Subject: General Tech | September 9, 2012 - 04:19 PM | Scott Michaud
Tagged: Malware, IE10, flash
Recent statements from Microsoft show that they are not afraid to wait a little bit before shipping patches with their bundled Flash in Internet Explorer 10. The issue is more contained than is let on by Ars Technica – but also raises a bigger security issue for all of us at all times.
By far the worst enemy for security is complacency.
I often pick on Apple for their security practices. They are perceived as being secure despite their horrendous record of handling security updates – delaying a critical patch for privately disclosed vulnerabilities until after its reveal at Blackhat because Apple could not devote the programmer to the task.
That mentality has been everywhere – from Sony to Microsoft in the Windows XP era to Macromedia & Adobe.
In this case the issue is that Microsoft has been delaying updates to the built in copy of Adobe Flash preinstalled with Internet Explorer 10. Once a patch has been released attackers are able to figure out what the patch fixes and potentially exploit it for those who have yet to update. There are quite a few subtle caveats with this story which need to be discussed before opinions are made.
... Relatively speaking...
First and foremost – Flash support on the Metro-based Internet Explorer 10 is limited to a whitelist. Flash is not exposed to websites which have not been flagged by Microsoft as safe and requiring backwards compatibility with Flash.
Websites become compromised all the time. Should one of the whitelisted websites get attacked it could become forced to serve a Flash applet to its users. The delay between Adobe and Microsoft patching dates gives the attackers a window to exploit all IE10 users until the whitelisted website notices. Attacks like these are very commonplace recently.
As an aside – there is quite a bit of confusion over Internet Explorer 10 on the desktop. According to the RTM evaluation it appears as though the only way to update Flash for Internet Explorer is through Windows Update even when not using the Metro browser. The whitelist is also in effect for Windows on the desktop although it seems like users are able to add their own exemptions. It appears like user-set exemptions is unique to the desktop version of IE.
It is disconcerting to see a platform become complacent to potential security issues intentionally. To be fair it is entirely possible that Google Chrome could have similar issues as they too handle Adobe Flash integration. Unlike IE10, Google Chrome does allow you to disable the built in Flash and manage your updates directly from Adobe although the process is far too complicated for most users.
Subject: General Tech | July 3, 2012 - 02:07 PM | Jeremy Hellstrom
Tagged: purchase, billions, micron, Elpida, rexchip, powerchip, DRAM, flash
Micron has been very busy lately, spending $2.5 billion USD to purchase Elpida and another $334 million USD to purchase another 24% of DRAM maker Rexchip from Powerchip. The latter of those purchases gives Micron a total of 89% of the existing shares of Rexchip which may not give them outright ownership of Rexchip but gives them such a huge majority that they can determine the outcome of any vote which is presented to shareholders. Rexchip brings a single 300mm Fab working on 30nm process to the table, which gives Micron a bit more manufacturing capability to utilize for what is likely to be a busy season for them.
The Elpida purchase is much bigger for both the industry and Micron, especially as they decided to buy the company outright instead of purchasing a subsidiary or only the IP of Elpida. Instead the company will remain intact for the near future though there will likely be changes to the executive structure as they are integrated with Micron. Not only does this purchase give them access to all property, intellectual or physical, that Elpida currently possesses it give Micron an in at Apple as it was Elpida that supplied much of the chips used by Apple. That would put Micron in the enviable position of supplying both PC and Apple products. DigiTimes breaks down the deal here.
"Micron Technology and Elpida Memory's trustees have signed a definitive sponsor agreement for Micron to acquire Elpida, according to the US memory chipmaker. The agreement has been entered into in connection with Elpida's corporate reorganization proceedings conducted under the jurisdiction of the Tokyo District Court.
Micron revealed that under the agreement, JPY200 billion (US$2.5 billion) total consideration and less certain reorganization proceeding expenses will be used to satisfy the reorganization claims of Elpida's secured and unsecured creditors. Micron will acquire 100% of the equity of Elpida for JPY60 billion to be paid in cash at closing."
