Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms Cloud comms platform Twilio has confirmed its private GitHub repositories were cloned after it became the latest casualty of the compromised credential-stealing Codecov script. Codecov, a cloud-based tool for assessing how much code is covered by software tests, revealed last month that a script called B
British Airways hack: Infosec experts finger third-party scripts on payment pages
British Airways hack: Infosec experts finger third-party scripts on payment pages Security experts are debating the cause of the British Airways mega-breach, with external scripts on its payment systems emerging as a prime suspect in the hack. Why infosec folk think it was the payment system Although BA hasn't disclosed the root of the breach, the unusual precision it ascribed to the hack's durati
Cloud wars: Big Four providers increase dominance, Alibaba grows fastest – Gartner
Gartner analyst talks Azure 'reliability' issue, AWS strategy 'misses', Google 'human' concerns Analysis According to a Gartner report, the top five IaaS (Infrastructure as a service) cloud providers have increased their share of the global market to nearly 77 per cent, up from under 73 per cent in 2017. Number three in the market after Amazon and Microsoft, and the fastest growing, is Alibaba, wi
settlement.js not found: JavaScript package biz NPM scraps talks, fights union-busting claims
CEO speaks to The Reg as we dig into labor complaints, future of npm CLI Special report JavaScript package registry and aspiring enterprise service NPM Inc is planning to fight union-busting complaints brought to America's labor watchdog by fired staffers, rather than settle the claims. A National Labor Relations Board (NLRB) hearing has been scheduled next month at the agency's office in Oakland,
Nice People Matter? NPM may stand for Not Politely Managed – job cuts leave staff sore
Layoffs at JavaScript package registry raise questions about fate of community resource NPM, Inc, the company behind the widely used NPM JavaScript package repository, stands for Node Package Manager. Inside the small but vital biz, the name gave rise to an alternative de-abbreviation, Nice People Matter – but that might be about to change. For those who don't know, NPM is the default package mana
Google cloud VMs given same IP addresses ... and down they went
Google gave some of its cloud customers a rotten weekend by breaking a bunch of virtual machines. Detailed in this incident report, the company first noticed problems at nearly beer o’clock on Friday afternoon, June 15th, Pacific Time – just after midnight on Saturday for European users and early Saturday morning in Asia. The problem was described as “Google Compute Engine VM instances allocated w
End of the road for Basho: Court puts biz into receivership
Troubled NoSQL database-flinger was in ‘financial freefall’, court docs show Basho, the outfit that developed the Riak distributed database, has been put into receivership after it stopped paying the bills to its main creditors. Earlier this month, The Reg revealed the extent of the company’s troubles, with offices shuttering around the world and swathes of staff being laid off. It was clear then
Intel's Skylake and Kaby Lake CPUs have nasty hyper-threading bug
During April and May, Intel started updating its processor documentation with a new errata note – and over the weekend we learned why: the Skylake and Kaby Lake silicon has a hyper-threading bug. The erratum is described in detail on a Debian mailing list, and affects Skylake and Kaby Lake Intel Core processors (in desktop, high-end desktop, embedded and mobile platforms), Xeon v5 and v6 server pr
Oracle finally targets Java non-payers – six years after plucking Sun
Oracle is massively ramping up audits of Java customers it claims are in breach of its licences – six years after it bought Sun Microsystems. A growing number of Oracle customers and partners have been approached by Larry Ellison’s firm, which claims they are out of compliance on Java. Oracle bought Java with Sun Microsystems in 2010 but only now is its License Management Services (LMS) division c
UH OH: Windows 10 will share your Wi-Fi key with your friends' friends
Updated A Windows 10 feature, Wi-Fi Sense, smells like a security risk: it can share access to private Wi-Fi networks with the user's friends. Those friends include their Outlook.com (nee Hotmail) contacts, Skype contacts and, with an opt-in, their Facebook friends. There is method in the Microsoft madness – it saves having to shout across the office or house “what’s the Wi-Fi password?” – but eas
Google swaps out MySQL, moves to MariaDB
'They're moving it all,' says MariaDB Foundation headman Updated Google is migrating its MySQL systems over to MariaDB, allowing the search company to get away from the Oracle-backed open source database. The news came out at the Extremely Large Databases (XLDB) conference in Stanford, California on Wednesday, one month after El Reg reported that Google had assigned one of its engineers to the Mar
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Mozilla decides Trusted Types is a worthy security feature
Log4j hole revives chatter on Big Biz funding open source
Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can't be SIM swapped
IBM blames 'external' network provider, incorrect routing, traffic flood for its two-hour cloud outage
Apple insists it's totally not doing that thing it wasn't accused of: We're not handing over Safari URLs to Tencent – just people's IP addresses
Amazon reveals 'Nitro'... Custom ASICs and boxes that do grunt work so EC2 hosts can just run instances
Inside OpenSSL's battle to change its license: Coders' rights, tech giants, patents and more
VMware goes after biz critical apps with vSphere 5.5