Posts by petef

Billions of cookies up for grabs as experts warn over session security

I'd have thought that necessary cookies are the most valuable to miscreants.

Samsung admits Galaxy devices can leak passwords through clipboard wormhole

Re: Default in Keepass

Not on Samsung.

I've just verified again that its password clearing is ineffective on my Galaxy A25. It does work on my old Moto g22 and other platforms.

Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet

"The transaction was manipulated by a sophisticated attack that altered the smart contract logic and masked the signing interface, enabling the attacker to gain control of the ETH cold wallet. As a result, over 400,000 ETH and stETH worth more than $1.5 billion were transferred to an unidentified address."

This is not unique to crypto but whenever I see an attack described as "sophisticated" I read it as "oh yes, we didn't think of that".

And now something fun for a change: Building blocks of life in Bennu asteroid samples

Re: Fun? Challenge accepted.

I'll bite, no way.

The chemicals analysed from Bennu were racemic. If they had originated from Earth, either ejecta or contamination of these experiments, then the enantiomers would be unbalanced. Most of the essential amino acids of (Earth) life are laevorotatory.

I'm not seeking to bamboozle, rather leaving it to the reader to follow up on the technical terms. Chirality is important and simple in some respects but often overlooked.

Donald Trump proposes US govt acquire half of TikTok, which thanks him and restores service

At the time of writing $TRUMP is "worth" $11B and $MELANIA $2B. So that is on track to buy Tik.

Microsoft Edge takes a victory lap with some high-looking usage stats for 2024

I am an Edge user because my company's internal websites insist on it.

For everything else I use a more capable, less encumbered browser.

WhatsApp finally fixes View Once flaw that allowed theft of supposedly vanishing pics

Dilbert on Camera Phone Banning

The sad tale of the Alpha massacre

I've done that. We had personal Interactive Unix workstations. The owner of another WS asked me to remove the account I had there to free up space. I deleted my /home/me but left my /etc/passwd entry, changing the home field in there to / so that I could still log in. Unfortunately the owner then proceeded to invoke the remove user admin script blithely accepting all the "are you sure?" prompts. Well it certainly freed up space. 15 5¼" disks were needed to reinstall.

Hide the keyboard – it's the only way to keep this software running

I remember many years ago ETI published a design for an electronic lock keypad. You needed to press keys in order to perform the unlock. Get one wrong and it reset. However looking at the circuit I could see that if all keys were pressed simultaneously that would unlock it.

Samsung phone users under attack, Google warns

Here are two sites that show phones or wearables for each affected Exynos.

https://en.wikipedia.org/wiki/Exynos

https://www.kimovil.com/en/list-smartphones-by-processor-group/exynos-9820

Big browsers are about to throw a wrench in your ad-free paradise

Opera has built in ad blocking for several years. They have just announced Opera One R2. It will continue to support Manifest V2 extensions beyond the expected June 2025 cutoff. UBlock Origin [full fat] is explicitly mentioned.

https://blogs.opera.com/news/2024/10/opera-support-manifest-v2-ad-blocking/

AI 'bubble' will burst 99 percent of players, says Baidu CEO

Does Fujitsu's fingering of false information include Horizon?

Open source LLM tool primed to sniff out Python zero-days

The Ragflow issue was the use of eval() not one of the seven highlighted types.

After 3 years, Windows 11 has more than half Windows 10's market share

Think of the copilot

For many, Windows 10 is just fine.

But, but AI.

Microsoft rolls out one Teams app to rule them all

Re: Why can't they fix

You are being kind in limiting your list of Teams failings.

CrowdStrike shares sink as global IT outage savages systems worldwide

Re: The fault's with Microsoft

People who normally watch Sky?

EU's renewable hydrogen plan needs a 'reality check'

Re: Full circle?

You can think of it as an energy store. Electrolyse when the wind is blowing.

Latest Ghostscript vulnerability haunts experts as the next big breach enabler

Obligatory XKCD

Perseverance pays off as Mars rover's SHERLOC brought back from the brink

Obligatory XKCD 695

Biden bans Kaspersky: No more sales, updates in US

Consider what you are paying for, especially in the context of security of your machines. Can you be certain that you are getting a bona fide product? Likely != certain.

Tiny solid-state battery promises to pack a punch in pocket gadgets

Re: Capacity

My comment about Rayovac 13 was a reply to the figures for a CR2032 and so I adopted the same parameters.

Battery University is an extensive resource for all things about batteries.

Re: Capacity

A Rayovac 13 zinc air button cell is typically used in heading aids.

Its data sheet has 136 h at 2 mA and average 1.25 V giving 340 mWh. Volume is 0.26 cc implying 1300 Wh/L.

Venerable ICQ messaging service to end operations in June

Obligatory XKCD

Bing and Copilot fall from the clouds around the world

DuckDuckGone

Microsoft, Google do a victory lap around passkeys

"As of 2023, that number had increased 3,378 percent to more than 4,000 per second." [from 115]

So it could have been worse, it might have been 3379%.

Torvalds intentionally complicates his use of indentation in Linux Kconfig

Postel's Law considered harmful

Postel's Law which whilst admirable in 1980 has since become discouraged for reasons of security.

