Forgot your password?
typodupeerror

Comment RCE Execution pathway (Score 1) 146

From TFA : "Because the driver doesn’t enforce a memory copy limit of 504 bytes, overwriting adjacent data, a malicious insider or a hacker who has gained low-level access to a local network can send an error message that appends code past this limit. The IUEFI module running on the CPU then becomes corrupted."

I am sure that "a malicious insider or a hacker who has gained low-level access to a local network" would have no other possibility from inside a data centre to cause any havoc.

Comment But how is infection prsisted to the machine? (Score 1) 58

I did actually Read The Flamin' Article to try to find out, just how an ad can persist itself to the user's computer.

Closest I could find is this vague and brief line :-
"Both samples use a COM hijack for persistence, though make use of different DLLs."

Either they don't know how it works, or, they know it doesn't and a core tenet of their article, infecting devices - "We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware" - is baseless. If their spyware is not persisted, then Discover-Tech's spyware has not infected you.

Or maybe I misunderstand "infected". Happy to be wrong here.

Comment But, Jensen said ... (Score 1) 22

"Nvidia CEO Jensen Huang publicly stated in Sweden that CoreWeave's financial strength is improving and its cost of capital is actually declining, adding that Nvidia has no need to provide a financial backstop." - some may believe this.

(backdrop, Nvidia has invested billions of dollars in CoreWeave)

Coreweave are recognised in the Fin Review as high profile operating in the finance and debt/loan area at the moment

quote: "The "Tricky" Leverage Model: CoreWeave pioneered a highly leveraged financing structure where it took on over $51 billion in total debt and lease obligations—largely from private credit giants like Blackstone. It used its highly coveted Nvidia graphics processing units (GPUs) as physical collateral to back these massive loans"

Complex and obscure loan finance, SPVs (Special Purpose Vehicle) to keep debt off the books - haven't I heard this before?

Slashdot Top Deals

God doesn't play dice. -- Albert Einstein

Working...