IBM

OS/2 Warp Community Announces It's Merging With the Flat Earth Society (os2world.com) 154

"From now on our communities will merge to became one single point of contact for OS/2 users and people investigating the truth about our planet earth," OS2World announced today.

OS2World's news master martiniturbide, also a Slashdot reader, writes: The OS/2 community expects that this action will benefit the platform by getting the funds to finally create an open source clone of OS/2. OS2World asks every OS/2 user to start believing that the earth is flat to get the "big bucks" that will finally turn the operating system into a Windows 10, Ubuntu, MacOS X and Android competitor in the final OS Wars of all ages.
Google

Ask Slashdot: How Do You Feel About the End Of Google+ ? (slashdot.org) 192

"On April 2nd, your Google+ account and any Google+ pages you created will be shut down and we will begin deleting content from consumer Google+ accounts," Google has been warning since January.

Long-time Slashdot reader shanen writes "it's been grating on me for a while," asking "But is there any real harm here? Do you feel damaged?" On the one hand, my trust in the Google has certainly been damaged by profit-driven directional changes. On such grounds you could argue that the people who most trusted the Google may feel most victimized....

What is the value of IP? Do you feel you expressed or even created any interesting ideas through your use of Google+ as a discussion channel? If so, maybe you feel damaged because it's going away? (Yes, the Archive team wants to preserve it, but IP has to grow to be alive, and the archives aren't easy to search, to boot...)

I'm pretty sure that I started using Google+ a long time ago, back when my own sentiments towards the Google were much more positive. My negative framing of the question could be projection, so maybe your response may explain why it's really a good thing when the Google kills certain ideas?

The original submission also includes the bitter observation that "Innovation is supposed to be important to the Google. Isn't the Google giving us mixed signals here?" But how do Slashdot's readers feel?

Leave your own thoughts in the comments. How do you feel about the end of Google+ ?
Transportation

Prosecutors Were Already Investigating Whether Boeing Provided 'Incomplete or Misleading' 737 Information (yahoo.com) 95

Fox Business News reports:

- "Federal prosecutors are investigating whether Boeing provided incomplete or misleading information about its best-selling 737 Max aircraft to U.S. air safety regulators and customers, according to a report from The Wall Street Journal."

- That investigation began five months ago -- after the first crash that killed 189 people, but before the second one.

Nine days after that November 7 crash, America's Federal Aviation Administration had issued an international emergency order "warning that Boeing had discovered an 'unsafe condition' that is 'likely to exist or develop' in other planes," reports the Washington Post: The FAA directive said if erroneous data is received by the 737 Max jet's flight control system, the plane's nose could be pushed down repeatedly. Failing to address that "could cause the flight crew to have difficulty controlling the airplane," push the nose down and lead to "significant altitude loss, and possible impact with terrain," according to the notice. The notice told pilots that, if bad data causes problems to appear, they should "disengage autopilot" and use other controls and adjust other switches to fly the plane....

Investigators scouring black box data believe an automatic anti-stalling feature was engaged before a Boeing 737 Max jet crashed and killed 157 people in EthiÂoÂpia, an administration official said Friday. The feature, known as MCAS, also was a factor in the October crash in Indonesia, according to investigators. The investigators said inaccurate information from an outside sensor led MCAS to force the nose of the plane down over and over again.

That explanation is also supported by the positioning of equipment on the aircraft's tail "in a way that would push the plane's nose downward, consistent with the black box finding," reports the Washington Post.

Fox Business also reports that Boeing currently has over 4,600 "unfilled" orders for its 737 Max jets.
DRM

Alexa Scientists Claim Audio Watermarking Technique Nearing 100% Accuracy (venturebeat.com) 85

georgecarlyle76 brought our attention to Amazon's claim of an algorithm that "solves the 'second-screen problem' in real-time."

"Ever hear (no pun intended) of audio watermarking?" asks VentureBeat. It's the process of adding distinctive sound patterns identifiable to PCs, and it's a major way web video hosts, set-top boxes, and media players spot copyrighted tracks. But watermarking schemes aren't particularly reliable in noisy environments, like when the audio in question is broadcasted over a loudspeaker. The resulting noise and interference -- referred to in academic literature as the "second-screen" problem -- severely distorts watermarks, and introduces delays that detectors often struggle to reconcile. Researchers at Amazon, though, believe they've pioneered a novel workaround, which they describe in a paper newly published on the preprint server Arxiv ("Audio Watermarking over the Air with Modulated Self-Correlation") and an accompanying blog post. The team claims their method -- which they'll detail at the International Conference on Acoustics, Speech, and Signal Processing in May -- can detect watermarks added to about two seconds of audio with "almost perfect accuracy," even when the distance between the speaker and detector is greater than 20 feet...

