Microsoft has shared guidance revealing yet another vulnerability connected to its Windows Print Spooler service, saying it is “developing a security update.”
This can be used by malware already running on a Windows machine or a rogue user to fully compromise the box. The solution? For now, you can only “stop and disable the Print Spooler service,” disabling both the ability to print locally and remotely. Which is not brilliant news for enterprise nor for all those folk home schooling and printing out work from local printers.
Microsoft insisted the latest hole in its print spooler code was distinct from its earlier privilege-escalation and remote-code execution vulnerabilities (CVE-2021-1675 and CVE-2021-34527) and hadn’t been introduced by the July security update. It has therefore been lurking for a while, and the IT giant did not immediately confirm which Windows versions were affected.
The engineer credited with uncovering the latest hole in Microsoft’s Swiss cheese service was Jacob Baines. Baines, a vulnerability researcher, seemed a little nonplussed at the CVE but said he didn’t consider it a variant of PrintNightmare.
If you are here for information on CVE-2021-34481, you’ll have to wait for my DEF CON talk. I don’t consider it to be a variant of PrintNightmare. The MS advisory/CVE was a surprise to me and, as far as I’m concerned, it wasn’t a coordinated disclosure.
— Jacob Baines (@Junior_Baines) July 16, 2021
Just a nightmare for admins having to manage printers using the Print Spooler service then.
Baines told The Register that the issue had been disclosed to Microsoft on 18 June. He informed them of a 7 August deadline (for DEF CON).
“They finally confirmed the issue on Monday of this week (July 12),” he said, “and informed me of CVE assignment yesterday (July 15).”
We’d normally expect a disclosure to happen once there is a patch ready or the issue goes public.
Baines is due to make a presentation at DEF CON entitled “Bring Your Own Print Driver Vulnerability” which promises a talk on how to use vulnerable drivers to escalate one’s Windows privileges.
It sounds familiar, and Mimikatz creator Benjamin Delpy joked, when asked for comment by The Register, it “seems a little bit related” to his own findings.
#printnightmare – Episode 3
You know that even patched, with default config (or security enforced with #Microsoft settings), a standard user can load drivers as SYSTEM?
— 🥝 Benjamin Delpy (@gentilkiwi) July 15, 2021
Baines himself told The Register: “To my knowledge, and Microsoft has not clarified to me otherwise, the specific issue I shared with them isn’t a publicly known/used issue. I have not shared the details publicly. I haven’t seen anyone else do so either.”
“Of course,” he added, “Microsoft knows far more about these printer related issues than I do, and perhaps they are aware of a public disclosure elsewhere. However, they did not share that information with me.”
The Reg has asked Microsoft what versions of Windows were affected, when a patch would be available and why it chose to make the disclosure in this way. A Microsoft spokesperson told us the company had nothing further to share beyond the CVE, which does not explain any of that. ®
AMG GT R Faces Fearsome Porsche 911 Duo In Three-Way Drag Race – Motor1
In the world of Porsche, attention is currently focused on upcoming 911 models for the 992-series generation. Oh how quickly we forget about the cars that came before, but this recent drag racing video from Cars With Pilot Tseno on YouTube reminds us just how good the 991.2 911s still are.
This three-way drag race sees the previous-generation Porsche 911 GT3 RS and 911 Turbo S challenge a Mercedes-AMG GT R, but it’s not just a simple line-em-up format. No less than six races are held on this empty runway, representing real-world conditions. That’s important, because we know the 911 Turbo S is easily the quickest of the bunch on paper. But when it comes to an unprepped surface, can it properly use all its 580 horsepower (433 kilowatts) to defend itself?
Before answering that question, four races are held between the contenders. You probably know the stats but just in case, here’s a refresher. The 991.2 911 GT3 RS runs a rev-happy 4.0-liter flat-six pumping out 520 naturally aspirated hp (388 kW), while the AMG GT R uses a twin-turbocharged 4.0-liter V8 making 577 hp (430 kW). It seems like an unfair fight at first, but the GT3 RS is considerably lighter and it carries the majority of its mass over the rear tires. That translates to a significant traction advantage which carries the GT3 RS to an early lead in each race. The Merc comes on strong at the other end, but is it enough?
We’d love to build these preliminary contests into something extraordinary for the final two three-way races with the Turbo S, but neither challenger has a prayer against the boosted 911. In both races, the distance to second place is bus lengths, which means the real drama in this competition is between the GT3 RS and the AMG GT R. Which one takes the overall second-place crown? Out of six races, both the GT R and the GT3 RS score victories over the other but one holds a clear advantage. Any guesses on the victor in this GT R-versus-GT3 RS battle before you click the video?
