This article give us no evidence/proof/fact at all, only the affirmations of a 87-year-old general that could be affected by senility . I don't know that newspaper, I don't know it it's some kind of satirical newspaper or not (forgive me but "Yediot" sound me like "Idiot") (EDIT: I found this Wikipedia page: https://en.wikipedia.org/wiki/Yedioth_Ahronoth , it seems a regular newspaper), but, if it's the work of professional journalists they should interrogate themselves about the importance of their job it these times of fake news, avoiding to produce this kind of material, even for "clickbaiting" purposes.
I'm using ZY12PDN USB-C PD boards ( https://www.youtube.com/watch?v=aIHj3qMRqqE )
About point 2, IMHO, better a jumper to disable programming mode than having to obstruct the sensor.
I'm using in my current projects PD boards from Ebay, so I could be interested. Ebay boards are programmable using a single button on the board itself and are less expensive. This one is very cool but IMHO has two weak points:
1. "The board has a sensor which reads your desired configuration from the light pulses generated on this page and stores them on the onboard NVM". What if the company go out of market ? How can a customer reprogram his boards without website?
2. Is that secure ? What if a malicious actor reverse the website logic going around reprogramming the boards to provide max voltage ? It should have a safe button but, at that point, could be convenient to use directly that button to change configuration.
what if I tell you that a software banks (B-A-N-K-S) are using to transfer money has hardwired passwords inside, has to run as administrator and has some problems of command injection, etc, etc ... etc ? Sadly company think to security as a cost and to maximize the profit let people should never approach a keyboard to write programs, unsecure programs, because they cost less. Because also testing is expensive, same story. Did a big airplane manufacturer does the same ? The customers ? Who takes decision often doesn't care: they prefer to spend more money to purchase a scapegoat, a "silver bullet" appliance so that they can say "Hey, we had all the contromeasure, but hackers know black magic !". I don't want to burn-out. I prefer to give the correct information to the peoples want to listen and then I hope in a future in a better company.
Hacked Twitter account ? I purchased the "Orange Box" I think 10 years ago, than I changed city and the games remained in a store facility for years. Recently, I've recovered the box, still being able to register the game, I played and completed all the Half Life episodes. I thought the last hope to have and ending to the saga was the Project Borealis. Let's see ... If it isn't a fake, they was waiting for me ! :-)
Starting a job in a "Windows dependant" software house, I was forced to have both WLS and Linux VM. They gave me a brand new HP computer they prepared with company software, security software, etc. I was "Windows free" since 2009, ten year without Windows. The first problem was BSOD, that computer start randomly to crash, even after the software / system / driver upgrades the administrator installed on the machine and it still does, randomly. The same happen to my collegues. For the first time I noticed that now BSODs have a nice QR-Code. My impression about WLS is that's nice but still a toy with lot of limitation: first of all you can't full iteract using WSL tools with what is running in Windows space. It's useful to have access to Linux tools like grep, interpreters, etc to use against object resident on Windows file system. Sometimes Linux programs silently doesn't work well I noticed this using some Linux tool and Python libs, for example. This is the reason of the Linux VM running on my PC. IMHO WLS is far to be a replacement of a native Linux pc / VM, I still prefer to work on a Linux or OSX pc, even if Apple and Systemd are spending big effort to make me hate both, with the result I'm evaluating BSD.
The age make it "crap", but not in the way you think. I can speak about C++. C++ code wrote in the older standard, let say C++ pre-11, who are 20 or more years old make it difficult to maintain because new generation of programmers are not generally interested to legacy code or in learning old c++ standards and skilled programmers don't want be relegated to be eternally maintainer of old projects. For this reason projects die by asphyxia. We have that good code base in Cobol, ok, but the point is: who cares ? Who is important when you need new programmers. Besides, a part considerations on the language, the architecture is important we live in a world of microservices and old code not updated to modern paradigms could became "crap", even if if the most elegant code.
This could be devastating, much more in little/medium company. I know of successful companies (I mean company with successful products ) with a C/C++ stack they considered "good enough" so they didn't change anything: the C++ standards, architecture, structures. Often that line of conduct was supported by a management looking any change or improvement as a cost. The result is always the same: a day they wake-up realizing that the "product" is a pile of crappy legacy code. I know some cases. One of those company was bought by a bigger company that asked to modify the stack to modern standards with disastrous results because the programmers wasn't skilled to port the code base to modern standards/architectures. In another case, the owners sold the entire division to another company, interested to the clients more than to the product and, after checking the status of the code base, the buyers hired a group of consultants that rewrote all in Java, with results that you can imagine.
> You don't go lisping to make your CV look pretty.
Look, I didn't write that. This is your affirmation.
As I wrote, and I repeat, I think that being specialized to procedural/object languages, for some kind of problems that could be a limit. So I'm looking for different paradigms to change the way I approach problems. Now I have a limited time, how I should spend it ? Now, because I'm a professional programmer I would like something I can use and improve my CV. So what?
> your best bet right now might be Python
Again, its paradigm is a stereotype of other language I know.
What's your problem ? Are you the author of the article ? Look, I think that the point of that article is "study Haskell, trust me", so it isn't an help for newcomers. I only express my opinion. The title is "Why Haskell
is important" and I think it fails to explain the more important point that is "why". So, why ? Moreover, why Haskell and not F# or Erlang, for example ?
I would consider other programming languages different from c/c++ because I don't want my capability to solve problems bonded to specific tools, this is the motivation I learnt other languages.
