General Gaming Article

General Gaming Article


Adobe Digital Certificate Used to Sign Malware

Posted: 28 Sep 2012 08:20 PM PDT

Adobe is no stranger to seeing vulnerabilities in its software being targeted in the wild, but it's not every day that the company comes across malware masquerading as Adobe software using a valid code signing certificate. Adobe recently received not one, but two such malicious utilities, the company revealed Thursday.

Upon being convinced of the authenticity of the digital certificate used to sign the said malware apps, the company decommissioned its existing code signing infrastructure and launched an investigation. According to Brad Arkin, senior director of product security and privacy at Adobe, the investigation led the company to a build server that had been compromised. 

"We have identified a compromised build server that required access to the code signing service as part of the build process," Atkins wrote in a post on the Adobe Secure Software Engineering Team (ASSET) blog Thursday. "Although the details of the machine's configuration were not to Adobe corporate standards for a build server, this was not caught during the normal provisioning process. We are investigating why our code signing access provisioning process in this case failed to identify these deficiencies."

But how did the attackers manage to get in? The company claims to have found the mechanism they used to compromise the build server, which was itself found to be infected with malware: "We can confirm that the private key required for generating valid digital signatures was not extracted from the HSM [Hardware Security Module]. We believe the threat actors established a foothold on a different Adobe machine and then leveraged standard advanced persistent threat (APT) tactics to gain access to the build server and request signatures for the malicious utilities from the code signing service via the standard protocol used for valid Adobe software."

The company feels that this issue does not pose a general security risk. A more likely scenario, according to the company, is one which involves the use of these digitally signed utilities "during highly targeted attacks for privilege escalation and lateral movement within an environment following an initial machine compromise."

"Adobe is currently investigating what appears to be the inappropriate use of an Adobe code signing certificate for Windows," the company said in a FAQ about the issue, which is said to only affect Adobe Muse, Adobe Story AIR applications and  Acrobat.com desktop services. "To maintain trust in genuine Adobe software, we plan to revoke the impacted certificate on October 4, 2012 for all software code signed after July 10, 2012. We are in the process of issuing updates signed using a new digital certificate for all affected products."

General security risk or not, this is a highly troubling development. What do you think?

Daily Deals 9/28/12: Kingston 240GB SSD $145, Free Logitech WebCam, and More

Posted: 28 Sep 2012 11:00 AM PDT

Kingston V+200

Logicbuy

Top Deal

The top deal today is one the best deals we've ever seen for a 240GB SSD from LogicBuy. The Kingston 240GB V+200 SSD is on sale for $144.99 (normally $174.99). The drive has sequential read and write speeds of 535MB/s and 480MB/s, respectively. 

Laptops:
Dell Inspiron 15R Special Edition 15.6" Laptop with 3rd generation Intel Core i7, 1080p display, 2GB GDDR5 Radeon HD 7730m graphics, aluminum body for $849.99 with free shipping (normally $1,138.99 - use $150 coupon code: QH3XW509GT$BBL).
Hardware & Peripherals:
Buffalo MiniStation 500GB USB 2.0 portable hard drive for $59.99 with $2.29 shipping at TigerDirect (normally $71).
Samsung Galaxy Tab 2 7" Tablet with Android 4.0 for $214.99 with free shipping at BuyDig (normally $250). Be sure to select the tab for the new model under "Alternatives" to get same price as refurbished. 
Logitech C260 Webcam with built-in microphone for free after mail-in rebate with free shipping (normally $39.99).

Western Digital Launches RE SAS and SATA Hard Drives for Enterprise

Posted: 28 Sep 2012 07:10 AM PDT

WD PlattersStorage stalwart Western Digital announced that it's expanding its enterprise-class storage line with the release of new WD RE SAS and WD RE SATA hard drives in capacities up to 4TB, matching the largest capacity current available in the market. If that's too much storage, the new SAS drives will also ship in 1TB, 2TB, and 3TB capacities, and the same with the SATA drives, minus the 1TB model.

