Posts by fg_swe

China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

Cyber "Security"

Does this thing actually exist, if it does not work for the most powerful organization ?

Better go back to Paper Security ?

Boeing going backwards as production’s slowing and woes keep flowing

Re: Its main office is in...

So British Airways got what they deserved by playing games ? They played the cynical Albion ?

Well done, Airbus !

"Main Plants", "French"

They do not speak much French in the Hamburg, Manching or Donauwörth sites/factories. Also not in the English wing factory or the Spanish A400M final assembly.

I also do not get why speaking English is better than French on the corporate level.

Example: Bo-105 Derived Helicopters

These are essentially German-designed and -made helicopters, built in Donauwörth, Bavaria. One of the most agile and reliable helicopters in existence, due to its rigid rotor and many duplicated systems, including the engines.

A long time ago this company was called Messerschmitt-Bölkow-Blohm. Mr Bölkow was the chief Designer of the Bo 105.

So the current H145(a face lifted Bo 105) helicopter is essentially a German product, sold under the Airbus Helicopter label.

About Airbus / Not "French"

A quick look at

https://de.wikipedia.org/wiki/Airbus

would reveal that Airbus is in fact a Spanish-British-German-French corporation. Essentially the pooling of the best part of European civil airliner industry. Plus a serious military section, which is mainly German. It also owns the Canadian civil airliner industry and is somehow even connected to Turkish and Italian aerospace manufacturing.

It is still controlled by the German and French governments by means of a special shareholding structure.

Airbus is one of the few European projects which actually work nicely, unlike the € currency and border defence.

Always funny to see how little Anglosaxon journalists know about the world.

Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used

Reprint From Same Issue Of Different Firewall Maker

Clusterf**k Engineering

The entire PHP* contraption of the firewall should be locked behind a tiny crypto library, which can be mathematically proven correct.

https://github.com/DiplIngFrankGerlach/MST

Only a counterparty with the right symmetric key can ever send a send a single octet or more to the PHP stuff.

But hey, why make things secure, if you can expose a PHP hairball ?

Bonus points if some of the 400 000 LOC of the SSL/TLS library has exploits, too !

The informatics world seems to indulge in the latest insecure design pattern, instead of using simple, proven approaches.

*read as "management interface"

Euro-cloud Anexia moves 12,000 VMs off VMware to homebrew KVM platform

Free Enterprise !

When do I read of companies moving off the Office Macro Threat and the unsecurable Exchange Server ?

Competition is what keeps companies honest and monopolists will exploit their customer-victims to the maximum.

Haiku Beta 5 / In tests it's (Fire)foxier / It pleases us well

Re: Well I like it

Yeah, they all died of the G4tes mirage virus.

Chinese RISC-V project teases 2025 debut of freely licensed advanced chip design

ARM

The British are nervous their already brittle economy will be devoided of their champion ARM.

India, China, Viet Nam, Indonesia, Phillipines, Malaysia, Japan

Imagine what they could do, if they cooperated in systems engineering ? So many hard working people with a long tradition !

A Linux computer based on a microprocessor without a shady "management engine" ? Fully open source down to each transistor ?

Well Done China ! Now

...please complement that with a diplomatic friendship campaign. Become friends with your neighbours, instead of beating them up. We know you are mighty, no need to threaten violence. Respect borders and commonly accepted sea zones.

Then maybe we can live happily ever after ?

How a good business deal made us underestimate BASIC

Flat File System

HP MPE had only a single directory and thousands of files.

Managing this complexity was done by filename prefixes for each sub-aspect of the system.

But I agree with your observation that nested folders are not too hard to learn.

No Files, No Serious Work

All serious work on even small programs requires an iteration of development sessions. Of course one would also save BASIC programs to floppy disk, even then.

Except for

10 Print "hello"

20 Goto 10

But what exactly is the value of such a program ?