So how's it work? As Tai explains, the model employs a "spread-spectrum" technique in which watermark energy is spread across time and frequency, rendering it inaudible to human ears while robustifying it against postprocessing (like compression). And it generates watermarks from noise blocks of a fixed duration, each of which introduces its own distinct pattern to selected frequency components in the host audio signal. Conventional detectors would compare the resulting sequence of noise blocks -- the decoding key -- with a reference copy. But Tai and colleagues take a different approach: Their algorithm embeds the noise pattern in the audio signal multiple times and compares it to itself. Because said signal passes through the same acoustic environment, Tai explains, instances of the pattern are distorted in similar ways, enabling them to be compared directly. "The detector takes advantage of the distortion due to the acoustic channel, rather than combatting it," he added.

"Audio content that Alexa plays -- music, audiobooks, podcasts, radio broadcasts, movies -- could be watermarked on the fly," explains Amazon's blog post. It argues that this could be useful "so that Alexa-enabled devices can better gauge room reverberation and filter out echoes."
Space

Does India's Anti-Satellite Missile Test Mean The Weaponization of Space? (reuters.com) 85

Reuters reports: India expects space debris from its anti-satellite weapons launch to burn out in less than 45 days, its top defense scientist said on Thursday, seeking to allay global concern about fragments hitting objects. The comments came a day after India said it used an indigenously developed ballistic missile interceptor to destroy one of its own satellites at a height of 300 km (186 miles), in a test aimed at boosting its defenses in space.

Critics say such technology, known to be possessed only by the United States, Russia and China, raises the prospect of an arms race in outer space, besides posing a hazard by creating a cloud of fragments that could persist for years. G. Satheesh Reddy, the chief of India's Defence Research and Development Organisation, said a low-altitude military satellite was picked for the test, to reduce the risk of debris left in space.

Space.com shared a reaction from a national security affairs professor at Naval War College in Newport, Rhode Island. They argued that India's test "likely represents a feeling by other countries, specifically India in this case, that the weaponization of space is forthcoming, and India doesn't want to be left out of the 'have' category if arms-control agreements are eventually reached."
Graphics

What's The Correct Way to Pronounce 'GIF'? (thenewstack.io) 453

"Apparently we're all fighting about how to pronounce 'GIF' again on Twitter," writes technology columnist Mike Melanson: I personally find the argument of web designer Aaron Bazinet, who managed to secure the domain howtoreallypronouncegif.com, rather convincing in its simplicity: "It's the most natural, logical way to pronounce it. That's why when everyone comes across the word for the first time, they use a hard G [as in "gift"]." Bazinet relates the origin of the debate as such:

"The creator of the GIF image format, Steve Wilhite of CompuServe, when deciding on the pronunciation, said he deliberately chose to echo the American peanut butter brand, Jif, and CompuServe employees would often say 'Choosy developers choose GIF(jif)', playing off of Jif's television commercials. If you hear anyone pronounce GIF with a soft G, it's because they know something of this history."

Wilhite attempted to settled the controversy in 2013 when accepting a lifetime achievement award at the 17th annual Webby awards. Using an actual animated .gif for his five-word acceptance speech, he authoritatively announced his preferred pronounciation. However, the chief editor of the Oxford English Dictionary argues that "A coiner effectively loses control of a word once it's out there," adding that "the pronunciation with a hard g is now very widespread and readily understood."

One linguist addressed the topic on Twitter this week, noting studies that found past usage of "gi" in words has been almost evenly split between hard and soft g sounds. Their thread also answers a related question: how will I weaponize a trivial and harmless consonant difference to make other people feel bad and self-conscious about themselves?

Her response? "Maybe just....don't do this."
Facebook

Mark Zuckerberg Wants The Government To Help Police Internet Content (bbc.com) 275

"Mark Zuckerberg says regulators and governments should play a more active role in controlling internet content," according to the BBC, calling for new laws governing harmful content, election integrity, privacy, and data portability.

