SGX, Intel’s supposedly impregnable data fortress, has been breached yet again

ÆPIC Leak spills users’ most sensitive secrets in seconds from SGX enclaves.

Architectural bug in some Intel CPUs is more bad news for SGX users

Enlarge (credit: Intel)

Intel’s latest generation of CPUs contains a vulnerability that allows attackers to obtain encryption keys and other confidential information protected by the company’s software guard extensions, the advanced feature that acts as a digital vault for security users’ most sensitive secrets.

Abbreviated as SGX, the protection is designed to provide a fortress of sorts for the safekeeping of encryption keys and other sensitive data, even when the operating system or a virtual machine running on top is maliciously compromised. SGX works by creating trusted execution environments that protect sensitive code and the data it works with from monitoring or tampering by anything else on the system.

Cracks in Intel’s foundational security

SGX is a cornerstone of the security assurances many companies provide to users. Servers used to handle contact discovery for the Signal Messenger, for instance, rely on SGX to ensure the process is anonymous. Signal says running its advanced hashing scheme provides a “general recipe for doing private contact discovery in SGX without leaking any information to parties that have control over the machine, even if they were to attach physical hardware to the memory bus.”

Read 17 remaining paragraphs | Comments

LattePanda 3 Delta single-board PC with Celeron N5015 available August 10 for $279

The LattePanda 3 Delta is a single-board computer with a 10-watt Intel Celeron N5105 quad-core processor, an Arduino Leonardo co-processor, 8GB of RAM, 64GB of storage, and support for Windows or Linux. First launched last year through a Kickstarter c…

The LattePanda 3 Delta is a single-board computer with a 10-watt Intel Celeron N5105 quad-core processor, an Arduino Leonardo co-processor, 8GB of RAM, 64GB of storage, and support for Windows or Linux. First launched last year through a Kickstarter crowdfunding campaign, the little computer goes on sale worldwide at 11:00AM Eastern time on August 10, […]

The post LattePanda 3 Delta single-board PC with Celeron N5015 available August 10 for $279 appeared first on Liliputing.

Linux: DECnet könnte aus dem Kernel fliegen

Microsoft-Entwickler Stephen Hemminger fordert auf Kernel.org-Mailinglisten, das Protokoll aus dem Kernel zu nehmen und in ein Museum zu stellen. (Open Source, Linux-Kernel)

Microsoft-Entwickler Stephen Hemminger fordert auf Kernel.org-Mailinglisten, das Protokoll aus dem Kernel zu nehmen und in ein Museum zu stellen. (Open Source, Linux-Kernel)

Zwölf Prozent mehr Todesfälle im Juli

Das Statistische Bundesamt geht wegen des zeitlichen Zusammenhangs von einem großen Anteil Hitzetoter aus. Die Todesursachenstatistik für dieses Jahr wird aber erst Ende 2023 veröffentlicht.

Das Statistische Bundesamt geht wegen des zeitlichen Zusammenhangs von einem großen Anteil Hitzetoter aus. Die Todesursachenstatistik für dieses Jahr wird aber erst Ende 2023 veröffentlicht.