Tag Archive for HPQ

NICs Latest Threat to PCs

NICs Latest Threat to PCsThe latest malware attack vector is the network interface card (NICs). According to a post at Gizmo’s Freeware, two separate presentations at the CanSecWest international security conference demonstrated exploits utilizing network cards. The article reports that both exploits focused on Broadcom (AVGO) NIC’s.

The post reports that in at least one of the demo’s the researcher used the Broadcom remote factory diagnostic mechanism to install custom firmware on the network card. The researcher used the compromised firmware to create a tunnel into the PC in such a way that packets sent via the tunnel were not visible to the system firewall. Using the network card’s access to memory,  the attacker could then run whatever code he wanted.

HP uses the vulnerable NICs in PCs

HP (HPQ) uses the vulnerable Broadcom NICs in many PCs. In response, the HP Software Security Response Team has released a Security Bulletin (Document ID: c02048471) “HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code.” In the bulletin, HP says this information should be acted upon as soon as possible.

HP has made softpaq SP47557 available to resolve the vulnerability. In the bulletin, HP says the following models contain the Broadcom Integrated NIC firmware

  • HP Compaq 6005
  • HP Compaq dc5700
  • HP Compaq dc5750
  • HP Compaq dc5850
  • HP Compaq dc7600
  • HP Compaq dx7200
  • HP rp3000 Point of Sale System
  • HP rp5700 Desktop PC
  • HP rp5700 Point of Sale System

Rb-

This is a new hole, not a new attack. The premise appears to be poor design. Why would a manufacturer leave “the remote factory diagnostic mechanism enabled.”  The article goes on to say that, ”by default, the remote factory diagnostic mechanism (ASFor Alert Standard Format 2.0) is normally turned off.” That’s a good thing unless it’s not then you got troubles.

This technique would allow a very low-level attack that is not visible to traditional desktop security software. The network security devices would have to pick up the threat and not desktop security software. This also proves the case for good asset management, I can think of one client who has 80+ of the HP 5700’s distributed at 80+ sites without a management tool such as Intel’s vPro to push these low-level updates to PC’s. There is no telling if these PCs will ever get patches unless Microsoft adds it Windows Update.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Global Tech Layoffs Pass Half a Million

The global body count in the tech sector has risen above 500,000 in July 2009. Since the correction, recession, economic melt-down started in earnest in October 2008, about 505,477 tech-related jobs have been right-sized, down-sized, resource actions eliminated. January 2009 is the worst month for employees with nearly 164,000 tech jobs eliminated. October 2008 saw over 56,000 workers pink-slipped. Approximately 53,500 tech workers we laid off in both December 2008 and February 2009. The last two months have shown a decline in the numbers of tech workers getting the ax. In June 2009, 4,326 workers were laid off, the smallest monthly count since the economic meltdown started. July 2009 witnessed 12,65 layoffs, most from Verizon. The July count is also well below the average 50,000 lay-offs a month pace being set during the economic meltdown.Global Tech Layoffs

rb-

These numbers say to me that we are still in for a long hard year before anything like a real turn-around emerges. So despite what Newsweek says, the recession is not over.

Among the firms that generated these layoffs are:

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Server Sales Slide

Server Sales SlideLike most of us (except the bankers) global sales of servers have taken a beating since the first quarter of 2008. Server sales have declined by over $3 billion due to the economic slowdown meltdown recession and the growth of virtualization. Today, the global server market stands below $10 billion.

Global Server Sales

IBM logoSince Q1 of 2008 IBM‘s server revenues have declined over $1 billion from $3.946 billion to $2.913 in Q1 2009. Big Blues’ market share also declined from 30% to 29.3% during the same period. On the other hand, HP (HPQ) revenues grew from $2.904 billion to $3.624 billion and grew their market share to 29.3%, matching IBM in Q1 2009. Dell’s (DELL) revenues dropped from  $1.590 billion in 2008 Q1  with a 12.1% market share to revenues of $1.093 billion and an 11% market share in Q1 2009.

