Search the Community

https://www.hardwarezone.com.sg/tech-news-hacker-leak-190gb-samsung-data-source-code-security Hackers leak 190GB of data allegedly from Samsung, includes source code and biometric unlocking algorithms By Kenny Yeo - on 7 Mar 2022, 9:48am (Image source: Samsung) The Lapsus$ hacking group has just leaked a huge collection of data that they claim to be from Samsung. The leaked data is presently being shared on a torrent and is presented as three compressed files that amount to nearly 190GB. At the time of writing, the report says they are more than 400 peers sharing the file. And earlier, the group posted a screenshot with C/C++ directives in a Samsung software earlier. And according to the group, the torrent contains data of the following: Source code for every Trusted Applet (TA) installed in Samsung’s TrustZone environment used for sensitive operations (e.g. hardware cryptography, binary encryption, access control) Algorithms for all biometric unlock operations Bootloader source code for all recent Samsung devices Confidential source code from Qualcomm Source code for Samsung’s activation servers Full source code for technology used for authorizing and authenticating Samsung accounts, including APIs and services If it looks bad, that's because it is. If the claims are accurate, Samsung is looking at a major breach that could cause substantial damage to the company. Lapsus$ is the same group behind the recent NVIDIA breach. They are demanding the graphics giant remove limitations on cryptocurrency mining or they will leak the company's source code. However, it is unknown at this time if they have made similar demands of Samsung. In a statement to The Korea Herald, Samsung says it is investigating the incident. Most recently, Samsung was caught throttling the performance of some apps. Source: BleepingComputer https://www.techspot.com/news/93663-nvidia-hackers-leak-190gb-sensitive-data-samsung.html Nvidia hackers leak 190GB of sensitive data from Samsung The leaks includes Samsung's encryption data and source code By Vann Vicente March 6, 2022, 10:12 AM What just happened? Lapsus$, a hacking group that leaked confidential information from Nvidia just last week, has reportedly moved to a new target: Samsung. The hackers have claimed an attack that leaked 190GB of confidential information from the South Korean technology giant, including encryption data and source code for Samsung's most recent devices. The hackers behind the Nvidia security breach are setting their sights on the biggest tech companies in the world. Last week, South American hacker group Lapsus$ claimed to have perpetrated a major hacking attack on Nvidia, stealing over 1TB of information and holding it ransom. The Telegraph reported that Nvidia's internal systems were "completely compromised." On Saturday, the hackers leaked nearly 190GB of data from Samsung, subsequently publishing the files through torrent. This reportedly includes sensitive information that may be used to compromise Samsung devices. The publication vx-underground, which tracks information about malware across the web, tweeted a message that Lapsus$ released to their followers. It alleges that the hack includes "source code from every Trusted Applet installed on all Samsung devices" and "confidential source code from Qualcomm." The leak also purportedly includes the algorithms for biometric unlock operations and the source code for Samsung Accounts, a login service associated with Samsung's mobile devices. According to Bleeping Computer, the torrent has been shared by more than 400 peers, and includes a text file that describes the content available in the download: "Part 1 contains a dump of source code and related data about Security/Defense/Knox/Bootloader/TrustedApps and various other items Part 2 contains a dump of source code and related data about device security and encryption Part 3 contains various repositories from Samsung Github: mobile defense engineering, Samsung account backend, Samsung pass backend/frontend, and SES (Bixby, Smartthings, store)" The Nvidia hack was reported to be a ransom plot, with the hackers threatening to leak Nvidia's mining limiter bypass algorithm. Lapsus$ claimed that Nvidia hacked them back but maintained that they still had a copy of Nvidia's confidential data. Currently, there is no information about an extortion plot associated with the Samsung incident, with all files in the hack being released simultaneously. It is unknown if Lapsus$ has attempted to extort Samsung for a ransom. Samsung has yet to respond to the security breach.

https://www.cnbc.com/2020/06/23/mercedes-benz-partners-with-nvidia-on-upgradable-vehicles.html Mercedes-Benz and Nvidia are partnering to develop the next-generation of the automaker’s in-vehicle computing systems that will assist with remote, or over-the-air, updates and automated driving capabilities. The companies announced the cooperation Tuesday with promises of developing “the most sophisticated and advanced computing architecture ever deployed in an automobile.” The electrical architecture, or brains, of a vehicle essentially enables the vehicle’s systems to communicate. It also allows the vehicle to receive and send information to outside sources for things such as remote upgrades or service alerts. Mercedes-Benz will begin to deploy the new architecture across its fleet in 2024, according to the companies. It will use Nvidia’s “Drive” platform, enabling features such as the vehicle’s driver-assist systems to be upgradable. It’s much like how Tesla remotely upgrades systems on its vehicles. “The entire product is going to be designed differently,” Jensen Huang, founder and CEO of Nvidia, said during a webcast Tuesday. He described the vehicles as being “perpetual, upgradeable” machines powered by supercomputers. Customers, the companies said, will be able to purchase and add capabilities, software applications and subscription services through over-the-air software updates during the life of the car. Such upgrades could provide additional revenue opportunities for the automaker as well as assist in expediting safety recalls or other upgrades. Nvidia shares were up less than 1% Tuesday afternoon to about $383. Shares earlier in the day hit a 52-week high of $385.70. The companies did not disclose financial details of the tie-up, which expands on an already-established partnership that included the automaker’s infotainment systems. “This new platform will become an efficient, centralized and software-defined system in our future Mercedes-Benz vehicles. NVIDIA’s AI computing architecture will help us streamline our journey towards autonomous driving,” Ola Källenius, Chairman of Daimler AG Board and head of Mercedes-Benz AG, said in a statement.

[extract] Audi has displayed the upcoming 2013 A3 interior at the 2012 Consumer Electronics Show which is currently being held (10-13 January 2012) at Las Vegas. What exactly Audi did was to display a functional mock up interior of the A3. A car

http://www.dailytech.com/article.aspx?newsid=618 Volkswagen's future cars could come equiped with Google Earth running on NVIDIA 3D accelerated hardware Google is making quite a splash in the industry in the last year and it doesn't appear to be slowing down anytime soon. According to Reuters, Google and Volkswagen are jointly developing a 3D navigation system for future VW vehicles. The new system will be based on Google Earth and will offer drivers a 3D view of the surrounding roads. Unfortunately, the system doesn't offer real-time tracking of surrounding traffic. The system, which was on demo at CES this year, is having its hardware developed by VW and NVIDIA. There is no detail on what kind of hardware NVIDIA is using for the system but it will offer true 3D acceleration. Two years ago, Google purchased a company named Keyhole, which had developed the original 3D satellite imagery engine that Google Earth is based on. Unfortunately, once Google made the service available to the public, government bodies all over the world raised concerns on the system, citing that Google Earth posed a risk to national security. Vocal groups in the US were also concerned that the level of detail offered by Google Earth would allow terrorists to plan attack routes better than ever. Previous to this, Microsoft's highly acclaimed Flight Simulator series were also called out for posing a similar risk.Although today Google's satellite service does not have detailed images of all areas of the Earth, it's only a matter of time until this is completed. Most major cities and surrounding areas, especially those in the US and Canada, are fully mapped with up to date road names. The system is also being developed to show map areas in true-to-life 3D. Currently, Google Maps features a 2D viewable image of popular global areas. No further details were given about the system but Volkswagen says that at this moment, there aren't any solid plans on which vehicle this system will be used in, if at all.