Anzeige: Mastering Keycloak – sicheres IAM für Linux-Profis

Als führendes Open-Source-Tool für Identity- und Access-Management ermöglicht Keycloak effiziente Authentifizierung und Autorisierung. Dieser dreitägige Intensivkurs vertieft das Verständnis. (Golem Karrierewelt, Server-Applikationen)

Als führendes Open-Source-Tool für Identity- und Access-Management ermöglicht Keycloak effiziente Authentifizierung und Autorisierung. Dieser dreitägige Intensivkurs vertieft das Verständnis. (Golem Karrierewelt, Server-Applikationen)

CDC recommends spring COVID booster for people 65 and up

The shot should be taken at least four months since the last COVID vaccination.

The Moderna Spikevax COVID-19 vaccine is shown at a CVS in 2023.

Enlarge / The Moderna Spikevax COVID-19 vaccine is shown at a CVS in 2023. (credit: Getty | Melissa Phillip/Houston Chronicle )

People ages 65 and up should get another dose of a COVID-19 vaccine this spring, given the age group's higher risk of severe disease and death from the pandemic virus, the Centers for Disease Control and Prevention announced Wednesday.

Earlier today, an advisory committee for the CDC voted overwhelmingly in favor of recommending the spring booster dose. And late this afternoon, CDC Director Mandy Cohen signed off on the recommendation, allowing boosting to begin.

"Today’s recommendation allows older adults to receive an additional dose of this season’s COVID-19 vaccine to provide added protection," Cohen said in a statement. "Most COVID-19 deaths and hospitalizations last year were among people 65 years and older. An additional vaccine dose can provide added protection that may have decreased over time for those at highest risk."

Read 6 remaining paragraphs | Comments

SD Express cards from Samsung promise faster-than-SATA speeds for microSD devices

Compatibility issues and thermals have, so far, kept SD Express from taking off.

Samsung's SD Express-compatible microSD cards.

Enlarge / Samsung's SD Express-compatible microSD cards. (credit: Samsung)

Big news for people who like (physically) small storage: Samsung says that it is sampling its first microSD cards that support the SD Express standard, which will allow them to hit sustained read speeds of as much as 800MB per second. That's a pretty substantial boost over current SD cards, which tend to top out around 80MB or 90MB per second (for cheap commodity cards) and around 250MB per second for the very fastest UHS-II-compatible professional cards.

As Samsung points out, that 800MB/s figure puts these tiny SD Express cards well above the speeds possible with older SATA SSDs, which could make these cards more useful as primary storage devices for PCs or single-board computers that can support the SD Express standard (more on that later).

Samsung is currently sampling a 256GB version of the SD Express card, and "will be available for purchase later this year."

Read 7 remaining paragraphs | Comments

That moment when you land on the Moon, break a leg, and are about to topple over

“We hit harder than expected and skidded along the way.”

A photo of <em>Odysseus</em> the moment before it gently toppled over.

Enlarge / A photo of Odysseus the moment before it gently toppled over. (credit: Intuitive Machines)

After six days and the public release of new images, engineers have finally pieced together the moments before, during, and after the Odysseus lander touched down on the Moon.

During a news conference on Wednesday, the chief executive of Intuitive Machines, Steve Altemus, described what his company has learned about what happened last Thursday evening as Odysseus made its powered descent down to the Moon.

From their control room in Houston, the mission operators watched with fraying nerves, as their range finders had failed. A last-minute effort to use altitude data from a NASA payload on board failed because the flight computer on board Odysseus could not ingest it in time. So the lander was, in essence, coming down to the Moon without any real-time altimetry data.

Read 12 remaining paragraphs | Comments

GitHub besieged by millions of malicious repositories in ongoing attack

GitHub keeps removing malware-laced repositories, but thousands remain.

GitHub besieged by millions of malicious repositories in ongoing attack

Enlarge (credit: Getty Images)

GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency from developer devices, researchers said.

The malicious repositories are clones of legitimate ones, making them hard to distinguish to the casual eye. An unknown party has automated a process that forks legitimate repositories, meaning the source code is copied so developers can use it in an independent project that builds on the original one. The result is millions of forks with names identical to the original one that add a payload that’s wrapped under seven layers of obfuscation. To make matters worse, some people, unaware of the malice of these imitators, are forking the forks, which adds to the flood.

Whack-a-mole

“Most of the forked repos are quickly removed by GitHub, which identifies the automation,” Matan Giladi and Gil David, researchers at security firm Apiiro, wrote Wednesday. “However, the automation detection seems to miss many repos, and the ones that were uploaded manually survive. Because the whole attack chain seems to be mostly automated on a large scale, the 1% that survive still amount to thousands of malicious repos.”

Read 11 remaining paragraphs | Comments