freedude

What must now be done to get CVE fixed at Red Hat...

From the article... Ruprich's reply was something of a surprise. "Thanks for the contribution. At this time we don't plan to address this in RHEL but we will keep it open for evaluation based on customer feedback," he wrote.

Wright then asked: "Is customer demand really necessary to fix CVEs? I kind of understand (the fix) if you don't want to rebase to a newer version but I genuinely do not understand rejecting this one."

To which Ruprich shot back: "We commit to addressing Red Hat defined Critical and Important security issues. Security vulnerabilities with Low or Moderate severity will be addressed on demand when customer or other business requirements exist to do so."

Wright was clearly puzzled by this attitude, asking: "I can even understand that, but why reject the fix when the work is already done and just has to be merged?"

Does Microsoft have a reputation for good security, adequate security or poor security?

How has this affected sales over the years?

I believe they won the PC wars years ago and there has never been a good replacement system with enough customer incentive that met the same price point. It is this cow they continue to milk.

Most Chevys from the 60's.

Go to a car show and talk to those that remanufacture cars.

No, but they might be doing it to save on incident response, time wasting, protect IP, and meet a certain security standard in the future.

"TETRA:BURST is a collection of five vulnerabilities, two of which are deemed critical, affecting the Terrestrial Trunked Radio (TETRA) standard used globally by law enforcement, military, critical infrastructure, and industrial asset owners in the power, oil & gas, water, and transport sectors and beyond.

Most of the TETRA:BURST vulnerabilities affect all TETRA networks. Depending on infrastructure and device configurations, these vulnerabilities allow for realtime decryption, harvest-now-decrypt-later attacks, message injection, user deanonymization, or session key pinning. Firmware patches are available for some of these vulnerabilities, while compensating controls are recommended for others."

This is going to be difficult, time-consuming and possibly never patched.

As AnimalMuppet said actions speak louder than words.

“Your actions speak so loudly, I can not hear what you are saying.” ― Ralph Waldo Emerson

If they really believed their rhetoric why wouldn't they build on an inland ridge and pipe the water in?

An analysis of studies pertaining to masks in Morbidity and Mortality Weekly Report: Characteristics and quality of all studies from 1978 to 2023

"0/77 were randomized studies."

https://www.medrxiv.org/content/10.1101/2023.07.07.23292338v...

Here is a pdf.

https://www.medrxiv.org/content/10.1101/2023.07.07.23292338v...

"Ultimately, your apps can offer seamless continuity following a restart – for updates or otherwise – by following a few best practices:

    Save the user’s state.
    Remember how their previous views were positioned.
    Relaunch the app following the update.

"

The app that does this the best for me as a user, is Firefox with it's restore tabs feature. The App that I dislike the most in this context MS Teams. It is too pushy.

I am curious about your interactions with these state-saving features. Which work best for you and which do you think just get in the way?

"In Object-Oriented Programming, it is not uncommon to encounter null values, which can lead to null reference errors. Despite the existence of extensive code to mitigate these errors, they still persist in C# code bases.

On the other hand, in functional programming, null values are not typically utilized. Thanks to immutability, we can rely on values to always contain something. In cases where null values are expected at the boundaries of our system or when we anticipate the absence of a value, we have effective mechanisms to handle such situations.

The secret weapon F# uses for dealing with null value is the option type which is basically a Discriminated Union:"

Do you think they don't believe what they are saying? They seem pretty convincing.

You will get similar focus on two parent households from Orthodox Jews, Muslims, LDS, JW and several other religious groups other than conservative Christians. However, your point is still the same. With today's stance of "separation of church and state" the US government will not promote this ideology of a two parent household being desired.

Our 41st president had a Faith-Based Initiative which was successful in many areas. It cost the tax-payer 75% less to have a faith-based organization head up a relief program than it did for a similar governmental program. Why? Because it was a volunteer based organization and they were incentivized to keep costs low.

" the M.2 specification allows two separate PCIe links connected to the E-key slot; however, no WiFi cards use this apart from some really old WiGig-capable ones, and manufacturers have long given up on connecting a second link. Nevertheless, there are some cards like the Google Coral M.2 E-key dual AI accelerator and the recently announced uSDR, that do indeed require the second link – otherwise, only half of their capacity is available."

the actual title of the article is... "Blame capitalism? Why hundreds of decades-old yet vital drugs are nearly impossible to find"

Which shows its inherent political bias.

