Recent Posts

Pages: [1] 2 3 ... 10

General Discussion / For sale: Cheyenne supercomputer with 8,064 Xeon CPUs and 306TB of DDR4 memory

« Last post by javajolt on Today at 06:51:40 PM »

Some assembly and maintenance is required

Buyer is responsible for the relocation of 26,000 pounds of equipment.

◄ § ►

Image credit: U.S. GSA

What was once the 21st most powerful supercomputer in the world is now available to the highest bidder — well, maybe, as the current bid of under $30,000 has not met the required amount. The U.S. General Services Administration opted to put the Cheyenne supercomputer, deployed in 2016, up for auction, in part due to ongoing repair and maintenance problems.

The retired supercomputer is, as the name suggests, a monster. It’s a 5.34 petaflops system, one of the last deployed by Silicon Graphics International after its acquisition by Hewlett-Packard. Since then, it's been a cornerstone of operations at the NCAR-Wyoming Supercomputing Center in Cheyenne, Wyoming.

The Cheyenne supercomputer is a water-controlled installation made up of SGI ICE XA modules with 28 racks holding 8,064 Intel E5-2697v4 CPUs. That totals 145,152 cores, for those keeping count. The main system is spread across 4,032 dual-socket nodes. Here are the specs of the primary components:

Each E-Cell weighs in at 1,500 pounds, and shipping is not included in the winning bid. The purchaser needs to hire a professional moving company to transport the supercomputer from the facility to its new home. The auction notes also state that the supercomputer will be sold as-is and that it "is currently experiencing maintenance limitations due to faulty quick disconnects causing water spray." Not exactly the pinnacle of supercomputing achievements, then.

Beyond the above hardware, the supercomputer also includes two air-cooled management racks. These consist of 26 1U servers each, 20 of which have 128GB of memory and six with 256GB of memory. That's an additional 8TB of DRAM, if you're wondering. The management racks also include 10 Extreme Switches, and two Extreme Switch power units, and each rack weighs 2,500 pounds.

While the Cheyenne supercomputer has been in operation for the past seven years, the auction notes says the "expense and downtime associated with" fixing the current cooling problems makes it unworthy of continued maintenance. And of course, even though this was a lightning-fast supercomputer when it first launched, it would be considered sluggish by 2024 computing standards. This is a fate shared by many supercomputers, even some of NASA's most powerful ones.

Cheyenne peaked at number 21 on the Top500 list of the most powerful supercomputers back when it launched. Today, it sits at number 160 — based on a Rmax score of 4.79 petaflops. The paradigm shift to GPU-powered supercomputers over the past decade means that, as an example, you could potentially exceed that level of performance with around 23 Nvidia DGX H100 systems sporting 46 CPUs and 184 GPUs.

Not included: All the optical and Ethernet cables (Image credit: U.S. GSA)

Even so, the auction comes with a treasure trove of parts and components for whoever is willing to pony up the cash. The supercomputer will be drained for removal, and it seems it won't necessarily include all the necessary cabling. However, it does include a whopping 313,344GB of DDR4-2400 ECC RAM. That alone could be worth more than $350,000 — not to mention an unspecified amount of storage.

Also of interest is that the supercomputer uses around 1.727 MW of power when fully assembled. Which means that if you want to power it up and run complex simulations on it, the power requirements could cost over $4,000 per day (depending on the price of electricity, naturally).

We presume most bidders would be more interested in parting out the system rather than attempting to get it running again. Besides the missing Ethernet and optical cabling that you'd need to acquire, there's the apparently unresolved issue of the leaking quick-connect liquid cooling components. But who knows? Maybe some enterprising business will find a way to bring Cheyenne back into service, like a phoenix rising from the water-logged ashes.

Updated: Bidding is scheduled to end on May 3, 2024 and is up to $28,085 $120,085 now. There's no longer a "reserve not met" disclaimer, which apparently means someone is going hope with several truckloads of old supercomputer parts. Whether the buyer will try to fix up the system and get it running, sell it for parts, or just grind it up for the raw materials remains to be seen.

source

General Discussion / Microsoft OneDrive finally adds a feature Google Drive has had for years

« Last post by javajolt on Today at 06:22:48 PM »

File storage solutions are competing for feature parity, and that is great for consumers all around.

