chemodax

AWS-Lc looks very promising replacement for OpenSSL these days.

I think all of this dead end: it is like protecting your apartment only by strong locks etc. Modern society protects from crime using punishment and moral norms. Not only by locks.

Agreed. It’s very sad modern society is stopping using ethics and at the same time increase using different firms of policing.

One quite convenient thing is that Windows Installer packages can be installed via Group Policy, making deployment for new nodes work like a charm. How is a sysadmin supposed do this with scripts?

May be it's a fashion? Like using Electron/Edge for Start Menu.

Maybe an unpopular opinion, but I am missing the old Microsoft these days. How did we end up in the world where technologies like Windows Installer are replaced with PowerShell scripts that downloads software from the Internet?

As far I remember NAND/NOR memory (used for SSD) is very slow to *erase*. The erase operation can be performed only by big chunks, requires higher voltage etc.

SSD vendors circumvent this by adding several layers of write buffers to achieve good test results.

I recommend to look at Kärcher RCV 5. High quality.

https://www.kaercher.com/us/home-garden/robot-vacuums-and-mo...

You could try VisualDrive Server (self-hosted OneDrive server): https://www.axiorema.com/visualdrive-server/

It's a no-brainer: if you query less, it works faster. Especially in post-spectre world.

It seems Azure FrontDoor is affected, because our private VM works fine in different regions.

For me the same. It's very confusing that status page [1] is green

[1]: https://azure.status.microsoft/en-us/status

I think there is relatively cheap way to reduce such scams: make it mandatory for banks etc to perform “training” of the clients. Regularly make a call to clients asking for sensitive data. Then block account if client provides this data.

No. I don't say about real statistic date. I say only about people's *perception* about risk.

This is definitely propaganda comment: eating mushrooms in Russia is never considered as risky.

The interesting thing that "Smart licensing" enabled devices cannot update license renewal and most likely will stop working in month or two.

We're using ESE NT in our product and I'd like to say it's a great DB. Yes, it's have some limitation and quirks, but overall it's great DB. For us killing feature is efficient handling of binary BLOB columns.

It seems it uses dynamic list downloaded from Microsoft web site [1]

[1] https://go.microsoft.com/fwlink/?linkid=2133855

AFAIK original was "cvs annotate" [1]. Subversion introduced "svn blame" and "svn praise" aliases for "svn annotate" as some kind of joke. It's funny that git only has "git blame".

[1] https://compbio.soe.ucsc.edu/cvsdoc/cvs-manual/cvs_74.html

Firefox did this when they taking over IE domination. Chrome come later.

Related interesting longread: https://developercommunity.visualstudio.com/idea/435711/get-...

You should just ask for refund. I've the similar story, Uber suggested credit. But immediately issued refund once I declined credit and asked to refund money back to my credit card.

Most likely because of Windows Server 2008: they are almost the same.

My favorite quote: [[[ Greg Sullivan, lead product manager for Microsoft's Windows client division, says that the computing community as a whole has benefited from the Web's standardization around Internet Explorer. Competing platforms would have meant that developers would have had to duplicate their efforts more often, he said.

"There is benefit to everybody who's involved," Sullivan said. "In general, a standard is very useful, whether it's de facto or du jour. It enables a level of consistency and a level of investment and minimizes some of the redundancy that can occur." ]]]

Most of the trip speed is 25 km/h, while speed limit in Moscow is 60 km/h.

Exploit code from original bug report [1]:

  CreateFileW(L”c:\\$mft\\<anything>”, FILE_READ_ATTRIBUTES, 0, NULL, OPEN_EXISTING, 0, NULL);

[1] https://habrahabr.ru/company/aladdinrd/blog/329166/

In fact .zip file contains file header information twice: before every compressed file (local file header) and at the end of the .zip file (central directory). It's possible to omit file size in local file header, but most most compressing utilities doesn't use this option. So most .zip files could be extracted without seeking to the end.

Sure, package maintainers may backport fixes to their old versions. But they need to fully understand all upstream source code and follow all commits. Otherwise they can miss important fixes: following only security fixes for supported branches is not enough. Sometimes project developers fixes bug/security problem in the code, but doesn't flag it as CVE because current code usage doesn't trigger it. But code in old branch could.

Support for OpenSSL 1.0.1 will cease on 2016-12-31 [1], so distributions need to update anyway.

[1] https://www.openssl.org/policies/releasestrat.html