Security: Apple Lockdown, More Logo/Brands for Bugs, Other News

• Apple Warns Users Against Unauthorised iOS Modification aka “Jailbreaking”

  Warning users who intend to jailbreak their device, Apple added that installing any hacking software is a violation of iOS end-user software license agreement and could lead to denial of service by Apple.

• Meet TLBleed: A crypto-key-leaking CPU attack that Intel reckons we shouldn't worry about

  Intel has, for now, no plans to specifically address a side-channel vulnerability in its processors that can be potentially exploited by malware to extract encryption keys and other sensitive info from applications. A team of researchers at the Systems and Network Security Group at Vrije Universiteit Amsterdam, in the Netherlands, say they were able to leverage the security weakness to extract crypto keys from another running program in 99.8 of tests on an Intel Skylake Core i7-6700K desktop CPU; 98.2 percent of tests on an Intel Broadwell Xeon E5-2620 v4 server CPU; and 99.8 per cent of tests on a Coffeelake part.

• The Theft and Reuse of Advanced Offensive Cyber Weapons Pose A Growing Threat

• Open Source Security Podcast: Episode 102 - Michael Feiertag from tCell

It Turns Out RISC-V Hardware So Far Isn't Entirely Open-Source

While they are trying to make it an open board, as it stands now Minnich just compares this RISC-V board as being no more open than an average ARM SoC and not as open as IBM POWER. Ron further commented that he is hoping for other RISC-V implementations from different vendors be more open.

Perl 5.28.0 released

Version 5.28.0 of the Perl language has been released. "Perl 5.28.0 represents approximately 13 months of development since Perl 5.26.0 and contains approximately 730,000 lines of changes across 2,200 files from 77 authors". The full list of changes can be found over here; some highlights include Unicode 10.0 support, string- and number-specific bitwise operators, a change to more secure hash functions, and safer in-place editing.

Tux Machines is proud to be hosted by