0x0

When Google, along with a consortium of other companies, announced the open-source operating system we call Android way back in 2007, the world was paying attention. The iPhone had launched the same year, and the entire mobile space was wary of the rush of excitement around the admittedly revolutionary device. AOSP (Android Open Source Project) was born, and within a few years Android swallowed up market share with phones of all shapes and sizes from manufacturers all over the globe. Android eventually found its way into TVs, fridges, washing machines, cars, and the in-flight entertainment system of the Boeing 787 Dreamliner.

a digital wallet is a repository for personal data and documents. Right now, there are hundreds of different wallets, but no standard.

At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up their new accounts. Experts say malicious hackers learned they could commandeer any migrated Squarespace accounts that hadn’t yet been registered, merely by supplying an email address tied to an existing domain.

cross-posted from: https://programming.dev/post/16750896

The NSA has a video recording of a 1982 lecture by Adm. Grace Hopper titled “Future Possibilities: Data, Hardware, Software, and People.” The agency is (so far) refusing to release it.

Basically, the recording is in an obscure video format. People at the NSA can’t easily watch it, so they can’t redact it. So they won’t do anything.

The NSA has a video recording of a 1982 lecture by Adm. Grace Hopper titled “Future Possibilities: Data, Hardware, Software, and People.” The agency is (so far) refusing to release it.

Basically, the recording is in an obscure video format. People at the NSA can’t easily watch it, so they can’t redact it. So they won’t do anything.

Of course if Microsoft undermines standards' interoperability...

Regression in signal handler.

This vulnerability is exploitable remotely on glibc-based Linux systems, where syslog() itself calls async-signal-unsafe functions (for example, malloc() and free()): an unauthenticated remote code execution as root, because it affects sshd's privileged code, which is not sandboxed and runs with full privileges.

Ooooh... car BSOD vibes...

Another great Fortnine video just came out, this time about Honda.

Didn't quite explore the supply shortage impact on JIT as seen during the pandemic, though.