Judge refuses to Ctrl-Z divorce order made by a misclick

What AC says.

My take when I read about this in The Times was that (a) a divorce was being sought, they intended to establish finances before completion and (b) the computer made it easier but it would also have happened if shifting papers.

Some 300,000 IPs vulnerable to this Loop DoS attack

TFTP on the public Internet. That's a thing?

World-plus-dog booted out of Facebook, Instagram, Threads

Re: They have a point...

Earlier this morning they let me register with my surname of '); DROP TABLE Students;--

Psst … wanna jailbreak ChatGPT? Thousands of malicious prompts for sale

"We have not yet detected any malware operating in this manner" - sounds like the bad guys are doing a good job then.

Microsoft admits issues with Windows 10 patch almost 2 months after release

Re: My system is slow. …

A slightly less hairy solution is to add a couple of registry keys to turn off Copilot.

NASA, Lockheed Martin reveal subtly supersonic X-59 plane

> Instead pilots will see through what NASA calls the "eXternal Vision System," a 4K monitor fed by a set of high-resolution video cameras.

The SPV (admittedly a land vehicle not available until 2068) used a video screen for the backward-facing driver.

Windows boss takes on taskbar turmoil, pledges to 'make Start menu great again'

Windows?

You would hope that a product called Windows would do a half decent job remembering where Joe user had positioned them. Windows 11 does a marginally better job than its predecessors but that is still rubbish. Worst is Teams which continues to select its own size and monitor regardless of where I last put it.

It is 2023 and Excel's reign of date terror might finally be at an end

Re: Great. We're getting there

Denmark apparently. I use ISO 8601 as a matter of course and get some way there with a ~/.i18n containing

LC_TIME=en_DK.UTF-8

Wot, you mean it's not interpreted as octal for 83?

Researcher bags two-for-one deal on Linux bugs while probing GNOME component

libcu*.so

libcurl and libcue. Watch out for vulnerabilities in CUPS and curses next.

Ford, BMW, Honda to steer bidirectional EV charging standard

Reduced battery life

The lifespan of the car battery will be lessened by the extra charging cycles.

It is also a waste of energy compared with a Powerwall type solution. You can apportion some of the car battery's weight to V2G and it is not efficient to be lugging that around with you.

Microsoft Edge still forcing itself on users in Europe

I'm no Microsoft apologist but in my recent firing up of Windows 10 (22H2) I notice that Settings has stopped bugging me that my browser settings are sub-optimal. I forget the exact wording but the essence used to be that M$ thought that I should be using Edge instead of the preference I had set for Opera.

I'm referring to the top panel of Settings whose three remaining buttons are OneDrive, Windows Update and Rewards.

The computer in question is dual boot and spends most of its time in openSUSE Tumbleweed / KDE Plasma which I find to be an altogether more pleasurable experience.

USENET, the OG social network, rises again like a text-only phoenix

I recall the advent of spam on USENET in the 90s. Early on I found that my list of 40 odd domains sufficed to filter it out. Happy days.

I'm still a regular user, Gnus/emacs to Eternal September and gmane since you ask.

Toyota Japan back on the road after probably-not-cyber attack halted production

Perhaps they entered a French flight plan while NATS got a spanner from Toyota.

The ZX81 finally gets the keyboard it deserves

For me the worst aspect of the ZX81 membrane keyboard was that your fingers moved a bit leading to you pushing at dead space and then being eaten by Rex. We mitigated that somewhat by taping things over the keys but that only improved the action marginally. As others have mentioned programs could come to an abrupt end when the 16 KiB (count 'em!) RAM pack perched on the back was breathed on.

Microsoft’s Azure mishap betrays an industry blind to a big problem

Guilty as charged. I have more experience under my belt now. I'll accept your bhaji, though.

Many years ago a colleague ask me to clear my files to free up space on their workstation. I duly removed my /home but left an entry in /etc/passwd so that I could still login but with a home of root. After I'd informed the owner they blindly followed a remove user script, part of which was a question that asked are you sure you want to remove the user's home? A box full of floppies was needed to reimage.

The future of digital healthcare could be a two-metre USB cable

When I was recuperating in a hospital bed after surgery I was glad that I'd the forethought to buy a longer USB charging cable for my phone.

Is there anything tape can’t fix? This techie used it to defeat the Sun

Even now my optical mouse occasionally does not move as I would like. Not wildly but just annoyingly. Inverting it for a second or so recalibrates it into compliance.

GitHub publishes RSA SSH host keys by mistake, issues update

The GitHub blog instructions said that there might be one RSA line in .ssh/known_hosts to delete. I actually found half a dozen because the name github.com resolves to several IP addresses.

Signal says it'll shut down in UK if Online Safety Bill approved

Apps make encrypted communication convenient. There many ways for the bad guys to encrypt and then send via other channels.

What you need to know about the real-time capable edition of Ubuntu 22.04

Re: The key question maybe?

Real time does not mean that it responds quickly but that the time is deterministic. The OS provides guarantees that an event will be processed before a time limit is reached.

It is not something that you would want in a general purpose desktop.