nonme

I apologize if this has already been posted, but I have not been able to find it so far. Summary MSI has leaked their BootGuard and OEM Image Signing keys. With possession of the signing key, an attacker could potentially distribute malicious updates that seem legitimate. Though none have been reported yet, the possession of MSI's signing key could result in attacks on the supply chain. The hackers also acquired a private encryption key used in an MSI version of Intel Boot Guard, which is designed to prevent the loading of malicious firmware. Possession of both keys could allow an attacker to self-sign malicious firmware and gain far-reaching access to systems, bypassing security measures. Quotes From Wccftech: From Ars Technica: Sources Wccftech https://wccftech.com/msi-breach-leaks-intel-bootguard-oem-image-signing-keys-compromises-security-of-over-200-devices-major-vendors/ Ars Technica https://arstechnica.com/information-technology/2023/05/leak-of-msi-uefi-signing-keys-stokes-concerns-of-doomsday-supply-chain-attack/ Sophos (Security Company) https://nakedsecurity.sophos.com/2023/05/09/low-level-motherboard-security-keys-leaked-in-msi-breach-claim-researchers/

Summary The US Federal Trade Commission (FTC) introduces the "click to cancel" rule which will allow them ban hard-to-cancel subscriptions such as for gym and cable, with up to fine up to 50,000 per violation. Quotes From The Verge article: The US Federal Trade Commission is proposing a formal ban on subscriptions that are simple to start but difficult to stop. This morning, it announced a notice of proposed rulemaking it dubs “click to cancel,” requiring companies to make ending a subscription equivalently simple to signing up for one. That includes letting people use the same method for both actions — so a business can’t, for instance, let someone sign up for a service online but make them call a phone number to cancel. The agency can recover around $50,000 per individual violation of a consumer’s rights, and consumer lawsuits can recover damages for lost funds and potentially wasted time. My thoughts I'm sure we've all dealt with a difficult-to-cancel subscription at some point. One that immediately comes to mind is a gym membership that I signed up for. I only signed up for a 10 day trial, and they make you jump through all types of hoops just to get them to cancel it. It's also one of the reasons I'll never sign up for The New York Times. Sources https://www.theverge.com/2023/3/23/23652373/ftc-click-to-cancel-subscription-service-dark-patterns-ban https://www.ftc.gov/news-events/news/press-releases/2023/03/federal-trade-commission-proposes-rule-provision-making-it-easier-consumers-click-cancel-recurring https://gizmodo.com/ftc-cancel-subscription-click-to-cancel-membership-1850256040 https://www.npr.org/2023/03/23/1165527249/ftc-rule-charges-cancel-online-subscriptions https://www.foxbusiness.com/lifestyle/ftc-considering-click-cancel-rule-bid-ease-pain-ending-subscriptions https://www.nbcnews.com/tech/tech-news/click-cancel-ftc-proposes-rule-help-consumers-ditch-subscriptions-rcna76297

Just a heads up, make sure the bottom of your PC isn't on carpet. The carpet will block the air going into the power supply and cause it to overheat. I have had to replace a bunch of power supplies because of this.