F30

In the past, things like this used to be done for signing certificate rollovers.

"CCC researchers had live access to 2nd factor SMS of more than 200 affected companies - served conveniently by IdentifyMobile who logged this sensitive data online without access control."

Not sure about the exact numbers, but your sentiment is basically accurate.

This is an article about the Northvolt news by a German journalist specialized on battery technology (in German): https://www.golem.de/news/akkutechnik-northvolt-und-altris-e...

He says that 160 Wh/kg is in the ballpark of LFP batteries from five years ago. It is, however, about the same as the sodium batteries announced by CATL in 2021.

In this particular case I read the statement as a dig at maps.me (the app they forked from). On iOS, maps.me would always continue accessing my location in the background unless force-quit, even if nothing was actually happening in the background. I might be wrong of course, the statement could have a different background and maps.me's behavior could be an honest bug.

There was a nice explanation here: https://twitter.com/jessiechar/status/1634361684960870400

Ohai, who should deploy what via Constellation? :)

Never heard of Robinlook in southern Germany. I would have said the other large chain besides Fielmann is Apollo (known as Pearle in another European countries).

They’re still one of the major suppliers of car manufacturers for navigation software embedded in infotainment systems.

Masks primary role is to ensure you don't spread COVID, not that you don't contract it.

Not true for FFP2s, N95s, and the likes. Which are more common in Germany than in most other places.

Currently, not really for most events. Big concerts, trade shows, sports games, etc. are happening without any restrictions.

Moving into winter, the general situation can change and many people are expecting more strict regulations.

And then there’s the question of community and personal assessments. C3 is an event run by a community that tends to be note cautious with respect to risks. And, as the announcement says, "[w]hat might be possible would not be a Congress".

37C3 is its 37th edition, which is now going to take place in a later year.

How many (online) meetings do you (and the others) typically have? How do you manage the resulting conflicts around quietness, background noise, or even confidentiality of meeting contents?

While I like the idea of shared co-working, the reality is that my current job works best in a room on my own. And it doesn't even involve more than 10 % meetings plus some ad-hoc calls with coworkers.

Leaving aside variants, the end game is for the virus to become endemic and everybody to encounter it every few months or years.

But you cannot do that while the non-immune part of the population is large enough to overwhelm the healthcare system if they get infected rapidly. Hence the focus on getting as many people vaccinated as possible, and keeping more or less non-pharmaceutical interventions in place.

Over the last months, removing non-pharmaceutical interventions has worked relatively well for some Western societies like Denmark (high vaccination rate) or the UK (lower vaccination rate + many previously infected), but not so well for others like Germany.

Variants change the game, but don't completely reset us to square one: Vaccines still provide some protection, but factors like higher transmissibility may work against that. mRNA vaccines can be adjusted relatively quickly.

We're seeing some congruence in the mutations acquired by different variants and most experts I listen to don't expect the virus to keep mutating forever. There is a limited number of options and population immunity will only become more broad.

On the other hand, the variants seen so far have surprised us quite a bit. Given that, it remains difficult to map out a clear path on the scope of years.

Other parts of the immune system, specifically T-cell response. The simplified bottom line is that antibodies provide a quick response that also prevents many cases of mild disease. T-cell immunity lasts longer, appears more universal against variants and should still work relatively well against severe cases.

It's a matter of antibody levels. Antibody binding is worse for Omicron, so you need more of them. Booster shots provide you with such increased antibody levels.

Are they still gonna be high enough after a few months? Good question. Afaict, nobody knows yet.

(And this of course leaves aside the whole matter of T-cell immunity still providing protection against severe disease.)

It seems that (at least the new) ITA Matrix Search can do that as well: Once you select an airport (or city) as origin or destination, it gets added to a list of possible locations.

Being used to Kayak‘s comma syntax, I did not find this intuitive at first. But in fact, it is pretty convenient and powerful.

