Slashdot Mirror


User: emil

emil's activity in the archive.

Stories
0
Comments
1,370
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,370

  1. All run on Supermicro on Slack Doesn't Have End-to-End Encryption Because Your Boss Doesn't Want It (vice.com) · · Score: 1

    Not to pick on a particular server vendor, but it must be assumed that the network is compromised, and that all communications will be recorded and analyzed by many unknown parties.

    We got off telnet for a reason.

  2. The Register also discussed this... on New Evidence of Hacked Supermicro Hardware Found in US Telecom: Bloomberg (bloomberg.com) · · Score: 1

    ...in their first article on the subject:

    A third thing to consider is this: if true, a lot of effort went into this surveillance operation. It's not the sort of thing that would be added to any Super Micro server shipping to any old company – it would be highly targeted to minimize its discovery. If you've bought Super Micro kit, it's very unlikely it has a spy chip in it, we reckon, if the report is correct. Other than Apple and Amazon, the other 30 or so organizations that used allegedly compromised Super Micro boxes included a major bank and government contractors.

    There is a second article with the latest details.

  3. The CEO says keep it secret. on New Evidence of Hacked Supermicro Hardware Found in US Telecom: Bloomberg (bloomberg.com) · · Score: 3, Interesting

    Do you think that your corporate security team wants to admit that you were infiltrated?

    The first dozen companies that admit this will likely see their stock price decline. Do you want your company to go first?

  4. People deserve "Healthspan" on Scientists Are Working To Eliminate Senescent Cells (theguardian.com) · · Score: 1

    If you would do us the kindness to RTFA, you would realize that your lifespan will not be increased if you were suddenly able to eliminate all of your senescent cells. Life extension is not on the table with this approach, as it is with techniques that mimic caloric restriction.

    However, should your senescent cells all undergo sudden removal, you would find yourself free from a number of age-related diseases. The article asserts that even a small number of senescent cells are able to act as powerful pathogens in otherwise healthy tissues.

    I also wholeheartedly agree that your type of people need to die. I, however would prefer any and all options for life extension, and I would gladly undertake environmental responsibilities and obligations to ameliorate my "footprint."

  5. AWK versus OS2200 on Do You Know Cobol? If So, There Might Be a Job for You. (wsj.com) · · Score: 1

    I must confess that many of my coworkers love the original UNIVAC operating system, OS2200, known in a previous life as EXEC 8.

    UNIVAC seemed to have gotten the ASCII message earlier than IBM, so EBCDIC isn't a problem.

    What is a problem is socket programming in COBOL - we had people who knew how to do it in EXEC 8, but they are gone.

    I have done obscene things with stunnel defending this beast. I'm actually an Oracle junkie in real life, but I am thankful for the COBOL cards that I wrote in high school and rubber-banded every class for understanding what the hell that machine is doing, and I don't understand 1% of it.

    But the best of these COBOL guys love the flexibility and expressiveness of AWK, and their descent into the C languages begins at this guidepost.

    Who says that you can't teach an old dog new tricks?

  6. Apple-designed modem? on Qualcomm Accuses Apple of Stealing Trade Secrets and Giving Them To Intel (betanews.com) · · Score: 1

    Unlikely. With NDA access to Qualcomm designs, the cleanroom requirements will be dire.

  7. ...is that Apple has no hesitation in dumping Intel as a supplier.

    Apple announced that Intel modems would not be used after the current generation of iPhones.

    Apple will also move away from x86 towards their own desktop/laptop ARM processors.

    Is Apple dumping Intel because they broke Qualcomm's NDA? Or is it the 10nm debacle? Or both?

  8. ...I did not vote for Trump, and I have voted straight Democratic tickets at times, when we needed the checks and balances of divided government.

  9. Firefox's Gecko really had performance problems until recently.

    Microsoft can write tight, fast code, and Gecko might be able to outright take, or at least be inspired by, innovations in Edge that they could see.

    When Ballmer called the GPL a virus, this is likely his chief fear.

  10. It seems that Microsoft wants to stay relevant on the new platforms, and I have found them useful. I flew on Spirit airlines recently, and gmail doesn't properly show the QR on the boarding pass email. Outlook for Android does, so it's on my phone.

