st_goliath
Joined 7 years ago
Joined 7 years ago
JWZ might not even use git in the first place, the source might be in a local SVN repo, or just a series of tarballs and patches, assuming it is version controlled at all.
In other words: shamelessly running a spam bot.
And we found out about it because rather than flooding website guestbooks with porn links, it ultimately slopped a police tip line.
I live in Innsbruck, Austria, where MED-EL is headquartered. Like most people I know, I too have briefly worked there in 2008. I currently live 5 minutes on foot from where the entrance used to be back then, before it was walled off, they massively expanded the building and added another building behind it, where in 2008 a bunch of office containers with clean rooms used to be. There is now a raised walk way to the other side where they used to rent just a few units back then and now co-opted the building, plus a patch work of smaller rental spaces all around.
The implants themselves are not cheap and (at least at the time?) eventually needed to replaced. From what I recall, some of the technology involved was also licensed out or sold for other applications. Ultimately, I would also guess that all the licensing, approval and red-tape involved in actually making implants for humans also kind of limits competition quite a bit.
Any patch that is back ported to a stable kernel, indiscriminately. And they have also started assigning CVSS scores with the same kind of malicious compliance.
Take for example, this patch in the device mapper RAID code:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
After back porting to stable, it got assigned CVE-2026-89558 (which is in this list), and a CVSS score of 9.8:
https://git.kernel.org/pub/scm/linux/security/vulns.git/tree...
Reasoning behind it being that theoretically, a RAID could be accessible over the network via NFS, iSCSI, etc... so if it gets corrupted, the buggy code path in the recovery (CVE-2026-89558) is effectively triggered over the network.
This sort of thing has always been a concern for projects that re-implement some existing piece of software, e.g. there were concerns early on during development of the GNU project about people contributing after having been exposed to Unix source code. Similarly, it is an ongoing concern for the Wine project[1], as well as ReactOS. The later even had a code freeze and internal audit in 2006, after allegations came forward that code had been derived from disassembled Windows binaries[2].
[1] https://gitlab.winehq.org/wine/wine/-/wikis/Clean-Room-Guide...
If all you know about archeology is from daytime television and clickbait articles, all you know about history is what you vaguely remember from school, you never met anybody working in those fields and actually don't even have a passing interest to engage with the subject, then yes, you might be inclined to believe that's how it works.
EDIT: of course this comment accumulates nothing but drive-by down votes from arrogant computer touchers, presumably before heading off to other comment sections to discuss law, macroeconomics, quantum physics and whatever else they are experts at, having watched YouTube videos. You see, only CS requires years of study and is divided into dozens of intricate sub fields, everything else is simple, straight forward and can be "disrupted".
Unlikely, virtualization/emulation has been a thing well before this project and you can just buy USB to RS232 adapters. There are GPIO solutions for industrial PCs other than the parallel port. Or you can simply buy new industrial PCs which have those ports.
If you find an industrial appliance controlled by genuine old PC hardware that hasn't been replaced, the RS232 ports are the least of your concerns.
In my experience, such machines usually have something insanely proprietary plugging into a custom ISA card, and whatever is connected to it usually doesn't take too kindly if the bus timings are off. And neither does the accompanying bare metal software that relies heavily on timing loops and hardware peculiarities.
s/technically/allegedly/
supposedly with a minimum of 4M RAM even! [1] I have a machine with twice that clock and twice that RAM that a friends parents wanted to toss out[2]. I spent the better part of a day getting Windows 3.11 and Office 4.3 to run. Playing around with it for a bit, I highly doubt that Windows 95 on minimum requirements would be anything but endlessly frustrating. I was not masochistic enough to try.
[1] https://en.wikipedia.org/wiki/Windows_95#System_requirements
https://goliath32.com/
https://github.com/AgentD/
https://hn-wrapped.kadoa.com/st_goliath?share