That is the issue here. People are protesting supply and demand. What they really want is to keep Google and Apple or at least the tax money the generate but not have the people drive up the cost of living in those areas.... Sorry but that can not be done. Not only that if those companies left so would a lot of other jobs at say restaurants, stores, theaters, and so on. Soon all those cool shops and bars would shut down as well and so on.
No South Dakota has a booming economy as does Montana right how. Between oil, gas, and wind farms the energy sector is just nuts. It is also a pretty nice place to live if you do not mind the cold. Lots of wildlife and wilderness areas.
For home owners they should simply do what Florida does and have a Homestead exemption for taxes. Once you buy a home your taxes can only increase by a small % each year.
Actually you find very few apartments in the middle of nowhere Montana. Compared to SF they are cheap but there are not that many of them. Maybe Google and Apple should open up large campuses in South Florida. I live a few miles from a research park that has plenty of room. Housing is inexpensive and we even have a mass transit system starting up. Central Florida has a lot of high tech companies as well in the Orlando, Tampa, Melbourne area. Gainesville and Tallahassee both have major universities and inexpensive home prices. Leave SF and come on down. Your employees will not drive up the housing costs here for a good long time.
Once your protest interferes with my rights that is a step too far. Why should you have the right to block me from going where I want to go? What about my right to not be attacked as in this case. Sorry once they smashed the window it went from being free speech to being an assault.
Well that is what I was thinking. Using GPUs for the checksums to off load CPUs on softraids. The new Haswell Xeons have GPUs on the die. They do seem to support OpenCL as does the Baytrail Atom. What I do not know is could ZFS or a software RAID benefit from using OpenCL. Many servers come with a GPU even if it is just for set up. Often after the setup the servers run headless so you might as well use the GPU for doing something. Maybe for crypto like Truecrypt, SSH and SSL?
Simple. It is just as fast. Takes less drive space. Uses less memory. As to rebuilding apps it should be just a simple compile and yes while memory is cheap it is not always available even today. What about x86 tablets on Atom? I mean really does ls need to be 64bit what about more?
Well computers are so fast you can just throw more hardware at the problem. Just kidding, people do not understand that one of the reasons that people still use Fortran for HPC apps it the fact there are a lot of really good optimized libraries and the fact that Fortran is really easy to optimize. What I do not get from the story is why JavaScript's use of floats is a problem? Last I heard Floating point using SSE or OpenCL is often as fast as integer code. I could be wrong because most of the projects I worked on where IO limited.
That pretty much sums it all up. Frankly unless you are some high profile location I would not worry much about a government based backdoor in your router. If they want your data bad enough they will find a way. You are going to do Tempest? Are you hardened for social attacks? What about all your PCs? If you are worried, something like OpenBSD or Linux as a router should work. I am pretty sure if they are interested enough they will get the data one way or another.
Sure. Just set the value of all bitcoins to 0. Just imagine the fun that would be. "Sorry but a lot of us decided to take your money away from you because we do not like you."
I did read the entire paper. Using the methods they used it does not seem to be a practical attack vector at all. In fact I would say that you would have to have detailed specific information of the computer being exploited. Not even just the model but the actual computer since things like the age of the caps will make a difference. On a danger scale of 1 to 100 this is about a 1. I should have made it more clear that I was more suggesting that this is wildly impractical verses theoretically impossible. Frankly it might even work one week and not the next.
I did and it just doesn't make any sense. Where does the sound come from? Their answer is this. "The acoustic signal of interest is generated by vibration of electronic components (capacitors and coils) in the voltage regulation circuit, as it struggles to maintain a constant voltage to the CPU despite the large fluctuations in power consumption caused by different patterns of CPU operations. " The variable power load would very based on the instructions but we are not really interested in the instructions we are interested in the data. Doing an instruction on any data should cause the same power draw so how do they extract the data?
