Cisco Warns Of Bug In Virtual App

Cisco has warned of a default Secure Shell vulnerability in three of its virtual applications.

The flaw could allow attackers to decrypt traffic exchanged in the services, and has been detailed in a Cisco security advisory.

It affects Cisco’s Web Security Virtual Appliance (SMAv), Email Security Virtual Appliance and Security Management Virtual Appliance, which are already commercially available.

Cisco said that it “is not aware of any public announcements or malicious use of the vulnerabilities”, but warned that attackers who got hold of the private keys could decrypt communications with a man-in-the-middle attack.

The default private encryption keys were preinstalled on all three of the products, a move which is considered bad security practice.

“Successfully exploiting this vulnerability on Cisco SMAv allows an attacker to decrypt communication toward SMAv, impersonate SMAv, and send altered data to a configured content appliance,” the advisory said.

“An attacker can exploit this vulnerability on a communication link toward any content security appliance that was ever managed by any SMAv.”

Cisco has released a patch which deletes the preinstalled SSH keys and explains how customers can correct the problem.

The Cisco-sa-20150625-ironport SSH Keys Vulnerability Fix comes as part of several product upgrades, and must be manually installed from a command line interface.

Cisco’s advisory said that the patch is not required for physical hardware appliances, or for virtual appliance downloads or upgrades after 25 June.

Cisco revealed details of a new point of sale attack earlier this year that could part firms from money and customers from personal data.

The threat, called PoSeidon by the Cisco team, came at a time when eyes were on security breaches at firms like Target.

Cisco said in a blog post that PoSeidon is a threat that has the ability to breach machines and scrape them for credit card information.

Source

RedHat Goes PaaS With Linux

Red Hat has announced the release of OpenShift Enterprise (OSE) 3, a new version of its Platform-as-a-Service offering.

Based on Red Hat Enterprise Linux (RHEL)7, Openshift is built on Docker Linux containers with Kubernetes orchestration using technology developed in collaboration with Google.

The news comes in a busy week for Red Hat, which has also announced a new productivity tie-up with Samsung and taken a leading role in the formation of a new alliance known as the Open Container Project to standardise containers.

Users will have access to a wide range of apps via the Red Hat Container Certification Programme. Middleware solutions including Red Hat JBoss Enterprise, Web Server (Tomcat) and JBoss A-MQ messaging are also included.

Included are a number of tools to help developers create and collaborate, with web, command line, and integrated development environment interfaces. Options include direct code-push from GIT and source to image building. There is also flexibility for deployment, rollback and integration.

In addition, a preview of Openshift Dedicated has been released. The public cloud service based on OpenShift 3 will succeed Openshift Online, which already hosts 2.5 million applications online, allowing businesses to quickly build, launch and deploy bespoke apps.

Ashesh Badani, vice president and general manager, OpenShift, Red Hat, said, “This release of OpenShift Enterprise 3 employs open source containers and orchestration practices to change the developer experience and move the platform in the direction of what customers are asking for – a flexible platform for a microservices architecture.

“Our continued upstream work in the Docker and Kubernetes communities enable us to deliver the most updated technology platform for developers and operators, enabling them to remain competitive through quicker innovation.”

To assist users, Red Hat is offering a range of enterprise administrator courses to teach users how to deploy, configure and manage the system, which can result in a Red Hat Certificate of Expertise in Platform as a Service – a worthy certificate for any office wall.

OpenShift 3 is available now with bespoke pricing models based of socket and core pairings.

Source

Yahoo Beefs Up Mobile Search

Yahoo is beefing up its search service on mobile devices, following Google’s lead by highlighting content such as images, videos and reviews ahead of regular search results

The changes will apply to Yahoo search on the mobile web in the U.S., in browsers such as Safari and Chrome. Yahoo’s mobile app and desktop site already provide some additional content within results.

A search on the mobile web for Barack Obama, for instance, displays information about him from Wikipedia, such as his height and birth date, as well as links to news, images and YouTube videos. In one search Thursday, the videos included some curious choices, including “Barack Obama is Illuminati.”

Google already highlights a variety of content related to search queries, including news and related tweets, as well as links to other services like Maps. Microsoft’s Bing does something similar.

Because Yahoo is playing catch-up, the changes might not attract many new users, but they could help it retain people who use Yahoo for mobile searches today.

In the last quarter of 2014, mobile accounted for half of Yahoo’s search traffic in North America, up from 32 percent during the same period in 2013, according to research firm eMarketer.

Source

Is Oracle Sliding?

Oracle said weak sales of its traditional database software licenses were made worse by a strong US dollar lowered the value of foreign revenue.

Shares of Oracle, often seen as a barometer for the technology sector, fell 6 percent to $42.15 in extended trading after the company’s earnings report on Wednesday.

Shares of Microsoft and Salesforce.com, two of Oracle’s closest rivals, were close to unchanged.

Daniel Ives, an analyst at FBR Capital Markets said that this announcement speaks to the headwinds Oracle is seeing in the field as their legacy database business is seeing slowing growth.

