Bonum Certa Men Certa

Leftover Links 05/08/2023: Rust Holes and More Layoffs



  • Leftovers

    • Education

      • Parents accuse Bellevue School District of favoring rich kids in school closures

        When the Bellevue School District (BSD) opened its newest, state of the art elementary school on pristine wetlands and powered by geothermal energy in 2018, at a cost of $49 million, its principal did a welcoming dance in a video to show off the school.

        As she led the camera through the Microsoft Showcase school, showing classrooms that could be converted to learning pods for smaller or larger groups, she also pointed to teachers in a large group, waiting to teach kids.

        Today, however, issues of equity are dampening the shining reputation of the school—and raising questions about the district’s commitment to fairness.

    • Hardware

    • Proprietary/Artificial Intelligence (AI)

      • Bruce Schneier ☛ Political Milestones for AI

        ChatGPT was released just nine months ago, and we are still learning how it will affect our daily lives, our careers, and even our systems of self-governance.

        But when it comes to how AI may threaten our democracy, much of the public conversation lacks imagination. People talk about the danger of campaigns that attack opponents with fake images (or fake audio or video) because we already have decades of experience dealing with doctored images.

    • Security

      • InfoSecurity Magazine ☛ Threat Actors Use AWS SSM Agent as a Remote Access Trojan

        Threat actors have been observed using Amazon Web Services ( AWS ) 's System Manager (SSM) agent as a Remote Access Trojan (RAT) on Linux and Windows machines.

      • Rust Blog ☛ The Rust Programming Language Blog: Security advisory for Cargo (CVE-2023-38497)

        This is a cross-post of the official security advisory. The official advisory contains a signed version with our PGP key, as well.

        The Rust Security Response WG was notified that Cargo did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local user, another local user could exploit this to change the source code compiled and executed by the current user.

      • SUSE's Corporate Blog ☛ SUSE and IBM: Enhancing Data Security (a Technical Reference Documentation Getting Started guide) [Ed: "confidential computing" is a sham that encourages companies and governments to outsource their operations and data based on false premises of confidentiality]

        The Essence of Confidential Computing At its core, confidential computing addresses the vital need of safeguarding data while it is in use. SUSE and IBM work together to deliver advanced technical capabilities, like confidential computing. IBM Z€® and LinuxONE systems provide key hardware capabilities for the trusted execution environment.

      • Bleeping Computer ☛ Hackers can abuse Microsoft Office executables to download malware

        The list of LOLBAS files – legitimate binaries and scripts present in Windows that can be abused for malicious purposes...

      • SANS ☛ From small LNK to large malicious BAT file with zero VT score, (Thu, Aug 3rd)

        Last week, my spam trap caught an e-mail with LNK attachment, which turned out to be quite interesting.

      • IT Wire ☛ Tenable chief says no way to verify Microsoft claims about fixing Azure flaw

        Microsoft claims it has completely fixed a critical security issue in its Azure cloud platform, found in March by researchers from security firm Tenable, who then told Microsoft about it. Tenable chief executive and chairman Amit Yoran had claimed in a blog post on Wednesday that it took more than 90 days for Microsoft to effect a partial fix.

      • SANS ☛ Are Leaked Credentials Dumps Used by Attackers, (Fri, Aug 4th)

        This is a classic problem: One day, you create an account on a website (ex: an online shop), and later, this website is compromised. All credentials are collected and shared by the attacker. To reduce this risk, a best practice is to avoid password re-use (as well as to not use your corporate email address for non-business-related stuff).

      • Security Week ☛ Exploitation of Ivanti EPMM Flaw Picking Up as New Vulnerability Is Disclosed

        Exploitation of the Ivanti EPMM flaw CVE-2023-35078 is picking up as a new critical vulnerability tracked as CVE-2023-35082 is disclosed.

      • Security Week ☛ Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities

        Five Eyes government agencies have published a list of the software vulnerabilities that were most frequently exploited in malicious attacks in 2022.

      • Security Week ☛ 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis

        CISA disclosed 670 ICS vulnerabilities in the first half of 2023, but roughly one-third have no patches or mitigations from the vendor.

      • LWN ☛ Security updates for Friday

        Security updates have been issued by CentOS (bind and kernel), Debian (cjose, firefox-esr, ntpsec, and python-django), Fedora (chromium, firefox, librsvg2, and webkitgtk), Red Hat (firefox), Scientific Linux (firefox and openssh), SUSE (go1.20, ImageMagick, javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags, kernel, openssl-1_1, pipewire, python-pip, and xtrans), and Ubuntu (cargo, rust-cargo, cpio, poppler, and xmltooling).

