Policy Indications: Harvard Teacher Fellows provides new teachers, local impact  |  International Edu News: Oxford's COVID-19 vaccine offers a high level of protection  |  Leadership Instincts: Harvard University CFAR announces leadership change  |  Parent Interventions: Virtual holiday toy and joy drive  |  Leadership Instincts: New Zealand PM to receive 2020 Gleitsman International Activist Award  |  International Edu News: Science and Innovation Fellowship accepting applications  |  Policy Indications: National Coalition calls for new White House-led focus on children and youth  |  Education Information: Faculty alter new first-year requirement because of continuing Covid-19  |  Leadership Instincts: Phiala Shanahan receives Kenneth G. Wilson Award  |  Leadership Instincts: Erik Demaine wins 2020 MIT Bose Award for Excellence in Teaching  |  Education Information: Second annual MIT Science Bowl Invitational takes virtual format  |  International Edu News: Meghan Davis named 2022 Mitchell Scholar  |  National Edu News: Multilateral cooperation is the key to overcoming global challenges: Minister  |  National Edu News: Tenth edition of National Science Film Festival kicks offin a virtual mode  |  Technology Inceptions: ‘WalkON Suit 4’ Releases Paraplegics from Wheelchairs​  |  
January 05, 2018 Friday 04:39:27 PM IST

Google deploys patch for security flaws in chips

Technology Inceptions

San Francisco: To safeguard its customers from potential security bugs in chips, Google has deployed a novel chip-level patch across its entire infrastructure, resulting in only minor declines in performance in most cases.

"In response to the vulnerabilities that were discovered, we developed a novel mitigation called 'Retpoline' -- a binary modification technique that protects against 'branch target injection' attacks," Matt Linton, Senior Security Engineer and Pat Parseghian, Technical Programme Manager at Google wrote in a joint blog post on Thursday."We shared 'Retpoline' with our industry partners and have deployed it on Google's systems, where we have observed negligible impact on performance," the engineers added.

In addition, the tech giant has deployed "Kernel Page Table Isolation" (KPTI) which is a general purpose technique for better protecting sensitive information in memory from other software running on a machine.

"KPTI" has been deployed to the entire fleet of Google Linux production servers that support all of our products, including Search, Gmail, YouTube and Google Cloud Platform, the company said in a statement. Earlier, Intel had confirmed serious security flaws in modern processors that could affect its computers released in the last two decades.


The chip-maker had said that the bug, if used for malicious purposes, has the potential to improperly gather sensitive data from computing devices and promised to fix the bug as soon as possible.

It added that the vulnerability, discovered by a British tech website, the Register, is not unique to Intel products. It argued that "many types of computing devices -- with many different vendors' processors and operating systems -- are susceptible to these exploits".

Comments