Quote

TL;DR

■ Microsoft OneDrive has received offline mode on web, letting you access marked files without an active internet connection.

■ You can action and organize files and folders in offline mode, and changes will sync once you regain your internet connection.

■ Google Drive on the Web has had offline access for a few years now.

There are many cloud storage and file-sharing services available, but most people stick to solutions from Apple, Google, and Microsoft for their daily needs. Apple iCloud, Google Drive, and Microsoft OneDrive perform the same general functions, but there are slight differences in features and approach. Microsoft has updated OneDrive to add offline capabilities, which rival Google Drive has had for a few years.

As announced by Microsoft, OneDrive on the web is getting offline mode. This mode will let you use OneDrive in your favorite browser even when you don’t have an internet connection. Offline mode is rolling out globally to OneDrive work and school users.

Expectedly, you need to designate files and folders as available for offline access first. You can then access those files even when you don’t have an internet connection. You can also free up local storage space by making your local files and folders online directly from OneDrive for the web. Both actions were previously available through File Explorer on Windows PC and Finder on Max, but you can now carry these out directly from OneDrive on your browser.

Microsoft says that OneDrive’s offline mode lets you open and interact with OneDrive’s Home, My files, Shared, Favorites, People, and Meeting views. You can view your folders, file names, and metadata. You can also use the My files view to rename, sort, move, and copy files, though the changes will expectedly sync to OneDrive when you get back your internet connection.

Google Drive has had similar functionality for a few years now. You can select the make file available offline option to access the file without an internet connection in the future. Such functionality requires a bit of foresight, but it helps you easily work in a hybrid (online-offline) environment.

source

Huawei / US moves to bar Huawei, and Chinese telecoms from certifying wireless equipment

« Last post by javajolt on Today at 06:13:16 PM »

The logo of the Huawei Technologies Co. Ltd. is seen outside its headquarters in Shenzhen,
Guangdong province, April 17, 2012. REUTERS/Tyrone Siu/File Photo

The Federal Communications Commission is moving to prevent Huawei, ZTE (000063.SZ), opening a new tab, and other foreign companies deemed to pose U.S. national security concerns from certifying wireless equipment, officials told Reuters on Wednesday.

The FCC plans to vote this month on a bipartisan proposal to ensure that telecommunications certification bodies and test labs that certify wireless devices for the U.S. market are not influenced by companies posing security concerns. Last week, the FCC denied the ability of the test lab of Huawei to participate in the equipment authorization program.

This new proposal would permanently prohibit Huawei and other entities on an FCC list of companies posing national security risks "from playing any role in the equipment authorization program while also providing the FCC and its national security partners the necessary tools to safeguard this important process," the agency said.

FCC Chair Jessica Rosenworcel said in a statement the agency "must ensure that our equipment authorization program and those entrusted with administering it can rise to the challenge posed by persistent and ever-changing security and supply chain threats." Huawei's recognition as an accredited lab was set to expire on Tuesday but the FCC denied the Huawei lab’s request for an extension of its recognition. Huawei did not immediately respond to a request for comment.

The FCC in November 2022 banned approvals of new telecommunications equipment from Huawei and ZTE as well as telecom and video surveillance equipment from Hytera Communications Corp (002583.SZ>, Hangzhou Hikvision Digital Technology (002415.SZ), opens a new tab, and Zhejiang Dahua Technology Co (002236.SZ), opens a new tab.

In 2022, the FCC added Russia's AO Kaspersky Lab, China Telecom (Americas) Corp (0728.HK), opened a new tab, China Mobile International USA (0941.HK), Pacific Networks Corp and China Unicom (Americas) to the covered list, which includes companies that pose threats to U.S. national security under a 2019 law aimed at protecting U.S. communications networks.

Huawei and Hikvision were placed on a U.S. export control list in 2019, restricting most U.S. suppliers from shipping goods and technology to them unless they were granted licenses.

