Hello,

While it is a good start, it seems to be missing a few things that make a cyberdeck a cyberdeck.

This documentary contains a better list of required hardware, IMHO: https://youtu.be/UzRjtvMQds4?t...

Regards,

Aryeh Goretsky

Hello,

They likely already have them.

My local DEF CON group is composed mostly of active-duty military and defense contractors, many of whom have jobs that require TS/SCI and polygraph. Unsurprisingly, a lot of the discussions in the group revolve around getting CPEs and maintaining certifications.

This was a surprise to me when I started going to monthly meetings a couple of years ago, but in retrospect is probably more of the norm than an outlier: Hacking has gone from a niche subculture into a multi-billion dollar computer security industry, not just having to deal with 1980's cyberpunk threats like corporate espionage but a part of military doctrine for nation-states. It makes sense that the jobs, and the people who do them, followed those paths as well.

Regards,

Aryeh Goretsky

Regards,

Aryeh Goretsky

Hello,

How soon we forget: https://www.eff.org/deeplinks/...

If you take a look into some of the technical write-ups on that, you'll see it was involved with everything from ad-injection to click-fraud to DDoS to selling your internet connection as residential VPNs and proxies, etc. And simply wiping these devices and installing a clean Android image was often not enough, since their bootloaders had bootkits in them that eventually reloaded the malicious apps and malware on to them.

Regards,

Aryeh Goretsky

Hello,

Craigslist is still around, and serves as a viable outlet for people who don't want to use the various enshittified alternatives like eBay and Facebook Marketplace.

Last week I bought a couple of 8GB DDR5-5600 SO-DIMMs from a somewhat-local neighbor who felt the same way. Met at a local police station (they have a place for people to do this), exchanged cash for the goods, and also had a nice chat about keyboards (the synthesizer kind, not the typing kind), swapped a few local restaurant recommendations, and shared some info about the local DEF CON group.

Pretty nice experience, overall.

Regards,

Aryeh Goretsky

Hello,

This is the fourth time today Slashdot has shared this news. Here are the previous ones:

Today at 11:03AM: https://yro.slashdot.org/story...
Today at 7:21AM: https://yro.slashdot.org/story...
Today at 6:00AM: https://yro.slashdot.org/story...
(all times Pacific)

Perhaps limiting comments to just the first one will help Slashdot's editorial staff better curate the experience it is providing to readers.

Regards,

Aryeh Goretsky

It wouldn't work beyond simple examples. Semantically C and Rust are quite different, so the AI will always have to make guesses about what the C is *really* trying to do when it does something like *((arr + i * M) + j2) and try to reimplement it properly in Rust since Rust doesn't have pointer arithmetic and encoding self referential data structures are hard in Rust due to lifetimes and borrow checking. It would be much more successful to use AI to disallow pointers and convert such C code into C++ with smart pointers and liberal use of std::optional . In such a conversion, much of the code could remain nearly the same and there is a direct translation for most common c options.

Hello,

I was unfamiliar with the Intel 7840HS CPU mentioned in the article, and figured it was either some model for embedded systems, servers or other computers not generally used by the public.

One quick search later, and I found out is an AMD CPU for laptops, specifically the AMD Ryzen 7 7840HS. Here are the specs for it: https://www.amd.com/en/product....

The changelog for the LZ4 release gives more information about the speed improvements: https://github.com/lz4/lz4/rel.... It does not mention the manufacturers of the CPUs used in benchmarking, which is probably why it was misidentified in the article.

Regards,

Aryeh Goretsky

Hello,

To be fair, he had just been newly appointed to the CTO position at McAfee, Inc,, and was responsible for GRC activities.

I would imagine that after his experience with the bad DAT 5958 rollout at McAfee, he would have made sure that CrowdStrike had a robust set of processes in place to ensure that this never happened again. That's part of what makes this so interesting: CrowdStrike must have had all sorts of controls in place to ensure that only a detection update which had passed through numerous quality gating procedures was released. Such processes are usually highly automated because they run 7x24x365, so you have all sorts of signalling and telemetry coming back at you to make sure all the tests are passed and everything's okay before you release.

What I'm thinking is that maybe this was going on, but there was failure in the alerting mechanism(s) and the update was pushed to production; think of it as being like an alarm light that didn't flash because its lamp bulb was burnt-out.

I will point out that this is all very speculative by me. I do not know personally know Mr. Kurtz, I was at McAfee from 1989-1995, and have worked at a competitor for the last 18 years. But during the past 35 years, every antivirus/antimalware/internet security/EPP/EDR/{insert marketing term du jour} company has put out a bad update at some time or another. None of us are immune to doing that, and they will happen again in the future.

Everyone in the industry is talking amongst themselves about what happened, and wondering if their own systems are vulnerable to such a problem, but it is difficult to check your systems if you don't know what you are checking them for. There has been all sorts of guessing about what happened, but until CrowdStrike releases their post mortem incident report with an analysis showing the root cause, that's exactly what it all is: guesswork, especially my comments.

Until then, the only thing I can really do is hope that CrowdStrike and their customers get their systems up and running as quickly as possible.

Regards,

Aryeh Goretsky

Hello,
I was a bit surprised by the "As a result, these 6TB 2.5-inch drives will unlikely fit into any desktop PC" comment. While that may be true for laptops, many desktops still have 3.5" and even 5.25" bays, and 2.5" adapters to the larger form factors have been readily available for years. While the >15mm Z-height may be problematic for adapters using removable drive trays, there shouldn't be any problems for internal use, as 3.5" drives are typically 20-26mm high and 5.25" drives are around 42mm high.

Regards,

Aryeh Goretsky

Are you saying you have a good relationship with someone who has no respect for you?

Or do you have no respect for them? I suppose that might look like a "good" relationship from your perspective...

Dang, that's my problem - I only didn't buy one of them! I guess I'll just have to keep paying my mortgage until the Vision II comes out.

You've got to wonder - since they've got a cord running down to a separate battery pack already, why didn't they just put all the heat and weight of the computer in the "battery pack" instead of the headset?

The only reason I can think of is that if it was in the "battery pack", then it wouldn't be terribly difficult to someday upgrade the computer without buying an entirely new expensive headset too.

I mean heck, it worked great with all the suckers that bought premium-screen iMacs over the years...

It I'm pretty sure she was fired for NOT doing the right thing - A.k.a. making sure her husband could either be trusted to overhear the privileged conversations, or couldn't hear them.

The fact that the felony was committed is pretty clear evidence that, one way or another, she has poor judgement.

Her husband is either a complete idiot, or knowingly implicated her in a felony without even mentioning it to her first.

Honestly, either way this is likely only the most recent and dramatic of a long chain of problems.

And while a spouse may be kind of difficult to replace, their value is only as high as the respect they bring to the relationship. Love alone may be great for dating, but marriage has always been a business relationship.

The extra scary part is that make it obvious that they don't actually believe their own religion.

If the act invokes the wrath of God, then why do we have to worry about it? Do they not trust God to be able to exact his own vengeance?

Or are they like chihuahuas running in a dog pack - utterly useless, but with an inferiority complex ten times their size that makes them try to start shit with anyone and everyone, while the real dogs are just chilling?