An anonymous reader quotes their report: In an op-ed published in the Washington Post, Facebook's chief says the responsibility for monitoring harmful content is too great for firms alone... "Lawmakers often tell me we have too much power over speech, and frankly I agree," Mr Zuckerberg writes... In brief, Mr Zuckerberg calls for the following things:

- Common rules that all social media sites need to adhere to, enforced by third-party bodies, to control the spread of harmful content

- All major tech companies to release a transparency report every three months, to put it on a par with financial reporting

- Stronger laws around the world to protect the integrity of elections, with common standards for all websites to identify political actors

- Laws that not only apply to candidates and elections, but also other "divisive political issues", and for laws to apply outside of official campaign periods

- New industry-wide standards to control how political campaigns use data to target voters online

- More countries to adopt privacy laws like the European Union's General Data Protection Regulation (GDPR), which came into force last year

- A "common global framework" that means these laws are all standardised globally, rather than being substantially different from country to country

- Clear rules about who's responsible for protecting people's data when they move it from one service to another

Zuckerberg believes the same regulations should apply to all web sites to make it easier to stop the spread of "harmful content." He also says Facebook will be creating "an independent body so people can appeal our decisions" when content is taken.
The Military

Missile Defense Test Intercepts ICBM Target, Says Pentagon (cnbc.com) 109

schwit1 quotes CNBC: In the first test of its kind, the Pentagon on Monday carried out a "salvo" intercept of an unarmed missile soaring over the Pacific, using two interceptor missiles launched from underground silos in southern California.

Both interceptors zeroed in on the target -- a re-entry vehicle that had been launched 4,000 miles away atop an intercontinental-range missile, the Pentagon said. The first interceptor hit and destroyed the re-entry vehicle, which in an actual attack would contain a warhead. The second interceptor hit a secondary object, as expected, according to a statement by the Pentagon's Missile Defense Agency.

Data Storage

Florida Utility To Close Two Natural Gas Plants, Build World's Largest Solar Battery System (electrek.co) 102

An anonymous reader quotes a report from Electrek: Florida Power & Light has joined the race to build the world's largest solar battery storage system, announcing plans for its massive Manatee Energy Storage Center. The utility plans to build a 409 MW/900 MWh battery, to be powered by an existing FPL solar plant in Manatee County, Florida. It will begin serving customers in 2021. FPL says the battery system will be able to power 329,000 homes for two hours. For comparison, FPL notes the battery system is equivalent to 100 million iPhone batteries, or 300 million AA batteries. The system will be used in periods of high demand. The utility company also said that it will accelerate the retirement of two natural gas facilities at a nearby power plant. "FPL says the project will save customers more than $100 million while eliminating more than 1 million tons of carbon emissions, though no cost estimates for the project were disclosed," reports Electrek.

And while the Manatee Energy Storage Center is projected to be the "world's largest solar-powered battery storage system," it will have some competition from Texas where there are plans to build a 495 MW battery storage system that would be paired with an equivalent 495 MW solar farm in Borden County, Texas. It too is due to come online in 2021.
Games

Valve Reveals High-End VR Headset Called the Valve Index (arstechnica.com) 87

After partnering with HTC to launch the Vive in 2016, Valve has moved ahead with plans to launch its own headset, called the Valve Index, in May 2019. Ars Technica reports: The news came on Friday in the form of a single teaser image, shown above, of a headset with the phrase "Valve Index" written on its front. The front of the headset is flanked by at least two sensors. This shadow-covered hardware matches the leaked headset reported by UploadVR in November of last year. That report hinted to Valve's headset supporting a wider, 135-degree field-of-view (FOV), as opposed to the roughly 110-degree FOV of the original HTC Vive and Oculus Rift.

Valve's dedicated website for the new device includes no other information than the above image and the date "May 2019." It does not include any mention of the new SteamVR Knuckles controllers, which Valve has advertised pretty heavily via developer outreach since their 2016 reveal and a later series of improved prototypes in 2018. This page also doesn't mention a series of three Valve-produced VR games that have been repeatedly advertised by Valve co-founder Gabe Newell since 2017.
There's very little information about the headset, but after cranking up the brightness and contrast of the teaser image, Ars Technica's Sam Machkovech was able to find "a series of six dots on one of the headset's surfaces, [...] which may hint to this headset's use of an outside tracking sensor, a la the HTC Vive's infrared trackers." He adds: "Even so, those two giant lenses imply that 'inside-out' tracking, managed entirely by the headset without any extra webcams or sensors, may also be in the cards. Additionally, we can see a giant physical slider, which is likely linked to interpupillary distance (IPD), a precise measurement needed to ensure maximum VR comfort."
Privacy