In 2020, the FCC designated Huawei and ZTE as national security threats to communications networks - a declaration that barred U.S. companies from tapping an $8.3 billion government fund to purchase equipment from the companies.

source

Windows | Windows 11 | Windows 10 News / Windows-as-an-app is coming

« Last post by javajolt on Today at 05:50:08 PM »

Who needs a Windows PC when you can run the operating system as a desktop-as-a-service on your Chromebook, Linux box, or Mac?

CREDIT: KAZ

My first computer was an IBM 360 mainframe. To use it, I relied on a 3270 terminal. From there, I quickly moved on to a PDP-11 minicomputer running Unix — where my interface was a VT-102 terminal.

In those days, all the computing power was remote. Then, CP/M, Apple, and IBM PCs changed everything. And the desktop became where power lived. That was then; this is now. Today, we’re moving back to remote computing and from the PC to cloud-based Desktop-as-a-Service (DaaS) offerings such as Windows 365.

This is exactly what Microsoft has wanted for years. Don’t believe me? Check out Windows App, Microsoft’s gateway to all its remote Windows offerings.

Windows App, which is still in beta, will let you connect to Azure Virtual Desktop, Windows 365, Microsoft Dev Box, Remote Desktop Services, and remote PCs from, well, pretty much any computing device. Specifically, you can use it from Macs, iPhones, iPads, other Windows machines, and — pay attention! — web browsers.

That last part means you’ll be able to run Windows from Linux-powered PCs, Chromebooks, and Android phones and tablets.

So, if you’ve been stuck running Windows because your boss insists that you can’t get your job done from a Chromebook, Linux PC, or Mac, your day has come. You can still run the machine you want and use Windows for only those times you require Windows-specific software.

Mind you, you’ve been able to do that for some time. As I pointed out recently, all the Windows software vendors don’t want you to run standalone Windows applications; they prefer web-based Software-as-a-Service (SaaS) applications. They can make a lot more money from you by insisting you pay a monthly subscription rather than a one-time payment.

Sure, Microsoft made its first billions from Windows and the PC desktop, but that hasn’t been its business plan for years now. As Zac Bowden, a senior editor at Windows Central, recently spotted in a June 2022 Microsoft internal presentation, the company plans to “Move Windows 11 increasingly to the cloud: Build on Windows 365 to enable a full Windows operating system streamed from the cloud to any device. Use the power of the cloud and client to enable improved AI-powered services and full roaming of people’s digital experience.”

This move was coming long before Microsoft fell in love with AI. I saw Microsoft switching people to Windows DaaS coming down the road in 2018. Windows App will just make it easier than ever.

How easy is it? Very.

For example, you’ll be able to use Windows remotely via browsers using ancient versions of Chrome, Firefox, Safari, and, of course, Edge. Essentially, if your web browser supports HTML5, you should be good to go.

From a browser, you’ll be able to redirect your local devices, such as a printer, microphones, cameras, and your location, as well as audio, and clipboard to your remote session. If you redirect your local clipboard to your remote session, you can copy and paste text.

Microsoft is confusing, though, when it comes to copying and moving files. One part says you can, another part — on the same web page — says you can’t. Stay tuned.

Not all remote Windows services are supported, yet. Microsoft says you’ll be able to use remote desktop PCs, for example, but not at the moment. Support is coming, though..

To harness Windows App, you must upgrade to the latest version of Windows 365. You must also, for now, have a business or student account. If you qualify, upon launching Windows 365, you’ll be greeted with an invitation to explore the Windows App’s features through an interactive tour. Post-tour, you can access the “Home” screen to connect with remote devices or apps, aided by intuitive filters designed to streamline the search process.

From this customizable Home screen, you can use multiple services and PCs from one screen — although I wouldn’t try this on a smartphone. Windows App will enable you to use multiple monitors with custom and dynamic display resolutions, and scaling. So, if you like running multiple displays, as I do, you’d be able to run your personal desktop on one display while running a remote Windows session on another.

It all looks interesting. But, as Microsoft warns, “Windows App is currently in PREVIEW.” Windows app “may be substantially modified before it’s released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.”

