saint

joined 3 years ago
MODERATOR OF
[–] saint@group.lt 2 points 1 week ago

I understand your point, but I would not imply that a backdoor has to be remote. Backdoors are essentially any alternative, often undocumented ways to access or gain privileges on systems. They don't always result from malicious intent either - many backdoors simply "happen" when developers haven't fully considered security implications. For the average user whose device contains such unintentional backdoors, the impact remains the same regardless of how they came to exist. Consider the times when vendors had default BIOS passwords - these created a nightmare for Uni IT staff (and others as well), even though they were not accessible remotely.

[–] saint@group.lt 1 points 1 week ago (2 children)

From security perspective, do you think the wording changes a lot here?

 

cross-posted from: https://lemmy.world/post/26598539

cross-posted from: https://programming.dev/post/26664400

Tarlogic developed a new C-based USB Bluetooth driver that is hardware-independent and cross-platform, allowing direct access to the hardware without relying on OS-specific APIs.

Armed with this new tool, which enables raw access to Bluetooth traffic, Tarlogic discovered hidden vendor-specific commands (Opcode 0x3F) in the ESP32 Bluetooth firmware that allow low-level control over Bluetooth functions.

In total, they found 29 undocumented commands, collectively characterized as a "backdoor," that could be used for memory manipulation (read/write RAM and Flash), MAC address spoofing (device impersonation), and LMP/LLCP packet injection.

Espressif has not publicly documented these commands, so either they weren't meant to be accessible, or they were left in by mistake. The issue is now tracked under CVE-2025-27840.

"it's just for testing"

 

Before Trump's return to office was secured, I was chatting online with a friend about Putin's strategy in Ukraine. "Putin is playing the long game," my friend observed, "he realizes he cannot win quickly, but he's patiently waiting for a miracle."

"What miracle could possibly save him?" I asked.

My friend's answer seemed absurd then: "Well, Trump could be elected." We both brushed it off as the craziest idea possible—a distant, unlikely scenario.

That dismissal has now turned to a chill of recognition. The "miracle" has materialized.

My friend also pointed out something crucial about Russian warfare that the West consistently underestimates: "Russia knows how to wage slow, grinding wars. They depend on sacrificing humans, which post-Soviet Russia has plenty of." While Western democracies measure war in weeks and political cycles, Putin measures it in years and generations. His strategic patience stems from a fundamentally different calculus of human life.

The recent White House meeting between Trump and Zelensky demonstrated this new reality with startling clarity. What should have been serious diplomacy became, in Trump's own proud words, "great television." The Ukrainian president wasn't treated as the leader of a nation fighting for survival but as a contestant on a reality show—publicly scolded and dismissed without meaningful support.

Yet the European response to this alarming spectacle has been painfully predictable. We Europeans dismiss Friday's event as a mere misunderstanding, a temporary blip in the transatlantic relationship. We continue our decades-long tradition of waiting on bended knee for American salvation. "America is a friend and it will help, for sure. They have promised." "NATO will defend us, how can it not?"

As the old military adage goes: "If you don't pay for your own army, you'll end up paying for someone else's." Europe has long enjoyed the luxury of minimal defense spending while sheltering under America's security umbrella. That bargain, which already showed cracks during previous administrations, now appears to be fundamentally broken.

This outsourcing of security has left Europe strategically impotent at precisely the moment when it needs to stand on its own. Trump's sudden embrace of "peace at any cost" represents everything the Kremlin strategists have patiently awaited. They didn't need to defeat Ukraine militarily; they simply needed to outlast Western resolve. Putin's strategy—trading time and Russian lives for Western fatigue—has paid off. Now, without firing a single additional shot, he watches as his greatest adversary's support crumbles from within.

The evidence of Kremlin influence is no longer subtle. Trump's talking points—from questioning Ukraine's sovereignty to suggesting territorial concessions—echo Moscow's propaganda with alarming precision. What took years of sophisticated disinformation campaigns to seed now flows freely from the Oval Office.

Europe faces an existential choice: step forward immediately to fill America's retreating role or watch as the rules-based order collapses. Each day of European hesitation is a victory for Putin, who has mastered the art of the long game while Western democracies remain trapped in short-term thinking and strategic dependency.

The Ukrainian people, who have endured years of Russian terror, deserve better than becoming pawns in America's domestic political games or victims of Europe's strategic complacency. This humiliating spectacle reveals the cruel calculus of modern geopolitics: principles crumble before personalities, democratic values bow to authoritarian pressure, and what we once dismissed as a crazy improbability has become Ukraine's waking nightmare.