Here is some more Tech News from around the web:
- Users enraged by Cisco's cloudy 'upgrade' to Linksys routers @ The Register
- Mozilla's 'Boot to Gecko' morphs into Firefox OS @ The Register
- The impact of Ivy Bridge on current processor pricing @ eTeknix
- Creating a Bootable DOS Flash Drive the Easy Way @ Techgage
- Kensington Absolute Power Dual USB Wall Charger Review @ NikKTech
- The TR Podcast 114: Gigahertz graphics and high-def tablets
Subject: Storage | July 3, 2012 - 12:21 AM | Tim Verry
Tagged: ssd, slc, server, sandisk, PCIe SSD, flash, enterprise, caching
Flash storage company Sandisk has recently jumped into the world of enterprise PCI-E caching SSDs – what they are calling Solid State Accelerators. Currently, they are offering a 200GB and 400GB model under the company’s Lightning PCIe series. The SSDs feature a proprietary Sandisk controller driving 24nm SLC NAND flash, a PCI-E 2.0 x4 interface, and maximum power draw of 15 watts.
The Lightning Accelerators use the NAND flash for Sandisk’s own foundry and offer a large performance boost for servers and workstations over hard drives and SATA SSDs. It is capable of 410 MB/s sequential reads or 110,000 IOPS. Further, when using 4KB and 8KB blocks, the drives can reach 23,000 and 17,000 read/write IOPS respectively. Other specifications include an average response time of 245 microseconds, and less than 30 millisecond maximum response times. The Solid State Accelerators also feature sustained read and write latencies as low as 50 microseconds.
Sandisk has built the drives so that they can be configured as boot drives, storage drives, or caching drives. The company supports up to 5 drives in a single system, for a maximum of 2TB of flash storage. In addition, Sandisk is offering up its Flashsoft software that allows the Lightning Accelerators to be used as caching drives on Windows-based systems. Unfortunately, that is an additional cost which is not included in the already pricey SSDs (good thing for corporate expense accounts!).
Speaking of pricing, the 200GB LP206M has an MSRP of $1,350 while the 400GB LP406M has an MSRP of $2,350. Both cards have five year warranties and a MTBF rating of 2 million hours. You can find more information on the Sandisk Website.
It will be interesting to see how this Sandisk accelerator stacks up to the likes of the Intel 910 and FusioIO drives! The FusionIO FX, for example, gives you 420GB of QDP MLC NAND for $2,495, which works out such that Sandisk has a slightly lower cost-per-gigabyte value and SLC flash. We will have to wait for some independant reviews to say which drive is actually faster, however.
Subject: Storage | June 4, 2012 - 06:00 PM | Allyn Malventano
Tagged: computex, SF-2000, sandforce, LSI, flash
As some of you may already be aware, SandForce was acquired by LSI back in January of this year. SandForce has made a very popular SSD controller for some time now and was the first maker to demo a controller driving 25nm flash (last year). Now SandForce (under LSI) has done it once again. This time with the same type of controller driving both 19nm Toshiba and 20nm Micron (IMFT) flash memory types:
The release from LSI reports the controller supporting all six flash vendors, giving some serious flexibiltiy to makers of flash memory systems and products. Aside from a confirmation of the ability to drive newer flash memory types, the remainder of the specs appear largely the same, minus some additional tweaks to ECC necessary to support increased error rates encountered as dies shrink.
Full press release from LSI after the break:
Subject: General Tech, Systems, Mobile | May 23, 2012 - 10:46 PM | Scott Michaud
Tagged: WOA, windows 8, flash
Microsoft has backed down, to some extent, from their “plug-in free; web standards only” position for the Metro-half of IE10. Some, but not all, Flash content will be able to play in the Metro browser. This change should be included in the Windows 8 Release Preview expected to be released in early June.
You may turn your back on Adobe but you’ll be back in a Flash.
Rafael Rivera has published a post on his Within Windows blog which he co-authored with Paul Thurrott about Flash integration with the Metro web browser. Until recently Microsoft was passionately against anything other than web standards in their Metro browser. Plugins are still not allowed in the application but that does not exclude Microsoft from embedding Flash into the browser directly.
I guess Silverlight is not popular enough…
(screenshot credit: Within Windows)
Adobe actively supports Microsoft’s efforts and has provided the source code to facilitate the integration into Metro Internet Explorer 10.
Security will rest somewhat on Microsoft’s ability to patch their software in time but will also be supported by a whitelist system. Flash for Internet Explorer 10 will only be supported on certain websites in certain ways. Unless your website is listed as requiring Flash for compatibility reasons then your website will not have access to the platform.