At this point, I’d tinker with it. After all, like it or not, this is Windows’ future. But I wouldn’t think about using it for production anytime soon.

source

Patch Tuesday| Updates | Security | Privacy | Anti-virus / Microsoft says April Windows updates break VPN connections

« Last post by javajolt on Today at 05:36:49 PM »

Microsoft has confirmed that the April 2024 Windows security updates break VPN connections across client and server platforms.

The company explains on the Windows health dashboard that "Windows devices might face VPN connection failures after installing the April 2024 security update or the April 2024 non-security preview update."

"We are investigating user reports, and we will provide more information in the coming days," Redmond added.

The list of affected Windows versions includes Windows 11, Windows 10, and Windows Server 2008 and later.

The complete list of affected Windows versions and problematic security updates includes:

• Client: Windows 11, version 22H2/23H2 (KB5036893), Windows 11 21H2 (KB5036894), and Windows 10 (KB5036892).

• Server: Windows Server 2022 (KB5036909), Windows Server 2019 (KB5036896), Windows Server 2016 (KB5036899), Windows Server 2012 R2 (KB5036960), Windows Server 2012 (KB5036969), Windows Server 2008 R2 (KB5036967), Windows Server 2008 (KB5036932).

While Microsoft has yet to provide the root cause behind these VPN failures, it advised home users to use the Windows Get Help app if they need support with their personal or family accounts.

It also said that small and large enterprise customers who require help should reach out via the dedicated "Support for Business" portal.

Temporary workaround for VPN issues

While there is no workaround for this issue on affected systems until Microsoft provides a fix, you can uninstall the security updates to temporarily address the VPN problems.

"To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages," Microsoft says.

However, it's important to note that Redmond includes all security fixes in a single update. Hence, removing cumulative updates removes all fixes for patched security vulnerabilities in addition to resolving VPN issues.

One year ago, Microsoft investigated major L2TP/IPsec VPN speed issues over Wi-Fi connections on Windows 11 systems after installing the April 2023 non-security updates.

In mid-January 2022, the company also released emergency out-of-band updates to address L2TP VPN issues when connecting via the Windows VPN client after installing the January 2022 Patch Tuesday updates.

source

eBooks all to know / Get 'Microsoft Excel Dashboards & Reports For Dummies, 4th Edition'

« Last post by javajolt on May 01, 2024, 04:49:54 PM »

Beneath the seemingly endless rows and columns of cells, the latest version of Microsoft Excel boasts an astonishing variety of features and capabilities. But how do you go about tapping into some of that power without spending all of your days becoming a spreadsheet guru?

It’s easy. You grab a copy of the newest edition of Microsoft Excel Dashboards & Reports For Dummies and get ready to blow the pants off your next presentation audience!

With this book, you’ll learn how to transform those rows and columns of data into dynamic reports, dashboards, and visualizations. You’ll draw powerful new insights from your company’s numbers to share with your colleagues -- and seem like the smartest person in the room while you’re doing it.

Excel Dashboards & Reports For Dummies offers:

• Complete coverage of the latest version of Microsoft Excel provided in the Microsoft 365 subscription

• Strategies to automate your reporting so you don’t have to manually crunch the numbers every week, month, quarter, or year

• Ways to get new perspectives on old data, visualizing it so you can find solutions no one else has seen before

If you’re ready to make your company’s numbers and spreadsheets dance, it’s time to get the book that’ll have them moving to your tune in no time. Get Excel Dashboards & Reports For Dummies today.

Follow this link to get your copy of 'Microsoft Excel Dashboards & Reports For Dummies, 4th Edition' for this free guide. This link will redirect you to my One Drive account and click Download. [system administrator]

source

Patch Tuesday| Updates | Security | Privacy | Anti-virus / New Latrodectus malware attacks use Microsoft, Cloudflare themes

« Last post by javajolt on May 01, 2024, 04:33:41 PM »

Latrodectus malware is now being distributed in phishing campaigns using Microsoft Azure and Cloudflare lures to appear legitimate while making it harder for email security platforms to detect the emails as malicious.