HP logoAccording to the ChannelInsider article:

  • No quick recovery for server sales until the general economy recovers (CI)
  • End-users continue to extend the life of existing servers (CI, other sources)
  • Servers remain among the least profitable for solution providers (CI: Market Pulse)
  • Demand for conventional and blade servers by end-users continues to shrink (CI: Market Pulse)
  • The popularity of data center virtualization technologies have had the collateral effect of shrinking server hardware demand (CI)

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Wi-Fi Settlement to Cost Billions

Wi-Fi Settlement to Cost BillionsAustralia’s national science agency, the Commonwealth Scientific and Industrial Research Organization (CSIRO) has won its Wi-Fi patent troll case. They confirmed (4-22-09) that the patent cases heard in the Eastern District Court of Texas as concluded “successfully.” CSIRO sued most of the tech world over its claim of inventing the technology behind Wi-Fi Wireless Local Area Networks (WLANs).

Australia's Commonwealth Scientific and Industrial Research OrganizationCSIRO claims to have patented core elements of the technology used in 802.11a and 802.11g wireless devices. “CSIRO has negotiated settlement with each of the 14 companies involved in four concurrent litigation cases,” the agency said in a statement. “The commercial terms of the settlements with these companies will remain confidential.

Wi-Fi patent claim

The CSIRO first applied for the US patent in 1993. It was awarded US patent number 5,487,069, entitled “Wireless LAN” on 23 January 1996. The patent describes a “peer-to-peer wireless LAN” that can operate in the kind of multi-path environment created by radio echoes in typical office buildings. It includes three ways to get high-speed transmission despite the hostile conditions in an office environment. First, they describe transmitting over a relatively large number of parallel sub-channels within the available bandwidth so that each channel has a low bit rate. Second, the patent describes transmitting data in small packets with forward error correction (FEC) and using interleaving. These concepts are all featured in descriptions of the 802.11 physical layer CISRO claims to have patented core elements of the technology used in 802.11a, 802.11g, and 802.11n wireless devices.

negotiated settlementCSIRO has previously said that its patent allowed speed increases up to a factor of five over previous WLANs. They claimed to have, “offered licenses on reasonable and non-discriminatory terms to major suppliers as soon as they started selling devices which used the CSIRO technology.

However, troubles began following the Cisco (CSCO) acquisition of Radiata from Macquarie University. The university had carried out for the purpose of commercializing CSIRO’s technology. Now CSIRO claims the work forms a key part of commonly used Wi-Fi products

The CSIRO filed Wi-Fi patent infringement suits against 3Com, Accton (2345), ASUS (2357), Belkin, D-Link (DLINK), Fujitsu (6702), Marvell (MRVL), (manufacturers of Apple’s (AAPL) iPod), Nintendo (7978), SMC and Toshiba (TOSBF). Several large technology vendors bit back – with  Apple, Dell (DELL), HP (HPQ), Intel (INTC), Microsoft (MSFT), and Netgear (NTGR) bringing cases against CSIRO in trying to have the patent invalidated.

In June 2007, the CSIRO won a case in the U.S. Federal Court against Japanese manufacturer Buffalo Technologies. This win is the basis the firm has used to demand royalties from a broader set of manufacturers that market Wi-Fi equipment.

As the case has played out in the last few weeks in and out of the Texas court, CSIRO struck individual deals with its adversary’s including; Dell, Fujitsu, HP, Intel, and Microsoft

HP was the first to settle on 04-02-09. CSIRO spokesperson Huw Morgan said, “CSIRO can confirm that a settlement has been reached with Hewlett-Packard Company in relation to the wireless patent case.” Mr. Morgan continued  in the Sydney Morning Herald, “There will be no further comment at this time due to confidentiality and ongoing litigation.

Fujitsu logoFujitsu Computer Systems Corp. was dismissed by the Court with prejudice in the first court-approved settlement to emerge in the case on April 8. The terms of the settlement remain confidential.

PC manufacturer Asus and Microsoft separately settled their lawsuits with the CSIRO on 04-14-09 terms of the settlement were not disclosed. CSIRO had accused Microsoft of wrongfully using its patent. Microsoft was seeking a ruling of non-infringement for the wireless technology included in the Xbox video-game system.

Microsoft logoIntel and Dell also settled on 04-19-09 for undisclosed and confidential terms.

Accton Technology Corp., SMC Networks, Belkin Corp. and Belkin International, Inc., D-Link Systems, Inc., Netgear, Inc., Nintendo of America, Inc., Toshiba America Information Systems, Inc., and 3Com Corp., announced on 4-20-09 that they had reached a settlement with CSIRO.

