Posts by razorfishsl

GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections

Why is it that everything MSlop touches turns to shit.

Europe built sovereign clouds to escape US control. Then forgot about the processors

Re: VPN?

it's not down to who made the {insert badge name here}, it's who made the chips.

First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

Re: when was the 23rd month of this year?

Don't get upset , just use a Comma as a decimal point, even though the name is a hint.

I meant to do that! AI vendors shrug off responsibility for vulns

it is about money...

when you are talkin bout billions of $ , security takes back seat and they will tack it on later.

Ireland joins regulator smackdown after X's Grok AI accused of undressing people

This is what happens when you train an LLM on all the dregs of the internet, billions of pictures of flappy bits being shoved into models to provide "useful" tools

of course it is gonig to be able to do such sipmle tasks.

Firefox taps Anthropic AI bug hunter, but rancid RAM still flipping bits

The real issue is people who think they are IT experts , just becasue the can plug an RJ45 into hte back of an ISP router

then building PC's without hte proper assembly or control systems.

Microsoft 365 boosts prices in 2026 … to pay for more AI and security

over 1,100 new features

is 1,100 parts of an AI grft plus one bug they fixed from 2016 than now provides a fully working function in excel.

Who gets a Mac at work? Here's how companies decide

We started out as a mostly MAC business.

I had a personal preference... but over time they just became harder & harder to integrate into the business.

then MS started F***ing about

and killing functionality in the 365 applications.

Apple did nothing...

Then there were the continual issues with integration into the AD & authentication.

so now after being about 100 macs in the business.... there is less than 10

SonicWall breach hits every cloud backup customer after 5% claim goes up in smoke

I'm just waiting for MS top go completely tits up on this ......

Their "ENTRA" records the security key of every harddrive that the system connects to.

nice for the US government.... .. oh we have a "bitlocked" hard drive..... just contact MS for the keys they extricated....

now you know why they are insisting for win 11 to have a MS account..

it's so they have an ENTRA security login & a place to keep the bitlocker drive keys....

The irony is that the config files are "encrypted"

the stupidity has more folds than a kilt....

1. the key is a simple XOR (takes about 2 min to crack it.)

2. the key is the SAME for EVERY firewall.

3. All the passwords for every account appear to be in plain text , not salted strongly.

not only is the config file blown wide open on SONICWALL ,but every other firewall brand you want to VPN connect to with a secret.

4. 4th level of stupidity & incompetence ,that i won't get into because it is potentially a huge security issue that is currently out in the open,

it gives an insight into just how little thought the people in charge have and is a direct result of mitigating this initial problem.

China warns citizens to beware backdoored devices, on land and under the sea

Thia is very very funny,

especially as they deliberately force companies to load malware onto their computer systems.

Then call it a "State secret" that they do this...

Microsoft-owned GitHub: Open source needs funding. Ya think?

Simple , they built 99% of their shite on open source.

They realise that if someone does not pay for it ,it is likely to stagnate.......

but there also realize that they aint gonna use their money....

Canada orders Chinese CCTV biz Hikvision to quit the country ASAP

Re: "Canada’s government will stop using any Hikvision products it finds"

you are dreaming, some have hidden BLE & WIFI functionality...

Re: "Canada’s government will stop using any Hikvision products it finds"

It does WAY more than that......

there is hidden functionality in the cameras, you just need the correct http or https end point

and don't even get me started about the ability to proxy & tunnel thru most firewalls.

Plus they have a new firmware, which is so frighting.... I actually rolled back my cameras...

Apple fixes zero-click exploit underpinning Paragon spyware attacks

Re: I remember

That was only a claim..... and complete bull shit

Do you trust Xi with your 'private' browsing data? Apple, Google stores still offer China-based VPNs, report says

Re: Does China do this?

you really have no clue......

they don't target you at the border....

and when they do target you, you are not likely to even detect it.

LOL... that is barely even the tip of it.......

Microsoft moved the goalposts once. Will Windows 12 bring another shift?

The TPM has NOTHING to do with securing the computer for security sake.

it has EVERYTHING to do with MS trying to kill linux

Microsoft gets twitchy over talk of Europe's tech independence

Trust microsoft.....

this is of course hte same Microsoft that jad Russian & Chinese spy's running about their systems...

and the same Ms , system , I have managed to thwart the security & login systems several times just during normal working.

And the same MS who seem annoyed that i wont work for free debugging their security systems.

the same company who string me along with their engineering team for 3-4 months over 5 separate security reports , only to give me a link to their forums where i can request improvements...

