The upstream has no public repository, neither on GitHub nor anywhere else.
JWZ might not even use git in the first place, the source might be in a local SVN repo, or just a series of tarballs and patches, assuming it is version controlled at all.
5,652 karma · joined August 28, 2019
https://goliath32.com/
https://github.com/AgentD/
https://hn-wrapped.kadoa.com/st_goliath?share
JWZ might not even use git in the first place, the source might be in a local SVN repo, or just a series of tarballs and patches, assuming it is version controlled at all.
In other words: shamelessly running a spam bot.
And we found out about it because rather than flooding website guestbooks with porn links, it ultimately slopped a police tip line.
I live in Innsbruck, Austria, where MED-EL is headquartered. Like most people I know, I too have briefly worked there in 2008. I currently live 5 minutes on foot from where the entrance used to be back then, before it was walled off, they massively expanded the building and added another building behind it, where in 2008 a bunch of office containers with clean rooms used to be. There is now a raised walk way to the other side where they used to rent just a few units back then and now co-opted the building, plus a patch work of smaller rental spaces all around.
The implants themselves are not cheap and (at least at the time?) eventually needed to replaced. From what I recall, some of the technology involved was also licensed out or sold for other applications. Ultimately, I would also guess that all the licensing, approval and red-tape involved in actually making implants for humans also kind of limits competition quite a bit.
Any patch that is back ported to a stable kernel, indiscriminately. And they have also started assigning CVSS scores with the same kind of malicious compliance.
Take for example, this patch in the device mapper RAID code:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
After back porting to stable, it got assigned CVE-2026-89558 (which is in this list), and a CVSS score of 9.8:
https://git.kernel.org/pub/scm/linux/security/vulns.git/tree...
Reasoning behind it being that theoretically, a RAID could be accessible over the network via NFS, iSCSI, etc... so if it gets corrupted, the buggy code path in the recovery (CVE-2026-89558) is effectively triggered over the network.
This sort of thing has always been a concern for projects that re-implement some existing piece of software, e.g. there were concerns early on during development of the GNU project about people contributing after having been exposed to Unix source code. Similarly, it is an ongoing concern for the Wine project[1], as well as ReactOS. The later even had a code freeze and internal audit in 2006, after allegations came forward that code had been derived from disassembled Windows binaries[2].
[1] https://gitlab.winehq.org/wine/wine/-/wikis/Clean-Room-Guide...
If all you know about archeology is from daytime television and clickbait articles, all you know about history is what you vaguely remember from school, you never met anybody working in those fields and actually don't even have a passing interest to engage with the subject, then yes, you might be inclined to believe that's how it works.
EDIT: of course this comment accumulates nothing but drive-by down votes from arrogant computer touchers, presumably before heading off to other comment sections to discuss law, macroeconomics, quantum physics and whatever else they are experts at, having watched YouTube videos. You see, only CS requires years of study and is divided into dozens of intricate sub fields, everything else is simple, straight forward and can be "disrupted".
Unlikely, virtualization/emulation has been a thing well before this project and you can just buy USB to RS232 adapters. There are GPIO solutions for industrial PCs other than the parallel port. Or you can simply buy new industrial PCs which have those ports.
If you find an industrial appliance controlled by genuine old PC hardware that hasn't been replaced, the RS232 ports are the least of your concerns.
In my experience, such machines usually have something insanely proprietary plugging into a custom ISA card, and whatever is connected to it usually doesn't take too kindly if the bus timings are off. And neither does the accompanying bare metal software that relies heavily on timing loops and hardware peculiarities.
s/technically/allegedly/
supposedly with a minimum of 4M RAM even! [1] I have a machine with twice that clock and twice that RAM that a friends parents wanted to toss out[2]. I spent the better part of a day getting Windows 3.11 and Office 4.3 to run. Playing around with it for a bit, I highly doubt that Windows 95 on minimum requirements would be anything but endlessly frustrating. I was not masochistic enough to try.