Then you have answer 8 "Individual CPU operations are too fast for a microphone to pick up, but long operations (e.g., modular exponentiation in RSA) can create a characteristic acoustic spectral signature over many milliseconds, and these can be detected. In the chosen-ciphertext key extraction attack, we carefully craft the inputs to RSA decryption in order to maximize the dependence of the spectral signature on the secret key bits." So it can only work with some keys?
For the multi core issue CPUs have a single VCC so you have no idea what core is doing want if it is even possible to extract the pattern since the claim it is the power draw on the voltage regulators that cause the sound.
The summary really does not answer the questions. The idea that the sound can extract the data violates the Nyquist–Shannon sampling theorem. There should be no way a multi khz audio signal can carry the data of the exection of data at over 1 Ghz. Even the statement that they extract the key over half an hour is just illogical. How much data can a modern PC encrypt with half an hour execution time?
What sounds does a cpu make? Or better yet how does a CPU make sound? The clock speeds are in the GHZ range so it is so far outside of the sound range of any microphone it just is not funny.Throw in that all cpus today have more than one core you will have a more than one code stream executing at one time. Throw in the sound of the fans running to make picking up the sound just seem very unlikely. Until it is duplicated I would really doubt it.
I have a different take. I do live in Florida so heat is bad. The thing is that I can not find really bright LEDs? I want a bulb that is at least as bright as a 100 watt bulb.
You would be more of a two minute clock. 1000 Rems is around what it takes to kill you dead. Mounting it in the front of a cars bumper with shielding behind it might work or even pointing out the side of a car. Drive around NYC in traffic and get pedestrians as you go.
"Besides, without an atmosphere, who'll care?" Just one of the many much bigger problem that I was talking about. That and earth exploding and the sun going out.
Slashdot Mirror
That is the issue here. People are protesting supply and demand. What they really want is to keep Google and Apple or at least the tax money the generate but not have the people drive up the cost of living in those areas.... Sorry but that can not be done. Not only that if those companies left so would a lot of other jobs at say restaurants, stores, theaters, and so on. Soon all those cool shops and bars would shut down as well and so on.
No South Dakota has a booming economy as does Montana right how. Between oil, gas, and wind farms the energy sector is just nuts. It is also a pretty nice place to live if you do not mind the cold. Lots of wildlife and wilderness areas.
For home owners they should simply do what Florida does and have a Homestead exemption for taxes. Once you buy a home your taxes can only increase by a small % each year.
Actually you find very few apartments in the middle of nowhere Montana. Compared to SF they are cheap but there are not that many of them.
Maybe Google and Apple should open up large campuses in South Florida. I live a few miles from a research park that has plenty of room. Housing is inexpensive and we even have a mass transit system starting up. Central Florida has a lot of high tech companies as well in the Orlando, Tampa, Melbourne area. Gainesville and Tallahassee both have major universities and inexpensive home prices. Leave SF and come on down. Your employees will not drive up the housing costs here for a good long time.
Once your protest interferes with my rights that is a step too far.
Why should you have the right to block me from going where I want to go? What about my right to not be attacked as in this case. Sorry once they smashed the window it went from being free speech to being an assault.
Nope but it really should be built in.
Well that is what I was thinking. Using GPUs for the checksums to off load CPUs on softraids. The new Haswell Xeons have GPUs on the die. They do seem to support OpenCL as does the Baytrail Atom. What I do not know is could ZFS or a software RAID benefit from using OpenCL. Many servers come with a GPU even if it is just for set up. Often after the setup the servers run headless so you might as well use the GPU for doing something. Maybe for crypto like Truecrypt, SSH and SSL?
Merry Christmas.
Slightly off topic but how about using GPUs for RAIDs?
Simple.
It is just as fast.
Takes less drive space.
Uses less memory.
As to rebuilding apps it should be just a simple compile and yes while memory is cheap it is not always available even today. What about x86 tablets on Atom? I mean really does ls need to be 64bit what about more?
Well computers are so fast you can just throw more hardware at the problem.
