sllabres

Was it probably a IronKey? They had a Homeland Security grant, I've used one then. To me software had some advantages. Easy backup of the encrypted data without a dependency to the hardware. IIRC this was somehow solved on the IronKey. Not a black box for the user which have to trust. My main problem with a software solution for me is the entry of the password which I have to do on a probably compromised computer.

The original IronKey (later sold to Kingston) seems to have be cracked. A team / company called Unciphered managed to break a IronKey in a attempt to offer such a decryption to Stefan Thomas who had 7002 bitcoin on this key. This was then worth then 235 million dollar (now >500 million), which is of course a VERY strong motivation. [1]

The Lenovo case of course seems not to be bad implemented security but no security at all, especially if they advertise with encryption, which I found on a Asian Lenovo website where still there are still some specs of the key [2]. A good method if you want to damage your reputation.

[1] https://www.wired.com/story/unciphered-ironkey-password-crac...

[2] https://tk.lenovo.com.cn/product/1003497.html

There is a Practical Engineering video [1] discussing the failure. (Just saw that it is not a new one discussing the report, sorry)

[1] https://www.youtube.com/watch?v=3oBCtTv6yOw

We don't really need multiple exits in case of fire because fires are occurring less often and people are getting plenty of warning.

I think this is much to broad.

Even the film does not suggest eliminating multiple exits; rather, it points out that it took a long time to replace external fire escapes with better alternatives. Specifically, internal, fireproof staircases that offer greater protection and are used regularly and therefore familiar to those fleeing.

When the redundancy is gone (not available, blocked, insufficient spaced) this can quickly lead to a disaster. Here are some recent examples

[1] https://en.wikipedia.org/wiki/2026_Crans-Montana_bar_fire

[2] https://en.wikipedia.org/wiki/Kiss_nightclub_fire

[3] https://gpe.wikipedia.org/wiki/2023_Johannesburg_building_fi...

Point Nemo :-D https://en.wikipedia.org/wiki/Pole_of_inaccessibility

An Apple airtag probably doesn't but it is apparently possible to send some data at a very low rate (the article in [1] says a few bits per hour) over the find my network [2]

[1] https://positive.security/blog/send-my

[2] https://github.com/positive-security/send-my

People liking this post will probably like this [1] and especially these [2] from the channel. All solved using algorithms and map data.

[1] https://www.youtube.com/@colsto

[2] https://www.youtube.com/watch?v=eY-W9gmwxhg https://www.youtube.com/watch?v=nzytWZPyuEw https://www.youtube.com/watch?v=rkmXs_7hELg

Nice you could choose if you would like your gasoline with or without service :-) (4:00).

Why was the chain called "Der Wienerschnitzel" and not "Das Wienerschnitzel". It is (was) a proper noun, but why the wrong article? (5:02)

A small part appears twice (from 8:51--9:06).

more cyclists than I see in current streetview footage

Coca-Cola delivery vans where yellow?

I very much liked reading his "computer related risks" book (multiple times...) more than 25 years ago and after that the RISKS Digest was one of my weekly "go to" for a very long time.

So it seems we need something like this [1] for IT infrastructure? ;)

[1] https://outerspaceinstitute.ca/crashclock/

Or in this case; just click on "map"

Saying that (hand)writing is irrelevant is a bit of a strawman implying I said writing hexadecimal numbers big-endian on paper matters for coding.

The second sentence, weather your customers know if they have been in the same room with a big-endian system (CPU alone doesn't matter) is irrelevant when the point is to write correct code. Many of then aren't interested in this or other details and that is ok as they are not responsible for the implementation.

Changing the endianness either direction did have show bugs to me several times, that could be fixed, and it was worth it for that alone.

Not only the System/390. Its also IBM i, AIX, and for many protocols the network byte order. AFAIK the binary data in JPG (1) and Java Class [2] files a re big endian. And if you write down a hexadecimal number as 0x12345678 you are writing big-endian.

(1) for JPG for embedded TIFF metadata which can have both.

[2] https://docs.oracle.com/javase/specs/jvms/se7/html/jvms-4.ht...

Congratulations :-)

Very nice shots. It must be a great feeling to see one's own footage in a feature film!

How long do you do astrophotography?

It's always interesting to see how are things build in the Lumafields "Scan of the month". The the most interesting scan from Lumafield I saw was not a Scan of the month, but in "Adam Savage’s Tested: Surprising Flaws in 18650 Lithium-Ion Batteries" [1]

[1] https://www.youtube.com/watch?v=-Y23nfAOiXQ

PS: Nice company logo btw. ;)

Thanks for the clarification

I'm really sad, even if I never met him personally and only knew him from his talks, his software and of course his blog.

I had hoped that after his illness he would be granted some time for personal life and recovery — which makes this news all the more shocking.