Latrodectus (aka Unidentified 111 and IceNova) is an increasingly distributed Windows malware downloader first discovered by Walmart's security team and later analyzed by ProofPoint and Team Cymru that acts as a backdoor, downloading additional EXE and DLL payloads or executing commands.

Based on the distribution and infrastructure, researchers have linked the malware to the developers of the widely-distributed IcedID modular malware loader.

While it is not known at this time if they plan on phasing out IcedID in favor of Latrodectus, the newer malware is increasingly being used in phishing campaigns and contact form spam to gain initial access to corporate networks.

Security researcher ProxyLife and the Cryptolaemus group have been chronicling Latrodectus's use of various PDF lures and themes, with the latest campaign utilizing a fake Cloudflare captcha to evade security software.

Starts with an email

Latrodectus is currently being distributed through reply-chain phishing emails, is when threat actors use stolen email exchanges and then reply to them with links to malware or malicious attachments.

ProxyLife told BleepingComputer that this campaign uses PDF attachments or embedded URLs to start an attack chain that eventually leads to installing the Latrodectus malware.

Latrodectus phishing email Source: BleepingComputer

The PDFs will use generic names like '04-25-Inv-Doc-339.pdf' and pretend to be a document hosted in Microsoft Azure cloud, which must first be downloaded to be viewed.

PDF document pretending to be hosted in Microsoft Azure Cloud Source: BleepingComputer

Clicking on the 'Download Document' button will bring users to a fake 'Cloudflare security check' that asks you to solve an easy math question. This captcha is to prevent email security scanners and sandboxes from easily following the attack chain and only delivering the payload to a legitimate user.

When the correct answer is entered into the field, the fake Cloudflare captcha will automatically download a JavaScript file pretending to be a document similar to "Document_i79_13b364058-83054409r0449-8089z4.js".

Solving a fake Cloudflare captcha to download payload Source: BleepingComputer

The downloaded JavaScript script is heavily obfuscated with comments that include a hidden function that extracts text from comments that start with '////' and then executes the script to download an MSI from a hardcoded URL, as shown in the deobfuscated script below.

Deobfuscated script that downloads MSI file Source: BleepingComputer

When the MSI file is installed, it drops a DLL in the %AppData%\Custom_update folder named Update _b419643a.dll, which is then launched by rundll32.exe. The file names are likely random per installation.

RunDLL32 used to launch Latrodectus DLL Source: BleepingComputer

This DLL is the Latrodectus malware, which will now quietly run in the background while waiting for payloads to install or commands to execute.

As Latrodectus malware infections are used to drop other malware and for initial access to corporate networks, they can lead to devastating attacks.

At this time, the malware has been observed dropping the Lumma information-stealer and Danabot. However, since Latrodectus is linked to IcedID, these attacks may lead to a wider range of malware in the future such as Cobalt Strike and we might also see partnerships with ransomware gangs.

Therefore, if a device becomes infected with Latrodectus, it is critical to take the system offline as soon as possible and evaluate the network for unusual behavior.

source

Windows 12 / Windows 12: Release Date, Latest News, Leaks & Prices

« Last post by javajolt on May 01, 2024, 05:16:23 AM »

Microsoft has been caught up in a romance with generative AI. So, it’s no surprise that our attention may have been pulled away from the traditional cycle of its Windows releases.

However, speculations suggest a change to the tech giant’s operating system may be back on track.

After the release of Windows 11 in 2021, rumors have been circulating about Microsoft’s Windows 12 release date. Initially, it seemed like Microsoft was gearing up for a 2024 release, following the same roadmap as Windows 11 with a June announcement and October launch. However, the rumor mill has gone eerily quiet in the first quarter of 2024, leaving us wondering what’s next for the future of Windows.

Despite Microsoft’s tight-lipped approach, Windows 12 leaks suggest that an announcement is looming on the horizon. But since there seems to be a great deal of secrecy tied to official Windows 12 news, we’re left to piece together the clues and speculate about what’s to come.

