Technology Tales

Established in 2019 under the Linux Foundation, the Confidential Computing Consortium focuses on advancing confidential computing, a technology that safeguards data not only when stored or transmitted but also during processing in memory by utilising hardware-protected environments. This approach mitigates risks associated with sensitive data exposure to operating systems, cloud administrators, or attackers with privileged access. The consortium promotes open standards and interoperability, develops open-source tools and fosters collaboration among hardware vendors, cloud providers and software developers to enhance security across cloud, edge and on-premises environments. It supports initiatives such as managing secrets, enabling secure application execution and verifying trusted software through remote attestation, while aligning with existing hardware technologies from major providers. Applications span healthcare, finance, multi-party analytics, AI training and compliance, with the consortium itself concentrating on software and standards rather than hardware development.

Microsoft has extended free security updates for Windows 10 until October 2027, providing additional time for organisations unable to transition to Windows 11 due to hardware limitations such as the absence of Trusted Platform Module 2.0 or Secure Boot capabilities. The extension allows existing Extended Security Updates (ESU) enrolments to continue automatically without further action, addressing the continued use of Windows 10 on hundreds of millions of devices globally. Enrolment options include using Microsoft Rewards points, a one-time fee, or account-based verification in Europe, though business-managed systems remain excluded from the consumer program. The decision follows rising hardware costs, particularly for memory components, which have increased due to shifts in manufacturing priorities, prompting some IT departments to delay upgrades. Alternative solutions, such as third-party micropatches and open-source operating systems, are also being explored by users who choose not to adopt Windows 11.

A security vulnerability in older Apple processors has been identified, affecting devices using A12, S4/S5 and A13 chips, including certain iPhones, iPads, Apple Watches and Apple TVs. The flaw resides in the BootROM, making it impossible to resolve through software updates, as the affected hardware cannot be modified in post-production. Researchers discovered that malformed USB packets can exploit a hardware-level bug in the USB controller, allowing unauthorised memory manipulation during the device’s startup process. While the exploit is easier to execute on A12 devices, newer A13 models include security measures like Pointer Authentication Codes that complicate the attack, though researchers successfully bypassed these protections. Once compromised, the exploit enables persistent control over the device, lowering security settings and allowing unsigned software to boot without verification. The vulnerability was reported to Apple before public disclosure and while it primarily impacts older hardware no longer in widespread use, affected users face no available mitigation.

The release of Grav 2.0 marks a significant evolution of the platform, introducing a modern single-page admin interface built on SvelteKit and Tailwind CSS, a stable first-party API for headless and decoupled workflows and support for AI agents through a dedicated MCP server. It leverages updated dependencies including PHP 8.4 and 8.5, enhanced security measures and performance improvements driven by modern libraries and streamlined core code. The new default theme, Quark 2, incorporates a refined design system with adaptive colour schemes and improved accessibility features. Migration to 2.0 requires a fresh installation followed by content import, with assisted or manual options available to ensure compatibility and minimise disruption, allowing users to test and transition at their own pace while maintaining support for existing 1.7 sites. This update establishes a foundation for future development, emphasising compatibility, extensibility and integration with emerging technologies.

Phones can be tapped or tracked by hackers, criminals or even people known to the victim, putting personal and financial data at serious risk. Warning signs that a phone may be compromised include unusual sounds during calls, faster than normal battery drain, unexplained data usage spikes, apps opening or closing on their own, suspicious messages, random activation of the camera or microphone, pages appearing differently than usual, the device overheating without obvious cause, unfamiliar apps, unexpected charges on the phone bill and settings changing without user input.

To check whether a phone has been tapped, users can review app permissions, inspect call forwarding settings, dial USSD codes provided by their carrier and run a malware scan. If a phone is found to be compromised, recommended steps include enabling aeroplane mode to cut off data transmission, rebooting in safe mode to remove problematic apps, contacting the phone carrier, performing a factory reset and reporting the matter to the relevant authorities. To reduce the risk of phone tapping in the first place, users are advised to keep software updated, use end-to-end encrypted messaging apps, connect via a VPN, remove unused apps and install reputable security software.