Zwiebelbert Eater Here

Our version of the Quiche is

https://omasrezeptewelt.de/schwaebischer-zwiebelkuchen/

We are also linguistically and nationally close to Mr Wirth of ETH Zürich.

I did some Basic programming on C64 and some kind of Schneider CPC128(?) in 8th class or so. I can remember the practice of entering line numbers in 10er increments "in case we need to expand". We already stored these programs on 3 inch disks. No proper CS teachers for these Basic machines, though.

Then we had a proper CS course in grammar school, using Turbo Pascal and an 8Mhz 80286 machine with 3MB RAM. I never really had a problem with files and the lack of hard coded line numbers. After all, I would also use the computer to write texts, which are stored in files and directories.

Now, after a CS degree and more than 25 years of software engineering( yes, different from "coding"), I still remember TurboPascal as an excellent+fast IDE and compiler. It showed me the light of Algol-type languages with strong typing, abstract data types, number domains, functions, very nice control structures and the same time efficiency.

Currently I work mainly with my own "memory safe C++" and with plain C++ on Linux and Windows. I feel I learned the basics of program construction with TurboPascal and it still is an excellent teaching system (besides Pascal being used for the heavy weight semi-mainframe OS HP MPE and the revolutionary Apple Lisa ).

So, directly go for the Quiche and skip the Doughnut, that is my honest advice.

Boffins carve up C so code can be converted to Rust

Yeah

It would be so much better if we still lived on the trees and no monkey had invented anything.

Oberon

https://en.m.wikipedia.org/wiki/Oberon_(operating_system)

Plus: Algol Mainframes

ICl, Unisys/Burroughs and Moscow Precision had them about the same time Unix was conceived.

They have/had Algol-based kernels, Algol-based application software. All memory safe to the degree possible.

Much better approach than the wild west of C "one kernel exploit and its game over".

Also see JavaOS and Singularity OS, conceptually similar.

https://de.m.wikipedia.org/wiki/JavaOS

https://en.m.wikipedia.org/wiki/Singularity_%28operating_system%29

The OBERON OS is also written in its own memory safe language.

Re: Rot

Yeah, and never complain when your C Supaprogram is hacked, because it is in fact a swiss cheese. Full of basic and exploitable memory errors. As we have seen with VxWorks, Windows, Linux, Oracle, Apache, MS Office, you name it.

Wrong

MISRA does NOT guarantee memory safety. If it were, we would not need memory safe languages.

Dirty C Pointers as Opposed to References

Any serious language will provide typesafe references and the allocation of some sort of object/struct where the references point to.

The references will be either NULL or valid, no funny C-style tristate.

No need for raw pointer operations and crazy casting.

The only exception to this are a tiny fraction of kernel code(say 1%), which indeed need funny, unsafe casting of e.g. "array of process" to "array of byte". This can be done by unsafe Pascal, Ada, Rust. Maybe a few lines of assembly will be needed, too.

Unsafe Low Level Operations

Even if 1% of a kernel is using unsafe operations such as setting the registers of an A/D converter or a PWM circuit, this is vastly better than 100% unsafe lines of code. The kernel will be vastly more robust against cybernetic threats and previously unknown bugs.

An immediate, clean stop of your system is vastly better than "soldiering on" with "mysterious behaviour".

Un-Necessity of Pointer Arithmetics

All pointer arithmetic can and should be done in equivalent array operations.

Pascal does not have pointer arithmetic and both HP and Apple have used it to program very serious operating systems such as LISA and MPE.

False

Cobol is for beancounters.

Fortran is for engineers, scientists and the like. In some ways it is still superior to C++ for such applications. If you want to know more, look up the work of Mr David Kuck.

V Model

It explicitly demands a list of requirements and linking those to design, code and test cases.

That is why your A320 and your ABS brake works all the time.

And your TGV, ICE and your wifes fetal heartbeat monitor.