    Outlook likely bundles the Edge rendering engine (Trident?), and I'll tolerate it for my use case. I will not consider it for a stand-alone browser until, like Apple and Google, the code opens. The security community seems to agree on that.

  11. Will you be equally surprised when Windows 10 switches to a monthly payment model?

    Win7 is still the dominant desktop OS, and Microsoft seems desperate for Win10 to supplant it. Attempts to levy new fees will drive systems away, either to Linux (likely ChromiumOS or Ubuntu) or to reinstalled Win7.

    M$ may be foolish enough to try new fees, but that will stop when a 5% market share drop occurs, which would be relatively quick.

  12. A company with competitive products in the target markets would not have any need to resort to this kind of advertising. The fact that these ads exist is Microsoft's tacit admission that Windows as a consumer product has failed to compete with Google Android and Chrome OS.

    I needed a cheap Windows system recently, and I was pleasantly surprised that an old corporate desktop with a Win7 Pro license key still activates under Windows 10. This would never have been allowed when Windows was the primary consumer OS, but those days are long gone.

    Microsoft has one choice, and only one, to achieve significant penetration with Edge: open the source. There is nothing else that will help - nothing.

  13. Lots of people install the Amazon App Store and pay for games through that source.

    It does appear that Google wanted to make an example of Epic specifically, in the hopes that more app developers will be cautious to follow.

  14. Re: the price of free on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    You don't send your private key to a CA for their signature. You send a public key embedded in your cert, which they encrypt with their private key. Their signature attests for you, but they can't decrypt without your key, which you (hopefully) never sent.

  15. Re: Misses the point of NFS on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    ...unless the story takes you to clients and servers of an external vendor/customer, to your cloud provider, or to internal sites in other divisions that will not participate in a realm.

  16. Re: Misses the point of NFS on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    You will see in the conclusion the FBI advisory to reboot Soho routers. Generally, end users cannot maintain firmware or patch broadband devices. Encrypting everything it can touch, and keeping internal devices patched, is hardly unreasonable.

  17. Re: IPsec on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    Wireguard has biting criticism of ipsec and openvpn. If you can stand the UDP and you're on a supported platform, it's likely far preferable. See the addendum.

  18. Re: If you're that worried about your LAN... on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    Please see the Wireguard addendum.

  19. Re: SMBv3 on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    ...and when it runs on Windows 7, it will be an option.

  20. Re: Not using Kerberos and ldap on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    Yes, because it is so very easy to get cloud servers, external vendor clients and servers, and internal sites in different domains into the same realm. You must do this every day.

  21. Re: Stunnel? on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    Easy answer... Stunnel runs out of inetd, and it supports client=yes in that configuration. A wrapper will also coerce it to observe restricted ports. This is much friendlier than ssh.

  22. Re: What's really objectionable––& on Encrypt NFSv4 with TLS Encryption Using Stunnel (linuxjournal.com) · · Score: 1

    *I* am the author of the Linux Journal article, and your insistence on the Kerberos baggage means that ad-hoc connections that are not part of a realm must go unencrypted. This is bad enough when I'm at work trying to mount a server behind my cable modem, but it becomes truly objectionable when cloud providers push the same unencrypted protocols. And before you tell me that ipsec or openvpn will solve all of my problems, read the wireguard commentary.

  23. It really is time to upgrade my phone to MicroG, and put an end to this.

    https://lineage.microg.org/

  24. Here is the perfect response... on Nintendo's Offensive, Tragic, and Totally Legal Erasure of ROM Sites (vice.com) · · Score: 1

    ...anyone involved with Nintendo's legal action should publicly destroy all of their own Nintendo hardware, and upload the footage to Youtube. If Nintendo wants so badly to be erased from our memories, we should certainly help them.

    It is unfortunate that I have nothing to smash.

  25. Not quite so important on A Material Found To Carry Current In a Way Never Before Observed (phys.org) · · Score: 1

    You mention maglev trains and powerful magnetic fields.

    The article is clear that the resistance of the LSCO material increases with temperature, and this new research finds that it similarly increases in the presence of strong magnetic fields, suggesting a very simple fundamental property behind the observed behavior.

    In any case, this HTS does not work well in the presence of strong magnetic fields, so you can cross that application off your list.