Evolution maybe, the animal becoming too specialized, in case of environmental changes, will face the extinction.
I'm looking for tools better able to solve specific problems. You can stick screws with an hammer, maybe it's faster but a screwdriver tool exists to better solve the problem and its evolution the electric screwdriver is the state-of-the art and probably the best choice. Now, having to deal with a limited resource, time, I have to choice what to learn seriously and this article doesn't help me to do a choice. Those choices also could influence my professional capabilities in the futures, because, you know, I do the programmer to live.
> just consider themselves programmers plain and simple
Plain and simple programmer is bullshit, IMHO. What do you write in your CV, "professional programmer plain and simple" :-) ? Oh, please, save your rhetoric.
I'm mainly a C/C++ programmer, I use also python, I'm learning Go and I'm reading about Rust. But I think my programming skill are a little "stereotyped", so I'm looking for something different, you know, to open my mind. So I read the article, here on HN, about all the "exotic" languages, Lisp for example and others. I was reading this article about Haskell and I think it's too abstract to stimulate a novice to go further. Some details about the advantages cited and related examples should be present to give motivation to the newcomers. On the contrary, the part about the evolution gave the impression of an immature language. My two cents.
Classic DOS attack by morons. You have that public place, business, physical service you want to block, so you send a massive number of morons (easily available on Facebook) to do dumb stuff in that site. Bang! Mission accomplished. For maximum damage a "Press reflection" variant exists: with the help of the press you make this kind of attack trendy so more morons can be focused on the target. Booom ! Nuclear blast!
No, really. I, the system administrator, manage the system(s). Does Systemd make my life easy ? No, again. It's something I have to deal for. If I could, I would follow the example of Knoppix.
In youth I lived in a place where organized crime was rooted. If it's true, as appear, that the government is behind that intimidation campaign, it's very sad to see a sovereign state to act like mobsters against students.
I think it's a cheap offer. If you are a professional well introduced in the business of selling 0days, for a gem like that, you can charge even a single customer of the same amount. Indeed there are private companies offering even more (https://www.securityweek.com/zerodium-offers-2-million-ios-h... )! Ok, companies involved in this business have some "safeguard" clauses in case the hole is discovered too soon (see for example the Hacking Team e-mails), but you can sell this kind of vulnerability practically to everyone. So the offer IMHO is a public relation move.
Why an attacker should spend 100$ , sending hardware to the target that could be potentially tracked following the path between the resellers, could transport evidences like fingerprints or DNA, using a telephone connection that could also be tracked when the same thing could be done with a good radio equipment and more discretion ? Anyway, I am the kind of guy that inspects the ATM praying to find out a skimmer to dissect, so if someone would send me all that cool stuff directly at home is welcome !
Moreover: battery. How many time a battery of reasonable dimensions could survive powering that kind of system ? exaggerating, 3 days without using a heavy use of the phone modem ? But let's say that in that time the attacker reach the target collecting WIFI keys that doesn't mean that he can compromise any PC or phone in the home network. So my advise is to send directly networking hardware compromised (i.e. an access point ) and, if your budget is 100$ , you can send a very nice piece of hardware to the target, avoiding that he throws all that stuff away (if he can't recycle all like me ). Again, if someone could send me a free, 100$ worth AP is welcome.
A question: they still have to ground the "whatever re-branded 737 max" until the conclusion of the investigation, right ? This can't be a loophole to avoid the interdiction to fly, isn't it ?
mktemp couldn't make a script idempotent. I remember a script that failed because it needed to create temporary executables in /tmp. To apply some hardening policies, someone remounted /tmp in "noexec" mode and ... kaboom. So if you use that, better if you specify TMPDIR with proper checking.
without prepending the echo command. This will create an empty file or it will truncate an existent file. The touch command could be preferable to preserve the content, if needed.
Bad example, if 1 isn't prime, 2 x 1 isn't a product of prime, so not all the number can be written as product of primes. My point is that you can't write an introductory article, supposed to be understandable to the masses, using a form able to confuse further the readers. A student, reading this, I don't think will understand this explanation that seems contradictory.
"My mathematical training taught me that the good reason for 1 not being considered prime is the fundamental theorem of arithmetic, which states that every number can be written as a product of primes in exactly one way. If 1 were prime, we would lose that uniqueness. We could write 2 as 1×2, or 1×1×2, or 1594827×2. Excluding 1 from the primes smooths that out."
In my experience they don't look your Github profile at all. I think mainly because the average recruiter have no competence to read it (sad but true). I had two so called independent recruiters pretending to read it, but when I asked what repository preferred and why I obtained an embarrassing silence. Worst, the same happened with a couple of programmers during the final interviews. Recently I had a letter from a big software house, declaring they was interested to my projects on Github, I asked some questions discovering that that someone else ( maybe some kind of automatic system) give him a suggestion, but that wasn't his direct examination.
I'm a frequent flier and I'm scared. I try avoid companies with low standards reading all the news about incidents related to the use of used or counterfeited parts, lack of maintenance, etc. But now it's clear that, in times of low cost companies, cheap airplane are requested and even the redundancy in critical subsystems is sacrificed both by the producer and the flight company that didn't pay for a "optional" that actually is a lifesaver. How many critical subsystem haven't redundancy to reduce the costs of airplanes ? Maybe some regulation in this market is needed to avoid other disaster like this one, imposing standard for the critical system and denying the routes to the airplanes that do not meet the specifications. I don't think that the market can play with human lives.