It also shows that while Cloud business has seen pockets of strength it is not doing as well as many thought,

Oracle, like other established tech companies, is looking to move its business to the cloud-computing model, essentially providing services remotely via data centres rather than selling installed software.

The 38-year-old company has had some success with the cloud model, but is not moving fast enough to make up for declines in its traditional software sales.

Oracle, along with German rival SAP has been losing market share in customer relationship management software in recent years to Salesforce.com, which only offers cloud-based services.

Because of lower software sales and the strong dollar, Oracle’s net income fell to $2.76 billion, or 62 cents per share, in the fourth quarter ended May 31, from $3.65 billion, or 80 cents per share, a year earlier.

Revenue fell 5.4 percent to $10.71 billion. Revenue rose 3 percent on a constant currency basis. Analysts had expected revenue of $10.92 billion, on average.

Sales from Oracle’s cloud-computing software and platform service, an area keenly watched by investors, rose 29 percent to $416 million.

Source

Will Blackberry Embrace Android?

BlackBerry Ltd’s move to embrace Android, although geared towards lifting revenue from its software and device management segment, could inadvertently give its device arm a new lease on life.

“From the standpoint of marketing, this is a great way for BlackBerry to get visibility. It really doesn’t hurt them much, and the upside is high,” said Rob Enderle, who runs technology consulting firm Enderle Group.

Enderle and other financial and tech analysts agree that the move by BlackBerry does present its own set of challenges as the company would have to support two platforms and potentially put some resources into marketing an Android device, but with little to lose most agree it comes with little downside.

“If Android has one significant weakness it is security and that’s just the thing that BlackBerry can fix, so it could play out pretty well and I am actually quite surprised that they did not try this sooner,” said Enderle, adding that BlackBerry has to deliver a compelling device in order for the gambit to work.

Reuters reported last week that BlackBerry was considering a move to test run Android on its upcoming slider device, as part of a bid to convince potential corporate and government clients that its device management system, BES12, is truly able of manage and secure not just BlackBerry devices, but also devices powered by Google’s Android, Apple’s iOS and Microsoft’s Windows operating system.

“In order for BES12 to succeed it has to be viewed by all as platform agnostic, and what better way to demonstrate that other than by doing it yourself,” said Ramon Llamas, an analyst with technology research firm IDC.

BlackBerry, which once dominated the smartphone market, has seen its market share drop to under 1 percent, as the iPhone and a slew of Android devices from Samsung have captured market share. John Chen, a turnaround expert brought in to fix its slide, is now pivoting BlackBerry to focus more on its well-regarded software and device management business.

Source

Jawbone Sues Fitbit

Jawbone has filed another lawsuit against Fitbit in less than two weeks, alleging its activity tracking products infringe several of Jawbone’s patents.

The new suit, filed Wednesday in San Francisco by Jawbone parent company AliphCom, seeks unspecified damages and an injunction to block the sale of Fitbit devices such as the Flex, Charge and Surge bands.

Late last month, Jawbone filed another lawsuit, accusing Fitbit of poaching its employees and stealing trade secrets. Fitbit has said it has no knowledge of any such information in its possession.

In its latest complaint, Jawbone says it will also ask the U.S. International Trade Commission to investigate Fitbit, which could potentially lead to an import ban on Fitbit products.

Jawbone says it has hundreds of patents granted or pending, and claims that Fitbit infringes several of them. One patent describes a “general health and wellness management method and apparatus for a wellness application using data from a data-capable band.”

Another patent covers a “system for detecting, monitoring, and reporting an individual’s physiological or contextual status.”

Fitbit didn’t immediately respond to a request for comment on the latest suit.

The timing is bad for Fitbit, which is preparing to go public on the U.S. stock markets. It also faces intense competition from a number of rivals, which also include Garmin and Apple with its Apple Watch.

Both Jawbone and Fitbit make wearable bands and associated software that tracks people’s movement, exercise, sleep and heart rate.

Source

Can MB Challenge Tesla?

On the heels of Tesla announcing a home and commercial battery product line, Mercedes-Benz unveiled its own brand of energy storage products for those with solar systems to store surplus power.

The Mercedes-Benz energy storage plants for private use are available for order now and are expected to ship in September.

The batteries were first developed for cars, but Mercedes-Benz said the energy storage units “meet the very highest safety and quality standards” for home use.

Up to eight battery modules with an energy capacity of 2.5 kWh can be combined into an energy storage plant with a capacity of 20 kWh.

“Households with their own photovoltaic systems can thus buffer surplus solar power virtually free of any losses,” the carmaker said in a statement.

What wasn’t announced by Mercedes-Benz was information about the size of or pricing for the new batteries.

In May, Tesla announced its Powerwall batteries for home use and its Powerpack batteries for commercial use. Today, Tesla CEO Elon Musk announced his company would double the power output of the Powerwall batteries but keep their prices the same.

Tesla’s Powerwall batteries will go from having a two-kilowatt (kW) steady power output and 3.3kW peak output to a 5kW steady output and 7kW peak output, Musk said. The price of the batteries will remain the same: $3,000 for the 7kW/hour (KWh) daily cycle version and $3,500 for the 10kWh backup UPS version. Total installation cost will run around $4,000, according to Musk.

