Short Takes – 11-2-23

Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges. SecurityWeek.com article. Pull quote: “The developers of the vulnerable drivers were notified in the spring of 2023, but VMware said only two of them fixed the vulnerabilities, namely Phoenix Technologies and Advanced Micro Devices.”

Senate passes first government funding package, setting up clash with House GOP. TheHill.com article. Pull quote: ““We just passed a strong, bipartisan spending package — the only bipartisan spending bills in Congress, by the way — and we did it with an 82-15 vote,” Senate Appropriations Committee Chair Patty Murray (D-Wash.) said after the vote. “So let’s be crystal clear about what that means. Unlike the funding measures we’ve seen pushed through the House, these are serious and reasonable, bipartisan bills that can actually be signed into law. They are the product of months of hard work, careful negotiation, thoughtful input from members on both sides of the aisle.””

NASA's Lucy spacecraft swoops past first of 10 asteroids on long journey to Jupiter. Phys.org article. Pull quote: “Lucy came within 270 miles (435 kilometers) of Dinkinesh, testing its instruments in a dry run for the bigger and more alluring asteroids ahead. Dinkinesh is just a half-mile (1 kilometer) across, quite possibly the smallest of the space rocks on Lucy's tour.”

OPM head previews coming cyber and IT hiring flexibilities. GovExec.com article. Pull quote: “Now, Ahuja said that OPM has “a proposal coming out very soon about how we want to build equity around pay and flexibilities in the workplace, and taking what DHS has done well and really spreading that to the rest of government,” something she said expects to be “transformative.”” Will need congressional funding okay.

Can we deploy solar farms in space? These scientists think so. ZMEScience.com article. Bit of click bait headline, really about a different type of solar cell. Pull quote: “The numbers have been promising. TFSC cells have proven not only to have an initial efficiency of around 12%, but also have withstood the harsh ionizing radiation of space with remarkable success. They are protected from the darkening effects of radiation thanks to a novel design feature: cerium-doped alumino-silicate cover-glass. This durability and efficiency are essential for use in outer space because of the harsh conditions there.”

Gone with the wind? Wind farm-induced wakes and regulatory gaps. ScienceDirect.com article. Pull quote: “However, OWF[offshore wind farms] generate wakes characterised by a reduction in mean wind speed and an increase in small-scale turbulence. These wakes have the potential to disrupt the operation of adjacent wind farms and can lead to inter- State/operator conflicts. Recent studies indicate that farm wakes can propagate downwind for distances ranging from 30 km to 55 km , with even longer wakes observed under specific flow conditions.”

Federal Acquisition Regulation: Cyber Threat and Incident Reporting and Information Sharing; Extension of Comment Period. Federal Register FAR NPRN Comment Extension. Summary: “DoD, GSA, and NASA issued a proposed rule on October 3, 2023, proposing to amend the Federal Acquisition Regulation (FAR) to implement an Executive order on cyber threats and incident reporting and information sharing for Federal contractors and to implement related cybersecurity policies. The deadline for submitting comments is being extended from December 4, 2023, to February 2, 2024, to provide additional time for interested parties to provide comments on the proposed rule.”

House GOP punts vote on transportation  funding amid Amtrak concerns. TheHill.com article. Pull quote: ““Some people want to cut more, other people are worried that we cut too much, or they’ve got particular concerns, Amtrak concerns,” Cole said. Not long after his comments, House Majority Leader Steve Scalise (R-La.) said on the floor that the House would instead aim to pass the housing and transportation funding bill next week.”