In this article, we’ll explore everything we know so far about Windows 12 leaks, from its potential release date and pricing to its rumored features and system requirements.

When is Windows 12 Being Released?

Estimated Launch: July-October 2024

The million-dollar question on everyone’s mind is: When is Windows 12 coming out? While Microsoft has remained silent about the release date, rumors and speculation are rife.

Based on the company’s previous release playbook and leaks, we estimate that Windows 12 will launch in the second half of 2024. This would put the release date around July-October 2024, aligning with Microsoft’s traditional launch windows.

Perhaps the most compelling evidence of a 2024 release came from Intel’s chief financial officer, Dave Zinsner, who, in an interview last year, predicted a surge in PC sales driven by the ’arrival of Windows 12 next year.’

New Windows 12 Features

AI Could Be the Focal Point of Windows 12

Microsoft has never been shy about its intention to bring artificial intelligence capabilities to its Windows OS. So, we don’t expect this to change in Windows 12.

Although nothing is officially confirmed, it’s exciting to consider the possibility of having more AI features than we currently have in Windows 11.

Building on the foundation of Windows 11’s 23H2 update, which introduced Microsoft Copilot to Windows, Windows 12 could take AI capabilities to new heights. Copilot has already demonstrated its ability to provide a more personalized and efficient experience, and future updates could further enhance its ability to control and interact with the PC.

One potential area of improvement is the expansion of AI-powered search capabilities, similar to those seen in Windows 11’s Taskbar, where users can easily use the search icon to look up content across Microsoft 365.

Additionally, the Recommended section in File Explorer, which suggests files and folders based on user behavior, could be further refined and expanded with better AI algorithms.

Search on the taskbar in Windows 11: (Microsoft)

Search on the taskbar in Windows 11: (Microsoft)

Another possibility is the integration of AI to suggest user actions using a virtual assistant that can anticipate user needs and provide recommendations accordingly. This type of AI, designed to understand user intentions, has the potential to bring out the best of AI-human interaction on Windows PCs.

While these ideas are purely speculative and we are yet to see an official Windows 12 concept out there, it’s clear that AI will influence a lot of changes.

Will Ads Return to Windows 12 Start Menu?

Microsoft recently released a Windows 11 update that introduced ads in the Start menu. While they’ve pulled the plug on this feature, there are still concerns that it might become a permanent addition in future versions, including Windows 12.

The ads, displayed in the Recommended section, promote Microsoft Store apps from a select group of developers, aiming to facilitate app discovery. While this update may enhance user experience, it remains to be seen whether Start menu ads will become a standard feature in future Windows versions.

What Hardware Will I Need to Run Windows 12?

While Microsoft has not said anything about its Windows 12 system requirements, we can make some educated guesses based on the current trends and technological advancements.

Firstly, due to AI-laden features expected to come with the new Windows, it’s likely that users will require nothing less than 1 gigahertz (GHz) in CPU speed, a 64-bit processor, with 2 or more cores, a minimum of 4-8 GB of RAM with 16 GB or more to run Windows 12.

In terms of storage, a solid-state drive (SSD) will be the preferred choice, given its faster read and write speeds compared to traditional hard disk drives (HDDs). A minimum of 256 GB of storage will likely be required, with 512 GB or more recommended for users with large file collections.

Graphics requirements will likely be more demanding, with a minimum graphics card that is compatible with DirectX 12 (DX12) or later.

Will There Be Different Versions of Windows 12?

Similar to its predecessors, Windows 12 is likely to come in Home and Pro versions, perhaps with different aliases. This will be to cater to end consumer and high-end user preferences. So, it should not come as a surprise if Microsoft decides to version Windows 12 following this classification.

We can also expect varying levels of features, security, and support, in the versions as we currently have in Windows 11. As with previous Windows releases, the exact editions and their features will be announced by Microsoft closer to the release date.

Windows 12 Price

Free Upgrade & Premium Options?

With many software releases following a subscription model, it’s not out of place to wonder if Microsoft would come up with a Windows 12 subscription model rather than its current license purchase model.

