Free Republic

Two Intel staffers believe web services can be made more secure by not only carrying out computations in remote trusted execution environments, or TEEs, but by also verifying for clients that this was done so.Software engineer Gordon King and Hans Wang, a research scientist at Intel Labs, proposed the protocol to make that possible. In a paper distributed this month through ArXiv, they describe a HTTP protocol called HTTPS Attestable (HTTPA) to enhance online security with remote attestation – a way for apps to obtain an assurance that data will be handled by trusted software in secure execution environments.Essentially, it's...

A remote code execution vulnerability exists in the HTTP protocol stack (HTTP.sys) that is caused when HTTP.sys improperly parses specially crafted HTTP requests. An attacker who successfully exploited this vulnerability could execute arbitrary code in the context of the System account. To exploit this vulnerability, an attacker would have to send a specially crafted HTTP request to the affected system. The update addresses the vulnerability by modifying how the Windows HTTP stack handles requests.

Web's inventor gets a knighthood Sir Tim says his invention was 'just another program' The inventor of the world wide web, Tim Berners-Lee, has been awarded a knighthood for his pioneering work. Dubbed the "Father of the Web", he came up with a system over 10 years ago to organise, link and browse net pages. The famously modest man said he was "quite an ordinary person", and although it felt strange, he was "honoured". Sir Tim was recently reunited with the machine he used to invent the web when he e-mailed 80 schools from the UN's summit on the information...