Imho la plus grosse #MuteNews de 2023 (jusque là). theregister.com/2023/07/21/mic… linkedin.com/pulse/microsof… L'écrasante majorité des entreprises se sont probablement fait hacker et backdoorer. Mais presque toutes n'y prêtent aucune attention, et maintiennent leur confiance en Microsoft.

Dropping #Downfall, exploiting speculative forwarding of 'Gather' instruction to steal data from hardware registers. #MeltdownSequel - Practical to exploit (POC/Demo) - Defeat all isolation boundaries (OS, VM, SGX) - Bypass all Meltdown/MDS mitigations. downfall.page

Downfall can steal AES encryption keys from OpenSSL. Not by exploiting side channels in an unprotected software implementation. It also works on implementations leveraging hardware-protected AES-NI opcodes. And on most SIMD implementations of most ciphers. This is really bad.

"Tu achèterais quoi si t'étais milliardaire ?" Personne : Benoît Poelvoorde :

Announcing general availability of the world's first commercial cloud computer oxide.computer/blog/the-cloud…

We live in a time increasingly resembling the second half of the 1930s. I couldn't live with myself with the knowledge I didn't do more to stop another Hitler. In light of the Republican wavering and in memory of Navalny I will give $100 towards FPV drones for Ukr for every RT.

#IVGDansLaConstitution : "On me demandait désormais d'examiner la suspecte, pour savoir si elle venait ou non d'accoucher..." Le récit poignant de Claude Malhuret, qui raconte son expérience de médecin, à l'âge de 25 ans, dans un "pays du Sud". #DirectAN #IVG

If you needed yet another reason not to trust VPN providers or proxy services... Here Facebook partnered with a bunch of companies to have root certificates installed on people's phones so they could intercept other app's traffic. storage.courtlistener.com/recap/gov.usco…

This "xz" and "liblzma" backdoor story is increasingly looking like a sophisticated effort to target FOSS supply chains, getting this backdoor into Debian and Kali etc. It's also not the only library the backdoor author has added code too, libarchive and others may have issues.

PSA: the list of DNS servers in Windows is not supposed to be an ordered list of DNS servers to try - if you put 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare) as a "fallback" after your internal DNS server, you'll just cause random name resolution failures for internal DNS

Wanna see my recent beef with mathematicians?

This Thursday I will be speaking about Jetty Project 12, hosted by javaBin Oslo! Jetty Core APIs, Jakarta EE 8-11, Virtual Threads, and more! meetup.com/javabin/events…

Lidl comme cloud souverain européen, je l'avais pas dans mon bingo horovits.medium.com/lidl-is-taking…

extend the distance out a few miles and the human wins btw

“You get books out of the machines” The best response to degrowth is to share Hans Rosling’s experience of washing machines

Hans Rosling on how washing machines liberate women from hours of hard, time consuming labour

However big you think this Microsoft nuclear deal is, I am telling you, it's bigger. One of the biggest power deals ever. ~$800 million/yr for 20 years $16 BILLION for one nuclear reactor From a 40-year-old reactor, just to get to age 60. We now have a market for newbuild.

AMAZON NOW HIRING NUCLEAR ENGINEERS All these companies claimed for years to be 100% renewable-powered. It was always untrue, and now they can't get into nuclear fast enough. They watched nuclear plants die rather than lift a finger to help. Not anymore. Time to build.

Let's call it: The first big blackout of the green electricity era (Below my notes from the conference call the Spanish grid operator held earlier today with reporters. I added extra information from my initial post, and corrected a location: it was the south-west). 🧵1/2