it," said Mitsubishi Heavy Industries Ltd spokesman Hideo Ikuno.

Earlier this year, the U.S. experienced a cyber attack against its own defense technology company Lockheed Martin.

Source: MSNBC


[Submitted by Christo [PCD]]

1 1319706324 Hacker

Click to discuss this news item in the forums

Faster Memory for Servers, Workstations Entering Mass Production


 Christo [PCD]    27 Oct : 11:06
 None    Hardware

Samsung, Hynix, and Micron preparing for the next generation

Samsung, Hynix, and Micron preparing for the next generation

DDR3 SDRAM is now the standard memory for servers and workstations, but its supremacy was never assured. The introduction of Fully-Buffered DIMMs was slated as a substitute, but its high costs and power consumption heralded its doom. 1333MHz has been the top speed for servers using DDR3 during the last two and a half years, but things are about to change. A number of new product launches from Intel and AMD are leading to some faster memory from Samsung, Hynix, and Micron.

Although DDR3 was first introduced in 2007, it didn't make its way to servers until March 2009. Intel's 5500 series servers were the first to make use of DDR3's higher clocks speeds and lower power consumption, while AMD followed with its Socket AM3 quad-core Opterons, code-named "Suzuka."

AMD's FX series of CPUs using the Bulldozer core are the first to officially support DDR3-1866 at stock speeds. Although its performance was not as high as anticipated, there is a lot of interest in using the FX series in the workstation market due to ECC support in its dual channel integrated memory controller. Intel's Xeon processors are dominant in that market, but they are much more expensive.

Samsung is the largest DRAM manufacturer in the world, and is currently mass producing several DIMMs to address this opportunity. The most interesting is an 8GB unbuffered ECC DIMM (M391B1G73BH0-CMA), which uses 4Gb chips running at DDR3-1866 (PC3-14900). A fully populated AM3+ motherboard like the ASUS Crosshair V Formula would be able to address 32GB of this RAM. 4GB (M391B5273DH0-CMA), 2GB (M391B5773DH0-CMA), and 1GB (M391B2873GB0-CMA) capacities will also be available.

Hynix is currently sampling a similar 8GB ECC module (HMT41GU7MFR8C-RD), but 4GB (HMT351U7CFR8C-RD) and 2GB (HMT325U7CFR8C-RD) DIMMs are already in mass production. Micron, the last U.S.-based DRAM manufacturer, has similar products in the works as well. They declined to comment at this time, but they do have 2Gb DDR3-1866 chips in mass production. All three firms are utilizing a CAS latency of 13 at this speed.

AMD's upcoming 16 core Interlagos servers and some of Intel's Sandy Bridge-E server CPUs will feature quad-channel DDR3-1600 (PC3-12800) integrated memory controllers. This is the most lucrative market for Samsung, Hynix, and Micron. All three already have 16GB and smaller capacity ECC Registered DIMMs in mass production at that speed. Hynix is sampling a 32GB DIMM, while Micron has the only DIMMs with a CAS latency of 10.

Lower voltage (1.35v) versions of these DIMMs will be the most in demand due to their reduced power consumption. However, the largest servers will use Load Reduced DIMMS (LR-DIMMs). These are the successors to FBDIMMs, but without the problematic serial interface. In addition to the address signals normally buffered by registered DIMMs, LR-DIMMs also buffer the datalines. This allows the number of memory chips that can be used per channel to be greatly increased at the cost of additional latency. Servers using as much as 2TB of memory have been proposed using this technology.

Future server CPUs based on Ivy Bridge and Piledriver architectures are expected to make use of DDR3-1866 ECC Registered DIMMs or LR-DIMMs, and all three firms have plans for those as well. DDR3-1600 is a 20% increase in memory bandwidth over DDR3-1333, while DDR3-1866 is a 40% increase. Given the pace of memory advances in the server and workstation markets, these will have to do for the next couple of years.


[Submitted by Christo [PCD]]

1 1319706255 Faster

Click to discuss this news item in the forums

News Categories