Second Jeju Air 737-800 experiences mechanical issues following deadly crash

Users of Brake Parachutes

According to ChatGPT

Several military and civilian aircraft use parachutes for braking, particularly during landings when extra deceleration is needed, such as on shorter runways or during high-speed landings. Below is a list of notable aircraft that use parachutes for braking, particularly in military and commercial aviation:

1. Boeing B-52 Stratofortress

The B-52 is equipped with a brake parachute to assist with slowing down after landing, especially on shorter or more congested runways.

2. Lockheed Martin F-16 Fighting Falcon

The F-16 has an optional brake parachute used for improving deceleration during landings, particularly on short runways or when additional stopping power is required.

3. Lockheed C-130 Hercules

The C-130, a tactical transport aircraft, uses a brake parachute to assist in landing on short or austere airstrips, aiding in rapid deceleration.

4. Concorde (Supersonic Passenger Jet)

The Concorde, a retired supersonic airliner, employed a brake parachute to help with deceleration after landing, especially given its high landing speeds.

5. McDonnell Douglas F-15 Eagle

The F-15, a highly maneuverable fighter, is equipped with a brake parachute to help stop the aircraft after landing at high speeds or on shorter runways.

6. McDonnell Douglas F/A-18 Hornet

Like the F-15, the F/A-18 uses a brake parachute to assist with deceleration, particularly during carrier landings or on short airstrips.

7. Aero Vodochody L-39 Albatros

The L-39 is a jet trainer aircraft that uses a brake parachute to help decelerate after landing, particularly on short or crowded runways.

8. Tupolev Tu-22M (Backfire)

The Tu-22M, a Russian strategic bomber, uses a brake parachute to assist in rapid deceleration after landing, typically on short or unprepared runways.

9. Antonov An-124 Ruslan

The Antonov An-124, one of the largest cargo aircraft in the world, uses a parachute braking system to assist with deceleration, especially when operating from shorter or less-developed airstrips.

10. Boeing 727 (Older Models)

The Boeing 727, particularly the earlier models, could be equipped with a brake parachute as an option to help stop the aircraft on shorter runways.

11. Fairchild Republic A-10 Thunderbolt II

The A-10, a close air support aircraft, uses a parachute to aid in deceleration after landing, especially in rough terrain or on short airstrips.

12. Sukhoi Su-24 Fencer

The Su-24, a Russian attack aircraft, uses a brake parachute to help slow down the aircraft during landings, especially on short or improvised runways.

13. Boeing 747 (Rare Use)

While not common, some 747 aircraft in specialized operations may use a parachute braking system in emergency or high-speed landings.

14. Eurofighter Typhoon

Some models of the Eurofighter Typhoon use a brake parachute to assist with landing, especially in cases where a rapid deceleration is needed, such as on short runways or in emergency situations.

15. McDonnell Douglas AV-8 Harrier

The Harrier, capable of vertical takeoff and landing (VTOL), can use a brake parachute to assist with deceleration during landing, particularly when landing on shorter or less developed airstrips.

16. Panavia Tornado

The Tornado aircraft, used by several European air forces, employs a parachute for braking, especially in situations where a high-speed landing on short or austere runways is required.

17. Pilatus PC-6 Porter

The PC-6, a Swiss-made utility aircraft, uses a brake parachute to aid in stopping the aircraft on short airstrips, often in mountainous or challenging environments.

18. Cessna Citation X (Optional)

Some models of the Cessna Citation X use a parachute braking system (similar to a ballistic recovery parachute) for emergency deceleration or stopping after landing.

19. Antonov An-26

The An-26, a twin-engine cargo aircraft, can also be equipped with a braking parachute for deceleration on shorter, unprepared airstrips.

20. Aermacchi MB-339

The MB-339, an Italian jet trainer, is equipped with a brake parachute to help slow down after landing, especially on shorter runways.

ChatGPT

According to ChatGPT, the "Parachute Deploy Lever" of the B52 is simply protected by a safety pin. Which makes a lot of sense.

