Industry and Service
Amazon Claims Their Cloud Services Dodged the Venom Security Flaw
Amazon has made a bold & cryptic claim that their cloud services were not bitten by the venom flaw
Last year’s discovery of the heartbleed bug, which infected the very backbone of the internet, sent shock waves across the web. Leaving hundreds of thousands of everyday users wondering how safe they and their data really were online. Now the Heartbleed scare has died down only to be replaced by the discovery of a new and more terrifying security flaw called Venom. Security researchers announced the discovery of Venom only this morning, stating that it infected cloud-hosted networks from the inside. Venom allows hackers to move freely from one virtual machine to another free to nab data as they go.
Specifically Venom attacks a piece of technology known as a hypervisor which coordinates the virtual machines running on any system. Fortunately the Venom bug only affects the open source hyper visor known as Quick Emulator (QEMU). Still, the Venom bug leaves millions of potential users data open to attack. Prompting swift repsonses from major companies such as Amazon which has put out cryptic yet forceful statement that their cloud services are unaffected by the flaw.
“We are aware of the QEMU security issue assigned CVE-2015-3456, also known as “VENOM,” which impacts various virtualized platforms. There is no risk to AWS customer data or instances.”
It’s a bold statement for Amazon to make when it’s known that their cloud services run on Xen Hypervisors and are among those affected by Venom flaw. Since the company has declined to comment on how their cloud services remained unaffected we can only assume it is because they run on a variant of Xen that was unaffected. Several other major cloud service providers were not as fortunate as Amazon in dodging this latest security flaw.
Rackspace has stated that they’re currently working with customers to find a solution, though how fast they will be able to do so is hard to say. The IBM SoftLayer cloud, hit by the Xen vulnerabilities that affected Amazon and Rackspace last year, might also be affected; although IBM has yet to make a statement. Red Hat has put out a list of their products that were hit by the Venom flaw including Linux versions 5, 6, and 7 as well as Red Hat OpenStack Platforms. They have put out a detailed list of advisories and patches for all of the products that were affected.
Joynet was also forced to put out an advisory detailing the updates being brought to their systems to eliminate the risk and that the affected code has been isolated. Oracle on the other hand has been much less talkative about the problem refusing to say if their systems were affected or not. Security researchers, however, have cited the Oracle Virtual Box among the products that were affected. All users can do at the moment is keep an eye out for messages from their cloud service providers and CrowdStrike, who discovered the flaw, on how to protect themselves.
Source: [highlight]Fortune[/highlight]
Engineering
New concrete that doesn’t need cement could cut carbon emissions in the construction industry
Even though concrete is a very common building material, it is not at all the most environmentally friendly choice. Because of this, scientists and engineers have been looking for alternatives that are better for the environment. They may have found one: concrete that doesn’t need cement.
Cement production, which is a crucial ingredient in concrete, ranks as the third most significant contributor to human-caused carbon emissions globally. Nevertheless, in recent years, a multitude of alternative techniques for producing more environmentally friendly concrete have surfaced. One proposed method involves utilizing industrial waste and steel slag as CO2-reducing additives in the concrete mixture. Another suggestion is to utilize spent coffee grounds to enhance the strength of the concrete while reducing the amount of sand required.
However, a certain company has devised a technique to produce cement-free concrete suitable for commercial enterprises.
The concrete has the potential to have a net reduction in carbon dioxide and has the ability to prevent approximately 1 metric ton of carbon emissions for every metric ton used. If this statement is accurate, the cement-free binder will serve as a noteworthy substitute for Portland cement. According to BGR, the new concrete also complies with all the industry standards of traditional cement concrete, ensuring that there is no compromise in terms of strength and durability.
While it is still in the early stages, the situation seems encouraging. C-Crete Technologies, a company specializing in materials science and holding the patents for a novel form of concrete, has utilized approximately 140 tons of this new cast-in-place (pourable) concrete in recent construction endeavors.