There is no evidence alluding to this, so it’s safer to assume that Microsoft will offer Windows 12 as a free optional upgrade, similar to what it did with Windows 11. This means that users with a valid license for Windows 11 or possibly even Windows 10 may be able to upgrade to the latest operating system at no additional cost.

However, for those who wish to purchase a standalone copy of Windows 12, Microsoft will likely follow the pricing pattern on its Windows 11.

If this is the case, we can expect Windows 12 Home to cost over $139 currently charged for Windows 11 Home. Windows 12 Pro could cost around $199.99 or more. This pricing structure is consistent with Microsoft’s previous releases, and Windows 12 will likely follow suit.

The Bottom Line

If you’re a Windows user or enthusiast, the possibility of having more AI functions to tinker with in a new Windows could be exciting. While details are scarce on Microsoft’s plans for a future Windows operating system iteration, what we do know is that the tech giant consistently strives to innovate and improve user experience with each new version and we look forward to an official Windows 12 preview.

And with AI lurking around every software, there is no reason not to expect more when the official Windows 12 release hits the news.

But beyond AI, Microsoft will likely aim to optimize performance, improve security features, and ensure seamless compatibility with apps as they forge ahead with the future of their flagship product.

And no, we have no suggestions about what the Windows 12 logo looks like.

source

Browsers: Google Chrome | Opera | Safari | Firefox / Google Chrome's new post-quantum cryptography may break TLS connections

« Last post by javajolt on April 29, 2024, 07:25:31 PM »

Some Google Chrome users report having issues connecting to websites, servers, and firewalls after Chrome 124 was released last week with the new quantum-resistant X25519Kyber768 encapsulation mechanism enabled by default.

Google started testing the post-quantum secure TLS key encapsulation mechanism in August and has now enabled it in the latest Chrome version for all users.

The new version utilizes the Kyber768 quantum-resistant key agreement algorithm for TLS 1.3 and QUIC connections to protect Chrome TLS traffic against quantum cryptanalysis.

"After several months of experimentation for compatibility and performance impacts, we're launching a hybrid postquantum TLS key exchange to desktop platforms in Chrome 124," the Chrome Security Team explains.

"This protects users' traffic from so-called 'store now decrypt later' attacks, in which a future quantum computer could decrypt encrypted traffic recorded today."

Store now, decrypt later attacks are when attackers collect encrypted data and store it for the future when there may be new decryption methods, such as using quantum computers or encryption keys become available.

To protect against future attacks, companies have already started to add quantum-resistant encryption to their network stack to prevent these types of decryption strategies from working in the future. Some companies that have already introduced quantum-resistant algorithms include Apple, Signal, and Google.

However, as system admins have shared online since Google Chrome 124 and Microsoft Edge 124 started rolling out on desktop platforms last week, some web applications, firewalls, and servers will drop connections after the ClientHello TLS handshake.

The issue also affects security appliances, firewalls, networking middleware, and various network devices from multiple vendors (e.g., Fortinet, SonicWall, Palo Alto Networks, AWS).

"This appears to break the TLS handshake for servers that do not know what to do with the extra data in the client hello message," one admin said.

"Same problem here since version 124 of Edge, it seems to go wrong with the SSL decryption of my palo alto," said another admin.

These errors are not caused by a bug in Google Chrome but instead caused by web servers failing to properly implement Transport Layer Security (TLS) and not being able to handle larger ClientHello messages for post-quantum cryptography.

This causes them to reject connections that use the Kyber768 quantum-resistant key agreement algorithm rather than switching to classic cryptography if they don't support X25519Kyber768.

A website named tldr.fail was created to share additional information on how large post-quantum ClientHello messages can break connections in buggy web servers, with details on how developers can fix the bug.

Website admins can also test their own servers by manually enabling the feature in Google Chrome 124 using the chrome://flags/#enable-tls13-kyber flag. Once enabled, admins can connect to their servers and see if the connection causes an "ERR_CONNECTION_RESET" error.

How to fix connection issues

Affected Google Chrome users can mitigate the issue by going to chrome://flags/#enable-tls13-kyber and disabling the TLS 1.3 hybridized Kyber support in Chrome.

