M-Series Chip Vulnerability Could Lead to Encryption Key Leakage
A newly discovered vulnerability in Apple’s M-series chips could allow an attacker to obtain keys for various encryption operations from a Mac, researchers said in a paper on March 21, Ars Technica reported.
In the vulnerability, named GoFetch, an attacker exploits a feature of the M-series chips that predicts memory address usage ahead of time in order to speed up processing, and by obfuscating data types, induces the chips to leak encryption keys. No administrator privileges are required to exploit the vulnerability, as long as the attack code and the target program are running on the same large or small core.
The researchers said that because the vulnerability stems from the microarchitectural design of the chip itself, it will not be able to be patched directly, but only deployed in third-party software defenses as a mitigation, but at the cost of a greater impact on the performance of encryption operations. The M1 and M2 series chips are the most affected, as only the M3 has native support for disabling affected predictions. Apple has not publicly responded to this at this time.
Vision Pro will be Available in China
According to CCTV News and other reports, Apple CEO Cook recently mentioned Apple’s plans for the domestic launch of Vision Pro and investment in China’s supply chain during his visit to the country.
On March 20, Cook emphasized the importance of China’s supply chain to Apple in an interview in Shanghai. He said that Apple and China’s supply chain is a very cordial win-win relationship, and there is no place more important to Apple’s supply chain than China.
On March 22, Minister of Commerce Wang Wentao met with Cook, saying that China means great opportunities for enterprises of all countries, including Apple, and welcoming Apple to continue to plough into the Chinese market to realize common development. Cook said that China, with its rich talent resources and strong innovation vitality, is an important market and key supply chain partner for Apple. Apple will continue to be committed to long-term development in China and continue to increase its investment in China’s supply chain, R&D and sales.
On March 24, Cook participated in the China Development Forum 2024, stating that the Vision Pro will be launched in the Chinese market within this year, and that he is continuing to increase investment in R&D in China. At a subsequent symposium on carbon neutrality and global climate governance, Cook said Apple intends to achieve carbon neutrality by 2030, which is a big project covering all parts of the world. Since most of its supply chain companies are in China, many of these projects are also in China.
Tesla Launches CyberHammer
On March 22nd, Tesla announced the launch of a limited edition CyberHammer through its X account. The CyberHammer can only be redeemed through Tesla’s referral program points, and is limited to 800 units, which will be supplied in batches to prevent snatch-ups.
Tesla had filed a trademark application for the CyberHammer in January, under the category ‘fitness equipment’. In addition to the CyberHammer, Tesla has also introduced super-short pants that satirize those who short Tesla stock, Tesla Tequila, and a host of Cybertruck peripherals, including a stainless-steel bottle opener (CyberOpener) that sells for $50, CyberBeer, and CyberStein, a Cybertruck glass that holds the beer.
UN General Assembly Adopts First Global Resolution on Artificial Intelligence
On March 21, the UN General Assembly adopted its first global resolution on artificial intelligence, calling for the promotion of ‘safe, secure and trustworthy’ AI systems for sustainable development, Xinhua reported.
This is the first time the UN General Assembly has adopted a resolution on regulating the emerging field of AI, so the resolution has been described as a ‘landmark’. The resolution emphasizes the need to develop standards for AI systems to facilitate digital transformation and equitable access to the benefits of AI systems, and to bridge the AI and other digital divides between and within countries in order to achieve sustainable development and address other common global challenges, particularly those faced by developing countries.
Key elements of the resolution include:
Encourages Member States of the United Nations and other stakeholders to develop and support regulatory and governance approaches and frameworks conducive to the development of safe and reliable artificial intelligence systems, and urges Member States and other stakeholders to take action to cooperate with and provide assistance to developing countries.
Emphasizes the importance of respecting, protecting and promoting human rights and fundamental freedoms throughout the life cycle of artificial intelligence systems.
Encourage all Member States and other stakeholders to develop artificial intelligence systems in an inclusive, equitable and universally beneficial manner and to create an enabling environment for artificial intelligence systems to be able to address major challenges.
Emphasize the importance of data management for the development of safe and reliable AI systems for sustainable development.
It was considered important to continue discussing developments in the field of AI governance and to keep abreast of the pace of AI system development and applications.