"Given the insatiable need for storage capacity across all market segments, WD is offering both SAS and SATA interfaces for the WD 4 TB RE hard drives to best support both private and public clouds," said Doug Pickford, senior director of business marketing for WD's enterprise business unit. "WD continues to pioneer the capacity-optimized 3.5-inch market segment, in particular, and the WD RE SAS and SATA 4 TB drives are designed, tested and optimized for enterprise storage and applications, enabling 33 percent greater capacity than previously available drives and up to 2.4 PB of raw capacity in a single enterprise rack."

WD's enterprise-class HDDs differ from consumer drives in that they offer a number of IT friendly features, like dual port, full duplex connectivity and several technologies intended to enhance reliability, all of which come at a premium. Pricing breaks down as follows:

  • 4TB SAS: $479
  • 3TB SAS: $369
  • 2TB SAS: $249
  • 1TB SAS: $139
  • 4TB SATA: $459
  • 3TB SATA: $349
  • 2TB SATA: $229

WD RE Drive

The drives are available now through select distributors and resellers, and are backed by a 5-year warranty.

Follow Paul on Google+, Twitter, and Facebook

 

Intel Arms Tablet Makers with Atom Z2760 'Clover Trail' Chip

Posted: 28 Sep 2012 06:04 AM PDT

Intel Atom Z2760 ProcessorIn what's being described as "just the beginning of Intel's effort in the tablet market," the world's largest chip maker unveiled its Atom Z2760 processor (codenamed Clover Trail) for Windows 8 tablets. According to Intel, the spunky Atom chip allows for the thinnest, lightest tablets built on the company's architecture -- as thin as 8.5 mm and 1.5 pounds -- and lends itself to long lasting battery life, enough to watch 10 hours of local HD video.

The Atom Z2760 SoC (System on Chip) is built on a 32nm manufacturing process and features an Imagination Technologies PowerVR SGX545 graphics core. It's a dual-core part with four threads via Hyper Threading and a 1.8GHz clockspeed, or higher using Intel's Burst technology. The GPU is clocked at 533MHz.

A number of OEM partners are on board with the new chip and will implement it into upcoming Windows 8 tablets. They include Acer, Asus, Dell, Fujitsu, HP, Lenovo, LG Electronics, Samsung, and ZTE, all of which said they plan to offer full featured tablets built around the Atom part.

"This is just the beginning of Intel's effort in the tablet market, and our goal is to deliver products that fit the spectrum of evolving needs of both consumers and business users without compromising on compatibility, experience or battery life," said Erik Reid, general manager, Application Processor Platforms for Intel's Mobile and Communications Group. "When people or corporations buy a device with Intel Inside, they're getting the best of Windows 8 features with a computing experience that just works."

What Intel has really done is set the stage for a showdown with ARM-based tablets, which will run Windows RT. Expect them all to make their debut when Windows 8 launches in late October.

Follow Paul on Google+, Twitter, and Facebook

 

Adata's DashDrive Elite HD720 is Thinner Than Toshiba's Canvio by a Hair

Posted: 28 Sep 2012 05:14 AM PDT

Adata DashDrive Elite HE720Technology has a tendency to move fast, and as a result, your reign on top might only last a few days. Just ask Toshiba, which at the beginning of the week unveiled its 500GB Canvio Slim, a portable drive it proudly billed as the world's thinnest at 9mm thick. By the end of the week, it became the second thinnest, as Adata just introduced its DashDrive Elite HE720 external hard drive, which is 8.9mm thick.

For the time being, Adata's model is now the world's thinnest, and it's a looker too. It has a brushed stainless steel surface that, in addition to being attractive, offers 9H scratch resistance and prevents damage, even after long-term use, Adata says.

There's a blue LED indicator on the bottom to let you know when it's transferring data, along with a one-touch backup feature to automatically backup and sync data with a single touch. Other features include USB 3.0 connectivity and a 60-day free trial of Norton Internet Security 2012 (which did well in our most recent antivirus roundup).

Adata DashDrive in Pocket

Adata says it will initially offer the DashDrive Elite HE720 in 500GB capacity for $90, which trumps Toshiba's Canvio by $25.

Follow Paul on Google+, Twitter, and Facebook

 

Total Pageviews

statcounter

View My Stats