In September 2023, the company was granted an initial sum of almost $1 million, promptly succeeded by an additional $2 million, by the US Department of Energy to advance the progress of its technology. In addition, it has garnered numerous accolades that are facilitating its growth in operations.
The widespread adoption of cement-free concrete in future construction projects has the potential to significantly alter the environmental impact of the industry. Although C-Crete seems to be one of the few companies currently exploring these new alternatives on a large scale, it is likely that others will also start embracing them in the near future.
Engineering
To get gold back from electronic waste, the Royal Mint of the UK is using a new method
There are hidden mountains of gold in the junkyards, full of old smartphones, computers that don’t work anymore, and broken laptops. A new project in the UK wants to find and use these hidden riches.
The Royal Mint, which makes British coins for the government, has agreed to work with the Canadian clean tech startup Excir to use a “world-first technology” that can safely get gold and other precious metals out of electronic waste (e-waste) and recycle them.
Electronic devices have circuit boards that have small amounts of gold in their connections because gold is a good conductor. These boards also have useful metals like silver, copper, lead, nickel, and aluminum.
In the past, getting the metals was hard, but Excir’s new technology can quickly and safely recover 99 percent of the gold that is trapped in electronic waste.
They prepare the circuit boards using a “unique process,” and then they use a patented chemical formula to quickly and selectively remove the gold. The liquid that is high in gold is then processed to make pure gold that can be melted down and formed into bars. Palladium, silver, and copper could also be recovered with this method.
“Our entrepreneurial spirit has helped the Royal Mint do well for over 1,100 years, and the Excir technology helps us reach our goal of being a leader in sustainable precious metals.” The chemistry is completely new and can get precious metals back from electronics in seconds. “It has a lot of potential for The Royal Mint and the circular economy, as it helps to reuse our planet’s valuable resources and creates new jobs in the UK,” said Sean Millard, Chief Growth Officer at The Royal Mint.
At the moment, about 22% of electronic waste is collected, stored properly, and recycled. But with this kind of new technology, the problem of old electronics could be lessened.
Every year, the world makes about 62 million metric tons of electronic waste, which is more than 1.5 million 40-tonne trucks’ worth. That number will go up by another 32% by 2030 as more people buy electronics. This will make it the fastest-growing source of solid waste in the world.
The World Health Organization says that e-waste is hazardous waste because it contains harmful materials and can leak harmful chemicals if it is not handled properly. For example, old electronics can release lead and mercury into the environment, which can affect the development of the central nervous system while a person is pregnant, as a baby, as a child, or as a teen. Also, e-waste doesn’t break down naturally and builds up in nature.
Aside from being a huge waste, this is also a big problem for the environment. There could be between $57 billion and $62 billion worth of precious metals in dumps and scrap yards.
Engineering
China’s $47 billion semiconductor fund prioritizes chip sovereignty as a key focus
China has just shut down a third government-supported investment fund in order to strengthen its semiconductor industry and decrease dependence on other countries for the production and use of wafers. This move is aimed at emphasizing what is known as chip sovereignty.
The National Integrated Circuit Industry Investment Fund of China, commonly referred to as ‘the Big Fund,’ has had two previous iterations: Big Fund I (2014–2019) and Big Fund II (2019–2024). The latter was considerably more substantial than the earlier, but Big Fund III surpasses both with a total of 344 billion yuan, equivalent to around $47.5 billion, as disclosed in official filings.
The size of Big Fund III, which surpasses expectations, further demonstrates Huawei’s growing dependence on Chinese suppliers and reflects the country’s determination to attain self-reliance in semiconductor manufacture. It serves as a reminder that the ongoing competition in semiconductor technology between China and Western countries is reciprocal.
Both the United States and Europe share the desire to decrease their reliance on their long-standing technological competitors. China also has concerns regarding its supply, which extend beyond the potential impact on shipments from the U.S. and its allies.
