Forgot your password?
Close
typodupeerror
Security

Meltdown and Spectre Patches Bricking Ubuntu 16.04 Computers (bleepingcomputer.com) 233

Posted by msmash from the things-going-south dept.
An anonymous reader writes: Ubuntu Xenial 16.04 users who updated to receive the Meltdown and Spectre patches are reporting they are unable to boot their systems and have been forced to roll back to an earlier Linux kernel image. The issues were reported by a large number of users on the Ubuntu forums and Ubuntu's Launchpad bug tracker. Only Ubuntu users running the Xenial 16.04 series appear to be affected.

All users who reported issues said they were unable to boot after upgrading to Ubuntu 16.04 with kernel image 4.4.0-108. Canonical, the company behind Ubuntu OS, deployed Linux kernel image 4.4.0-108 as part of a security update for Ubuntu Xenial 16.04 users, yesterday, on January 9. According to Ubuntu Security Notice USN-3522-1 and an Ubuntu Wiki page, this was the update that delivered the Meltdown and Spectre patches.
Power

Researchers Discover Critical Security Flaws Found In Nuke Plant Radiation Monitors (securityweek.com) 43

Posted by BeauHD from the critical-vulnerabilities dept.
wiredmikey writes from a report via Security Week: Researchers have discovered multiple unpatched vulnerabilities in radiation monitoring devices that could be leveraged by attackers to reduce personnel safety, delay detection of radiation leaks, or help international smuggling of radioactive material. Ruben Santamarta, a security consultant at Seattle-based IOActive, at the Black Hat conference on Wednesday, saying that radiation monitors supplied by Ludlum, Mirion and Digi contain multiple vulnerabilities. There are many kinds of radiation monitors used in many different environments. IOActive concentrated its research on portal monitors, used at airports and seaports; and area monitors, used at Nuclear Power Plants (NPPs). However, little effort was required for the portal monitors: "the initial analysis revealed a complete lack of security in these devices, so further testing wasn't necessary to identify significant vulnerabilities," Santamarta explained in his report (PDF). In the Ludlum Model 53 personnel portal, IOActive found a backdoor password, which could be used to bypass authentication and take control of the device, preventing the triggering of proper alarms.

Comment Re:And Microsoft claims to have invented it (Score 1) 286

by AndersDahlberg (#23186068) Attached to: Patch the Linux Kernel Without Reboots
Patent? Similar technology is present in 50% of todays telephony (e.g. POTS, GSM, WCDMA) servers. PLEX & emergency corrections in executive side have enabled this since around the late 1980:ies. http://en.wikipedia.org/wiki/AXE_telephone_exchange Yes, AXE nodes *usually* is patched by updating the hot-standby side while separated from executive side - but if you really want to live on the wild side... ;-)

EU Patent Wars to Resume 184

Posted by CowboyNeal from the back-for-more dept.
replicant108 writes "Ciaran O'Riordan of the FSFE gives a concise analysis of why the EU Software Patent Wars will resume this winter. Apparently the pro-patent side have changed their strategy — this time they plan to bypass the legislative powers and target the judiciary instead. The goal is to transfer power from the national courts (which often rule against software patents) to a specially-created European Patent Court which will be controlled by the pro-software patent EPO!"

Pirate Party Launches Commercial Darknet 661

Posted by CowboyNeal from the nothing-to-see-here dept.
CrystalFalcon writes "The Swedish Pirate Party has launched a commercial, high-capacity darknet, on an unprecedented scale and bandwidth. This service lets anybody send and receive files anonymously without being tracked or traced. 'There are many legitimate reasons to want to be completely anonymous on the Internet,' says Rickard Falkvinge, chairman of the Pirate Party. 'If the government can check everything each citizen does, nobody can keep the government in check.'"

Senate Bill May Ban Streaming MP3s 503

Posted by Zonk from the i-like-the-streaming dept.
Silverhammer writes "According to the EFF, a new Senate bill (S. 2644) sponsored by Senators Feinstein (D-CA) and Graham (R-SC) would effectively ban streaming MP3 for licensed music by requireing 'casters to use the most restrictive streaming format available (e.g., Windows Media or Real) rather than simply the most restrictive features of a chosen streaming format (e.g., Shoutcast or streaming MP3)." From the article: "The PERFORM Act would ... requir[e] webcasters to use DRM that restricts the recording of webcasts. That means no more MP3 streams if you rely on the statutory license. Under the bill, the statutory license would only be available to a webcaster if: [114(d)(2)(C)(vi)] the transmitting entity takes no affirmative steps to authorize, enable, cause or induce the making of a copy or phonorecord by or for the transmission recipient and uses technology that is reasonably available, technologically feasible, and economically reasonable to prevent the making of copies or phonorecords embodying the transmission in whole or in part, except for reasonable recording as defined in this subsection."

Slashdot Top Deals

The biggest mistake you can make is to believe that you are working for someone else.

Close