      • USDOJ ☛ Nigerian National Pleads Guilty to $1.25 Million Business Email Compromise Scam Impacting U.S. Company

        Onwuchekwa Nnanna Kalu, 39, a Nigerian National from Rivers State, Nigeria, pleaded guilty today to stealing $1.25 million from an investment firm located in Boston, through a business email compromise (“BEC”) scam. The plea was announced by U.S. Attorney Matthew M. Graves and Acting Special Agent in Charge David Geist, of the FBI Washington Field Office's Criminal and Cyber Division.

        Nnanna Kalu pleaded guilty in the District of Columbia to one count of wire fraud. U.S. District Court Judge Randolph D. Moss scheduled a sentencing hearing for November 29, 2023. Kalu was arrested in 2022 and has been detained by the Court as a risk of flight.

      • Gray Media Group ☛ Massive data breach could impact many who attended or worked for public schools in Colorado

        A news release issued by the Colorado Department of Higher Education is notifying the public of a “data incident.”

        KKTV 11 News is working to learn more about the situation, but the release reads as follows:

        The Colorado Department of Higher Education (“CDHE”) is providing notice of a cybersecurity incident that may involve the personal information of certain individuals. CDHE is providing information about the measures it has taken in response to the incident, and steps impacted individuals may take to protect themselves against possible misuse of information.

    • Defence/Aggression

      • JURIST ☛ Singapore executes second prisoner in one week despite international outcry

        Singaporean authorities executed Mohamed Shalleh Bin Abdul Latiff, a 39-year-old former delivery driver, Thursday for trafficking 54.04 grams of diamorphine, a controlled drug, which is four times the amount required to trigger the mandatory death penalty under Singapore’s Misuse of Drugs Act. Shalleh is the second person executed by the country in the last week.

      • Federal News Network ☛ US military may put armed troops on commercial ships in Strait of Hormuz to stop Iran seizures

        The U.S. military is considering putting armed personnel on commercial ships traveling through the Strait of Hormuz, in what would be an unheard of action aimed at stopping Iran from seizing and harassing civilian vessels. That's what five American officials told The Associated Press on Thursday. If implemented, it would be an extraordinary step by the Pentagon as it grapples with a renewed effort by Iran to harass and seize ships traveling in the strait, through which 20% of all the world’s crude oil passes. Iran’s mission to the United Nations did not immediately respond to a request for comment from the AP about the U.S. proposal.

      • War in Ukraine

    • Environment

    • Finance

      • Axios ☛ HackerOne lays off 12% of workforce

        Popular bug bounty program HackerOne is laying off 12% of its workforce, CEO MÃ¥rten Mickos told employees earlier this week.

      • Daniel Pocock ☛ Daniel Pocock: Conflicts of Interest: Extinction Rebellion & Rishi Sunak, Greenpeace & Donald Trump

        There have been many rumors about conflicts of interest in the Debian Google Summer of Code and Outreachy internships. The only case where evidence has appeared is the former leader himself, the very person who started rumors about other mentors and I included.

        Yet conflicts of interest can come in many forms. One of the most bizarre cases I've seen was a pensions industry meeting in the UK.

        Representatives of pension administrators and government officials gathered in the town of Swindon. Rishi Sunak, who has recently become Prime Minister, attended the meeting in his former role as local authorities minister.

      • Axios ☛ The lesson for the Fed in "early hiker" monetary policy

        One reason to be optimistic that U.S. inflation can fall without a recession: Many smaller nations that did move earlier than the Federal Reserve to hike interest rates have done exactly that.

        Why it matters: The unusual dynamics of a post-pandemic global economy appear to be making a so-called "immaculate disinflation" — one with minimal pain — more plausible than it once seemed based on the historical record.


        What they're saying: "There are other economies we can also look to to get some sense of what's likely to happen in the U.S. — other economies that were actually a lot faster in tightening monetary policy," Jan Hatzius, chief economist at Goldman Sachs, said on a call with reporters last month.

      • Bloomberg ☛ Tech Giants Slash Marketing Budgets, Bruising Major Ad Firms

        After massive layoffs earlier this year, technology giants have found one more item to slash: marketing budgets.

        Several large advertising companies reported a sharp cutback in spending from US tech and telecom companies, which had recently become some of the largest marketers in the world.

      • Telus slashing 6,000 jobs in order to remain competitive

        According to news outlets, including CBC News, the company plans to cut approximately 6,000 jobs. 4,000 roles will be eliminated at Telus’ main business, with the remaining 2,000 affecting Telus International.

        President and CEO Darren Entwistle claimed that the reduction is being made with “a very heavy heart” and was prompted by the “evolving regulatory, competitive and macroeconomic environment.”

        “Against the backdrop of rapid transformation in our industry and the ways in which our customers want to engage with us, today we are announcing a significant investment in an extensive efficiency and effectiveness initiative across Telus,” Entwistle said in a news release obtained by CBC News.

