Windows 8 ARM bootloader games

Windows 8 limits owners from booting non-Windows operating systems on ARM tablets.
Goodbye, BIOS (Basic Input Output System), an outmoded tool (can't boot from disks larger than 2 terabytes for one example). Hello, UEFI (United Extensible Firmware Interface), that works like BIOS but with much more security built in. And that security, by demanding digital signatures of operating systems, will allow Microsoft to block non-Windows OSs from booting, particularly on tablets running the ARM processor.
Some freedom for "modders" and Linux fans remain, since x86 systems running Windows 8 must allow the user to turn off the digital certificate requirement. But since tablets are the new hot platform, locking up Windows 8 tablets from operating system modifications really aggravates some people.

Read more

How to tackle the risks of cyber attacks

It's impossible to be completely secure online, especially as more and more devices are connected. Lee Howell of the World Economic Forum suggests four ways to minimise the risks. 

Viruses such as Stuxnet hint at what may become possible

 

Any device with software-defined behaviour can be tricked into doing things its creators did not intend. Any device connected to a network of any sort, in any way, might be compromised by an external party – there are no provably secure systems, only systems whose faults have not yet been discovered.

These two axioms for the cyber age are proposed in the World Economic Forum’s Global Risks 2012 report, published today. Experts who were asked to nominate the risks the world’s leaders should be addressing over the next decade focused heavily on the possibility that the dark side of connectivity could become increasingly apparent, just as over the last decade the Internet’s power for good has been amply demonstrated in realms from business and personal relationships to popular protest.

Viruses such as Stuxnet hint at what may become possible given a 10-year time horizon. Stuxnet is a malicious code, which in 2010 attacked a specific piece of IT equipment — the Siemens controllers used in nuclear facilities in Iran. Its impacts are disputed, but it shows how a virus could conceivably trigger a meltdown in a functioning nuclear power plant, turn off oil and gas pipelines or change the chemical composition of tapwater.

As more and more of our daily lives come to depend on interconnected systems, the axioms for the cyber age become ever more relevant. Consider the growing trend for “smart” electricity meters to be installed in homes, allowing energy use to be managed more efficiently at the network level. The benefits are obvious. But, might a hacker be able to gain access to the electricity network via a domestic meter?
Such things are impossible to rule out with certainty, but it is also easy to be alarmist. Experts point out that viruses as sophisticated as Stuxnet require a team of software developers and intimate knowledge of the target’s security measures. For skilled individuals bearing a grudge, the havoc that can be wreaked online is currently limited to the embarrassing rather than the life-threatening. Nonetheless, the barriers to entry in cybercrime and cyberterrorism are falling all the time.

How do we minimize the risks from the dark side of connectivity? There are four main challenges.
First, online security is a public good: costs are borne privately, but benefits are shared. When an individual weighs the cost of investing in antivirus software, he or she does not account for the benefits of protecting other users from spam and APT attacks if his or her computer is infected with malware. Firms have an incentive to invest in cybersecurity measures that protect their own interests, rather than contributing to the health of the critical information infrastructure that constitutes the systemic whole. In addressing this challenge, we need to find new ways to support collaboration.
Second, we do not yet fully understand how social norms are shaped in the virtual world. Why is it that many people who would be ashamed to admit stealing a DVD from a shop will happily discuss illegally downloading a movie? What are the rules of acceptable engagement for corporate and industrial espionage, especially where the line between private and public enterprise is blurred? To what extent can “hacktivist” movements be accommodated as a virtual expression of legitimate civil disobedience?
Only by understanding and working with human motives can challenges be defined and solutions explored. The key to meeting this second challenge is more research and a greater willingness to engage in frank discussions.
Third, the information we have is sometimes skewed. Vendors of online security products have an interest in talking up the threats of cybercrime, while victims of cybercrime often have an interest in remaining silent. It is therefore very difficult for firms and organizations to get a clear picture of the true levels of the risk and needs for investment. We need better access to information to form policies which will improve global cybersecurity and create efficient markets.
Finally, incentives are misaligned. Lacking legitimate outlets for their talents that are comparably lucrative, hackers are drawn to the thriving black market in “zero-day exploits”, where pieces of code that take advantage of vulnerabilities in software applications can sell for hundreds of thousands of US dollars.
The axioms for the cyber age remind us that there will always be holes in new software. We need to develop better mechanisms to incentivize the well-intentioned to find them first.

Read more

Google relegates Chrome home page after spam criticism

Google has relegated the home page for its own Chrome browser in search results, after it was criticised for using paid links in spam pages to promote the software.

 

The sponsored blog posts, which had identical content, linked to the Google Chrome home page, boosting its position in Google search results.

Paying for such links is in breach of Google’s guidelines because they artificially boost a website's rank. The firm's search algorithm is designed to find high quality, original content that has been linked to without money changing hands and Google manually relegates websites that are found to have used paid links to improve their position.

Google said its anti-spam staff had therefore cut the Google Chrome home page’s PageRank, the score given to every website that helps determine how high up it appears in search results.

"We’ve investigated and are taking manual action to demote www.google.com/chrome and lower the site’s PageRank for a period of at least 60 days,” a spokesman said.

"While Google did not authorize this campaign, and we can find no remaining violations of our webmaster guidelines, we believe Google should be held to a higher standard, so we have taken stricter action than we would against a typical site."

The sponsored blog postings were commissioned by Essence Digital, a London-based digital marketing agency. Google said it had never approved the campaign and that only one of the sponsored blog postings improved the Chrome home page’s PageRank.
“Google have consistently avoided paid postings to promote their products, because in their view these kind of promotions are not transparent or in the best interests of users,” Essence Digital said, apologising for the sponsored postings.
According to Search Engine Land, a leading blog about the web search industry, Google’s self-punishment has had a dramatic effect. The Chrome home page is now ranked as low as 73rd in a search for “browser”, for example. It was previously ranked second in searches for the term.
The strict action comes as Google is under regulatory scrutiny by the European Commission for allegedly using its dominance of web search to promote secondary products.

Read more