sllabres

Joined 11 years ago

Karma

444

Submissions

258

Member since

Jun 13

View on Hacker News

Recent submissions

Comment · 14 hours ago

Was it probably a IronKey? They had a Homeland Security grant, I've used one then. To me software had some advantages. Easy backup of the encrypted data without a dependency to the hardware. IIRC this was somehow solved on the IronKey. Not a black box for the user which have to trust. My main problem with a software solution for me is the entry of the password which I have to do on a probably compromised computer.

The original IronKey (later sold to Kingston) seems to have be cracked. A team / company called Unciphered managed to break a IronKey in a attempt to offer such a decryption to Stefan Thomas who had 7002 bitcoin on this key. This was then worth then 235 million dollar (now >500 million), which is of course a VERY strong motivation. [1]

The Lenovo case of course seems not to be bad implemented security but no security at all, especially if they advertise with encryption, which I found on a Asian Lenovo website where still there are still some specs of the key [2]. A good method if you want to damage your reputation.

[1] https://www.wired.com/story/unciphered-ironkey-password-crac...

[2] https://tk.lenovo.com.cn/product/1003497.html

Comment · 16 hours ago

There is a Practical Engineering video [1] discussing the failure. (Just saw that it is not a new one discussing the report, sorry)

[1] https://www.youtube.com/watch?v=3oBCtTv6yOw

Comment · 11 days ago

We don't really need multiple exits in case of fire because fires are occurring less often and people are getting plenty of warning.

I think this is much to broad.

Even the film does not suggest eliminating multiple exits; rather, it points out that it took a long time to replace external fire escapes with better alternatives. Specifically, internal, fireproof staircases that offer greater protection and are used regularly and therefore familiar to those fleeing.

When the redundancy is gone (not available, blocked, insufficient spaced) this can quickly lead to a disaster. Here are some recent examples

[1] https://en.wikipedia.org/wiki/2026_Crans-Montana_bar_fire

[2] https://en.wikipedia.org/wiki/Kiss_nightclub_fire

[3] https://gpe.wikipedia.org/wiki/2023_Johannesburg_building_fi...

Comment · 1 month ago

Point Nemo :-D https://en.wikipedia.org/wiki/Pole_of_inaccessibility

Comment · 1 month ago

An Apple airtag probably doesn't but it is apparently possible to send some data at a very low rate (the article in [1] says a few bits per hour) over the find my network [2]

[1] https://positive.security/blog/send-my

[2] https://github.com/positive-security/send-my

Comment · 2 months ago

People liking this post will probably like this [1] and especially these [2] from the channel. All solved using algorithms and map data.

[1] https://www.youtube.com/@colsto

[2] https://www.youtube.com/watch?v=eY-W9gmwxhg https://www.youtube.com/watch?v=nzytWZPyuEw https://www.youtube.com/watch?v=rkmXs_7hELg

Comment · 4 months ago

Nice you could choose if you would like your gasoline with or without service :-) (4:00).

Why was the chain called "Der Wienerschnitzel" and not "Das Wienerschnitzel". It is (was) a proper noun, but why the wrong article? (5:02)

A small part appears twice (from 8:51--9:06).

more cyclists than I see in current streetview footage

Coca-Cola delivery vans where yellow?

Comment · 5 months ago

I very much liked reading his "computer related risks" book (multiple times...) more than 25 years ago and after that the RISKS Digest was one of my weekly "go to" for a very long time.

Comment · 6 months ago

So it seems we need something like this [1] for IT infrastructure? ;)

[1] https://outerspaceinstitute.ca/crashclock/

Comment · 6 months ago

Or in this case; just click on "map"

Comment · 7 months ago

Saying that (hand)writing is irrelevant is a bit of a strawman implying I said writing hexadecimal numbers big-endian on paper matters for coding.

The second sentence, weather your customers know if they have been in the same room with a big-endian system (CPU alone doesn't matter) is irrelevant when the point is to write correct code. Many of then aren't interested in this or other details and that is ok as they are not responsible for the implementation.

Changing the endianness either direction did have show bugs to me several times, that could be fixed, and it was worth it for that alone.

Comment · 7 months ago

Not only the System/390. Its also IBM i, AIX, and for many protocols the network byte order. AFAIK the binary data in JPG (1) and Java Class [2] files a re big endian. And if you write down a hexadecimal number as 0x12345678 you are writing big-endian.

(1) for JPG for embedded TIFF metadata which can have both.

[2] https://docs.oracle.com/javase/specs/jvms/se7/html/jvms-4.ht...

Comment · 7 months ago

Congratulations :-)

Very nice shots. It must be a great feeling to see one's own footage in a feature film!

How long do you do astrophotography?

Comment · 8 months ago

It's always interesting to see how are things build in the Lumafields "Scan of the month". The the most interesting scan from Lumafield I saw was not a Scan of the month, but in "Adam Savage’s Tested: Surprising Flaws in 18650 Lithium-Ion Batteries" [1]

[1] https://www.youtube.com/watch?v=-Y23nfAOiXQ

PS: Nice company logo btw. ;)

Comment · 8 months ago

Thanks for the clarification