Tesla Cars Keep More Data Than You Think (cnbc.com) 57

Tesla vehicles sent to the junk yard after a crash carry much more data than you'd think. According to CNBC, citing two security researchers, "Computers on Tesla vehicles keep everything that drivers have voluntarily stored on their cars, plus tons of other information generated by the vehicles including video, location and navigational data showing exactly what happened leading up to a crash." From the report: One researcher, who calls himself GreenTheOnly, describes himself as a "white hat hacker" and a Tesla enthusiast who drives a Model X. He has extracted this kind of data from the computers in a salvaged Tesla Model S, Model X and two Model 3 vehicles, while also making tens of thousands of dollars cashing in on Tesla bug bounties in recent years. Many other cars download and store data from users, particularly information from paired cellphones, such as contact information.

But the researchers' findings highlight how Tesla is full of contradictions on privacy and cybersecurity. On one hand, Tesla holds car-generated data closely, and has fought customers in court to refrain from giving up vehicle data. Owners must purchase $995 cables and download a software kit from Tesla to get limited information out of their cars via "event data recorders" there, should they need this for legal, insurance or other reasons. At the same time, crashed Teslas that are sent to salvage can yield unencrypted and personally revealing data to anyone who takes possession of the car's computer and knows how to extract it. The contrast raises questions about whether Tesla has clearly defined goals for data security, and who its existing rules are meant to protect.
A Tesla spokesperson said in a statement to CNBC: "Tesla already offers options that customers can use to protect personal data stored on their car, including a factory reset option for deleting personal data and restoring customized settings to factory defaults, and a Valet Mode for hiding personal data (among other functions) when giving their keys to a valet. That said, we are always committed to finding and improving upon the right balance between technical vehicle needs and the privacy of our customers."

The report serves as a reminder for Tesla owners to factory reset their cars before handing them off to a junk yard or other reseller because that other party may not reset your car for you. "Tesla sometimes uses an automotive auction company called Manheim to inspect, recondition and sell used cars," reports CNBC. "A former Manheim employee, who asked to remain anonymous, confirmed that employees do not wipe the cars' computers with a factory reset."

The researchers were able to obtain phonebooks "worth of contact information from drivers or passengers who had paired their devices, and calendar entries with descriptions of planned appointments, and e-mail addresses of those invited." The data also showed the drivers' last 73 navigation locations, as well as crash-related information. The Model 3 that one of the researchers bought for research purposes contained a video showing the car speeding out of the right lane into the trees off the left side of a dark two-lane route. "GPS and other vehicle data reveals that the accident happened in Orleans, Massachusetts, on Namequoit Road, at 11:15 pm on Aug 11, and was severe enough that airbags deployed," the report adds.
Security

Critical Magento SQL Injection Flaw Could Soon Be Targeted By Hackers (csoonline.com) 14

itwbennett writes: The popular e-commerce platform Magento has released 37 security issues affecting both the commercial and open-source versions, four of which are critical. "Of those, one SQL injection flaw is of particular concern for researchers because it can be exploited without authentication," writes Lucian Constantine for CSO. Researchers from Web security firm Sucuri "have already reverse-engineered the patch [for that flaw] and created a working proof-of-concept exploit for internal testing," says Constantin. "The SQL vulnerability is very easy to exploit, and we encourage every Magento site owner to update to these recently patched versions to protect their ecommerce websites," the researchers warn in a blog post. "Unauthenticated attacks, like the one seen in this particular SQL Injection vulnerability, are very serious because they can be automated -- making it easy for hackers to mount successful, widespread attacks against vulnerable websites," the Sucuri researchers warned. "The number of active installs, the ease of exploitation, and the effects of a successful attack are what makes this vulnerability particularly dangerous." Since the researchers were able to create a working proof-of-concept exploit, it's only a matter of time until hackers discover a way to use the exploit to plant payment card skimmers on sites that have yet to install the new patch.