Such a Mistake, the B52 Parachute

https://www.youtube.com/watch?v=1LF8NEkysBY

Seriously, put it behind some hard-to-accidently release system of levers.

https://www.ktbs.com/news/arklatex-indepth/the-parachute-that-brings-the-b-52-to-a-stop/article_3bd4583c-f9ae-11e8-9303-239e77afa2c0.html

If the air force can do it, it can be taught to commercial pilots. Just exhort them a bit, for good measure.

Can someone point to a picture of the B52 parachute levers/buttons ? Is it somehow connected with landing gear pressed or the like ?

More URLs

https://www.youtube.com/watch?v=f3gvvsGjUi8

Emergency Brake Parachutes ?

If this aircraft did have brake parachutes, they could have slowed down very significantly before hitting the obstacle.

Given that bird strikes are very likely and could coincide with landing gear issues, this would be an intelligent change ?

It works for fighter jets, will also work for airliners.

RISC-V is making moves, but it has work to do if it wants to hit the mainstream

Re: Myopic View

7.) PowerPC servers still being a viable high end server alternative. Linux or AIX.

Myopic View

The world of computers is much larger than presented here:

1.) Apple ARM Mx being a highly innovative, high performance, low energy CPUs for notebooks.

2.) The world of automotive/train/aerospace/medical MCUs, which have totally different priorities than "IT" CPUs. Think of highest reliability requirements. They use PowerPC, ARM, Aurix, DEC PDP ISAs, ARM, Atmel, and probably 25 other ISAs.

3.) Fujitsu SPARC and ARM servers, a viable alternative to x86.

4.) Ampere ARM servers, working like a breeze at Hetzner, Amazon and so on.

5.) IBM S/390 still running most of banking, insurance, large government agencies and so on.

6.) Special CPUs like Elbrus and Loongson, which are very real things in the world of olive green. Maybe the Indians have their own ISA in the shadows...

We told Post Office about system problems at the highest level, Fujitsu tells Horizon Inquiry

Welcome To Reality

If you seriously believe that each and every penny can be traced in a banking operation, you are very mistaken.

It's a beancounter tale designed to grant them authority.

In the worst case the bank will lose and gain at random due to faulty computer and software. Logs will be incomplete and only god will know the exact truth.

In the best case a bank will employ well educated, skilled software engineers who can catch the worst bugs by comparing machine readable logs to accounts. The banking software itself has been validated by extensive test batteries as part of V Model development.

Same for operating system, compilers and hardware. They should be developed using the V Model, too.

But you know what ? Quick and dirty is cheaper on all of these levels. Half educated oligarch sons will build the operating system, for example.

Did I tell you about the horrible quality of major Relational database systems ? They are at the heart of modern banking. Lacking V Model development, too.

Telecoms Broken

There exist approaches of doing just that. Smart patriots already thought about that.

It boils down to paper money, paper vouchers, ink on finger(India style), truckloads of said tokens. Non connected pocket calculators. Petrol motorbike couriers with a rucksack of USB sticks.

The computerised banking world takes itself over-important. We can go many weeks without them.

What it does require is a powerful police, firebrigade and military force acting in concert. Educated and forceful leadership as opposed to wokish idiots, salesmen, half-educated oligarchs, castrates and the like.

Re: The Bright Side

Well, I assume you never followed the corruption in other spheres.

And maybe you fell for foreign B.S. that will of course minimize their problems while inflating ours.

Check the Russian moon rocket attempt if you want to see reality there.

Re: The Bright Side

Master of corruption BIDEN has been ejected...

The Bright Side

What makes the US/European powerful and civilised is that we can openly discuss these affairs. In other nations, stuff like this will be swept under the carpet and secret police would deal with whistleblowers.

So, glass is 2/3rd full.

A320, Jãger 90, A330, A330, A340, A380, A400M

V-Model works very effecively for these aircraft. Not a single airframe lost due to software engineering. Full software authority !

