Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

Yet another security flaw with Intel chips.

Intel has addressed a vulnerability in the configuration of several CPU series that allow an attacker to alter the behavior of the chip’s SPI Flash memory —a mandatory component used during the boot-up process.

According to Lenovo, who recently deployed the Intel fixes, “the configuration of the system firmware device (SPI flash) could allow an attacker to block BIOS/UEFI updates, or to selectively erase or corrupt portions of the firmware.”

Source: Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

Cops Around the Country Can Now Unlock iPhones, Records Show – Motherboard

FBI Director Christopher Wray recently said that law enforcement agencies are “increasingly unable to access” evidence stored on encrypted devices.

Wray is not telling the whole truth.

Police forces and federal agencies around the country have bought relatively cheap tools to unlock up-to-date iPhones and bypass their encryption, according to a Motherboard investigation based on several caches of internal agency documents, online records, and conversations with law enforcement officials. Many of the documents were obtained by Motherboard using public records requests.

Source: Cops Around the Country Can Now Unlock iPhones, Records Show – Motherboard

These Ex-Spies Are Harvesting Facebook Photos For A Massive Facial Recognition Database

When Mark Zuckerberg appeared before the House Energy and Commerce Committee last week in the aftermath of the Cambridge Analytica revelations, he tried to describe the difference between “surveillance and what we do.” “The difference is extremely clear,” a nervous-looking Zuckerberg said. “On Facebook, you have control over your information… the information we collect you can choose to have us not collect.”

But not a single member of the committee pushed the billionaire CEO about surveillance companies who exploit the data on Facebook for profit. Forbes has uncovered one case that might shock them: over the last five years a secretive surveillance company founded by a former Israeli intelligence officer has been quietly building a massive facial recognition database consisting of faces acquired from the giant social network, YouTube and countless other websites. Privacy activists are suitably alarmed.

Source: These Ex-Spies Are Harvesting Facebook Photos For A Massive Facial Recognition Database