Up to nine Powerwall battery units can be daisy-chained together on a wall to provide up to 90kWh of power.

The average U.S. household uses about 20 kWh to 25 kWh of power every day, according to GTM Research.

Tesla Energy’s new commercial-grade battery is called the Powerpack, and will sell in 100kWh modules for $25,000 each. Musk said the Powerpack can scale infinitely, even powering factories and small cities.

Mercedes-Benz’s batteries, being produced by subsidiary Deutsche Accumotive, are its first industrial-scale lithium-ion units, and they’ve already been tested “on the grid,” the company said.

Source

Acer Shifts Focus To IoT

Acer is still churning out PCs, but the Taiwanese vendor is far more bullish about the Internet of Things (IoT), a market the company doesn’t want to miss out on.

Acer held a news conference not for a new consumer product, but to promote an upcoming miniature PC that will be sold to developers.

The PC, called the aBeing One, will arrive in the third quarter, and is aimed at developers working in the IoT area. It’s designed to connect to smart home and wearable products, and act as a hub that can analyze incoming data from the devices.

The PC vendor has spoken to many IoT companies looking for an affordable hardware system they can develop on, said Robert Wang, a general manager with Acer.

“Fast-moving IoT developers keep running into this issue,” he said after Acer’s news conference. “Now they can buy from us.”

It’s a big change for the vendor, given that it once focused on selling consumer notebooks. However, with PC sales sagging and competition rife in the mobile devices area, the company has been shifting toward enterprise products.

That emphasis was apparent at this week’s Computex show in Taipei. Acer notebooks and tablets were still on display, but equal billing was given to itscloud computing business, which is starting to power IoT devices, not only from Acer, but also its clients.

In addition, Acer is hoping to pave the way for more third-party IoT devices. It has partnered with Canonical to install a version of Ubuntu on its aBeing product, so that the hardware can serve Ubuntu developers working on smart connected gadgets.

Source

Facebook To Require Stronger Digital Signature

Facebook will require application developers to adopt a more secure type of digital signature for their apps, which is used to verify a program’s legitimacy.

As of Oct. 1, apps will have to use SHA-2 certificate signatures rather than ones signed with SHA-1. Both are cryptographic algorithms that are used to create a hash of a digital certificate that can be mathematically verified.

Apps that use SHA-1 after October won’t work on Facebook anymore, wrote Adam Gross, a production engineer at the company, in a blog post.

“We recommend that developers check their applications, SDKs, or devices that connect to Facebook to ensure they support the SHA-2 standard,” Gross wrote.

SHA-1 has been considered weak for about a decade. Researchers have shown it is possible to create a forged digital certificate that carries the same SHA-1 hash as legitimate one.

The type of attack, called a hash collision, could trick a computer into thinking it is interacting with a legitimate digital certificate when it actually is a spoofed one with the same SHA-1 hash. Using such a certificate could allow an attacker to spy on the connection between a user and an application or website.

Microsoft, Google, Mozilla and other organizations have also moved away from SHA-1 and said they will warn users of websites that are using a connection that should not be trusted.

The Certificate and Browser Forum, which developers best practices for web security, has recommended in its Baseline Requirements that digital certificate issuers stop using SHA-1 as of Jan. 1.

Source

IBM Buys Blue Box

IBM HAS ACQUIRED Blue Box in an attempt to make its cloud offering even bluer. The Seattle-based company specialises in simple service-as-a-platform clouds based on OpenStack.

This, of course, fits in with IBM’s new direction of a Power PC, OpenStack cloud-based world, as demonstrated by its collaboration with MariaDB on TurboLAMP.

IBM’s move to the cloud is starting to pay off, seeing revenue of $7.7bn in the 12 months to March 2015 and growing more than 16 percent in the first quarter of this year.

The company plans to use the new acquisition to create rapid, integrating cloud-based applications and on-premise systems within the OpenStack managed cloud.

Blue Box also brings a remotely managed OpenStack to provide customers with a local cloud, better visibility control and tighter security.

“IBM is dedicated to helping our clients migrate to the cloud in an open, secure, data rich environment that meets their current and future business needs,” said IBM general manager of cloud services Jim Comfort.

“The acquisition of Blue Box accelerates IBM’s open cloud strategy, making it easier for our clients to move data and applications across clouds and adopt hybrid cloud environments.”

Blue Box will offer customers a more cohesive, consistent and simplified experience, while at the same time integrating with existing IBM packages like the Bluemix digital innovation platform. The firm also offers a single unified control panel for customer operations.

“No brand is more respected in IT than IBM. Blue Box is building a similarly respected brand in OpenStack,” said Blue Box founder and CTO Jesse Proudman.

“Together, we will deliver the technology and products businesses need to give their application developers an agile, responsive infrastructure across public and private clouds.

“This acquisition signals the beginning of new OpenStack options delivered by IBM. Now is the time to arm customers with more efficient development, delivery and lower cost solutions than they’ve seen thus far in the market.”

IBM has confirmed that it plans to help Blue Box customers to grow their technology portfolio, while taking advantage of the broader IBM product set.

Source

« Previous Page — Next Page »