I am not really sure whether there is a cut or dry answer to whether this is a good thing or a bad thing. The only thing I can say for certain is that Microsoft gives the impression that they had a strong and clear vision for Windows 8 and since completely abandoned their plan.
It follows the rumors of what happened to Vista: a bunch of years working on a secure memory management architecture that was scrapped at the last minute requiring over half of the OS to be rewritten in C++.
We all know how great that turned out.
Subject: General Tech, Storage | March 7, 2012 - 01:39 PM | Jeremy Hellstrom
Tagged: western digital, ssd, hitachi, flash, EMC
Hitachi Global Storage Technologies, which was the result of the merger of Hitachi and IBM's HDD businesses, is likely being purchased by Western Digital tomorrow for about $4.3 billion. This makes sense as WD has been using Hitachi GST as a sales partner when providing EMC with high end flash disks. This deal comes on the heels of a major sell, the SSD400S flash disk which uses Intel's 34nm SLC NAND and the SSD400S-B which utilizes the new 25nm NAND developed by Intel. Check out the specifications of the flash drives as well as the new SSD company over at The Register.
"WD is buying Hitachi GST and the acquisition is expected to be formally announced tomorrow with a condition of two years of independence for Hitachi GST - imposed by a Chinese anti-competition regulator. EMC has certified Hitachi GST's SSD400S flash disks for use in its VNX mid-range unified storage arrays, including the all-flash VNX5500-F, so WD will effectively fulfil this deal once the acquisition is announced."
Here is some more Tech News from around the web:
- TSMC suddenly halts 28nm production @ SemiAccurate
- AMD cuts loose GlobalFoundries stake @ The Register
- Peter Molyneux has left Microsoft @ The Inquirer
- Workers can't escape Windows 8 Metro - Microsoft COO @ The Inquirer
- 5 Tips and Tricks for Using Yum @ The Register
- Adobe lobs out Flash update to plug 3D security hole @ The Register
- Six foot speaker shakes buildings to their foundation @ Hack a Da
- Digital Innovations Accessories @ TechwareLabs
- Cebit 2012 HardwareHeaven Coverage
Subject: Storage | February 28, 2012 - 05:40 PM | Allyn Malventano
Tagged: micron, Intel, imft, flash, fab
Earlier today we caught some news of Intel and Micron extending their joint agreement to develop and create flash memory under the IMFT name. Along with this extension came some rearrangements to the current plan. Intel will be selling off their stake in two of the smaller fabs, located in Singapore and Manassas, VA. The sale is for $600 million, half of which will stay with Micron as a credit that Intel can use to later purchase NAND flash produced from those factories.
The 'tip of the spear' IMFT fab located in Lehi, Utah, will remain jointly owned and operated. This makes good business sense as the Lehi fab is the first to shift to smaller process nodes. IMFT announced 25nm flash memory production at this very fab in early 2010.
PC Perspective toured IMFT Utah during the 25nm launch announcement.
Some may see this as Intel taking a step away from flash memory, but I see it as quite the contrary. Micron has always tended towards being a bulk producer of memory products, while Intel are the promary innovators in the arena. This move allows Intel to focus on the bleeding edge plant while Micron handles the particulars of cranking out those technologies developed at the Lehi Plant. It is likely that the highest grade flash comes from the Lehi plant, and Intel's half of the output is more than enough to supply their SSD production lines.
A paper, titled “The Bleak Future of NAND Flash Memory” was recently jointly published by the University of California and Microsoft Research. It has been picked up by many media outlets who all seem to be beating the same morbid drum, spinning tales of a seemingly apocalyptic end to the reign of flash-based storage devices. While I agree with some of what these authors have to say, I have reservations about the methods upon which the paper is based.
TLC and beyond?
The paper kicks off by declaring steep increases in latency and drops in lifetime associated with increases in bits-per-cell. While this is true, flash memory manufacturers are not making large pushes to increase bits-per-cell beyond the standard MLC (2 bits per cell) tech. Sure some have dabbled in 3-bit MLC, also called Triple Level Cell (TLC) which is a bit of a misnomer since storing three bits in a cell actually requires eight voltage level bands, not three as the name implies. Moving from SLC to MLC doubles density, but the diminishing returns increase sharply after that – MLC to TLC only increases capacity by a another 1.5x, but sees a 2-4x reduction in performance and endurance. In light of this, there is little demand for TLC flash, and where there is, it’s clear by the usage cases that it is not meant for anything beyond light usage. There's nothing wrong with the paper going down this road, but the reality is that increasing bits per cell is not the envelope being pushed by the flash memory industry.
