syn0byte

Because the NSA recommends still using RSA over ECC?

The NSA and NIST should, in a perfect world, have lost all credibility of any sort given the revelations of poisoned RNGs. It boggles my mind that they are still given any credence let alone still considered authoritative.

I honestly thought this article would be about the Puma6 itself. Imagine my surprise when it wasn't.

We need to stop using the phrase "don't reinvent the wheel" and start using the phrase "don't reinvent the hammer" CS/IT seems to have some weird solipsistic fetish for tooling in some dogmatic quest for abstraction.

I'm sure there is great for someone somewhere doing something but I just see another turtle in the stack...

To piggyback your comment and the depth of the analogy: Mein Kampf is still in publication today. Does any otherwise rational person want it stopped and all copies removed from public libraries in the way they seem to expect from Youtube/Facebook et al? Would they want Del Ray Books be held accountable for the content of The Turner Diaries?

IBM advertise their "big iron" systems in Transactions Per Second. A measure of the total system performance; IPC, Buses, caches, etc. They get shit stomped in a traditional CPU bound benchmark. Remember Apples marketing using "The Megahertz Myth" in their later PPC days because of how one sided benchmarks (and clock speeds) were getting?

It's a fine arch with plenty to offer but a 1:1 comparison with an x86 desktop is like saying that a 50 ton bulldozer just got wrecked in a race with a Bugatti Veron.

With the growing ubiquity of the linux port of svchost.exe(systemd), nested hypervisors, containerization, et al. Rebooting (where feasible) has already become a front line option.

"He only hits you because you made him do it by not listening.", "Well, you were dressed slutty so its your own fault."

Your argument is morally reprehensible.

The lander crash could have just as easily been happened using 2 different metric units. It wasn't caused by improper conversion, it was caused by no conversion. Each part assumed the other was using the same unit.

"setterm --reset" is the command you are looking for in most *nix systems.

The $1Bn+ valuation.

It's not that a note app can't be successful, but clearly not with SV style funding and expectations.

I don't buy that argument about data liability. I would assume the Salesforce contract indemnifies them from any liability beyond what existing case-law requires. It would be down right negligent by our capitalistic standards for their legal department not to include as much responsibility shirking as they can possibly manage.

They may offer tools related to it but any flaw or issue that exposes your data is still your problem. Remember the trouble Amazon got into for all those data leaks over publicly visible S3 buckets? No? Why would they? Exactly.

I am absolutely winning by my generations standards. I own a home and have little doubt, no student loans, and health insurance that my doctor envies. I can only read articles like this wistfully imagining having some sort of "disposable income" for investments.

The best long term familial/genetic survival strategy for a large and growing segment of the population is social and economic collapse. Factor that into your investment plans. I wish I could...

The large mountains of cash that gets smoke screened as "profit" to be redistributed as campaign contributions, executive compensation, and "research and development" costs; like researching how hiring ex strippers as sales reps increases sales of drugs.

Games theory is pretty clear about how this all ends... Badly.

BD-Rom is already pushing sane limits. It's why an important if under reported "feature" of BD-Rom over DVD was harder, more scratch resistant plastic coating.

If you really need the lifespan of paper... http://ollydbg.de/Paperbak/

Non-Argument. Good luck finding any data on that, no one seems to be keeping any records. Likely in part because of...

They can't. Call up an immigration lawyer in another first world country and ask about what would be required. The moment you say you are from the US, half of your available migration options vanish.

Well they didn't solve the halting problem so it looks like it's just in-house AVR. I give it a year before someone utilizes these services as part of an attack. (Assuming they haven't already.)

What was the kettle boiling? How long ago did it start boiling? Is it still boiling? That Sea level boil or high altitude boil? ARRGH! your function name isn't descriptive enough!

There is no RPi vulnerability(in this article). The RPi was just used as a bastion into the internal network. It could have been any SBC. Once your already inside the internal network things get stupid lax.