[1] https://en.wikipedia.org/wiki/Windows_95#System_requirements
It goes roughly like this: when you select a text in a window, the X client tells the X server "I have the selection now", when you paste in another window, the client behind the other window asks "who has the selection?" and requests the selection contents from the other client, the data is then forwarded through the server. The client that claimed ownership has to properly handle some associated requests/events for the whole thing to work.
The key point is, there is no central "clipboard" style repository like on Windows, the client that does the "copy" is responsible for the data, the client that wants to "paste" has to talk to it. If I try to copy/paste and quit the source program before the paste, the data is gone. That's why modern desktop environments usually come with a dedicated daemon that immediately reacts to selection ownership changes, grabs the data for itself and then claims the selection ownership to emulate the Windows style behavior.
If we play devils advocate, it's possible the Zoom client tries to do just that, not trusting whatever desktop environment. I don't use this software, so I'm going out on a limb here, but I'd guess that the "Zoom Desktop Client" is just another browser in disguise? It might be actually Chromium or whatever underneath that does this?
I'd say "wide variance in the level of kindness" is a rather British way to describe some of the opinions that have been voiced.
Up next: How many cloud services does it take to turn on the lights?
Here's a hint: https://imgur.com/a/light-bulb-moment-hIKUI48
But hey, it could be worse. For instance, you could be trying to send an e-mail: https://github.com/0x4447/0x4447_product_s3_email#what-will-...
Ah, that would be 8.10 with the coffee stain wallpaper :-P
If you weren't previously aware of "The Old New Thing" blog, Raymond Chen has been sharing stories about Windows 95 development for decades at this point. So many in fact, he published a book under the same name (the book is essentially a best-of collection from the blog in paper form).
The os2museum[1] blog is also a gold mine. Tim Paterson at one point tried to start blogging, sharing a few anecdotes about the early days of DOS[2]
Speaking of books, you might enjoy "Showstopper!" about the development of NT, even tough it is a bit shallow on the technical side. For the technical aspects, you might want to get it together with "Inside Windows NT" (first edition) by Helen Custer.
You might also enjoy: "Another Boring Topic" [3] YouTube channel, covering (among other things) early Windows development in excruciating detail and "Old Computers Sucked" [4], actually trying to run the software on era appropriate hardware. "Cathode Ray Dude" is all over the place but often also covers hardware and software of roughly that era[5].
A sibling comment already mentioned JWZs blog, if you have fond memories about Netscape, you might enjoy "Project Code Rush" [6].
Btw. Netscape Navigator 3.0 has just turned 30.
[1] https://www.os2museum.com/wp/
[2] https://dosmandrivel.blogspot.com/
[3] https://www.youtube.com/@AnotherBoringTopic/videos
[4] https://www.youtube.com/@old-computers-sucked/videos
On compiler generated x86 code, the base pointer register will quickly follow when entering the target function.
They don't do this sort of thing... oh wait, they do.
But we are still wrong to judge their character by their own actions, because... evil French people made them do it?
https://en.wikipedia.org/wiki/MP3#Licensing,_ownership,_and_...
Besides that name clash, it apparently competes with another terminal emulator that was creatively named "vt100".
Scrolling over the page I did a double take when I saw the benchmark. No way a vt100 can do 221 MiB/s! Who even types that fast anyway?
Innovative new air cooling: instead of using lots of tiny fans to move air through the servers, we simply use 2 big fans to move the servers through the air!
And while we're at it, we'll completely disrupt the existing Zeppelin market that depends on expensive helium for some reason. We use daring, innovative hydrogen technology, enabling a massive cost reduction!
> Detecting primitive types is easy. String. Number. Boolean. Date.
... the rabbit said confidently, staring down the oncoming lawn mower.
> I honestly thought the viewer would take a weekend.
> Display rows.
> Add scrolling.
Burma Shave?
The Channel has similar video series on OS/2, VisiCalc, Microsoft Excel and early Windows (far from completion). The videos are generally very detailed and well researched, often contrasting accounts from different source or even reaching out to people involved.