Wait a second – where is 25nm MLC?
Looking at the above we see a glaring omission – 25nm MLC flash, which has been around for close to two years now, and constitutes the majority of shipping flash memory parts currently in production. SLC was also omitted, but I can see the reason for this – it’s hard to get your hands on 25nm SLC these days. Why? Because MLC technology has been improved upon to the point where ‘enterprise MLC’ (eMLC) is rapidly replacing SLC even despite the supposed reduction in reliability and endurance over SLC. The reasons for this are simple, and are completely sidestepped or otherwise overlooked by the paper:
- SSD controllers employ write combination and wear leveling techniques.
- Some controllers even compress data on-the-fly as to further reduce writes and provisioning.
- Controller-level Error Correction (ECC) has improved dramatically with each process shrink.
- SSD controllers can be programmed to compensate for the drift of data stored in a cell (eMLC).
Subject: Storage, Shows and Expos | January 16, 2012 - 06:36 PM | Allyn Malventano
Tagged: ssd, sandisk, PQI, memory, flash, CES
Sandisk had a booth with a large array of small nand flash storage devices, though most of it appeared to be SD, CF, or for embedded mobile applications:
One of the more interesting pieces was a 64GB e.MMC nand flash part that fit *within* the dimensions of a penny! This is not a plug-in module - it's the type that would be soldered onto the mainboard of a cell phone or other small mobile device:
While the booth was generally light on SSD's, there were a couple on display, namely the U100, in both 7mm (left) and 9.5mm (right) form factors:
The U100 is also available in even smaller form factor. We're currently taking a look at an Ultrabook equipped with the same Sandisk U100 SSD - mounted to an even smaller PCB.
PQI has been a favorite of mine for years. They were among the first to make a really tiny thumb drive, and I'm glad to see they continue to make a versatile line of products:
A little known fact is that PQI also has a line of SATA SSD's:
The S525 Series (also available as the S518 - 1.8" form factor), is a bit long in the tooth and uses a dated JMicron controller, but PQI made the extra effort to include the optional USB 2.0 interface that most other manufacturers chose to omit.
More to follow
I've still got some pics to sift through, so stay tuned for more CES Storage goodies!
PC Perspective's CES 2012 coverage is sponsored by MSI Computer.
Follow all of our coverage of the show at http://pcper.com/ces!
Subject: Storage, Shows and Expos | January 16, 2012 - 05:33 PM | Allyn Malventano
Tagged: ssd, micron, Intel, imft, flash, cherryville, CES, 20nm
CES is sort of like a Where's Waldo book. There are thousands of places to look, with new technology spread around all over the place. Some of that unreleased tech shows up right in front of you and you don't even realize what you were looking at until later on. It's how we caught a look at prototype Light Peak (now Thunderbolt) two years ago, and this year we saw some more goodies not previously seen in the wild. I tend to be a bit of a shutterbug, and I take seemingly random pics of things as the PCPer gang runs around the various vendor booths and hotel suites. While going through the pics from my phone, I ran across this shot of what I thought was an Intel 320 Series SSD:
Definitely not a 320, that's an Intel 520 Series (Cherryville) SSD. While Intel had their 520 Series locked up tight at their Storage Visions booth, this one was powering another motherboard makers product elsewhere in Vegas. Unfortunately this system was only to demo the motherboard itself, without a connected display, so it would not have been possible to run our own benches.
At storage visions, we also saw this display at the Micron booth. It's interesting to see how 16GB of flash memory has shrunk over the past few years. We've certainly come a long way from the good old X25-M:
Some of you may know that I'm a sucker for a good die shot, so I snuck back out to Micron's suite later on to get my own macro shot of the 20nm IMFT flash die:
Micron is, like many other vendors, working on their own SSD solution specifically for SSD caching applications. It's currently unreleased, so more to follow on this.
PC Perspective's CES 2012 coverage is sponsored by MSI Computer.
Follow all of our coverage of the show at http://pcper.com/ces!