Taiwan is the primary focus when it comes to chip manufacturing. If China were to take control of its production capabilities, it would greatly disadvantage the United States and its allies. Currently, Taiwan Semiconductor Manufacturing Co. (TSMC) produces approximately 90% of the world’s most advanced chips.
However, according to sources, Bloomberg has learned that ASML, a company located in the Netherlands, and TSMC have methods to render chip-making machinery inoperable in the case of a Chinese invasion of Taiwan.
China now manufactures over 60% of legacy chips, which are often used in automobiles and household appliances, according to a statement made by U.S. Commerce Secretary Gina Raimondo.
The competition between legacy and modern chips has expanded, yielding varying outcomes.
The Chinese official stance is that the policies of the United States is having a negative effect, resulting in a decline in exports from prominent American chip manufacturers. This viewpoint is shared by others as well.
According to Hebe Chen, a market analyst at IG, Nvidia is faced with the challenge of balancing its presence in the Chinese market while also managing the tensions between the United States and China. Due to U.S. sanctions, the company developed three customized chips specifically for the Chinese market. However, in order to remain competitive, the company had to cut the price of these chips, compromising its desired pricing strategy.
Nevertheless, it might be contended that the financial challenges faced by Western chip manufacturers may be justified if it hinders China’s rapid development and acquisition of more sophisticated semiconductors compared to its rivals.
Indications suggest that China may face significant consequences if limitations are imposed, such as the potential loss of access to Nvidia’s advanced chips for its AI companies or increased difficulties for its leading company, SMIC, in manufacturing its own chips.
The existence of Big Fund III indicates that China is experiencing significant pressure. As per reports, the cash will be allocated for both large-scale wafer fabrication, similar to past investments, as well as for the production of high-bandwidth memory chips. HBM chips, often referred to as high-bandwidth memory chips, are utilized in many applications such as artificial intelligence (AI), 5G technology, and the Internet of Things (IoT).
However, the most significant indicator is its size.
With the support of six prominent state-owned banks, Big Fund III has surpassed the $39 billion in direct incentives allocated by the U.S. government for chip manufacture under the CHIPS Act. Nevertheless, the total amount of federal assistance is $280 billion.
The EU Chips Act, valued at €43 billion, appears relatively modest compared to South Korea’s $19 billion support package. It is likely that the markets have taken note of this.
The announcement of Big Fund III triggered a surge in the stock prices of Chinese semiconductor businesses that are poised to gain from this fresh infusion of funding. Nevertheless, Bloomberg observed that Beijing’s previous investments have not consistently yielded positive results.
Specifically, China’s highest-ranking officials were dissatisfied with the prolonged inability to create semiconductors capable of replacing American circuitry. Furthermore, the media outlet highlighted that the previous leader of the Big Fund was dismissed and subjected to an investigation due to allegations of corruption.
Even in the absence of corruption, implementing significant modifications to semiconductor manufacturing is a time-consuming endeavor. In both Europe and the United States, the process takes a considerable amount of time. However, there are noteworthy and innovative advancements occurring.
Diamfab, a French deep-tech startup, is currently developing diamond semiconductors that have the potential to facilitate the green transition, specifically in the automobile sector. Although it is still a few years in the future, these Western ideas have the potential to be just as intriguing to monitor as the actions of established Chinese companies.
- Gadgets9 years ago
Why the Nexus 7 is still a good tablet in 2015
- Mobile Devices9 years ago
Samsung Galaxy Note 4 vs Galaxy Note 5: is there room for improvement?
- Editorials9 years ago
Samsung Galaxy Note 4 – How bad updates prevent people from enjoying their phones
- Mobile Devices9 years ago
Nexus 5 2015 and Android M born to be together
- Gaming9 years ago
New Teaser For Five Nights At Freddy’s 4
- Mobile Devices9 years ago
Google not releasing Android M to Nexus 7
- Gadgets10 years ago
Moto G Android 5.0.2 Lollipop still has a memory leak bug
- Mobile Devices9 years ago
Nexus 7 2015: Huawei and Google changing the game