Category Archives: News

Shared items and notes from my feeds and browsing. Subscribe as feed.

SPARCbook 3000ST: The coolest 90s laptop (2019)

Source: Hacker News

Article note: Tadpole's unusual architecture laptops (SPARC, Alpha, and PowerPC workstations in laptops!) were weird objects of impractical desire in the 90s, and are still weird objects of impractical desire decades later. Always fun to see them.
Comments
Posted in News | Leave a comment

Core scheduling lands in Linux 5.14

Source: Hacker News

Article note: Scheduling on weird modern (not that SMT is a new thing) vaguely-heterogeneous machines continues to be the next big OS problem. Linux is not the best at it right now, but these new core (rather than tread) affinity scheduling controls are a good step.
Comments
Posted in News | Leave a comment

Hiding Vulnerabilities in Source Code

Source: Schneier on Security

Article note: Complexity always has costs. Unicode is absurdly complex to allow it to not just represent goddamn everything, but to mix all those things together, and we pay for that shit everywhere it appears. My usual preference is "make parsers vigorously flag and/or refuse to allow mixed pages."

Really interesting research demonstrating how to hide vulnerabilities in source code by manipulating how Unicode text is displayed. It’s really clever, and not the sort of attack one would normally think about.

From Ross Anderson’s blog:

We have discovered ways of manipulating the encoding of source code files so that human viewers and compilers see different logic. One particularly pernicious method uses Unicode directionality override characters to display code as an anagram of its true logic. We’ve verified that this attack works against C, C++, C#, JavaScript, Java, Rust, Go, and Python, and suspect that it will work against most other modern languages.

This potentially devastating attack is tracked as CVE-2021-42574, while a related attack that uses homoglyphs –- visually similar characters –- is tracked as CVE-2021-42694. This work has been under embargo for a 99-day period, giving time for a major coordinated disclosure effort in which many compilers, interpreters, code editors, and repositories have implemented defenses.

Website for the attack. Rust security advisory.

Brian Krebs has a blog post.

EDITED TO ADD (11/12): An older paper on similar issues.

Posted in News | Leave a comment

It’s hard to overstate what a scam academic and scientific publishing is

Source: Hacker News

Comments
Posted in News | Leave a comment

Oracle’s JDK 17 – Free Again for Commercial Use

Source: Hacker News

Article note: Oracle is so toxic that everyone left for actually-open alternatives rather than expose themselves to the risk of touching their licenses, so now they are re-baiting the hook.
Comments
Posted in News | Leave a comment

Facebook who? Zuckerberg announces rebranding as Meta

Source: Ars Technica

Article note: Rename to confuse the waters because your brand has become so toxic that the name recognition is of negative value. Like Comcast calling itself "Xfinity."
Mark Zuckerberg speaks in front of a monitor that says Meta.

Enlarge / Facebook? Who is Facebook? My name is Meta! (credit: Facebook / YouTube)

As part of a Connect 2021 keynote presentation today, Facebook CEO Mark Zuckerberg rolled out the name "Meta" as a new corporate identity reflecting the company's "new north star—to help bring the metaverse to life."

The name, which Zuckerberg noted comes from the Greek word for "beyond," is "a new company brand to encompass everything that we do." That means the company will be "looking at and reporting on our business as two different segments, one for a family of apps and one for work on future platforms," he said.

The name "Facebook," Zuckerberg said, "just doesn't encompass everything we do" anymore. While social media apps will "always" be a focus for Meta, it has been limiting to have a "brand that is so tightly linked to one product that it can't possibly represent everything we're doing today, let alone in the future," he said.

Read 10 remaining paragraphs | Comments

Posted in News | Leave a comment

The main thing about Phenylacetone meth is that there’s so much of it

Source: Hacker News

Article note: Huh, I'd never read what the post-pseudoephedrine-restriction meth synthesis methods were, the chemistry alone in this article is interesting. The apparently-in-vogue methods are a little less attractive-nuisance easy looking, but not exactly difficult, and starting with pretty common stock. Also, holy shit there is a lot of meth being made and consumed.
Comments
Posted in News | Leave a comment

Raspberry Pi Zero 2 W: 5x faster than the original for $5 more

Source: Ars Technica

Article note: Oh man, that's a lot of utility in a tiny $15 package.
The Raspberry Pi Zero 2 W.

Enlarge / The Raspberry Pi Zero 2 W. (credit: Raspberry Pi Foundation)

The diminutive Raspberry Pi Zero is getting its first upgrade in nearly five years. Today, Raspberry Pi founder Eben Upton announced the Raspberry Pi Zero 2 W, a new $15 product that puts the processor from the Raspberry Pi 3 into a board the exact same size as the original Zero.

The new board swaps the old Zero's 1 GHz single-core ARM11 processor for a quad-core Cortex A53-based Broadcom BCM2710A1 processor, also clocked at 1 GHz—the same processor used in the original Raspberry Pi 3 released back in 2016, albeit clocked slightly lower. This is a substantial increase in power and capability for the Pi Zero, going from one core to four and from 32 bits to 64.

Upton said that the performance increase over the original Zero "varies across workloads" but that for multithreaded tasks like those simulated by sysbench, "it is almost exactly five times faster." Heat dissipation is provided by "thick internal copper layers" in the board, which should help prevent thermal throttling without the use of additional fans or heatsinks.

Read 3 remaining paragraphs | Comments

Posted in News | Leave a comment

My ideal Rust workflow

Source: Hacker News

Article note: This is a nifty idea, to make a single-build-system tool for writing language tutorials that can manage the (markdown) content as well as the source and output and such. Now that everyone has decided language churn can go along at a breakneck pace, we need better tooling to make tutorials not misleading 3 months after they're published.
Comments
Posted in News | Leave a comment

Reddit alternative Ruqqus shutting down

Source: Hacker News

Article note: New platforms get picked up by the people least served by the existing platforms. That used to mean all kinds of weird and wonderful niches. Now that social platforms are so thoroughly penetrated, it means stupid Nazis. Not the smarter, well-heeled maybe-Nazis who pay for narrative adjusting ads and sock-puppet armies on the existing platforms and speak in dogwhistles. Not the random cancel victim of the week who failed to adequately supplicate themselves to the niche populist "progressive" issue of the week getting called a Nazi. The deep human failure "my identity is racial animus because I have nothing else going for me" actual self-identified Nazis. It's a real problem because that situation has made it hard to try new formats, and allowed a greater degree of censorship of things that probably shouldn't be, platform manipulation, and general shittyness by the incumbents than would be tolerated if it were still easy to jump ship.
Comments
Posted in News | Leave a comment