EG. I can't see your Windows shared folders from the internet, but the PC in the next room can. Someone sneaked an RPi into JPL to be that PC in the next room.

See Also; Season 1 Mr Robot had this exact scenario as a plot point.

Crocodile tears and false modesty? You don't keep your plutocratic station long if you run around telling everyone you hate cheap education because it gives the proles dreadful ideas like "fair wages" and "rights". Nor that you plan to spend a bunch of money to fix the problem of these educated uppity proles.

No doubt check summing support's been around for a while, ASIC Md5 is dirt cheap. Yes VMware shipped with it about a decade ago in ESXi but that was dependent on host NIC support. OSX may ship with the driver support but I'm having trouble finding hardware specs to verify hardware support. I said "not super standard" and "customer grade" I didn't say it wasn't supported at all.

As to the specific subset; TCP Segmentation Offload. As was mentioned in the article.

The link to the article....

"When Segmentation offload is on and SACK mechanism is also enabled, due to packet loss and selective retransmission of some packets, SKB could end up holding multiple packets, counted by ‘tcp_gso_segs’."

Segmentation offload in linux is dependent on checksum offloads per here:

https://www.kernel.org/doc/Documentation/networking/segmenta...

It may well be, I don't use EC2 much at all. Checking is easy enough: ~$ ethtool -k ethX

Also on the virtualization side, VMWare VMXNet adapters also support offloading for guests.

No, not "any system". Besides needing SACK enabled (which is by default) you also need segment offloading and non-shite networking hardware that will respect and preserve stupid MSS fields in packets.

pending a patch simply disable SACK: ~$ echo 0 > /proc/sys/net/ipv4/tcp_sack

and/or disable segmentation offloading: ~$ ethtool -K eth? tso off

TCP and Checksum offloading still aren't super standard on customer grade NICs or virtual machines. I'd assume less than half of the internet's linux hosts are actually at risk.

If you see a bridge or a building with cracks and signs of structural weakness, be sure not to tell anyone, you might start a panic. Instead directly contact the engineering firm and give them at least 90 days to rectify the issue before telling the public.

If you experience a defect in your automobile that causes your steering to cut out intermittently do not alert other users of the same make and model. Instead contact the manufacturer and give them 90 days to fix the issue internally and mail you a new part.

If a drug you are taking causes a serious reaction quietly contact the maker of the drug directly...

See how incredibly stupid "reasonable disclosure" sounds in other industries?

The irony in your argument is absolutely breath taking. The footage of the US Military murdering a dozen people, of which 2 worked for the press, was part of leaks for which he now faces charges.

"How dare he show the US murdering journalists! That could lead to more journalist getting murdered."

"Any idiot can make a bridge that stands. It takes an engineer to build one that barely stands."

Step one I assume is calling it "interim" or "temporary".

ECC isn't effective mitigation against Rowhammer either.

https://www.vusec.net/projects/eccploit/

tl;dr ECC logic can't cope with 'single' errors involving > 2 bits.

IBM's i Series, modern heir to OS/400 doesn't have a "filesystem" in the traditional sense (but tons of tools to emulate and approximate it). Everything ends up in DB2.

I've spent time crawling around the SCSI/SAS/Storage of systems like that. Wrote dirty hacks for end-user clients to cope with incompatibilities. EG multiple versions with the same filename are totally fine. Filenames needn't and aren't unique in such systems, just another col in the DB. How do you tell a Windows ftp client which of the 20 different "report.txt" files it should download? (Filezilla actually has 'VMS' options for this, its more common than you think.)

If all you ever deal with is relatively simple, well defined, CRUD type applications on entirely abstract systems in some remote infrastructure, its easy to think that's how all development should look. It doesn't and it shouldn't.

I don't know any off the top of my head (no, really.) but I'd bet searching DDG for "Hidden Wiki" and using tor hidden services would get you in the right direction, and probably put on a watch list or two.