Tuesday Random Stuff…

Insecure Nvidia Drivers
It was widely reported today that drivers older than the current Nvidia drivers have several known security vulnerabilities.
The latest secure ones are version 431.60 from July 23rd.
Download | Release Notes

CVE-2019-1125 | Windows Kernel Information Disclosure Vulnerability
“An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information that could be used to try to compromise the affected system further.
On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre) involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. This vulnerability, released on August 6, 2019, is a variant of the Spectre Variant 1 speculative execution side channel vulnerability and has been assigned CVE-2019-1125.
Microsoft released a security update on July 9, 2019 that addresses the vulnerability through a software change that mitigates how the CPU speculatively accesses memory. Note that this vulnerability does not require a microcode update from your device OEM.”
This is an update on the Spectre mitigation issues.

Stuff I bookmarked recently. Some off topic, some not:

How the smartphone affects Mobile Network Experience Report
“Samsung users experienced faster download speeds than Apple and Huawei users in 35% of countries, across 40 countries analyzed…In the U.S., Samsung users experienced download speeds 8.2 Mbps faster than iPhone users.”

Amazon Is Coaching Cops on How to Obtain Surveillance Footage Without a Warrant
“When police partner with Ring, Amazon’s home surveillance camera company, they get access to the “Law Enforcement Neighborhood Portal,” an interactive map that allows officers to request footage directly from camera owners. Police don’t need a warrant to request this footage, but they do need permission from camera owners.
Emails and documents obtained by Motherboard reveal that people aren’t always willing to provide police with their Ring camera footage. However, Ring works with law enforcement and gives them advice on how to persuade people to give them footage.”

My “everyday carry knife” is on sale: Gerber Paraframe Mini Knife, Fine Edge, Stainless Steel
2 1/4 inch blade, pocket clip
List Price: $13.00 | Price:$8.94 | You Save: $4.06 (31%)

Fitness Experts Debunk 17 Exercise Myths
“Crunches will give you abs. Cardio is the key to weight loss. These are two of more than a dozen exercise myths that do more harm than good. Business Insider brought in three professional athletic trainers to debunk them.”