      • Study after study shows that working from home leads to more efficiency and higher quality work — so why do companies want people back in the office? Here are 3 possible reasons

        Employees overwhelmingly love the option to work from home. More than nine in 10 prefer it exclusively or as a hybrid arrangement, a Gallup study shows.

        Employers, on the other hand, don't appear fully on board, as many are calling employees back into the office.

        In some ways, employers' resistance to remote work is a mystery. After all, eliminating commutes gives the average U.S. employee almost one extra hour to work each day, according to research from the University of Chicago’s Becker Friedman Institute. Plus, staff forced to work in-office are more likely to experience burnout and low engagement, per Gallup.

    • AstroTurf/Lobbying/Politics

    • Censorship/Free Speech

    • Freedom of Information / Freedom of the Press

    • Monopolies



Recent Techrights' Posts

NVIDIA's Crisis Has Only Just began
NVIDIA Corp (NASDAQ: NVDA) is set to open in the red tomorrow
IBM Has Destroyed Red Hat and Hashicorp, Insiders Say It's the Usual From IBM:
Bluewashing is a death wave
Techrights Was Right About Slop Destroying Development Communities and Projects
Slop does not improve your project. It kills the community. Without community, what is left? A 'botfarm'?
Intercontinental Brigading - Part XXXXXI - Harassment Law and "Things Are Unfairly Asymmetric" (Exploring the Boundaries of Death Threats and Various Threats From America)
the sort of "technofascism" that our country must learn to confront rather than facilitate
 
