Live updates: Judge blocks Trump’s federal funding freeze for loans, grants The Washington Post
source
Day: January 29, 2025
SLAP and FLOP browser vulnerabilities threaten nearly every Apple device since 2021 – Macworld
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Fresh off the fix of a zero-day vulnerability in iPhones, iPads, Macs, and other devices, security researchers at the Georgia Institute of Technology have revealed a pair of vulnerabilities that affect all of Apple’s modern devices.
First reported at BleepingComputer, these are side-channel attacks that can use special code on websites to allow websites to execute “side-channel” attacks that steal data from other web sessions. A malicious site could, for example, see your location data from a Google Maps tab, or unencrypted email from an open browser tab that is logged in to your secure email account. Banking info, login info, purchase history—there are lots of potential targets.
Most modern browsers “sandbox” web sessions, so that one browser tab or window can’t access the data from other tabs/windows. The SLAP and FLOP vulnerabilities exploit features of the latest Apple processors to get around this sandboxing.
The M2 and A15 generation of processors (and later) have a feature called Load Address Prediction (LAP), which it tries to predict the memory address of the next memory request in order to prefetch it and speed things up. SLAP (Speculation Attacks via Load Address Prediction) first falsely “trains” that predictive algorithm and then uses that the pull targeted data from other browser processes.
SLAP seems to work only in Safari.
Starting with the M3/A17 generation of processors, Apple goes a step further than loading data from predicted memory addresses. They have a feature called Load Value Predictor (LVP), which guesses what the value will be from a memory request. It’s all to help the processor run faster by not having to wait around for data to come from memory.
FLOP (False Load Output Predictions) issues instructions that return the same values all the time to “trick” the predictor into expecting a certain value even when the data has changed, and that lets them execute code on “incorrect” data values.
FLOP works in Safari and Chrome.
The researchers say the following Apple devices have the hardware necessary to execute these flaws.
The Georgia Institute of Technology researchers say there is no evidence that either SLAP or FLOP has been used in the wild. Similarly, Apple told BleepingComputer, “Based on our analysis, we do not believe this issue poses an immediate risk to our users.”
Yes, but it appears to be taking some time. The researchers disclosed SLAP to Apple on May 24, 2024, and FLOP on September 3, 2024. Apple has released numerous updates since that time without fixing the issue here.
You can read more about these exploits and see test demonstrations of them in action at the SLAP and FLOP site set up by the Georgia Institute of Technology researchers.
Jason has written about technology for more than 25 years – first in the gaming press, then focusing on enthusiast PCs and general technology. He enjoys learning how complicated technology works and explaining it in a way anyone can understand.
Macworld Sweden
Macwelt Germany
Subscribe to the Macworld Digital Magazine
Manage Subscription
Newsletter
Follow us on WhatsApp
How to protect yourself from the bird flu – KOAT New Mexico
The first bird flu death was reported in the U.S. by the Louisiana Department of Health earlier this month.
Bird flu, or avian influenza, primarily impacts birds but can infect other animals as well. However, it is a growing concern due to its possible impact on the poultry industry and personal health.
Dr. Abinash Achrekar, KOAT and University of New Mexico health expert explains who is most at risk of getting it.
“Humans usually get bird flu from direct exposure to infected animals, so farmworkers and people who keep backyard flocks are at the highest risk,” Achrekar said. “On farms, the virus can also become airborne when birds are moved or during cleaning. Additionally, bird flu can infect dairy cattle, and raw milk from these cows might carry the virus.”
It’s important to understand bird flu spreads through droppings, saliva and mucus from infected birds. Human cases are rarer than in birds and other animals that can become infected.
Achrekar also offers some guidance on avoiding the illness anyone can follow.
“The best protection is avoiding contact with sick or dead birds and their droppings,” Achrekar said. “If you work with birds or cows, wearing gloves, goggles, and a mask, like an N95, may be a good idea. Avoid drinking raw milk. Cook poultry and eggs thoroughly.”
Hearst Television participates in various affiliate marketing programs, which means we may get paid commissions on editorially chosen products purchased through our links to retailer sites.
Costilla County death investigated as possible animal attack – The Denver Post
Digital Replica Edition
Sign up for Newsletters and Alerts
Sign up for Newsletters and Alerts
Digital Replica Edition
Trending:
Costilla County and state law enforcement are investigating a person’s death in southern Colorado as a possible animal attack.
The Costilla County Sheriff’s Office, Colorado Bureau of Investigation and Colorado Parks and Wildlife are looking into a death in the Sangre De Cristo Ranches southeast of Fort Garland, sheriff’s officials said Saturday in a Facebook post.
The sheriff’s office learned of the death at around 7 p.m. Thursday and contacted state officials, said Colorado Parks and Wildlife spokesperson John Livingston.
Sheriff’s officials did not release further information about the death and could not immediately be reached for comment.
Investigators are waiting on information from the El Paso County Coroner’s Office to determine the cause of death and still analyzing what type of animal may be responsible for the attack.
“If you live in or around or visit the area, be vigilant and aware of your surroundings,” the sheriff’s office said on Facebook. “Deputies have hiked the immediate area with the assistance of CBI and were not able to locate anything to identify the animal.”
Sign up to get crime news sent straight to your inbox each day.
Get more Colorado news by signing up for our daily Your Morning Dozen email newsletter.
Copyright © 2025 MediaNews Group
Internet Archive is back up as read-only after data breach – Mashable
The Internet Archive’s Wayback Machine is back up in read-only mode following massive data breaches last week.
Brewster Kahle, founder and digital librarian of the Internet Archive, posted an update on Monday morning on X (formerly Twitter) announcing the site’s return in a “provisional manner.”