WordPress 7.0, named "Armstrong" in honour of jazz musician Louis Armstrong, marks a significant new chapter for the platform, with a particular focus on integrating artificial intelligence throughout the core experience. A new AI Client enables WordPress to communicate with generative AI models, managed from a central dashboard hub, and is complemented by an Abilities API and a client-side JavaScript package that together introduce workflow automation, creation tools and a command palette.

The release also brings a fully modernised dashboard with a new colour scheme, smoother transitions and a new font management page, alongside new blocks including a gallery lightbox, Breadcrumbs, Heading and Icons, as well as enhanced responsive controls and custom CSS at the block level. Developers benefit from expanded APIs, server-side block and pattern creation using PHP and a more extensible site editor. The release was shaped by more than 875 contributors from across the world, including over 200 first-time contributors, who collectively delivered more than 420 enhancements and fixes, with the software now fully translated into more than 70 languages.

Ubuntu 26.04 LTS raises the default security baseline across desktops, servers, cloud, edge and virtual environments by making key protections manageable after deployment through Security Center, bringing TPM-backed full-disk encryption into general availability, adding integrated support for AMD SEV-SNP and Intel TDX confidential computing, adopting memory-safe Rust-based core utilities and sudo by default, and updating cryptographic standards with post-quantum-aware SSH, removal of DSA, and stricter TLS defaults in Apache and Nginx. It also reduces privilege for identity services, strengthens OpenLDAP and authentication options, hardens Secure Boot and firmware, updates the kernel and container stack, and continues developing tighter application confinement through AppArmor.

The Association for Computing Machinery, a global organisation with over 100,000 members spanning more than 100 countries, fosters collaboration among educators, researchers and professionals in computing through conferences, publications and community initiatives. It operates through 38 special interest groups, 860 professional and student chapters and a volunteer-driven structure that empowers members to contribute to governance, education and event organisation. Emphasising diversity and inclusion, ACM supports underrepresented groups through dedicated councils and events such as the Richard Tapia Celebration of Diversity in Computing. It provides educational resources, including curriculum guidelines and scholarships, and promotes ethical standards via its updated Code of Ethics. ACM's publications, such as the Communications of the ACM and the Digital Library, serve as vital repositories for research and innovation, while its advocacy in public policy and recognition of technical excellence through awards like the A.M. Turing Award underscore its commitment to advancing computing's impact on society.

Mozilla's Thunderbird email client has transitioned to using OAuth2 with PKCE as the default authentication method for Yahoo, AOL and ATT accounts, enhancing security and enabling access to calendars and contact lists. Users with a single account can log in with their email and password, granting Thunderbird access to their data, while those with multiple accounts must adjust hidden preferences to ensure compatibility.

The OAuth2 process involves verifying identity through username, password and optional confirmation steps, resulting in an access token stored by Thunderbird for future use. Users encountering issues with sign-in attempts may need to enable cookies, update authentication settings to OAuth2, or resolve account-specific restrictions imposed by providers. Additional steps include importing Yahoo contacts via an LDIF file and configuring calendar access through Yahoo's support resources. Troubleshooting typically involves verifying password validity, ensuring cookies and JavaScript are enabled and confirming correct authentication settings, with further assistance available through Mozilla's support forums.

XenForo is a community platform designed to facilitate customer engagement, data security and user interaction through features such as forums, media management, resource organisation and enhanced search capabilities. It allows businesses to create spaces for customers to share experiences, provide feedback and access knowledge bases, while maintaining control over data and customising the platform's appearance and functionality to align with brand identity. Additional tools like the Media Gallery and Resource Manager support content management and collaboration and the platform's architecture enables integration with custom systems or third-party add-ons. Regular updates and a focus on user notifications, content discovery and flexible permissions further enhance its utility for managing online communities, with clients across various industries utilising it to foster engagement and streamline operations.