Putin waited for his miracle, and against all odds, it arrived in Washington—proving once again that those who can sacrifice the most and wait the longest often prevail in geopolitics, regardless of moral standing.

While our governments dither in bureaucratic paralysis—or to put it in more direct terms, while they prove themselves utterly useless—we as citizens cannot afford to wait. If this spectacle has shown us anything, it's that relying solely on official channels means accepting defeat by delay.

For every dollar America withholds, let's send two euros. This isn't just a slogan—it's a practical response. If Trump cuts a billion in aid, Europe's citizens should mobilize two billion. Not through our hesitant governments, but through direct action and personal commitment.

Support for Ukraine must become a personal responsibility. There are countless ways to help—donate directly to Ukrainian aid organizations, support businesses that employ Ukrainian refugees, push your local representatives to act even as national governments hesitate, or volunteer your skills, time, and resources.

For a comprehensive list of vetted charities supporting everything from military equipment to humanitarian aid to animal shelters, visit the r/ukraine wiki at https://www.reddit.com/r/ukraine/wiki/charities/ or simply search online for Ukrainian support organizations. Choose one or two that align with your values and commit to regular contributions.

The question is no longer whether Europe's institutions will step up, but whether its people will. Every euro sent directly to Ukrainian humanitarian efforts or defense funds is a statement that we refuse to be complicit in Putin's waiting game. If our governments won't lead, then we must—from the ground up, person by person, community by community.

History will remember not just what our leaders failed to do, but what ordinary citizens chose to do despite them.

 

Nobody seems to notice... nobody seems to care..

8
The Denazify Lie (www.rand.org)
 

Russian leaders and propagandists have at once denied the existence of a Ukrainian nation and called for purging or cleansing the Ukrainian territory, in terms that often mirror rhetoric preceding past genocides. In this report, the authors seek to shed light on how Russia's extremist, hate-peddling narratives deployed in the war have spread online through social media.

Russian propaganda is making inroads into some of the major European languages—Spanish and German, as well as French and Italian.

REMVE narratives are also finding more-receptive audiences among relatively small linguistic communities in Eastern Europe. Serbian- and Bulgarian-language communities emerge as particularly vulnerable to cross-language and cross-cultural transmission of REMVE messages on both X and Telegram.

However, Russia's ability to successfully mainstream its propaganda and mobilize its audiences against Ukrainians is limited: The most virulent REMVE conversations on these two platforms remain highly Russian-language dominated, are concentrated in specific communities, and do not draw much attention from others in the networks.

Full research report: https://www.rand.org/content/dam/rand/pubs/research_reports/RRA3400/RRA3450-1/RAND_RRA3450-1.pdf

[–] saint@group.lt 4 points 2 months ago

no, no and no, but you will have to find an answer if your decision to have or not to have kids was the right choice in any case.

 

If you left alone in the office and have nothing better to do..

 

The incoming Trump administration has been supportive of this European initiative. It is consistent with the president-elect's stated desire to disengage the United States from security matters on the continent, and instead have the European Union and the United Kingdom take the lead. But a deployment of European forces to Ukraine will inevitably entangle the Americans. European militaries depend on their U.S. allies for out-of-area operations. Inevitably, a large deployment to Ukraine will once again expose this dependency when they turn to the United States for help with critical tasks such as air lift, logistics, and intelligence that they cannot conduct alone.

 

The Ukrainian military faces critical challenges that demand immediate, honest evaluation:

  • Infantry roles becoming increasingly unsustainable

  • Recruitment system disproportionately burdens vulnerable populations

  • Command structures trapped in outdated bureaucratic frameworks

  • Morale gradually eroding under prolonged combat stress

  • No clear exit strategy for frontline soldiers

  • Commanders prioritizing reporting over human lives

  • Declining Western support momentum

  • Deeply entrenched leadership inefficiencies

Suggested changes:

  • Implement merit-based officer promotion systems
  • Establish fixed, transparent service terms
  • Rebuild trust between military leadership and soldiers

More in the article.

 

According to the article, Danieli continues to operate in Russia despite EU sanctions, collaborating with steel giants like Severstal and MMK, both linked to military production. Danieli reportedly uses its Chinese subsidiary to bypass sanctions, enabling the supply of equipment to Russia. In 2023, its Russian subsidiary’s cash flow increased 35-fold, contradicting claims that the business is unprofitable or disconnected from the military sector. The company’s justification hinges on technicalities, but the financial and strategic realities suggest complicity in sustaining critical industries that support Russia’s war economy. At what point does this move from legal maneuvering to outright enabling?

