News for hackers. Stuff that matters.

tomputer

I work in the hosting industry (euro) and most people I know never heard or care about this project.

Nextcloud CEO Frank Karlitschek well summarized it:

“I don't think Gaia-X has a future. It's basically a paper monster that will exist but will not have any impact in the market, unfortunately."

https://www.theregister.com/AMP/2024/01/08/gaiax_future/

Re:All Fritz Box modems have been hijacked on Sunday April 21, 2024 @04:37PM (#40109012)
It seems the domain fritz.box has been suspended. March 5 was the first time this message got captured on archive.org[1]:

The Domain Name you have entered is not available. It has been taken down as a result of dispute resolution proceedings pursuant to the Uniform Rapid Suspension System (URS).

The fritz.box name servers also point to URS[2] name servers:

  Name Server: ursns1.viagenie.ca
  Name Server: ursns2.viagenie.ca
[1] https://web.archive.org/web/20240305162200/https://fritz.box...

[2] https://www.icann.org/urs-en

Quoting[1] from Homebrew on Github:

>> Looks like that Homebrew users (both macOS and Linux, both Intel and ARM) are unlikely affected?

> Correct. Though we do not appear to be affected, this revert was done out of an abundance of caution.

[1] https://github.com/Homebrew/homebrew-core/pull/167512

Re:New Intermediate Certificates on Tuesday March 19, 2024 @04:31PM (#39759921)
> reusing private keys is an enormous vulnerability.

As long as the private key is stored/handled safely and RSA/ECC is not broken, it is not vulnerable.

I do agree that key rotation is better/recommended practice.

> a single leaked private key means your entire site is compromised

The leak is the actual vulnerability. As long as the leak is still there and you are not aware of the compromised private key, a fresh new private key will probably leak again.

However, the chances of leaking may be greater if a private key has to be used in multiple locations.

> That's why countries changed it, because they realized their economies were more valuable that their gold stash

Then it is interesting that, with gold being less valuable nowdays than fiat money, central banks (or countries) are still the largest buyers of gold.

Re:What Was ISDN? on Sunday January 14, 2024 @05:23AM (#38989167)
Same here in the Netherlands, somewhere between 1998-1999 using KPN Telecom. I was in high school and convinced my parents to upgrade from single-line PSTN to dual-line ISDN, so we could call and surf the internet at the same time. At the start of 1999, because of the rapid increase in phone and internet traffic, the national call tariffs had been reduced a lot[1]. Tariffs were even cheaper in the afternoon and during the weekend.

For normal internet browsing the single ISDN connection (64 kbps) was enough. Then later in 1999, Napster[2] launched and I was hooked! This made me use bundling ISDN channels quite a lot. Because of the cheaper tariffs, weekends where great because I enabled the bundling around midnight until early in the morning, so my parents wouldn't notice. :-)

I was on ISDN until 2002, when ADSL was available here and we could be online 24/7 for a fixed price. I do remember my ISP (XS4ALL) still had a fair-use-policy for downloading, which they removed a few years later.

[1] https://www.acm.nl/en/publications/publication/9213/OPTA-agr...

[2] https://en.wikipedia.org/wiki/Napster

Coinbase Custody Trust Company, LLC (the “Bitcoin Custodian”) is the custodian for the Trust’s bitcoin holdings.

Source: https://www.sec.gov/Archives/edgar/data/1980994/000143774923...

Isn't that almost always the logical consequence once you understand how Bitcoin works and you believe it can actually work as a safe haven investment?

Those who believe it can not work are most probably not invested. Those who believe it can work are most probably invested.

Re:Biggest companies in the world by market value 2022 on Monday April 24, 2023 @07:32AM (#35686284)
I stumbled upon this site a while ago which also includes ranking filters:

https://companiesmarketcap.com/

This is exactly what makes Bitcoin a fantastic store of value. Bitcoin supersedes gold because compared to gold, it has no other use.

