Nick @internic@qoto.org

Towering freak waves can endanger ships at sea...now researchers show that 3 out of 4 rogue waves can be predicted with 5 minutes warning, using buoy data and machine learning

https://www.npr.org/2024/07/18/nx-s1-5041762/rogue-waves-deadly-computer-program-predicts-advance-warning

#ocean #science #navy #AI #physics

Not the worst depiction of DNA I’ve ever seen… https://kirche.social/@Henrik/112812403055481597

To fix the bungled CrowdStrike update, apparently you need to boot the system into safe mode and remove a file.

If the system was encrypted with Bitlocker, you need to enter the system's Bitlocker recovery key.

Apparently, many people are discovering they didn't have key management in place to store Bitlocker recovery keys, making it akin to a self-inflicted ransomware attack.

Affected by CrowdStrike outage? Simply try rebooting 15 consecutive times, Microsoft suggests

https://www.404media.co/to-fix-crowdstrike-blue-screen-of-death-simply-reboot-15-straight-times-microsoft-says/

Too funny: In 2010 McAffe caused a global IT meltdown due to a faulty update. CTO at this time was George Kurtz. Now he is CEO of #crowdstrike

https://www.zdnet.com/article/defective-mcafee-update-causes-worldwide-meltdown-of-xp-pcs/

NEW: A security researcher found a flaw in the website of Andreesen Horowitz (a16z) that, she said, gave her access to "emails, passwords, and “company details and employees."

a16z said the site was only used to update "publicly available information," and and "no sensitive data was compromised."

Also, a16z decided not to give a bug bounty to the researcher. a16z does not have a bug bounty program.

https://techcrunch.com/2024/07/18/researcher-finds-flaw-in-a16z-website-that-exposed-some-company-data/

"For decades, Bell Labs was considered not only the best industrial research lab in the world, but arguably the best research lab in the world, period. One Bell Lab alumnus described it as “a parallel organization to almost all the academic institutions put together.” Bell Labs not only developed new telephone equipment but performed novel scientific research, under the assumption that such research would ultimately result in improved communications technology." https://www.construction-physics.com/p/what-would-it-take-to-recreate-bell

A "defect" found in Crowdstrike's Windows software has caused much of the world's computers to crash, including airports, train stations, television shows and broadcasts, emergency 911 lines, entire datacenters — you name it.

Not a cyberattack, says Crowdstrike, but this massive outage has certainly been felt globally and shows Crowdstrike's massive reach — especially as things go wrong.

https://techcrunch.com/2024/07/19/banks-airlines-brokerage-houses-report-widespread-outages-across-the-globe/

Crowdstrike have advised that the world will be reverted to its last valid backup set, dated 7 Jan 2014, within the next 30 minutes. Please make paper notes of anything important to you from the intervening period, and tape them to your refrigerator door in a prominent position.

Bloomberg News - Microsoft Says Underlying Cause of Outage Fixed, Some 365 Apps Still Hit https://www.bloomberg.com/news/live-blog/2024-07-19/microsoft-cloud-technical-outage-updates

The surname of Corey Comperatore is misspelled on the uniform that was wheeled out onto the RNC stage for Trump to kiss.

@SteveBellovin @karlauerbach There are exactly four english language search indexes (after Blekko dropped out). Those are Google, Bing, Yandex, and Baidu. Neither Yandex nor Baidu maintain CONUS servers so latency is quite large using their indexes (and they aren't very good). Front ends, like DDG, use an API to get search results generally from Bing. They pay for that, and then they advertise on them and that pays them back a bit. 1/n

I just finished writing a tutorial on how to enable Secure Boot on #Gentoo using the shim and GRUB bootloaders. It walks you through all the steps that need to happen as well as how to keep your bootloader automatically updated. it works for binary distribution kernels, built-from-source distribution kernels as well as fully custom ones. Enjoy!

https://setphaserstostun.org/posts/secure-boot-on-gentoo-with-shim-grub/

It never ceases to amaze me how Communications of the ACM requires use of bit.ly. The damage when it goes away will be tremendous https://social.kernel.org/objects/39125e2b-0997-4c90-86f9-b16229bf4b52

Interesting results: people are more likely to believe fake news from a stranger.

This finding would be explained if people intuitively apply the three questions we suggest in our book to assess any claim:

1. Who is telling me this?
2. How do they know it?
3. What are they trying to sell me?

You know what your friends don't have a way of knowing (and you often know what they're trying to sell you.) With a stranger, these are harder questions to answer.

https://www.niemanlab.org/2024/07/youre-more-likely-to-believe-fake-news-shared-by-someone-you-barely-know-than-by-your-best-friend/

To anyone who disables paste on a 'confirm password' field... that makes the experience of using a secure, random-generated password on mobile a horrendous experience.

Visited https://www.vogonsdrivers.com/ lately?

All the retro PC drivers, no BS.

- Drivers for sound cards, video cards, storage, networking, game controllers, and more!

- Also in SSL-free, HTML 2.0 flavour for your ancient browsers: http://www.vogonsdrivers.com/lofi/

- Preservation-minded? Grab a snapshot! https://www.vogonsdrivers.com/snapshot.php

Tell your friends! :)

@BurbSecWest shine those crocs and press those cargo shorts

Wired - J.D. Vance's public Venmo account gives "an unfiltered glimpse into his extensive network of connections with establishment GOP heavyweights, wealthy financiers, technology executives, the prestige press, and fellow graduates of Yale Law School—precisely the elites he rails against." https://www.wired.com/story/jd-vance-venmo/