You could do that I suppose, but at the end of the day it means you'll end up with 4 different certificate chains. In TLS, typically only one chain gets delivered. Anything else would be bloat and probably not well-supported by clients.

Laws maybe, though these are set at the EU level (and one might argue about the greatness of GDPR).

Still, the rest of the EU (or at least Germany) is quite unhappy with the enforcement of these laws in Ireland. It is absurd that the Irish Data Protection Commissioner is supposed to control the privacy of most larger tech corporations for the whole EU. A few years ago, they only had 22 employees and their only office was literally co-located with a supermarket in the suburbs [1]. They got a second office since then and apparently are now at around 100 employees [2], but that is still quite small if you have to control giants like Google, Facebook and more.

So, from the outside it looks like Ireland's "strange relationships" also include privacy matters.

[1] https://www.gutjahr.biz/2012/07/facebook-eu-datenschutz/ [2] https://www.dataprotection.ie/en/news-media/press-releases/d...

Panic's experiences on iOS have been somewhat unsatisfying: https://panic.com/blog/the-future-of-transmit-ios/

It seems that (at least up to January 2018) the market for (relatively expensive) pro apps on iPad is just too small.

It is certainly doable, but I doubt that most people have IaC which is complete, reproducible and tested enough. And the data migration from the breached host still means some risk.

I am highly skeptical when people taking about "rebuilding [the whole] infrastructure" in a few hours. Even more so when restoring all data from breached systems and before a thorough incident analysis. Show me the org which can just pull that off.

The (presumed) attacker opened a bunch of issues in Matrix' GitHub issue tracker, explaining the security issues leading to this compromise: https://github.com/matrix-org/matrix.org/issues/created_by/m...

TL;DR: A collection of inadvertences and suboptimal practices, some (like having GPG signing keys on production systems) more worrying than others. Something that could probably have happened to most orgs without dedicated security resources.

Not under anti-trust law (German "Kartellrecht"), where market concentration and competition are primary factors.

Yes, presumably to run the build as a user which is as unprivileged as possible. Which is a reasonable idea, though it might seem paranoid in today's `curl | sudo sh` world.

The actual calculator in action, for a developer role: https://about.gitlab.com/roles/engineering/developer/

I have some trouble following their rent index by region approach, described in some more detail here: https://about.gitlab.com/handbook/people-operations/global-c...

For example for Germany, the calculator still only list four major cities and an "Everywhere else" option, which has an extremely low index. I also couldn't find the raw results of their region analysis.

Maybe, but then the library would have to support those.

This isn't as much about the concrete technology as it is about the willingness to implement any host-key checking.

MITM attacks are designed to not be detectable, so the solution is to have tooling which prohibits them – exactly what is lacking in this case.

For web, using TLS (SSL) is a good start. This could be improved further by using HSTS, HPKP, DANE etc. (not sure if A+ already implies them anyway).

For SSH, you need to have an out-of-band way to get the host keys or use something like an SSH CA.

So, can anybody elaborate on the history of and relationship between StatusNet, identi.ca, GNU social and pump.io? It seems like this fragmentation is another obstacle for success, besides the obvious issue of gaining traction.

And then there's tent.io, which appears to be completely unrelated but have similar goals. Is there anyone with insights on usage numbers, development activity etc. of the different projects? In other words: What's the best bet for federated, open source microblogging?

It is out of question that you can do it wrong without typing A-E-S: Crypto is hard, and you can always fuck up in an infinite amount of ways.

That being said, do you have any reference on MCRYPT_RIJNDAEL_256 being an actual problem? The linked OpenCart issues deal with ECB mode and missing authentication, rather than the block size.

For more information on the multi-processing feature, check out this blog post: http://www.ghacks.net/2014/07/12/mozilla-plans-release-elect...

Some general information regarding the features of coming-up versions can be found here: https://wiki.mozilla.org/Features/Release_Tracking