If Bitcoin would be used as a store of value instead of gold, gold can be used for other material purposes for a lower price. The same goes for real estate. A house does not have to be an investment asset or store of value. If (institutional) investors would use Bitcoin instead of housing, it could make housing affordable again. Or at least result in more fair/realistic housing market instead of the propped up market from the last few years.

Compared to gold and real estate, Bitcoin is a scarce asset that can easily be divided into small pieces. It has a liquid market and can be exchanged 24/7 anywhere in the world.

Re:Is Crypto Dead? on Monday January 23, 2023 @10:04AM (#34489592)
> See, it's already over. If you have to explain that to a layperson, it's not going to get adopted.

Does every layperson have to adopt stocks or commodities? Are these also dead if a layperson does not adopt it?

Re:Bitcoin worth $1.5B withdrawn from Coinbase in 48 hours on Sunday November 27, 2022 @03:52AM (#33761513)
It is not recommended to split up your seed words[1]. Do not try to build your own scheme. If you want to store your keys geographically it is recommended to use multisig. You can also use a passphrase (13th/25th word) that can be stored separately from the 12/24 seed words[2].

[1] https://bitcoin.stackexchange.com/a/98423

[2] https://en.bitcoin.it/wiki/Seed_phrase#Two-factor_seed_phras...

Re:PostgreSQL 15 on Friday October 14, 2022 @08:43AM (#33202772)
Where I work we've recently upgraded many PostgreSQL servers from 9.x/10.x/11.x to 14.x.

A very cool PostgreSQL feature is that, if you install a second instance on the same server, it will by default use a different path and port to run the second instance.

  root@example:~# pg_lsclusters
  Ver Cluster Port Status Owner    Data directory              Log file
  11  main    5432 online postgres /var/lib/postgresql/11/main /var/log/postgresql/postgresql-11-main.log
  14  main    5433 online postgres /var/lib/postgresql/14/main /var/log/postgresql/postgresql-14-main.log
Now you can dump and import databases on the second instance and test your applications with the new version. If it all works as expected, use pg_upgrade[1] to migrate everything to the new instance and switch the ports after the migration.

I have only done this migration process on Debian systems but in my experience it worked fantastic!

[1] https://www.postgresql.org/docs/current/pgupgrade.html

Re:Are central banks going bankrupt? on Tuesday October 11, 2022 @01:25PM (#33166096)
> Bitcoin (now called Bitcoin Cash)

Wrong.

Bitcoin Cash (BCH) is a fork of Bitcoin (BTC). Bitcoin Cash is a spin-off or altcoin that was created in 2017.

Indeed! HATop is great to show the status, traffic, HTTP codes, errors or number of connections. It is also very simple to enable/disable HAProxy backends, for example:

  hatop -s /var/run/haproxy/example.sock
Use the arrows to select a backend server and press:

   F9 - Enable a backend server (Status: UP)
  F10 - Disable a backend server (Status: MAINTENANCE)
For Apple keyboards it is fn+F9 and fn+F10.
Re:Spain will introduce free train travel on Saturday July 23, 2022 @01:32PM (#32205510)
I did the same, visted Berlin a few weeks ago. It was indeed nice that I could take any S-Bahn or U-Bahn without checking the times or zones.

I hope they’ll continue with this type of ‘unlimited’ tickes. If only during peak summer/winter months. I guess a lot of people would gladly pay more for such unlimited (no worry) tickets.

> Homes aren't heated with nuclear power, they're heated with gas. Industrial processes don't run on nuclear power either, they run on gas.

I'm glad that there are still people who understand this. In the Netherlands 90% of the homes[1] still run on natural gas and that's not something we can "simply" replace. It is possible and will eventually happen but it will take years if not decades.

And that's just homes in the Netherlands. Take a look at the global energy mix[2] how much the world still depends on gas.

[1] https://www-cbs-nl.translate.goog/nl-nl/nieuws/2021/07/92-pr...

