Randor

With both a DNS-over-HTTP client and potentially a DNS-over-QUIC in the browser and serving advertisements over QUIC... there is a good chance that the world will see unblockable advertisements in our near future.

I don't think this is a good idea... about a decade ago... as a research project I ran honeypot farm of 13 machines to learn more about malware. The honeypot machines were autonomously surfing the net, parsing the DOM and choosing random links. I ran them in a sandbox and was getting weekly malware hits.

Much to my surprise... most of the malware was coming over advertisement networks on shady websites.

I would not recommend opening the linked PDF file. The link above to the PDF file is causing a BSoD on my fully patched Windows 10 sandbox. I've tested it three times, firing up WinDbg to see if I can locate the cause.

Hi,

Volder Z (Derek Vogt) came to the conclusion that it was a Romani language written by nomadic peoples and written in a Syriac derived script.

The Enochian project has attempted to phonologically translate the Voynich manuscript:

https://kulibali.github.io/enochian/

I found an interesting paper on the subject over on the European southern observatory website:

https://www.eso.org/public/archives/releases/sciencepapers/e...

Thanks,

In that case I don't really know why the guy named his variable with an underscore.

Hi,

The ISO C standard in section 7.1.3 states that global functions and variables in compiler/system libraries should be prefixed with an underscore to avoid the risk of conflict with names in user programs.

I checked and indeed... lg_buf is a global variable.

But I've never seen anyone use just the underscore prefix without a name before.

Exactly.

The real question is why does your phone even allow such things to happen in the first place?

Yes,

That is exactly the reported issue here. PuTTY 0.68 through 0.73 allows the remote attacker to accurately determine whether or not the client has cached the host key. It looks like this works because PuTTY sends a different algorithm list depending on whether or not the key has been cached.

If the MiTM attacker sees the 'default algorithm list' it can be assumed that this is the first connection attempt and the attacker can substitute the server key with a compromised key.

Wow,

This seems like a really bad idea. I would be furious if anyone put that thing 350ft from my house.

After reading the spec it looks like there is alot of differences... this RFC essentially gives complete control of the resource record set lifetime to the DNS server. This would require major changes on the DNS client side.

Take a look at: https://www.rfc-editor.org/rfc/rfc8765.html#name-push-messag...

That section contains most of the RRset remove notifications.

Hi,

A quick glance at https://github.com/johang/btfs/blob/master/src/btfs.cc on line 190 reveals that no seeders would result in an infinite wait state: pthread_cond_wait(&signal_cond, &lock);

The author could mitigate this by automatically failing any reads where there are zero seeders and/or if the peer piece map does not contain the block.

Well,

I wrote a device driver for Windows 8 that would mount a .torrent file as a virtual disk way back in 2011. We pitched the intellectual property around to several large companies. The only interest we had in the technology was video game companies... where we could mark file pieces as 'high priority' and allow the player to play the game even when the game disk was partially downloaded.

The IP was sold to a company developing their next-generation console video game system as part of a 24 million dollar package and never saw the light of day. I suspect what they really wanted was the associated patents.

Hmmmm,

That will just return the name of the built-in Administrators account. If you wanted to find all user accounts in the administrators group you could do:

powershell -c "$([ADSI]'WinNT://YOUR_MACHINE_NAME/Administrators,group').psbase.Invoke('Members') | foreach { $_.GetType().InvokeMember('ADspath', 'GetProperty', $null, $_, $null)}"

Well,

I've worked on some defense projects and navigation software for billion-dollar hardware. While at Microsoft I also worked on two system services that shipped with Windows 10.

Even I expect a certain amount of privacy when working on my personal workstations. Some of my work (team-effort intellectual property) produced while living in New York was sold to Microsoft for 24 million dollars around 2012.

Seems to me that it would make research and development uncomfortable for start-ups. Imagine having the ability to query all of the search terms performed on workstations for any R&D group in the world.

Linux is swiss cheese. Back when I had access to Vupen via a shared account the commercial product exploits had an expiration date internally called EOL (End of Life) when disclosure occured. Interestingly the Linux exploits appeared to be perpetual until public disclusure. Some of them were available for over 3+ years. I always assumed it was because of some legal issues. Nobody owns Linux so there is nobody to answer to.

Hmmm,

Well you might want to go over to wikipedia and correct the articles: https://en.wikipedia.org/wiki/Jupiter https://en.wikipedia.org/wiki/Planetary_core

Like I said, I am not a I'm not a physicist or astrophysicist, I am just a software engineer. But in 2017 when I attempted to model the interior of gas giants... my model predicted a core surrounded by high density regions. The model resembled a close-packed lattice.

https://en.wikipedia.org/wiki/Close-packing_of_equal_spheres

I was just playing around with math so I am probably wrong.

Best Wishes, -David Delaune

Hmmmm,

I'm not a physicist but I've long suspected that Jupiter has a metallic hydrogen core.

Interesting,

I don't really understand why distribution maintainers are allowing this one project to have so much control over the operating system.

Interesting.

I met Shog9 on another forum over a decade ago. I had no idea he was a community manager on stackoverflow.

Yep,

It appears that their biggest expense is the $38,597,407 in salaries distributed to ~350 employees. This makes the average salary $110,278 at the Wikimedia Foundation. I don't really have anything negative to say about that.

However I guess you could question why they need 350 employees. So I looked at the projects they are currently working on:

https://meta.wikimedia.org/wiki/Complete_list_of_Wikimedia_p...

Well,

I'm not seeing any problems. The Annual Report is available here: https://wikimediafoundation.org/about/2018-annual-report/fin...

A few months ago I spent some time looking for the Al-Cu-Fe-Cr quasicrystal frying pan. I couldn't find it so I don't think it's being sold anymore. I read somewhere that the material was reacting with acidic foods and removing the coating.

Well,

I'm getting a 404 too so I am guessing that the page was removed.

Looks interesting. I looked over your presentation but I am still unclear about who owns/leases the exit nodes. Could you clearly define 'exit node' for me?

Thanks

Many years ago I wrote navigation software for ocean going vessels/ships. We used double and triple redundancy on many of our sensor types. We generally used three control computers that would 'vote' before deciding to make vessel navigation changes. We also always included a "Dead man's switch" that allowed the bridge crew to take control at any time.

I can't even imagine designing aerial vehicle autopilot without redundency. The stakes are too high...

I would be interested in having a look at the statistical model they used to prove 'the system was reliable with zero-redundancy'. While designing these systems for ships the only way we were able to get an error probability near zero was when we used triple redundancy.

I'm fairly certain that it's the last sentence attracting downvotes.

Hi,

Where is the Windows client source code?