News for hackers. Stuff that matters.

zyztem

Re:PowerPC Solaris on the RS/6000 on Thursday May 28, 2020 @07:59PM (#23344631)
Years later there was another port of OpenSolaris to IBM Power computers called "Polaris": https://www.theregister.co.uk/2006/01/10/solaris_on_power/

And even port to IBM z/VM ("Sirius"): https://www.theregister.co.uk/2008/10/17/solaris_on_mainfram...

I was under impression that "28 pages" document was mostly declassified? Or this is some another documents?
And folks with access to Mentor (Advanced Orion) likely can clone keys from other side of the planet
Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @03:55AM (#22097446)
That requires generating and burning keys to devices during manufacturing. This process will be hacked by NSA & all, exactly like Gemalto https://www.theguardian.com/us-news/2015/feb/19/nsa-gchq-sim...
Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @03:50AM (#22097429)
This is a world after QUANTUMINSERT for you. Somehow everything should be encrypted but key management are still unsolved
Re:The light is off. War is over on Monday January 20, 2020 @03:32AM (#22097333)
People sometimes like challenge in their lives. See Everest climbing & etc
Re:The rise and fall of the PlayStation supercomputers on Saturday December 07, 2019 @03:58PM (#21732498)
Cell processor shipped for commercial installation in the IBM Blades QS20/QS21/QS22, which was based on Roadrunner supercomputer.

Sony also demoed rack-mount with Cell (https://en.wikipedia.org/wiki/Zego) but it is not clear that it was available in open market

Article picture is an IBM iDataPlex system.
Turn of millennium was era before of SSL/TLS. Livejournal did not want to send clear text password during login to the site. SRP was patent encumbered (and anyway implementing proper PAKE in JavaScript of that era was unfeasible).

So at Livejournal implemented their own challenge-handshake auth: https://www.livejournal.com/doc/server/ljp.csp.auth.challres.... Unfortunately it require storing plain-text equivalent of password on the server.

Seems to be worked fine through the years, but they used it well past "best before" date.

(SRP - http://srp.stanford.edu/, PAKE - https://en.wikipedia.org/wiki/Password-authenticated_key_agr...)

Re:Safer Nuclear Reactors Are on the Way on Friday July 05, 2019 @03:32PM (#20365174)
The usual problem is not shutting down the reactor: both TMI and Fukushima was properly shutdown. Important task is cooling down the core (and SFP) after that.

Left on its own, halted thermal reactor generates hundreds MW of heat after shutdown. That heat destroys cladding of fuel, generates explosive Hydrogen and causes meltdowns of former core.

It is believed that ATF, core catchers and electricity-independent passive cooling will reduce risk of this types of incidents, commonly called LOCA - Loss of coolant

Re:Decoded: GNU Coreutils on Tuesday July 02, 2019 @03:51PM (#20338793)
You might find source of Xv6 - educational version of unix - useful. Here is their implementation of cat, all 44 lines of it: https://github.com/mit-pdos/xv6-public/blob/master/cat.c
Re:Gun laws where guns take the most lives on Sunday March 03, 2019 @06:13PM (#19297535)
Reported murders. We mostly do not know what happens in Africa
Previous analysis of CTBTO hydrophone data (augmented with IMOS, Australian SOSUS clone) back in 2014: https://www.nature.com/news/sound-clue-in-hunt-for-mh370-1.1...
There is better pictures and explanation at TEPCO site: https://www7.tepco.co.jp/wp-content/uploads/handouts_190213_...
Re:Qualcomm accuses Apple of giving its chip secrets to Intel on Tuesday September 25, 2018 @12:05PM (#18067565)
Last year S/A wrote pretty interesting article about this situation: https://semiaccurate.com/2017/11/06/qualcomm-opens-apple-leg...
Surprised to see USB-C connector. Has it gone mainstream all the way in place of Type-A?
Re:Facebook Container for Firefox on Tuesday April 17, 2018 @07:28PM (#16863240)
Unsurprisingly there is no Google container for Firefox
Hard to believe. Worldwide production of Californium is just a few milligrams per year.
Re:How Many Tesla Model 3 Cars Have Been Made? on Saturday February 24, 2018 @04:29AM (#16452500)
Estimating production volume from serial numbers? Looks like a job for a German tank problem: https://www.theregister.co.uk/2014/05/20/german_tank_problem...
Re:Do not use NPM 5.7 on Thursday February 22, 2018 @01:08PM (#16439754)
That situation can be easily fixed in RPM-based Linux with rpm --setperms and rpm --setugids.

Correction will be little harder on Debian derivatives and whole incident can be completely prevented on Solaris with file-mac-profile.

Switzerland Cryptostory worth remembering: https://en.wikipedia.org/wiki/Crypto_AG#Compromised_machines
I do not think so. Public service must make money somehow. Most times it is advertisment so js required. Sometimes it is spionage, but they must look like usual thing.

Get a hosting from shared server account (few dollars a month). Or distribute your files from cloud storage, like AWS S3 (5 gig free for first year) and upload with native app without JS.

Re:World's steepest funicular railway opens in Switzerland on Saturday December 16, 2017 @05:43PM (#15942660)
Seems strangely inexpensive to me. Serious engineering, special train, 1.3 km construction on difficult terrain and only 45 mln. Euro?

In comparision, new Dublin tram line - COTS cars, 6 km line for 368 mln Euro. Or Detroit Qline, $180 mln. for 5.3 km line.

You people definetly should fight this.

We had something like this under "ban pedo" umbrella, now this thing filter anything that is against the party rule

Re:OVH Incident in Strasbourg on Thursday November 09, 2017 @10:31AM (#15663200)
Survivorship bias. Press releases do not made when equipment work as expected
Re:www.reddit.com/etc/passwd on Tuesday October 31, 2017 @04:57PM (#15596486)
looks like /etc/shadow, not passwd
Security story of ImageMagick is pretty awful. This service should be very careful.
Re:Hetzner Private Cloud on Sunday May 21, 2017 @09:21AM (#14387168)
Desktop processor without ECC memory plus very slow SATA hard drives - not a setup for reliability and performance

Older »