Author Archives: pappp

A CBP contract shows the risks in connecting your vehicle and your smartphone

Source: Hacker News

Article note: Ubiquitous Computing + 3rd Party Doctrine = Near-total end-run around the 4th amendment.
Comments
Posted in News | Leave a comment

Verizon sells AOL and Yahoo for about half of what it paid

Source: The Verge - All Posts

Article note: Who would have imagined that buying dying tech companies then jerking around their remaining desirable brands would result in selling them a couple years later for half of what you paid...
aol man

Verizon has sold its AOL and Yahoo properties to Apollo Global Management in a deal said to be worth $5 billion, about half of the nearly $9 billion Verizon originally paid for the pair. Verizon will maintain a 10 percent stake in the company, now known as Yahoo and led by CEO Guru Gowrappan. The deal, which includes Verizon’s ad tech business, was heavily rumored over the last week and is still subject to closing conditions. Once complete, it’ll bring an end to Verizon’s troubled experiment with media production and advertising.

Apollo is a private equity firm that owns the Venetian resort in Las Vegas and crafts retailer Michaels. Apollo co-founder Leon Black recently stepped down as Chairman, soon after it was revealed that he paid...

Continue reading…

Posted in News | Leave a comment

New Spectre Vulnerability Beats Mitigations, Performance to Badly Drop After Fix

Source: Hacker News

Article note: And again. Because once someone looked into the absurd nest of generations of half-baked hacks to make the numbers go up inside a modern high-performance commodity microprocessor, the shit-show is going to keep unraveling until the parts perform worse than if none of the speculation and hidden caches and such were there. The assumed environment commodity computer hardware (...and software) was designed for was not multi-tenant (VM/Cloud), and was not 'automatically download and run random code from the network' (browser-as-runtime). It's possible to design computers for that, and at one point a bunch of larger systems vendors did (...and IBM is the only one still hanging on), but we're dozens of generations into lines that were designed as single-user detached systems then outgrew themselves.
Comments
Posted in News | Leave a comment

“Shared libraries are not a good thing in general”

Source: Hacker News

Article note: I find the discussions around the merits of shared libraries really interesting, largely because there are a population of different answers all of which have clearly good and bad points, and the industry keeps iterating over them. Some of the problem is clearly caviler dung beetle programming, but there is an actual problem in there.
Comments
Posted in News | Leave a comment

Don’t wait for the government to fix surveillance capitalism

Source: Hacker News

Article note: The suggestion that "Manipulation Capitalism" is a more descriptive name than surveillance capitalism is a good one.
Comments
Posted in News | Leave a comment

Over-Designed Model Paint Shaker

An over-designed and useless agitator for Testors enamel bottles

…An otherwise useless exercise in rapid prototyping.

Continue reading
Posted in DIY, Electronics, General, Objects | Leave a comment

Toys for my Escape Velocity Itch

Printed and painted Kestrel and Lightning models on a PowerBook 5,4

I had my regularly-scheduled itch to play Escape Velocity or one of its successors and/or clones the other week, and decided to play the real thing this time since I did a lap on Endless Sky not too long ago, and NAEV still doesn’t quite grab me.

I’m now most of the way through a game of EV (under emulation in Basilisk II), and …impulse bought a cheap 2004 15″ Aluminum PowerBook G4 (a 5,4) off the internet after a crash ate a save file. I have good coverage of Apple 1984-1994 in my collection (in the form of bulky desktops with CRTs), and x86 OS X is pretty easy to run in a VM, but I have a hole in the late PPC era. That machine will hopefully eventually also get its own post as I finish fixing it up, it’s not in perfect condition but it auctioned below prevailing when I was looking, and seems to be acceptable.

While I was looking into the player communities (…because it’s become very hard to set up a working install of EV Nova recently, and I can’t find a backup of my registered copy) I discovered that a couple months ago some wonderful person (slurked on thingiverse/quarmus on reddit) made and shared 3D models of the Kestrel and Lightning ships from the original EV.

…So the little Mac-user child of the 90s in me promptly headed down to the basement to print a Kestrel and a pair of Lightnings.

I gave them a quick sand to take the worst print artifacts off and sprayed them down with a couple coats of gray Krylon Fusion, which gave a decent base coat. I needed to do a little (bad) detail painting on the Lightnings, and the acrylics I have around didn’t stick well to the spraypaint, so I dug out my decades-old Testor model enamel set. Eventually they were shaken and stirred enough to get the job done; in another post post, an absurd over-engineered shaker that didn’t really solve the problem.

EV is still one of my favorite games, though I think Endless Sky’s implementation of the formula is actually significantly better for a modern player without the memories, especially now that Ambrosia is defunct and the hacks around registering Nova seem to not be working.

Posted in Computers, DIY, Entertainment, General, Objects | Leave a comment

DigitalOcean Says Customer Billing Data ‘Exposed’ by a Security Flaw

Source: Slashdot

Article note: Well that's not ideal.

DigitalOcean has emailed customers warning of a data breach involving customers' billing data, TechCrunch has learned. From the report: The cloud infrastructure giant told customers in an email on Wednesday, obtained by TechCrunch, that it has "confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account." The company said the person "gained access to some of your billing account details through a flaw that has been fixed" over a two-week window between April 9 and April 22. The email said customer billing names and addresses were accessed, as well as the last four digits of the payment card, its expiry date, and the name of the card-issuing bank. The company said that customers' DigitalOcean accounts were "not accessed," and passwords and account tokens were "not involved" in this breach. "To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring [sic] in the future," the email said.

Read more of this story at Slashdot.

Posted in News | Leave a comment

UMN CS&E Statement on Linux Kernel Research

Source: Hacker News

Article note: This is a good statement. No one is being thrown under the bus, but they're acknowledging and getting ahead of the problem.
Comments
Posted in News | Leave a comment

In epic hack, Signal developer turns the tables on forensics firm Cellebrite

Source: Ars Technica

Article note: This is beautiful.
In epic hack, Signal developer turns the tables on forensics firm Cellebrite

Enlarge (credit: Moxie Marlinspike/Signal)

For years, Israeli digital forensics firm Cellebrite has helped governments and police around the world break into confiscated mobile phones, mostly by exploiting vulnerabilities that went overlooked by device manufacturers. Now, Moxie Marlinspike—the brainchild behind the Signal messaging app—has turned the tables.

On Wednesday, Marlinspike published a post that reported vulnerabilities in Cellebrite software that allowed him to execute malicious code on the Windows computer used to analyze a device. The researcher and software engineer exploited the vulnerabilities by loading specially formatted files that can be embedded into any app installed on the device.

Virtually no limits

“There are virtually no limits on the code that can be executed,” Marlinspike wrote.

Read 12 remaining paragraphs | Comments

Posted in News | Leave a comment