Administrators can also disable it by toggling off the PostQuantumKeyAgreementEnabled enterprise policy under Software > Policies > Google > Chrome or contacting the vendors to get an update for servers or middleboxes on their networks that aren't post-quantum-ready.

Microsoft has also released information on how to control this feature via the Edge group policies.

However, it's important to note that long-term, post-quantum secure ciphers will be required in TLS, and the Chrome enterprise policy allowing disabling it will be removed in the future.

"Devices that do not correctly implement TLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or the resulting larger messages," Google says.

"This policy is a temporary measure and will be removed in future versions of Google Chrome. It may be Enabled to allow you to test for issues, and may be Disabled while issues are being resolved."

source

Linux, gOS, Harmony OS, Moblin, Ubuntu, OpenSuse / The Rise of HarmonyOS: Distrupting the Android, ONE UI, and IOS Monopoly

« Last post by javajolt on April 29, 2024, 06:55:25 PM »

Huawei is planning to expand its home-grown operating system, HarmonyOS, to global markets. Currently, Android (One UI) and iOS dominate the global mobile operating system market, while HarmonyOS has gained popularity within China despite being exclusive to that market.

Due to US restrictions, Huawei lost access to key technologies, including Android and semiconductors. In response, the company has been developing its own operating system, HarmonyOS. However, for the global market, Huawei’s devices still ship with EMUI, which is based on Android.

Huawei recognizes that a robust applications ecosystem is a major advantage of Android and iOS. Compared to these two giants, HarmonyOS lacks comprehensive app support, which is a significant barrier to its expansion into global markets. This shortfall could hinder consumer adoption outside of China, where users expect a wide range of applications readily available on their mobile devices.

At Huawei’s 21st Analyst Summit in Shenzhen, the company’s rotating chairman, Erik Xu, outlined their strategy for HarmonyOS. He stated,

HarmonyOS to go Global

Huawei’s Mate 60 Pro has achieved the top-selling status in the Chinese smartphone market, displacing Apple’s iPhone from its leading position. This success has undoubtedly caused some concern for Tim Cook, as Apple has lost its top spot in the world’s largest smartphone market.

Additionally, Huawei has recently introduced its brand-new Pura 70 series flagships. These devices feature advanced technologies and innovative camera systems, which are expected to further boost the phone maker’s growth and competitiveness in the market.

As Huawei flagships continue to gain popularity, the company plans to spend 2024 focusing on enhancing the native app ecosystem for HarmonyOS. The aim is to attract the most popular smartphone apps to its self-developed operating system, making it a more viable alternative to established platforms like Android and iOS. This strategy could help Huawei increase its market share and user base globally.

Erik Xu, a representative from Huawei, expressed the company’s ambitious goal for HarmonyOS, stating, “Once we have these first 5,000 Android apps – and thousands of other apps – up and running on HarmonyOS, we will have a real HarmonyOS: a third mobile operating system for the world.” Xu also mentioned the potential for the platform to expand significantly, claiming that the number of apps on HarmonyOS could eventually reach up to 1 million in the future. This growth would mark a significant step towards establishing HarmonyOS as a major player in the global mobile operating system market.

Conclusion

Huawei’s HarmonyOS is indeed a distinct mobile operating system, separate from Android and iOS, which presents an interesting choice for consumers. If HarmonyOS were to become available globally with proper application support, it would offer a fresh alternative with potential new features and a different user experience.

Whether to switch to a Huawei phone running HarmonyOS would depend on several factors. Key considerations might include the range and quality of available apps, how well the system integrates with other devices and services you use, the overall user experience, and how it compares in terms of privacy and security to existing platforms.

If you are someone who enjoys exploring new technology and values innovation, trying out a Huawei phone with HarmonyOS could be an exciting experience. However, if you rely heavily on specific apps or services that might not be supported, or if you prefer the familiarity and established ecosystem of Android or iOS, you might decide to stick with what you know. Ultimately, the decision would hinge on how well HarmonyOS meets your personal or professional needs compared to the alternatives.

source