Just kidding, people do not understand that one of the reasons that people still use Fortran for HPC apps it the fact there are a lot of really good optimized libraries and the fact that Fortran is really easy to optimize.
What I do not get from the story is why JavaScript's use of floats is a problem? Last I heard Floating point using SSE or OpenCL is often as fast as integer code. I could be wrong because most of the projects I worked on where IO limited.
Now just put that into SteamOS...
That pretty much sums it all up. Frankly unless you are some high profile location I would not worry much about a government based backdoor in your router. If they want your data bad enough they will find a way. You are going to do Tempest? Are you hardened for social attacks? What about all your PCs?
If you are worried, something like OpenBSD or Linux as a router should work. I am pretty sure if they are interested enough they will get the data one way or another.
If they dumped them the market would crash. An increase of available bitcoins for sale of 13% would cause a massive crash.
Sure. Just set the value of all bitcoins to 0. Just imagine the fun that would be.
"Sorry but a lot of us decided to take your money away from you because we do not like you."
I did read the entire paper. Using the methods they used it does not seem to be a practical attack vector at all. In fact I would say that you would have to have detailed specific information of the computer being exploited. Not even just the model but the actual computer since things like the age of the caps will make a difference.
On a danger scale of 1 to 100 this is about a 1. I should have made it more clear that I was more suggesting that this is wildly impractical verses theoretically impossible. Frankly it might even work one week and not the next.
I get that and the length of time to extract the data all would seem to make this a very improbable method for a practical exploit.
I did and it just doesn't make any sense.
Where does the sound come from? Their answer is this.
"The acoustic signal of interest is generated by vibration of electronic components (capacitors and coils) in the voltage regulation circuit, as it struggles to maintain a constant voltage to the CPU despite the large fluctuations in power consumption caused by different patterns of CPU operations. "
The variable power load would very based on the instructions but we are not really interested in the instructions we are interested in the data. Doing an instruction on any data should cause the same power draw so how do they extract the data?
Then you have answer 8
"Individual CPU operations are too fast for a microphone to pick up, but long operations (e.g., modular exponentiation in RSA) can create a characteristic acoustic spectral signature over many milliseconds, and these can be detected. In the chosen-ciphertext key extraction attack, we carefully craft the inputs to RSA decryption in order to maximize the dependence of the spectral signature on the secret key bits."
So it can only work with some keys?
For the multi core issue CPUs have a single VCC so you have no idea what core is doing want if it is even possible to extract the pattern since the claim it is the power draw on the voltage regulators that cause the sound.
The summary really does not answer the questions. The idea that the sound can extract the data violates the Nyquist–Shannon sampling theorem. There should be no way a multi khz audio signal can carry the data of the exection of data at over 1 Ghz. Even the statement that they extract the key over half an hour is just illogical. How much data can a modern PC encrypt with half an hour execution time?
What sounds does a cpu make? Or better yet how does a CPU make sound? The clock speeds are in the GHZ range so it is so far outside of the sound range of any microphone it just is not funny.Throw in that all cpus today have more than one core you will have a more than one code stream executing at one time. Throw in the sound of the fans running to make picking up the sound just seem very unlikely. Until it is duplicated I would really doubt it.
"His mistake was admitting it."
And this is what is wrong with the world. His mistake was calling in a bomb threat to get out of taking an exam.
I have a different take. I do live in Florida so heat is bad. The thing is that I can not find really bright LEDs? I want a bulb that is at least as bright as a 100 watt bulb.
More likely they just got lucky.
You would be more of a two minute clock. 1000 Rems is around what it takes to kill you dead. Mounting it in the front of a cars bumper with shielding behind it might work or even pointing out the side of a car. Drive around NYC in traffic and get pedestrians as you go.
Are the poles on public ride of way. If so then to bad for AT&T.
"Besides, without an atmosphere, who'll care?" Just one of the many much bigger problem that I was talking about. That and earth exploding and the sun going out.