UPDATE: Onilab, an official Magento development partner, has a blog post explaining how you can update your store to the latest version of Magento.
Social Networks

'Fortnite' Creator Sees Epic Games Becoming as Big as Facebook, Google (variety.com) 84

The company behind "Fortnite" wants to become the next Facebook or Google, said Epic Games CEO Tim Sweeney. The idea isn't much of a stretch. From a report: While "Fortnite" began life as a relatively mundane game it continues to evolve, first by adding a battle royale mode, and then by leaning on the game's massive install base to turn the title into something more akin to a social platform that can host concerts, tell stories, and inspire creativity. Sweeney points to the game's popularity as a "mass-market streaming phenomenon," the moment when "Fortnite" player teamed up with musician Drake in-game, and when the game played host to about 10 million people in a live, in-game Marshmello concert. "We feel the game industry is changing in some major ways," he said. "'Fortnite' is a harbinger of things to come. It's a massive number of people all playing together, interacting together, not just playing but socializing."

"In many ways 'Fortnite' is like a social network. People are just in the game with strangers, they're playing with friends and using 'Fortnite' as a foundation to communicate." Flush with a relatively recent $1.25 billion investment from a half-dozen investment firms and the steady flow of cash from both "Fortnite" and Epic Game's Unreal game engine, Sweeney has big plans for the company.

Intel

Intel Lays Off Hundreds of Tech Admins (oregonlive.com) 97

Intel has reportedly laid off a number of information technology workers at sites across the company this week. Sources say the layoffs are numbered in the hundreds, but Intel has declined to specify how many people lost their jobs or describe the rationale for the cutbacks. OregonLive reports: The cuts took place at sites across the company, including Oregon, Intel's largest site with 20,000 workers. Cuts also took place at other Intel facilities in the United States and at a large administrative facility in Costa Rica, according to people familiar with the layoffs. Though Intel forecasts flat sales in 2019, people inside the company said this week's layoffs don't appear to be strictly a cost-cutting move. Rather, they said the cuts appeared to reflect a broad change in the way Intel is approaching its internal technical systems.

Information technology (IT) professionals don't usually develop new technology but they play an essential role in managing a company's internal systems. Their work is particularly important at tech companies such as Intel, which depend on IT workers to keep systems secure and running smoothly. This week's layoffs appear to be Intel's biggest cutbacks since 2016, when the company eliminated 15,000 jobs across the company through layoffs, buyouts and early retirement offers.
"Changes in our workforce are driven by the needs and priorities of our business, which we continually evaluate. We are committed to treating all impacted employees with professionalism and respect," Intel said in a brief statement acknowledging the cuts to The Oregonian/OregonLive.

Intel isn't the only tech company laying off workers right now. A new report from The Mercury News reveals many Bay Area tech firms will be laying off about 1,200 jobs between now and Memorial Day. The layoffs are expected from SAP, Oracle America, PayPal, Instacart, Thin Film Electronics, and others.
Security

Toyota Security Breach Exposes Personal Info of 3.1 Million Clients (bleepingcomputer.com) 19

An anonymous reader quotes a report from BleepingComputer: The personal information of roughly 3.1 million Toyota customers may have been leaked following a security breach of multiple Toyota and Lexus sales subsidiaries, as detailed in a breach notification issued by the car maker today. As detailed in a press release published on Toyota'a global newsroom, unauthorized access was detected on the computing systems of Tokyo Sales Holdings, Tokyo Tokyo Motor, Tokyo Toyopet, Toyota Tokyo Corolla, Nets Toyota Tokyo, Lexus Koishikawa Sales, Jamil Shoji (Lexus Nerima), and Toyota West Tokyo Corolla. "It turned out that up to 3.1 million items of customer information may have been leaked outside the company. The information that may have been leaked this time does not include information on credit cards," says the data breach notification. Toyota has not yet confirmed if the attackers were able to exfiltrate any of the customer personal information exposed after the IT systems of its subsidiaries were breached. Toyota said in a statement: "We apologize to everyone who has been using Toyota and Lexus vehicles for the great concern. We take this situation seriously, and will thoroughly implement information security measures at dealers and the entire Toyota Group."
Apple

Apple Cancels Long-delayed AirPower Charging Mat (venturebeat.com) 106

One and a half years after announcing a wireless charging mat for iPhones, Apple Watches, and AirPods called AirPower, Apple has unexpectedly cancelled the accessory. From a report: It notably missed its expected shipping dates multiple times, including a potential release alongside the second-generation version of AirPods and charging case this week. "After much effort, we've concluded AirPower will not achieve our high standards and we have cancelled the project," said Apple SVP of Hardware Engineering Dan Riccio in a statement today. "We apologize to those customers who were looking forward to this launch. We continue to believe that the future is wireless and are committed to push the wireless experience forward." Mark Gurman of Bloomberg, adds, "This is fairly unprecedented and unbelievable. The AirPods even have a picture of the AirPower on the box."
Android