Definitely a company i'd feel safe putting all my data with.

VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores

Far More dangerous is the security risks of them preventing older shops with perpetual licenses from patching the software.

They should be investigated for this action.

SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN

it's that openssl stack...

I already warned them that their STUPID marketing campaign on the firewall login page is causing problem with amplification attacks.

who the F*** put an https marketing campaign on the login for a fire wall?

Microsoft 365 price rises are coming – pay up or opt out (if you can find the button)

The problem is the world has a dependency on office software.

To get documents & spreadsheets from a customer requires you use Microsoft office.

they are CONTINUALLY changing the format, so that it breaks other software to prevent 100% compatibility.

Look for the label: White House rolls out 'Cyber Trust Mark' for smart devices

LOL...

There are sellers in China already offering network equipment & shite with this mark

I saw them getting ready , whilst doing a factory inspection in Shenzhen....

New Outlook marches onto Windows 10 for what little time it has left

Yep.. what they don't tell you is that it CANNOT use ".pst" files.

There users are going absolutely mental, becasue all the old records for legal compliance are stored in ".pst" exported archives.

also there is ZERO way to do an export of any data in the online version.

and to top it off, now you cannot do a export, MS has a plan to start charging for archived emails & data , pius an additional charge to actually access the material.

all this is coming in 2025

Microsoft won't let customers opt out of passkey push

DO NOT fall for this bullshit.

go read the supreme court ruling on this and police powers....

Basically it goes like this;

If the police ask you for access to your pass-worded device and you say no, they have to get a warrant and can only search for material in the warrant and they have to prove a crime or suspect one.

HOWEVER if your device is protected by "bio-metric" data ,the police are allowed to FORCE access by using your face or thumbprint WITHOUT A WARRANT.

giving them FULL access to EVERYTHING and without PROBABLE cause!!!

Linux Deepin 23: A polished distro from China that Western desktops could learn from

Re: Looks good but

Do you know in certain areas, you have to load mandated software onto your business accounts computers for the tax department.

After you log in & provide a usr id via mobile phone , you get an "update"package.

in that package loaded from government servers, is ....

A back door

A network scanning app

A screen cap & keyboard RAT.

I know this becasue of samples I submitted to an AV provider & the fact that the FBI said back in 2020 that his was floating about, its been improved since then.

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

She was about as useful as a broken lamp-stand.....

TBH... it just looks crass, not becasue of the women...., but the aesthetics of the event looks like it was a primary school project.

Using 1Password on Mac? Patch up if you don’t want your Vaults raided

Re: Avoid cloud services

Same.....

but don't let the store update your version 6.....

once it's done, the version 6 is strangely DEAD.... and wont run any longer, well it runs but you cannot log in.

Also they seem to have removed the "plugins" from their web site.

so if your V6 needs to reload the plugin into the browser.. strangely they are GONE..... Despite it being a perpetual license you can no longer get copies of the SW. or plugins, even if you have a valid license.

so a lot more is going on with this than just some "randomly found CVE"

This seems more like a way to F*** over the perpetual license owners...

going back a few years tehy already know this process was leaking and it was not an "issue"

They also admitted the PW were stored encrypted in main memory... after the master pw was entered.

But hte interesting thing is WTF are tehy STILL having the 7.x version in the apple store if they know it is F**ed...

or is that just a "hook" and then a forced upgrade to 8.x

Let's cut to the chase.....

I don't want a bunch of fuckwhits forcing me to store my pw in the cloud and charging me to do it...

nor do i want the same said fuckwhits to be spamming my screen with cloud signups every time I login to a website

DARPA suggests turning old C code automatically into Rust – using AI, of course

It's nonsense.....

since there are cases where you can NEVER predict the behavior of a program.

Threaded or I/O code in-particular....

Microsoft 365 remains 'degraded' as Azure outage resolved

ClownStrike take down clown Computer network

Wheres My Teeshirt.....

Sam Altman sues builder over $27M flooded, sewage-hit 'lemon' of a mega-mansion

If I'm paying $27 mil for a house... there better NOT be any "gypsum" ceilings or walls.

Game dev accuses Intel of selling ‘defective’ Raptor Lake CPUs

it's all nonsense, current is limited by resistance and voltage....

my kettle is connected to the national grid, which can supply thousands of amps, but i don't need to program my kettle to not use that current...

