Posts by Kurgan

Different issues

So, what's the real issue? Is it just poor security (as the report seems to suggest) or fear of Chinese government backdoors?

I want votes and applauses

That's fine, but I want the AI to be a farting contest judge. Give me votes, tell me how do my farts rank in regard to my friends ones.

Lift and long screws...

I thought he had locked himself in the lift by screwing the doors shut.

Vietnam, uh?

I'm totally sure that in Vietnam the law stating that data should reside only inside the country is made to restrict citizen's freedom.

But, I'm also totally sure that the same applies to every other state that has such a law (Europe, I'm talking abou YOU!).

Soon every nation will have its own great firewall, and the free and united internet will cease to exist.

GDPR is MADNESS

GDPR means MADNESS. I really whish I was not living and working as an IT consultant in Europe.

So now the password for twitter...

So now the password for twitter has been set the same as the username, so it's easy to remember.

Thunderbird needs INTERNAL REWORK, not UI

Thunderbird does NOT need a fancy and useless "modern" UI. It needs internal rework. Local email storage is SLOW when folders are big. IMAP sometimes hangs on "sending message". Sometimes TB just crashes (rarely, but it happens). On big installations (with lots of accounts and folders and emails) it sometimes says that this or that script no longer responds, even of fast PCs with SSDs. I have some 100 or so installations on win, mac, and linux. And they all have the same issues. So, issues are not OS-related.

Everybody (based on comments here) want a USABLE email client, and TB is committed to produce a "nice" email client. I think we have a problem here.

There will not be enough elecricity anyway

Wait for electric cars to become more popular, and there will not be enough electricy for everyone, unless we build nuclear power plants like crazy. So, what are talking about? Just green madness.

The dog ate my homework.

Yea, sure. The dog ate my homework, and bad hackers porned (pornized?) my PC.

I'd like to know...

... how many of that activists had iPhones in their pockets. I suppose most of them.

FLAT UI SUCKS

Flat and grey-on-grey no-contrast UI sucks. That's all. Simple as that. Case closed.

Stay CLEAR of the USA

As usual, if you work in security, stay AWAY from USA (or Russia).

I use Devuan since older betas - it's fine

I'm a long time (since versione 3) Debian user, and now I have both Debian Jessie (with systemd removed) and Devuan Jessie beta installed in about 50 servers total. They both work fine. On my desktop I use Mint. I will end up using systemd on my dekstop distro, I suppose, and I can live with it as long as it does not crash too often. But I don't want it in my server.

I did something similar once

I had this very very old and very dusty PC from a rock grinding mill control system (yes, very fine rock powder everywhere) that needed to be cleaned. I had an oversized air compressor. I have TRIED to be kind, regulating air flow by gently pulling the air gun trigger, and it sort of worked. No components flying around. But I forgot to hold the cpu fan in place, so it went spinning at about 100.000 RPM, generated a lot of current (a motor is a generator, too) and totally fried something. The PC never booted again.

Reminds me of some routers

I have found a similar flaw, almost 20 years ago, on Telindus routers. You could get the password by sending a properly crafted packet to the routers. Remotely.

Their fix? Xor the password with a fixed key.

LOL.

Security considerations

I wil only buy connected "things" that do NEED a VPN, my OWN vpn, to work remotely.

NO cloud.

Because cloud is not secure (security costs money) and is not reliable (seller shuts down service and you end up with a brick instead of a connected device).

Old Debian boxes had issues

3 in about 15 old (2.6.26 and 2.6.32 kernels) Debian boxes crashed or got one or more cores in soft lockup, had to reboot them.

Disappointed by shipping costs

I was on the verge of buying 3 of the little ones (from Italy) but then I have seen that shipping costs 12 pounds, which is definitely too much.

Bought it

Nice to see an affordable price for the ebook edition. Just bought it.

WTF?

A home battery? For what use? How do you recharge it? Why do you need it? Is it basically a 3KW UPS?

Death to systemd

I am one of the anti-systemd rebels, and all I can say is that I can confirm that I like the init system that I currently use, and that I don't want systemd to be mandatory in a Linux distro that's aimed at servers.

Was it a MITM or what?

Was it a MITM job, or were the social security numbers taken from server memory by exploiting the bug? How can they know how many (and which) numbers where taken?

Telecom Italia had such junk before...

Telecom Italia, in years 2000-2003, gave their BUSINESS users a router from "Telindus" that exposed its password in plain text to anyone that sent the right "request" to it. Both on LAN and on WAN. So hacking Telecom Italia business users was as simple as sending the right request packet (simple and identical for every router, no MAC address hash involved) to every Telecom Italia public IP address, and you could collect all of the router's passwords in plain text. Then you telnet to the router and you are in.

I discovered this vulnerability while trying to access a router (locally) for a customer who lost the password. (http://archives.neohapsis.com/archives/bugtraq/2002-06/0028.html)

When I told Telecom Italia (and then Telindus) about it, they asked me if I was going after a ransom, if I was some sort of criminal. I just wanted to warn them. Anyway, 6 months later, they changed the firmware so that now you needed to apply a XOR to have the password in plain text.

Double Fail!