[2] https://ourworldindata.org/energy-mix

Gas prices were already rising since 2020 but yes, the Ukraine/Russia conflict made it worse.

Below a graph from the Dutch TTF Gas Futures from the past 2 years. The contract price is in Euros and Euro cents per MWh.

https://www.theice.com/products/27996665/Dutch-TTF-Gas-Futur...

Edit: those are just numbers on a screen but in real life that means the energy/gas bill increases between 5x - 10x if this continues.

Re:Users may be unable to send email to outlook.com on Wednesday July 06, 2022 @05:29AM (#31998628)
Not sure if it's relevant, but I also see DNSSEC issues:

https://dnssec-analyzer.verisignlabs.com/outlook.com

Re:‘Blade Runner’ at 40 on Monday June 27, 2022 @07:44AM (#31893187)
> It has a good pace, amazing visuals, asks tough questions, has some really good action sequences, etc.

If I may add: the score produced by Vangelis.

Currently this seems to apply only for customers in the Netherlands:

https://help.coinbase.com/en/coinbase/trading-and-funding/se...

Related to this:

In 2020 the Netherlands approved the implementation for the European fifth Anti-Money Laundering Directive (AMLD5). Crypto providers operating in or from the Netherlands also needed to apply for registration with the Dutch Central Bank (DNB). Besides the AMLD5 implementation DNB required from crypto providers to implement additional measures, which is the same wallet verification that Coinbase now requires.

Bitonic (a dutch crypto broker/provider) filed a lawsuit against DNB regarding the additional wallet verification requirement, which was not part of AMLD5. DNB formally acknowledged the complaints from Bitonic and revoked the wallet verification. I'm not sure but I believe (until now) it has only be revoked for Bitonic.

Bitonic published some articles on their site:

https://bitonic.nl/en/news/206/dutch-amld5-implementation-la...

https://bitonic.nl/en/news/224/lawsuit-bitonic-vs-dutch-cent...

https://bitonic.nl/en/news/231/dnb-formally-acknowledges-com...

> Except finance is extremely advanced.

Exactly. This is a problem. It can be so advanced that almost nobody understands it.

Now take a look at how advanced Bitcoin is:

  Total circulation will be 21,000,000 coins. It'll be distributed
  to network nodes when they make blocks, with the amount cut in half
  every 4 years.
  
  first 4 years: 10,500,000 coins
  next 4 years: 5,250,000 coins
  next 4 years: 2,625,000 coins
  next 4 years: 1,312,500 coins
  etc...
  
  When that runs out, the system can support transaction fees if
  needed. It's based on open market competition, and there will
  probably always be nodes willing to process transactions for free.

  Satoshi Nakamoto
Re:Are blockchains decentralized? on Tuesday June 21, 2022 @05:34PM (#31829372)
> Your argument strikes me as very odd -- you seem to suggest that nothing can beat Bitcoin in theory, but Ethereum is already beating it in practice.

In theory everything is possible. I do not follow the beating really. They can both exist with different use cases.

Bitcoin wants to be digital gold (and money) and Ethereum wants to be a smart contract world computer running dapps. They solve different problems.

Re:Are blockchains decentralized? on Tuesday June 21, 2022 @04:02PM (#31828470)
> Ethereum is already much better at it's core

What you and many others seem to overlook is first mover advantage, network effects and most important: trust. Bitcoin is not Yahoo or Facebook, it is not a company product which has to improve and break things all the time.

In the long run Bitcoin is a store of value. That requires trust, which takes time. To gain trust over time it has to move slow and steady because there can be no mistakes.

When it comes to money and trust it is almost impossible to get a second chance (see Terra UST). Just one mistake could result in everyone distrusting Bitcoin.

Correct. I thought it was worth to mention OpenSSL 3.0 because this is now the “stable” release.

For production I always use the Nginx stable releases.

Older »