The reality is Intel F**ed up... they are allowing the microcode in their CPu's to pull more current than the silicon can handle.

it's the same misinformation and pisspoor designs they have continually done.

like saying their CPU can run at "XYZ Ghz" , it's all nonsense, becasue as soon as you try to meet that limit , all the other cores scale back, so maybe a limited number can run close to that speed.

Then you actually look at what they classify as "GHZ" and it's not actually GHZ speed, it's mult threading that gives a similar speed to what might be seen at that speed , when using manipulated code

Windows: Insecure by design

Until the issue of inter operability is sorted out, Linux will not replace windows.

there is NO viable way to run Linux in a large business and interact with windows users in other companies.

sorry been trying it for 20 years.

Word/Excel is continually being changed to prevent the seamless sharing of data, and not "open office" is NOT a solution.

If it were i'd be using it.

How Apple Wi-Fi Positioning System can be abused to track people around the globe

nope... turning off the ssid Bcast is a security risk... go do some research.. , WIFI does not work the way you think it does...

You're not imagining things – USB memory sticks are getting worse

Actually they are NOT getting worse.

What is getting worse is the amount being bought from China.

As regards the Changing of the Density, this has been on going for 20 years.....

It does not shorten the life of the cells, the issue is the range comparators, the level of the charge on the cell has to be detected, if the Vref for the comparators drifts , the WHOLE content will be misrepresented or will dissapear. (actually it is still there, but not detectable correctly)

They are actually more reliable is they are used now & again, since the cells get re-written based on the aging of the comparators.

If you write the contents out and the comparators Vref moves , then its game over.

also if you get hold of some very well known chip brand datasheets, after signing the NDA, you will see that they spec all the way down to 1 or 2 writes, with multiple reads.

they even spec specific pages missing... all this shite ends up in the market, since it may have a valid use in writing hardware that only needs to be written once at manufacture, but with changing parameter data.

all you are seeing is teh bottom of the barrel criminals going below the bottom of the barrel to make a profit., since now everyone else is doing the same.

it's all the big retailers, that are involved.

D-Link clears up 'exaggerations' around data breach

Re: Why would D-Link have end-user data?

Phone home & direct sales as well as registration data.

Only a complete Moron would use any of D-LINK'S kit.....

And before anyone says "it's safe if not connected directly to the internet.... no.... no it is not.

We have seen Russian malware come in via Chinese mobile phones provider networks , then attempt to bridge over to the other networks they can see,

Thereby attempting to bypass corporate firewalls.

Google wants to take a byte out of Oracle workloads with PostgreSQL migration service

Won't work....

There are may oracle type things that just cannot be implemented in PostgreSQL.

Then there is the potentially massive PLSQL code base that would need to be migrated in hte stored procedures...

After injecting pop-up ads for Bing into Windows, Microsoft now bends to Europe on links

They have also started doing it on their website for support.

It is impossible to open many pages , unless you use edge.

Euro monopoly cops to probe Microsoft for slipping Teams into Office

They should also look into MS perverting the HTML standard so it only works with Edge.

Stolen Microsoft key may have opened up a lot more than US govt email inboxes

And guess what.... Microsoft will slime its way out of this with ZERO liability.

When will this be stopped with legal requirements that prevent such companies from setting up shite services , then using users as testing agents.

A single company just totally destroyed a countries security & privacy...

WTF does it rely on a single key to access the whole of the system.

Quick: Manually patch this Zimbra bug that's under attack

You would have to be insane to be using Zimbra.....

This software has been absolutely riffled with critical exploits since the release of the original version...

every few months its "hay look another critical 9.x bug in zimbra"

Framework starts taking orders for 16-inch repairable, upgradeable laptop

Re: I have to say I would really like a laptop with the touchpad to the right

The main board is replaceable

Let's just hope it is better than their totally non existent website

https://frame.work/

Microsoft whips up unrest after revealing Azure AD name change

Dump the name dump the shame....

More worrying is the fact that they are adding in links to their services & websites that only work on their browser.

Just waiting for them to pull that shit on BI.

Japan's digital ID card gets emergency review amid data leaks

In Hong kong , Identity cards are done in person , by individuals of the government it two separate areas or floors.

and with fingerprints + facial identity..

it's not rocket science...

One person's trash is another's 'trashware' – the art of refurbing old computers

Even linux only moves forward...

The whole industry is eating CPU cycles to produce banality...

Hay look the window has rounded corners.....

A (cautionary) tale of two patched bugs, both exploited in the wild

TP-Link again.......

Time to geet some real programmers....

Microsoft stole our stolen dark web data, says security outfit

Well, if you supply a service , that relies on fixed data sets, serves you right...