In This Issue


Intel CPU “secure enclaves” aren’t that secure anymore thanks to a fresh Line Value Injection vulnerability

Intel has had a shit run with CPU security lately (Spectre & Meltdown) and now there's a new vulnerability for Intel to deal with - Line Value Injection. This one works in a similar fashion to the other ones, but takes it a step further by allowing for the "raiding of secrets stored in the SGX enclave, the name often used for Intel's Software Guard eXtensions. Apps that work with encryption keys, passwords, digital rights management technology, and other secret data often use SGX to run in a fortified container known as a trusted execution environment". Like Spectre and Meltdown, there's no fix for this, just mitigations and it's also unlikely that this attack will be used against consumer machines as it's pretty complicated to pull off. There's more info about LVI on Bitdefender's website.

Telstra told it can continue using payphones as billboards, just stick to advertising phone related stuff

A little while ago I wrote about the Melbourne City Council taking the provider of Telstra's payphones (some company called Urbis) to court for skirting around public advertising rules by slapping giant ugly digital signage on payphones. The council argued that Telstra was only upgrading the payphones so they could install the huge signs, not because the payphones needed upgrades or even need to be there in the first place. They reckon these new payphones should come under the same rules as other forms of digital signage like a bus stop, bench or similar public furniture. A judge has heard the case and found in Telstra's favour, allowing them to keep doing what they're doing - with the catch that if they show ads that aren't for phone services, they gotta give the council a cut.

Coronavirus, coronavirus, coronavirus, coronavirus

Coronavirus is sucking up all the news oxygen, so here's a dump of tech adjacent coronavirus info:

Not News

Huawei’s upcoming phones aren’t gonna have many apps and their workaround for it kinda sucks

Huawei's P40 Pro flagship smartphone is getting announced on March 26th via an online event (thanks coronavirus), but we already know it won't ship with Google services (thanks Trump administration). In practice, this means that despite the awesome specs it will likely have, it'll lack the apps people who drop $1500+ on a smartphone expect to use on their new fancy phone. Ausdroid has taken a look at what is and isn't available on AppGallery, Huawei's Google Play Store equivalent and was told by Huawei that users will be able to transfer apps they had installed on older devices, over to their new phone with Huawei's "Phone Clone" feature. If there's an app you really want that isn't on AppGallery (e.g: Instagram) you can transfer it from your old phone to your new one - but I don't think the apps will get updates as there's no app store method of receiving new versions and that is pretty damn shit when you can get a Pixel or even a Samsung that's like 99% as good (but more expensive) and not have that problem. Total deal breaker for Huawei phones I reckon.


🎶 Never - Egyptian Blue

😁 The Sizzle is curated by Anthony "@decryption" Agius and emailed every weekday afternoon. Join us on Slack and chat with other Sizzle subscribers.

The Sizzle is created on Wathaurong land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. I pay my respect to them and their cultures and to elders both past and present.​