“Safe to resume but might need further maintenance, in which case it will be suspended again,” he wrote. “Please be gentle.”
Kahle wrote the site will not yet reinstate its “Save Page Now” feature, which archives the page as it currently appears and generates a permanent URL.
Last week, the Internet Archive came under distributed denial of service (DDoS) attacks from hacker groups, who accessed sensitive user data for millions of people. The non-profit site keeps saved versions of websites and other forms of digital media, accessible to anyone through its platform The Wayback Machine.
Mashable’s Matt Binder has everything you need to know about the Internet Archive’s data breaches and DDoS attacks.
Topics Cybersecurity
Shannon Connellan is Mashable’s UK Editor based in London, formerly Mashable’s Australia Editor, but emotionally, she lives in the Creel House. A Tomatometer-approved critic, Shannon writes about everything (but not anything) across entertainment, tech, social good, science, and culture.
Vatican releases document on relationship of human and artificial intelligence – CatholicVote org
$0.00
US Papal Visit / Flickr
CV NEWS FEED // The Vatican released a document this week addressing the complex relationship between human intelligence and artificial intelligence (AI), urging reflection on this “new and significant phase in humanity’s engagement with technology.”
Written by Prefects Víctor Manuel Card. Fernández, and José Card. Tolentino de Mendonça, along with Msgr. Armando Matteo, and Most Rev. Paul Tighe, the note was approved by the Pope and ordered to be published Jan. 28, the feast day of Doctor of the Church St. Thomas Aquinas.
The document seeks to differentiate between human and artificial intelligence, present the Christian understanding of intelligence, and offer guidelines to ensure that AI development upholds human dignity and promotes the common good.
The reflection also addresses considerations of AI’s impact on society, human relationships, the economy and labor, healthcare, education, misinformation and deepfakes, privacy and surveillance, climate change concerns, warfare, and human persons’ relationships with God.
The authors cautioned about the development and use of artificial intelligence in particular in the context of God’s desire for humanity to grow in knowledge and innovate in sciences, technology, arts, and beyond. They noted that AI’s capacity to mimic human intelligence raises ethical questions concerning truth, responsibility, and safety, and has significant implications.
“As AI advances rapidly toward even greater achievements, it is critically important to consider its anthropological and ethical implications,” the authors wrote. “This involves not only mitigating risks and preventing harm but also ensuring that its applications are used to promote human progress and the common good.”
The authors also clarified the distinction between artificial and human intelligence, writing, “In the case of humans, intelligence is a faculty that pertains to the person in his or her entirety, whereas in the context of AI, ‘intelligence’ is understood functionally, often with the presumption that the activities characteristic of the human mind can be broken down into digitized steps that machines can replicate.”
Moreover, they later wrote, “AI’s advanced features give it sophisticated abilities to perform tasks, but not the ability to think. This distinction is crucially important, as the way ‘intelligence’ is defined inevitably shapes how we understand the relationship between human thought and this technology.”
The authors also stressed the importance of education in forming individuals holistically. Citing the Second Vatican Council, the authors reiterated that true education goes beyond imparting knowledge; it seeks to develop intellectual, cultural, and spiritual aspects of a person, fostering community life and relationships.
While AI can enhance education by providing personalized support and resources, it poses challenges, such as increasing reliance on technology and diminishing independent problem-solving skills. The authors warned that excessive use of AI could lead to superficial learning and a lack of critical thinking.
Rather than training young people to accumulate information and produce quick responses using AI, education should emphasize “the responsible use of freedom to face issues with good sense and intelligence,” the authors wrote.
In the final segment, titled “AI and Our Relationship with God,” the document returned to the fundamental distinction between humans and artificial intelligence, noting that for all the ingenuity with which it was created, AI represents only “a pale reflection of humanity.”
“In contrast,” the authors continued, “human beings, ‘by their interior life, transcend the entire material universe; they experience this deep interiority when they enter into their own heart, where God, who probes the heart, awaits them, and where they decide their own destiny in the sight of God.’”
The authors called for an increase in “human responsibility, values, and conscience” in response to technological advancements, and encouraged consideration of the question “whether in the context of this progress man, as man, is becoming truly better, that is to say, more mature spiritually, more aware of the dignity of his humanity, more responsible, more open to others, especially the neediest and the weakest, and readier to give and to aid all.”
Warning against shifting blame to machines for societal issues, the authors asserted that only humans can bear moral responsibility and that addressing technological challenges requires spiritual growth.
Additionally, they called for a renewed appreciation of the human experience amid the rapid pace of digitization, cautioning against “digital reductionism” that overlooks the non-quantifiable aspects of life.
“The vast expanse of the world’s knowledge is now accessible in ways that would have filled past generations with awe,” the authors wrote. “However, to ensure that advancements in knowledge do not become humanly or spiritually barren, one must go beyond the mere accumulation of data and strive to achieve true wisdom.”
The authors concluded that true wisdom is essential for addressing the profound ethical challenges posed by AI, and true perfection is not measured by a person’s knowledge alone but by the depth of their charity.
By entering your phone number and selecting to opt in, you consent to join a recurring SMS/MMS text messaging program that will provide alerts, updates, donation solicitations, and other important information. By participating, you agree to the terms & privacy policy for auto-dialed messages from CatholicVote to the phone number you provide. Message frequency may vary. Msg&data rates may apply. Reply HELP for help or STOP to opt-out at any time. SMS information is not rented, sold, or shared. View Privacy Policy and Terms & Conditions.
Privacy Policy
Cookie Policy
Terms and Conditions
Lost your password?