Google: Play Protect Cut Harmful Android App Installs by 20% in 2018 (venturebeat.com) 26

Speaking of the state of Android apps' security, Google today published its annual Android Security & Privacy Year in Review, a comprehensive report that details the company's ongoing efforts to keep over two billion devices running Android mobile operating system secure. From a report: Google says that Google Play Protect, Android's AI-driven built-in defense mechanism, substantially cut down on the number of Potentially Harmful Applications (PHAs) in Google Play. Last year, only 0.08 percent of devices that used Google Play exclusively for app downloads were affected by PHAs, and even devices that installed apps from outside of Play -- 0.68 percent of which were affected by one or more PHAs, down from 0.80 percent in 2017 -- saw a 15 percent reduction in malware. In fact, Play Protect prevented 1.6 billion PHA installation attempts from outside of Google Play in 2018, Google says [PDF]. Installation attempts outside of Google Play fell by 20 percent from the previous year, and 73 percent of PHA installations were successfully stopped compared to 71 percent in 2017 and 59 percent in 2016. In all, 0.45 percent of Android devices running Play Protect installed PHAs in 2018 compared with 0.56 percent of devices in 2017, equating to a 20 percent year-over-year improvement.
Businesses

Bay Area Tech Firms Laying Off 1,200 Workers By Memorial Day (mercurynews.com) 117

McGruber writes: SAP, Oracle America, PayPal, Instacart, Thin Film Electronics and other technology companies will cut about 1,200 jobs in the Bay Area between now and Memorial Day. According to WARN notices filed with California state labor officials, SAP will eliminate 446 jobs: 179 in Palo Alto, 173 in San Ramon and 94 in South San Francisco; while Oracle intends to cut 352 positions: 255 in Redwood City and 97 in Santa Clara. PayPal plans to reduce staffing levels by 183 jobs: 160 in San Jose and 23 in San Francisco. The South Bay job cuts are slated to occur at the e-commerce titan's offices on North First Street in San Jose. Thin Film Electronics has issued an alert of 54 upcoming job cuts in San Jose. Instacart, an e-commerce unicorn that offers a web-based same-day grocery delivery service, intends to eliminate 162 jobs: 86 positions in San Francisco, 41 in San Mateo, 15 in Oakland, 13 in Berkeley and seven in Campbell. For SAP, Oracle and PayPal, the majority of the employment reductions will be in software jobs.
Bug

macOS 10.14.4 Mail Client Has Broken Gmail Access For Some Users (apple.com) 48

New submitter _observer writes: Hundreds of users are unable to read their Gmail in Apple's Mail client since the upgrade to macOS 10.14.4, with few workaround available. This is impacting business and personal users, although not all Gmail accounts are impacted. The web client and other clients like Outlook still work -- it is only Apple's Mail client that is not playing along. Users say they are caught in a login loop. It appears that the issue was even found and reported in the 10.14.4 Beta, but not addressed when the update was released. No word from Apple about this. While I am somewhat sympathetic to the software engineers having bugs in code (I am an engineer, too), but this seems to be a big QA miss. Gmail is the most popular free email service and this is blocking a large number of users. This thread on the Apple Support forum is growing rapidly (24 pages and counting)
Security

Researchers Discover and Abuse New Undocumented Feature in Intel Chipsets (zdnet.com) 102

At the Black Hat Asia 2019 security conference, security researchers from Positive Technologies disclosed the existence of a previously unknown and undocumented feature in Intel chipsets. From a report: Called Intel Visualization of Internal Signals Architecture (Intel VISA), Positive Technologies researchers Maxim Goryachy and Mark Ermolov said this is a new utility included in modern Intel chipsets to help with testing and debugging on manufacturing lines. VISA is included with Platform Controller Hub (PCH) chipsets part of modern Intel CPUs and works like a full-fledged logic signal analyzer. According to the two researchers, VISA intercepts electronic signals sent from internal buses and peripherals (display, keyboard, and webcam) to the PCH -- and later the main CPU. Unauthorized access to the VISA feature would allow a threat actor to intercept data from the computer memory and create spyware that works at the lowest possible level. But despite its extremely intrusive nature, very little is known about this new technology.

Slashdot Top Deals