The already slow pace of the channel has slowed down a lot. In an update video a while back, the author has announced that the background research for the IBM PC led down an unexpectedly deep rabbit hole and his script eventually spiraled into an unfinished book that will now probably turn into a two-parter itself.
Fedora with XFCE here, but last I checked on Windows, it worked exactly the same over there: With a Chinese IME installed, tap shift to switch input language, shift+hyphen produces a double em-dash: ——, likewise, shift+6 a double elipsis: ……
You encounter those a lot in simple, machine translated Chinese, along with literal translations of "not X but Y", "not just ... but also" and similar sentence constructs that are common in Chinese. I suspect that's how a disproportionate amount of that ended up in training material in the first place.
I know that other machines existed that used a similar system. I recall being asked, circa summer 2009 or so, to set up extensions on a quite old PABX that was configured that way.
The PABX was a huge electrical box full of giant PCBs stuck into a backplane (S-100 or maybe something proprietary?). I didn't get a good look tough, the box was mounted under the ceiling, directly above a desk with a terminal that you used for configuring it. There was a binder with laminated, typewritten cards, documenting "verbs" and "nouns" that you entered into a numeric keypad. As said, it worked like the Apollo DSKY, but the "display" was single slot that you had to squint through at just the right angle to make out faint numbers on a mirror, aimed downwards at some back projection thingy.
A blog post about this, published at the time: https://sigma-star.at/blog/2024/03/linux-kernel-cna/
The title is editorialized (i.e. the OP made it up), the link simply goes to the kernel CVE mailing list archive.
( ) technical ( ) legislative (X) market-based ( ) vigilante
( ) Spammers can easily use it to harvest email addresses
(X) Mailing lists and other legitimate uses would be affected
( ) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
(X) It will stop spam for two weeks and then we'll be stuck with it
(X) Users will not put up with it
(X) Microsoft will not put up with it
(X) The police will not put up with it
( ) Requires too much cooperation from spammers
(X) Requires immediate total cooperation from everybody at once
(X) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
( ) Anyone could anonymously destroy anyone else's career or business
( ) Laws expressly prohibiting it
(X) Lack of centrally controlling authority for email
( ) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
(X) Asshats
( ) Jurisdictional problems
(X) Unpopularity of weird new taxes
( ) Public reluctance to accept weird new forms of money
(X) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
( ) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
(X) Extreme profitability of spam
(X) Joe jobs and/or identity theft
( ) Technically illiterate politicians
( ) Extreme stupidity on the part of people who do business with spammers
(X) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
(X) Ideas similar to yours are easy to come up with, yet none have ever been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
( ) Countermeasures must work if phased in gradually
(X) Sending email should be free
(X) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
(X) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
( ) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
(X) Sorry dude, but I don't think it would work.
( ) This is a stupid idea, and you're a stupid person for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your house down!Back in the day, you could read a stories on Slashdot practically every other week that usually went something like this: Company/institution does something stupid, somebody finds out, tries to be a good citizen and tells them. The organization then throws a tamper tantrum in the media, fires the legal department on all cylinders, screaming "hacker!" and throwing the book at them. The most egregious cases usually happened in the US, the CFAA happens to be a particularly strong book to throw.
People eventually got the hint and either talked to the press instead, or organizations like the CCC (at least in this part of the world) and let them deal with the organization and not talk to them directly.
At least in my perception/memory, it started improving over the 2010s, but stories like this are now starting to pop up again in recent years. I guess we have a new crop of computer enthusiasts who need to learn the same lessons again.
Of the top of my head, the CTF group in Malta comes to mind who gave a talk at (last years?) CCCongress. A badly worded E-mail asking about a bug bounty resulted in several arrests, house searches and ultimately a presidential pardon (https://timesofmalta.com/article/pardon-issued-students-lect...).
Imagine a private individual just scraped the website (or simply clicked 'view source') for no reason in particular and then told people about it... They'd be labeled an uber-haxxor, face a civil lawsuit asking for ridiculous damages while being threatened with a prison sentence over CFAA violations. Hell, that might even drive some people to suicide.