One loss of an A400M due to a mess-up in the loading of calibration parameters end of line.

If Airbus can do that, likewise SAP and Oracle can do it for the banking industry. It"s a matter of the right regulation and a minor finacial expense in the grand scheme of things.

MCAS, Ahr Valley Flood, Covid Scam

Arguably even worse, but no serious consequences. We live in a corrupt world and many of our leaders think it is OK because Moscow, Beijing and New Dehli are even more corrupt.

Banking Software Quality

I have worked in internet banking in the past and can tell you that very often software has very serious bugs. Sometimes the hardware, too. Including IBM mainframes.

No software QA to speak of seriously.

The government should mandate V-Model development standards, similar to what is in force for auto, train, aerospace and medical industries. Essentially, document everything, test everything on multiple levels.

Also, mandate extensive logging and archiving of logs.

Proper engineering instead of social science B.S.

Re: Lessons ?

That is what I meant with 3.

Multiple independent, machine- and human-readable logging is key to any serious banking operation.

Lessons ?

1.) Unnecessarily complex system architecture. Why no online connection to the mainframe?

2.) Childish belief in said supercomplex system. "Computer is never wrong"

3.) No proper logging at the postmaster terminals to have a ground truth to check against.

Even Netflix struggles to identify and understand the cost of its AWS estate

Re: Hetzner Versus Amazon

https://www.reddit.com/r/hetzner/comments/pm6dde/i_did_a_comparisonbenchmarks_of_some_popular/

Hetzner Versus Amazon

https://www.reddit.com/r/hetzner/comments/g4unpe/aws_vs_hetzner/?rdt=44412

Looks like a great option IF you have skilled administrators and developers on board.

Also, very little lockin as compared to AWS.

Hetzner

You can order resources in very small increments, starting from 2 ARM cores. Full control of these increments at root level. Transparent cost.

They also have storage services, though probably not as complex as AWS.

Of Course

...the US giants will claim that only they can do "enterprise" workloads.

Which is wrong. Hetzner has a full blown API for creating and deleting cloud resources

https://docs.hetzner.cloud/#overview

Probably not as exquisite as AWS, but more transparent ?

Competition ?

We have OVH, Hetzner, 1und1, Schwarz IT/StackIT and quite a few more cloud providers here in Germany and France.

Hetzner now also has a DC in Finnland, where leccy is cheaper than Germany.

OVH can use competitive french nuclear power and has DCs in several countries.

Why be locked in to the giants if smaller and easier to understand competitor exist ?

I can recommed Hetzner, fixed, predictable price and excellent reliability and customer service.

Edit: Hetzner has even more DC locations: https://www.hetzner.com/de/unternehmen/rechenzentrum/

Aliens, spy balloons, or drones? SUV-sized mystery objects spotted in US skies

Sure Lefty

You are still not over the loss of your lunatics ? Those who think that man and woman are "social constructs" ?

Electronic Warfare Soldier Bu11$h..

Always funny to see how the Groom Lake guys mess with the minds of electronic-idiots.

https://de.wikipedia.org/wiki/Area_51

Then their collaborators in HorrorWood latch onto it.

BASIC co-creator Thomas Kurtz hits END at 96

False

A good programming language has a proper syntax, grammar and quite a few semantic rules.

If you look at a compiler or interpreter as a bunch of sub-programs, you miss the important parts.

Bash

Bash exactly exposes the punctuation craze, even worse than C.

Just because it comes preinstalled on most Unix like machines means little.

From a pedagogic point of view, Pascal, Ada, Java, C# or VB.Net are probably the best beginner's languages. Pupils should be shown the light before you take them down into the dungeons of C and C++. And of course there should be proper algorithms+data structures education, otherwise "learning a programming language" is rather pointless.

Pupils should know what variables and mathematic functions are. Which means that bothering 10 year old children with Scratch is not a good idea.