 
  • Companies are earning billions while pushing for automation that cuts jobs.
  • Automation is replacing workers across industries, from shipping terminals to retail. “Who pays taxes when machines replace workers?”
  • A dockworker strike could halt the economy.

I think automation is unavoidable, but what is next?

 

The CALEA system, designed in the U.S. for mass surveillance, has become a global threat. Telecom equipment with "back doors" isn't just an American issue—it's a worldwide risk. Trusting the "good guys" is naive; any end with "back doors" can be a target. Encryption is our defense, and we must be careful about what we buy. #security #technology

 

How Base 3 Computing Beats Binary

Metadata

Highlights

Three, as Schoolhouse Rock! told children of the 1970s, is a magic number. Three little pigs; three beds, bowls and bears for Goldilocks; three Star Wars trilogies. You need at least three legs for a stool to stand on its own, and at least three points to define a triangle.

If a three-state system is so efficient, you might imagine that a four-state or five-state system would be even more so. But the more digits you require, the more space you’ll need. It turns out that ternary is the most economical of all possible integer bases for representing big numbers.

Surprisingly, if you allow a base to be any real number, and not just an integer, then the most efficient computational base is the irrational number e.

Despite its natural advantages, base 3 computing never took off, even though many mathematicians marveled at its efficiency. In 1840, an English printer, inventor, banker and self-taught mathematician named Thomas Fowler invented a ternary computing machine to calculate weighted values of taxes and interest. “After that, very little was done for years,” said Bertrand Cambou, an applied physicist at Northern Arizona University.

Why didn’t ternary computing catch on? The primary reason was convention. Even though Soviet scientists were building ternary devices, the rest of the world focused on developing hardware and software based on switching circuits — the foundation of binary computing. Binary was easier to implement.

 

Highlights

The first scaling crisis happened in 1996, when Linus wrote that he was "buried alive in emails". It was addressed by adopting a more modular architecture, with the introduction of loadable kernel modules, and the creation of the maintainers role, who support the contributors in ensuring that they implement the high standards of quality needed to merge their contributions.

The second scaling crisis lasted from 1998 to 2002, and was finally addressed by the adoption of BitKeeper, later replaced by Git. This distributed the job of merging contributions across the network of maintainers and contributors.

In both cases, technology was used to reduce the amount of dependencies between teams, help contributors keep a high level of autonomy, and make it easy to merge all those contributions back into the main repository, Bernhard said.

Technology can help reduce the need to communicate between teams whenever they have a dependency on another team to get their work done. Typical organizational dependencies, such as when a team relies on another team’s data, can be replaced by self-service APIs using the right technologies and architecture, Bernhard mentioned. This can be extended to more complicated dependencies, such as infrastructure provisioning, as AWS pioneered when they invented EC2, offering self-service APIs to spin up virtual servers, he added.

Another type of dependency is dealing with the challenge of merging contributions made to a similar document, whether it’s an illustration, a text, or source code, Bernhard mentioned. This has been transformed in the last 15 years by real-time collaboration software such as Google Docs and distributed versioning systems such as Git, he said.

Anyone trying to scale an agile organization should study lean thinking to benefit from decades of experience on how to lead large organizations while staying true to the spirit of the agile manifesto, he concluded.

[–] saint@group.lt 1 points 4 months ago

What about it? ;)

[–] saint@group.lt 1 points 5 months ago

Not anymore, nowadays, I feel guilty reading non-fiction and understand Lindy effect on books much better (be it fiction or non-fiction).

[–] saint@group.lt 28 points 5 months ago

They cut all such scenes and pasted into The Boys, in a Mark Twain style “Sprinkle these around as you see fit!”.

[–] saint@group.lt 2 points 6 months ago

A Tomb for Boris Davidovich - Danilo Kiš

[–] saint@group.lt 1 points 10 months ago

This is what you get when are not sleeping during biology classes.

[–] saint@group.lt 2 points 10 months ago

not a bug, but a feature :))

[–] saint@group.lt 17 points 11 months ago

i am all for normalizing raiding ambassies for [put the cause you support] as well

[–] saint@group.lt 7 points 11 months ago (2 children)

woah, so nothing is sacred now? 😱🤔😐

view more: next ›