Slashdot Mirror

Have these companies considered using IBM Cybersecurity Services or HPE Server Infrastructure Security Solutions?

Based on what I am reading, these products are designed to stop cyberattacks by being the "strongest defense."

Guess that includes the Cambridge Dictionary, as well as all those fools at Microsoft, Apple, Amazon, HPE, IBM, Pixar, and most of the machine-learning industry, not to mention those well-known charlatan World Go champions at DeepMind.

I'm not sure what about the phrase terrifies you so much.

This is a simple algorithm: find better C programmers! What idiot programmer uses a variable before setting it? When a programmer is "omitting break in a switch," https://www.hpe.com/us/en/insights/articles/making-c-less-dangerous-1808.html that's not a shortcoming of C, it's a shortcoming of the programmer.

From the provided link: 'Why does memcpy() have no "max destination length" argument?' Seriously? If you want to copy "a" to "b" and avoid overrunning "b", do something akin to memcpy (b, a, min (bytes_in_a, sizeof (b))), where min() returns the lesser of its two arguments. This isn't rocket science, people, it's skilled coding.

If you are a C coder who is too lazy or stupid to follow sound programming principles, then you should switch to a less demanding language and leave C to the expert coders.

Once I saw that the latest version is iLO 5, I figured it had to be vulnerable to the same exploit as iLO 4 and sure enough:

https://support.hpe.com/hpsc/d...

"A security vulnerability in HPE Integrated Lights-Out 4, 5 (iLO 4 prior to v2.60, and iLO 5 prior to v1.30) could be remotely or locally exploited by an Administrative user to allow remote or local code execution."

If you go to https://news.hpe.com/ then scroll down and click "Newsroom" in the menu at the bottom of the page, you get "Sorry, Page Not Found"

IIRC, modern tape drives still requires that you use a firmware tape during the process, so stand-alone tape drives at least would be immune to a purely online attack. .

Nope. HP Tape Tools https://www.hpe.com/us/en/prod... allow you to update firmware, perform maintenance, etc on most modern HP tape drives that are attached to your server. So conceivably, a hacker could access the backup server (assuming it has HP tape drives attached physically to it), and inject their own firmware (unless there is safeguards in the software to not allow random firmware packages to be uploaded).

In other words, The Machine that HP Labs is working on.

Details here.

Looks like it's hosted on Linux, and OpenStack.

It might! One of the infographics on the HPE site claims the population of Earth will be 80 billion by 2020. That's gonna necessitate a whole lot of good.

lol. I assume they meant 8 billion. Pretty bad mistake.

It might! One of the infographics on the HPE site claims the population of Earth will be 80 billion by 2020. That's gonna necessitate a whole lot of good.

> HP-UX cancelled their Itanic port before release.

HP-UX is the primary OS for these boxes.
https://www.hpe.com/h20195/v2/...
HP is supporting still, which makes sense. The pages saying the opposite have to be incorrect. It wouldn't make any sense for HP to sell a > 10k machine with no ability to run an OS, and they actually sell an OS.

As for the other points from the Soylent link, that sounds about right. I was hoping someone was still maintaining a Linux or a BSD.

Well, probably because this back-end system, is managed by what used to be Hewlett Packard Enterprise. They've had so many layoffs, and shuffled from company to company so many times, that the people who actually know what they are doing are all long gone.

Oops, good catch - after all the corporate entity shuffling, Meg Whitman is now President and CEO of Hewlett Packard Enterprise.

You left off the other major product line they got from Compaq: Tandem. It even survived HP trying to move the line to Itanium!