Sometimes I miss the times where you had a compact development environment, wit one installer. Your source produced a mostly self contained binary in a reasonable size, you had nice debugging support and quick turnaround times for a compiled language even on a small development machines. And all that for attractive price for a perpetual license (Borland times).

Today it seems I have to give the producer my email address for the 'free' "Delphi History PDF". Well, times have changed. :)

Thanks, didn't knew that and 11% further is quite a increase and not too far from the maximum possible.

I think this is the furthest true photography [1] with 443 km distance, into the sunrise (corrected from sunset)

[1] https://beyondrange.wordpress.com/2016/08/03/pic-de-finestre...

So no #includedir, no LDAP integration, no log_input/output, no PAM integration ...?

I have seen the topic a bit late, but nevertheless:

I have learned 6502 assembler (and assembler) in general with "6502 assembly language programming by Lance A. Leventhal" (1979) [1] and "Apple Machine Language by Don Inman & Kurt Inman" (1981) [2]

For the 'internals' of the machine, I had "What's Where in the Apple: A Complete Guide to the Apple Computer by William F. Luebbert" (1985) amazon:[3]

[1] https://archive.org/details/6502-assembly-language-programmi...

[2] https://archive.org/details/a2-ml

[3] https://www.amazon.de/Whats-Where-Apple-Complete-Computer/dp...

From the article: "The consequences for a consumer buying a shady USB cable likely aren’t too bad".

I can't second that, but more to the software/driver side.

Without my knowledge, I once had a counterfeit cable that costed several days of my life. At that time, the FTDI drivers recognized (and as I read did some other things [1]) that a counterfeit cable was connected, but instead of simply disabling the function, they impeded it. In my case: After pressing the first few keys on terminal connection, the transmission from the device to the PC worked, but not the reverse direction. A long search for the error came to an end after I replaced the USB/RS232 with a new one. This was with windows, with Linux even the counterfeit worked.

[1] https://www.elektroda.com/qa,ftdi-ft232-scandal-driver-brick...

I would say this is the prettiest interface I've seen for explaining seasons, analemma, solstice, ... to someone or experimenting myself.

Thanks for the find!

From the man page: Linux 5.14.

Before Linux 6.5, memfd_secret() was disabled by default and only available if the system administrator turned it on using "secretmem.enable=y" kernel parameter. [...]

"To prevent potential data leaks of memory regions backed by memfd_secret() from a hybernation image, hybernation is prevented when there are active memfd_secret() users."

Yes, they are made with: http://www.brendangregg.com/flamegraphs.html and

https://github.com/brendangregg/FlameGraph

Useful site if you are on to perf/eBPF/performance things with many examples and descriptions even for other uses as e.g. memory usage, disk usage (prefer heatmaps here but they are nice if you want to send someone a interactive view of their directory tree ...).

Every of the lightning talks itself had about 20 short different topics, And as I wrote these were examples, you didn't expect someone to re-enumerate them here all to refute your statement. You can easily find them yourself. Have look at this page, where others listed their favorites, there are many more. But I don't think from your reply you didn't look at the list of sessions yourself.

None of these interesting as "technical topic"? (only examples)

51 Ways to Spell the Image Giraffe

Who cares about the Baltic Jammer?

Asahi Linux - Porting Linux to Apple Silicon

The art of text (rendering)

Excuse me, what precise time is It?

DNGerousLINK

CPU Entwicklung in Factorio

How to render cloud FPGAs useless

Breaking architecture barriers: Running x86 games and apps on ARM

Cracking open what makes Apple's Low-Latency WiFi so fast

Reverse engineering the Pixel TitanM2 firmware

Not To Be Trusted - A Fiasco in Android TEEs

Celestial navigation with very little math

Textiles 101: Fast Fiber Transform

Escaping Containment: A Security Analysis of FreeBSD Jails

Don’t look up: There are sensitive internal links in the clear on GEO satellites

Opening pAMDora's box and unleashing a thousand paths on the journey to play Beatsaber custom songs

Lessons from Building an Open-Architecture Secure Element

And of course some of the Lightning Talks...

My method when such a pop-up occurs: I'll vote with my feet and immediately close the sites windows to reward them (at lest 95% of the time)

I am not a HIFI/TV aficionado, but the ACR [1] thing was new to me.

I hope it is not yet important for me as I never allowed a TV access to my LAN/WLAN. But with smart devices using accessible open WLANs to transmit who knows.

[1] https://arxiv.org/abs/2409.06203 / https://arxiv.org/pdf/2409.06203

The sensitivity When I play with phypbox [1] there is a sensitivity in the µT range. From the web page [2] the device build has a 0.1 nT resolution and 50 ppm absolute accuracy.

[1] https://phyphox.org/download/

[2] https://alexmumm.de/pgProtonMagnetometer_en.htm