"I’m a health economist who has studied the pharmaceutical industry for the past 15 years. I believe the drug shortage problem illustrates a major shortcoming of capitalism."

He is arguing against his own point. The problem is a lack of supply but he is promoting the wrong political answer to a politically generated problem. In a purely capitalist economy a lack of supply would cause prices to go increase and the market would respond accordingly. This industry is highly regulated. In some cases for good reason. Regulation always stifles capitalism and results in less profit for the manufacture. The fix for to much regulation is less regulation, not more.

That sounds like a privacy nightmare come true. What else will they use the palm scan for?

Here is how you unenroll if you are as concerned as I was. https://one.amazon.com/data-deletion-request/verification

CISA supports Microsoft removing the "logging tax" from Office 365 auditing because it means administrators can help track down malicious actors like Storm-0558 easier.

Microsoft has removed the "logging tax" from Office 365

It looks like they have worked with CISA to remove the "logging tax".

https://learn.microsoft.com/en-us/microsoft-365/compliance/a...

"...the NetScaler CLI allows for the stacking of commands. This means that it is possible to stack the man and whoami commands. If these commands are stacked, the NetScaler shows that the man command failed to execute because without a parameter the man command does not know which manual must be opened. Still, whoami is executed successfully.

By running man ; shell, the man command errors out again, as expected. However, this time the shell command is executed, and no error is displayed that tells that the authorisation for executing the shell command is missing."

https://www.resillion.com/wp-content/uploads/2023/07/Resilli...

"Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467"

This is a zero-day exploit.

"Exploits of CVE-2023-3519 on unmitigated appliances have been observed. Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible. "

"Log formatters are components responsible for formatting log messages in a specific way. They take raw log data, such as timestamps, log levels, and message details, and transform them into a human-readable format. Log formatters greatly help in the analysis and comprehension of log entries, making troubleshooting and debugging easier."

ouch! And you are living in SF of all places. The land of perpetual fog and rain. With a healthy dose of criminal actively.

No Thanks. Hard Pass.

part 4 in series "the new minimal API source generator introduced to support AOT workloads."

part 3 of series "the things missing from the slim builder at a high level, and then dig into the code to see how it's implemented."

Part 2 of series

"the new "AOT-ready" template shipping in the .NET 8 SDK preview releases, point out some of the interesting features, and demonstrate one of the main benefits of AOT - faster startup times."

Part 1 "Source generators were introduced in .NET 6 as a feature that allows generating additional code at compile time, based on your code. I've written about source generators many times on my blog, as they provide a solution to many interesting problems. Fundamentally, they allow you to automatically generate code that would be difficult or laborious to write manually."

In order to calculate a one in ten chance of anything would require you to know two numbers. In this case, you would need to know the number of people that have contracted Covid and the number of people that have experienced long covid symptoms. I can guarantee there is no possible way to know either number so anything is probably a grossly inadequate estimate depending on bias.

Cumulative Emissions of CO2 for Electric and Combustion Cars: A Case Study on Specific Models

"Cumulative life cycle CO2 emission calculations for both vehicles were performed for European conditions. This calculation covers the period from production to management after use, with a use phase of 10 years and an assumed traveled distance of 150,000 km. For the electric car, five variants of electricity production were considered. Calculations of the cumulative CO2 emissions were determined as the sum of the values calculated in Section 3.2.1.–3.2.5 for internal combustion and electric cars. The obtained results are shown in Figure 3 and Table 5.

Table 5. List of emissions in kg-CO2 for the entire life cycle of the vehicle (150,000 km, 10 years).

                 Production             Fuel/Energy
                                        Production Driving Maintenance Utilization Total
       CarBody Engine  Drive  Battery

Gasoline car

     4219    980    294    19.5        2597.2    27,630     1518         64     37,322

Electric car

W1 4219 1070 641 6337 27,630 - 1324 1965 43,186

W2 4219 1070 641 6337 15,980 - 1324 1965 31,536

W3 4219 1070 641 6337 550 - 1324 1965 16,106

W4 4219 1070 641 6337 8400 - 1324 1965 23,956

W5 4219 1070 641 6337 18,817 - 1324 1965 34,373 "