Corning's newest Gorilla Glass is for smartphone cameras – MobileSyrup
Corning has unveiled a new Gorilla Glass set, but it’s not for phone displays — it’s for smartphone camera lenses.
According to Corning’s announcement video, traditional smartphone lenses have an anti-reflective coating on the inside that allow light to enter and hit the sensor, producing an image, but these traditional coatings still lose on some of the light that reflects back, never registering on the sensor.
Corning’s new product, the DX and DX+ for camera lenses, reportedly can capture 98 percent of incoming light (in comparison to 90-92 percent with traditional camera glass), allowing for a more detailed and crisp image, all while protecting your smartphone lens from scratching or cracking.
While this sounds wonderful, Corning points out that the glass isn’t something new. DX and DX+ have been used in smartwatches since 2018, but the design has now been modified to meet the demands of a smartphone camera lens, i.e., letting in as much light as possible.
Additionally, Corning demonstrated how the new DX and DX+ hold up durability-wise when put against a standard AR coating and Corning’s regular Gorilla Glass and also claims that the DX+ is near sapphire, which is known for its immense durability.
Although no particular phones with Gorilla Glass DX/DX+ have been revealed, Corning said in its press release that Samsung will be the first client to employ a Gorilla Glass DX lens cover on a future smartphone.
Image credit: Corning Gorilla Glass
Dead Space Remake Officially Announced at EA Play – CGMagazine
After weeks of different rumors and leaks, the Dead Space remake was officially confirmed at EA Play 2021.
The Dead Space remake wasn’t given any kind of release window, but it is in development for next-gen systems only, meaning PS5, Xbox Series X|S, and PC. The game is being built with the Frostbite Engine and is handled by EA Motive, who is best known as the developer of the recent Star Wars Squadrons. The original trilogy was developed by Visceral Games, which was shuttered by EA in 2017.
The announcement didn’t show much at all but presented fans with a short teaser trailer showing a grisly space station as the iconic sounds of Necromorphs echoed in the background. As the camera zooms in Isaac Clarke’s backpack lights up and reveals the words Dead Space. A press release from EA says fans will “experience an improved story, characters, gameplay mechanics.” Phillippe Ducharme, Senior Producer of Dead Space, says the team at Motive has invited fans to give their feedback on the remake ever since the early days of development. With that in mind, it’s not exactly clear how far along in development the Dead Space remake actually is. You can watch the reveal trailer yourself down below.
One of the most prolific survival-horror series of all time, it’s been eight years since the release of the last game in the series, Dead Space 3. The franchise was always known for its nail-biting horror and inventive combat, requiring players to hack off the limbs of enemies in order to both slow them down and kill them. Here’s EA’s description of the first game and remake,
“In Dead Space, Isaac Clarke is an everyman engineer on a mission to repair a vast, sprawling starship, the USG Ishimura, only to discover something has gone horribly wrong. The ship’s crew has been slaughtered and infected by some alien scourge…and Isaac’s beloved partner, Nicole, is lost somewhere on board. Now Isaac is alone with only his tools and engineering skills as he attempts to uncover the nightmarish mystery of what happened aboard the Ishimura. Trapped with hostile creatures called “necromorphs”, Isaac faces a battle for survival, not only against the escalating terrors of the ship, but his own crumbling sanity.”
While Dead Space is coming back, Glen Schofield former executive producer of the series, has gone on to make a brand new sci-fi horror game called The Callisto Protocol.
Investing inside a corporation: what you need to know – MoneySense
Calgary real estate predicted to moderate this year, with hot spring demand – Calgary Herald
Art exhibits return to Callander’s Alex Dufresne gallery – BayToday.ca
Silver investment demand jumped 12% in 2019
Europe kicks off vaccination programs | All media content | DW | 27.12.2020 – Deutsche Welle
Iran anticipates renewed protests amid social media shutdown
Media21 hours ago
Current's 2021 Public Media Salary Survey – Current
Science24 hours ago
Why some scientists want to rebrand shark attacks as 'negative encounters' – CBC.ca
News23 hours ago
Global Affairs Canada 'engaging' with staff in Austria following reports of 'Havana syndrome' symptoms – CTV News
Politics23 hours ago
Jason Kenney's longing for Alberta's pre-COVID politics – iPolitics.ca
Tech14 hours ago
OnePlus Nord 2: An impressive 5G phone at an affordable price – CNET
Investment24 hours ago
Newcomer SageBlan backs up its belief in Montreal tourism with heavy investment – Montreal Gazette
News22 hours ago
Unmarked grave findings in Canada prompt reckoning among U.S. churches – CBC.ca
Science22 hours ago
DeepMind puts the entire human proteome online, as folded by AlphaFold – Yahoo Movies Canada