Cisco and its Linksys division aren’t on CSIRO’s list. Cisco agreed to patent terms when it acquired an Australian network authentication firm a few years ago. Apple dropped out in December 2006.

Dr. Alex Zelinsky, director of the CSIRO ICT Center confirmed that all CSIRO opponents had chosen to settle the wireless case. CSIRO deputy chief of operations Mike Whelan said that the terms of the settlement would remain strictly confidential. Dr. Zelinsky speculated to ITNews, however, that the payoff could be worth upwards from $100 million up to a billion dollars and keep royalty payment flowing into the agency for up to a decade.

Timeline

  • November 1993: CSIRO lodges a US patent for the invention of a wireless LAN.
  • January 1996: US patent 5,487,069 is issued to CSIRO.
  • 1997: CSIRO and Macquarie University form Radiata, a company established for the purposes of commercializing the patent.
  • 2001: Cisco Systems acquires Radiata for $295 million.
  • 2003: CSIRO engages in patent licensing discussions with several manufacturers, none of which agree to pay licensing fees.
  • February 2005: CSIRO lodges a suit against Buffalo Technology for alleged patent violation in the Eastern District of Texas Court as a test case for its patent.
  • May 2005: Two groups of industry heavyweights — including Dell and Intel, and Microsoft, HP, and Netgear, lodge lawsuits against CSIRO seeking to overturn its patent.
  • November 2006: CSIRO has its patent upheld by the Eastern District of Texas Court in its case against Buffalo Technology.
  • September 2006: CSIRO counter-sues the industry parties attempting to overturn its patent, claiming these companies infringe on its patents.
  • September 2007: CSIRO refuses to offer any amnesty to IEEE members that infringe on its patent.
  • April 02, 2009, HP settles suit.
  • April 13, 2009, Microsoft settles suit
  • All other firms settle the suit on April 20, 2009.

rb-

If your installation includes Aruba, Meru, or Trapeze, you can hope that CISRO goes back to developing Wearable Instrument Shirts or Airhockey Over a Distance, and not squeezing more revenue for the taxpayers of Australia out of this initial victory by going after all the other Wi-Fi vendors.  If upheld, CSIRO will collect what it has often described as a small royalty on all devices containing Wi-Fi.

The cases are:

  • Intel Corp. v. Commonwealth Scientific and Industrial Research Organization, 06cv551
  • Microsoft Corp. v. Commonwealth Scientific and Industrial Research Organization, 06cv549, U.S. District Court, Eastern District of Texas (Tyler)

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Tech Layoff Losses Continue to Mount

Tech Layoff Losses Continue to MountChannelWeb Insider has been tracking which technology companies have given layoff notices. According to the site, technology firms have eliminated at least 205,000 positions since October 2008.

This does not include small and mid-sized technology firms and the VAR community.

  • January 2009 has been the most brutal for tech layoffs with at least 124,320 positions eliminated.
  • October 2008 with 46,281 positions eliminated.
  • November 2008 saw 21,433 workers sacked by technology companies.
  • December 2008 The holiday spirit held sway in when most companies except ATT minimized layoffs. ATT eliminated 12,000 of the 13,095 positions eliminated in the last month of 2008.

Layoff rogue’s gallery

Among the firms in the rogue’s gallery of layoffs between October 2008 and January 2009 are:

  1. Circuit City with 37,400 layoffs
  2. HP with 24,600 layoffs
  3. NEC with 20,000 layoffs
  4. ATT with 12,000 layoffs
  5. Dell with 8,900 layoffs
  6. Sprint/Nextel with 8,000 layoffs
  7. Hitachi with 7,000 layoffs
  8. Intel with 6,000 layoffs
  9. Philips with 6,000 layoffs
  10. Google with 5,100 layoffs

We can hope that CEOs with their multi-million dollar salaries such as HP’s Mark Hurd who made over $42.5 million in 2008 or Sprint/Nextel’s Gary D. Forsee who made over $40 million or ATT’s Randall Stephenson who made over $21.9 million in 2007 actually understand their actions disrupt the lives of over a quarter of million real families when they eliminate jobs.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.