Omnipotent BMCs from QCT remain vulnerable to critical Pantsdown threat

Omnipotent BMCs from QCT remain vulnerable to critical Pantsdown threat

Enlarge (credit: Getty Images)

In January 2019, a researcher disclosed a devastating vulnerability in one of the most powerful and sensitive devices embedded into modern servers and workstations. With a severity rating of 9.8 out of 10, the vulnerability affected a wide range of baseboard management controllers made by multiple manufacturers. These tiny computers soldered into the motherboard of servers allow cloud centers, and sometimes their customers, to streamline the remote management of vast fleets of computers. They enable administrators to remotely reinstall OSes, install and uninstall apps, and control just about every other aspect of the system—even when it’s turned off.

Pantsdown, as the researcher dubbed the threat, allowed anyone who already had some access to the server an extraordinary opportunity. Exploiting the arbitrary read/write flaw, the hacker could become a super admin who persistently had the highest level of control for an entire data center.

The industry mobilizes… except for one

Over the next few months, multiple BMC vendors issued patches and advisories that told customers why patching the vulnerability was critical.

Read 11 remaining paragraphs | Comments

Learn Blockchain, Solidity, and Full Stack JavaScript Development

There are thousands of open jobs related to blockchain development companies like IBM, VMware, and Deloitte. We just published a 30-hour course on the freeCodeCamp.org YouTube channel that will help you learn skills related to blockchain, Solidity, and Web3 development. If you are interested in learning about blockchain development, this

Sony estimates its PC games sales will jump 375% over next year

Sony estimates its PC games sales will jump 375% over next year

Enlarge (credit: Andrew Cunningham / Sam Machkovech)

Sony’s latest financial forecasts, tucked into a Wednesday presentation to investors, saw the company disclose plenty about its varied tech and entertainment platforms. Still, the presentation had a ton to say about its gaming space. Deservedly so: Sony’s “game and network services segment” drove a whopping $25.1 billion in global sales of hardware, software, and other products during the company’s “fiscal year ’21” ending in March 2022. (Microsoft won’t have its forecast available until its fiscal year closes in June; its gaming division reported $15.37 billion in sales for the 2020 fiscal year in June 2021.)

While perusing the company’s presentation, which combined present-day numbers with forward-looking estimates, one page stood out: “exponential growth” coming to its slate of games for PCs. The result is arguably Sony’s most bullish admission of how many Sony games, including previous PlayStation exclusives, could land on PCs in the next nine months.

$300 million, spread over how many games?

There’s no way for Sony to reach its sales estimate for FY22 without more new games—and lots of them. Its past two fiscal years of PC game sales total roughly $115 in revenue, driven by three ports of previous PlayStation 4 exclusives onto Windows: Horizon Zero Dawn, Days Gone, and God of War (2018).

Read 9 remaining paragraphs | Comments

JavaScript String.Split() Example with RegEx

In JavaScript, you use RegEx to match patterns in characters. Combining this with the .split() string method gives you more splitting powers. The string constructor has many useful methods [https://dillionmegida.com/p/10-useful-string-methods-in-javascript/], one of which is the split() method. You use this method to split a string into an array of substrings
Find the soul