"Child," said Aslan, "did I not explain to you once before that no one is ever told what would have happened?"
--C.S. Lewis, Voyage of the Dawntreader

Apparently, not always so. The Meltdown and Spectre attacks are interesting and clever exploits of speculative execution, a trick we are using to execute programs more quickly ( Read more... )

Google Docs shares may not be what they seem; exercise caution, and if you have gotten caught, revoke permissions to the fake app and change your password ASAP.

Telegraph article

Wired article

This entry was originally posted at http://ironphoenix.dreamwidth.org/267235.html. Please comment there using OpenID.

There is a unicode hack which can make a link look like a trusted site while actually sending you to a phishing site in Chrome or FireFox. Actions to fix this are described in the article.

This entry was originally posted at http://ironphoenix.dreamwidth.org/266336.html. Please comment there using OpenID.

When asked to log in to Google, always check that the padlock icon is green and locked and the first text in the address bar is "https://[service].google.com/".

...but everyone thinks it is.

I don't plan to be an early-early adopter on this, but if early reviews are good, particularly from people I trust to assess security issues well (probably better than I would!), I will probably want to get in on it. A recent XKCD sums up my feelings pretty well.

Are any of you folks using it yet? If so, any word?

My 'net was down this weekend, so if there was something posted that I should see, drop me a reply here!

Also, I have teh sick.