When Short is Way Too Short (Superficiality, Lowering of Entropy)
Demonstrating how truly worthless social control media was all along
Techrights Hates Slop Bots
They benefit nobody
The Economy is Fine! (If Only for China!)
The future is slop! If not, then it's China's fault! It's "sabotaging" the "Western hey hi" in this "hey hi arms race!"
"IT" as "Musical Chairs" (on the Deck of The Titanic)
Each generation will get worse for "IT"
Salesforce in Trouble, Debt Nearly Quadrupled in 9 Months
Salesforce is perishing in a deep pool of debt
"Microsoft is Next IBM"
The words of a Microsoft insider and responses to that
IRC is Decentralised
Bye, Microsoft Teams/Skype
Links 15/11/2026: Murdoch's "WSJ Buries Stephen Miller's Racism" and "America Has Entered a New Age of Propaganda"
Links for the day
In the UK, GNU/Linux Usage Soared During Microsoft Downtime
since the massive outage GNU/Linux usage soared to over 10%
Google Slop About Richard Stallman Shows Stallman Was Right, LLMs are BS Generators
Google slop is the "new Google"
Spouse of Garrett Needs to Get "Several Firearms" to Feel Safe Amid Divorce (Garrett Has a "Girlfriend" Now)
Seems like Isis and my wife have a lot in common when it comes to Garrett
Vista 11 is Small
Can Microsoft survive the fall of Windows?
Six Richard Stallman and FSF Talks This Month (FSF Staff at Ohio State University)
Dr. Stallman's talks in Ecuador are well timed because of the collapse of the LLMs (slop) pyramid scheme
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, November 14, 2026
IRC logs for Saturday, November 14, 2026
Gemini Links 15/11/2026: "The Bastards Can Never Win" and "The Last Low-Tech Generation"
Links for the day
Links 14/11/2026: Wuhan Corruption and "Aid Isn’t Reaching Ebola’s Epicenter"
Links for the day
Rahul Kumar Has Turned tecadmin.net Into a Slopfarm That Promotes Slop and Microsoft (as Usual)
Slop promoting slop - a death knell of once-active "Linux" sites
Large-Scale Layoffs - Not Just PIPs - at Red Hat and IBM This Month
Mainstream media has quit covering mass layoffs
Links 14/11/2026: "The Claude Delusion" and "The Microsoft Outage is a Warning for the World"
Links for the day
Ethics in Perspective, Free Software and Morality
top clients of Jeffrey Epstein are one happy family
Richard Stallman (RMS) at Universidad Central del Ecuador (Guayaquil), Cuenca, Campus Sur Universidad Politecnica Salesiana (Quito), and Ohio State University
Long live the message and mission of RMS
They Paid Workers in 'Shares' (That Lost Almost Half Their Value in One Month)
Welcome back 1999 or 2007
The Register MS Made Millions of Pounds by Participating in the Slop Hype Campaign (It's Still Doing It), Now It Admits That It's Just a Bubble
the slop frenzy played a role in the Microsoft meltdown
Intercontinental Brigading - Part XXXXX - Pyramid Schemes (Planned Plunder) and Canceled/Botched Surgeries Aren't "Funny", They Cause Serious Harm and Distress
We were right about Microsoft
Links 14/11/2026: "OpenAI Is Sustaining Enormous Losses" and Slop "Loses the Popular Vote"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, November 13, 2026
IRC logs for Friday, November 13, 2026
Gemini Links 14/11/2026: Code of Conduct, Back to Gemini, and Gemlog to Inbox
Links for the day
Slop Promotion, Including Paid-for Slop Promotion for So-called 'Linux' Foundation (Its Clients Are Slop Companies)
We've noticed a lot of this lately in "It's FOSS" and to a lesser degree in "FOSS Force"
Gemini Links 13/11/2026: Productivity Metrics and Antenna Outage
Links for the day
The Real Issue With The Register MS is Not the Politics of Some Staff's "Tweets", It's That The Register MS Publishes Fake Articles for Sponsors (50,000 Pounds Minimum)
AWS and Google each pay millions for fake articles which beget journalistic bias too (they literally pay the salaries of the 'reporters')
Microsoft Total Cost of Ownership (TCO): We Need Accountability Because Many People Die and It's Because of Microsoft Diehards or People Bribed by Microsoft to Deploy Microsoft Where Lives Are at Risk
They're trying to save face right now
What the Media Misses: It's Not an NVIDIA Issue, Super Micro Computer Inc Also Fell From $45 to $26 in the Period NVIDIA Lost 33% of Its Faked 'Value', NVIDIA is Collapsing Like Intel
History goes in circles
It's Not About China or Sex, It's About Corruption at NVIDIA and a Pyramid Scheme Perpetrated Under the Guise of "Hey Hi Revolution" (That Wasn't, It's Manufactured and Hyped by Bribes, Subsidised by Multi-Trillion-Dollar Loans, People's Pension Funds and More)
What's at stake here is a lot bigger than the "Ponzi hub" of Jensen Huang
No, You're Not a "Most Valuable Company" When Everything is Down for Half a Day in the Entire Planet
Still down, still no explanation (maybe they too aren't sure)
Waste of Money: Giving More Money to Toothless Regulators That Don't Even Examine Evidence
Shame in SRA
"Techrights Statement on Phoronix" Still Valid Five Years Later
Our position as stated in early 2022 has not changed
Vista 11's 'Growth' Has Stalled, It's Measured at Only 17.9% in the US This Year
That helps put in perspective Microsoft's attempt to discard almost 30% of its remaining workforce
"NVIDIA is Enron" (Subsidising the Pyramid Scheme That It Profited From), Microsoft is Next to be Down for the Count
Microsoft increasingly looks like the "next NVIDIA"
Richard Stallman Travels to South America to Give Talks About Free Software in Spanish, FSF Raises Money
The FSF is raising money (goal is $400,000) and the FSF has just mentioned the upcoming talks by the FSF's founder
United States Adding ~300 Billion in Government Debt Per Month, Wall Street Shaves Off Trillions in 'Value' in Less Than One Week
cushioning "assets" by helping them fake "value"
Microsoft: Pay Us for the Stuff That's Offline and We Cannot Fix
Learn to take control of the technology that you rely on
Links 13/11/2026: "Copyright-Strike-for-Hire" and "Stevie Wonder Photo Lawsuit"
Links for the day
The Slop Bubble (or Pyramid Scheme) Relied on Trust and Patience (Being Patient as Losses Grow and Debt Explodes, Trusting the Roadmap of Cheaters and Frauds)
Remember that it all began with trust
Anthropic's IPO Depends on $895.4 Billion in Debt (Money It Doesn't Have, It Loses Over 100 Billion Dollars Per Reporting Period), NVIDIA Has Just Lost Almost 2 Trillion Dollars In Value and Its Debt Trebled in Three Months
This coming week will be very, very entertaining for slop critics/sceptics to watch
At Microsoft, "Buyouts" or "Global Voluntary Separation Agreement" (GVSA) Not Much Different From Layoffs (Severance Shockingly Low)
From what we are able to gather, many people are leaving Microsoft 'voluntarily'
Is Microsoft the Next Fake-Valued Corporation to Lose 35% in "Market Value"? Is Slop Bringing Microsoft Down?
Will NDAs prevent people talking or journalists finding out the true cause?
Lorenzo Stoakes (ARM) the Latest of Many to Quit Linux Development Over Linus Torvalds' Obsession With Slop (Linus Wants to Work With Bots, Not Humans Who Understand Whatever Code They Write)
Linus caught the 'brain virus'
Silent Layoffs at IBM (and Red Hat) Continue in November 2026
IBM's CEO is "a Palliative Care Doctor Who Slides [IBM] Gently Into the Night"
Microsoft Asks 60,000 Workers to Leave, Some Leave, Services Go Down
Microsoft laid off about 40,000-50,000 people in past years
Gemini Links 13/11/2026: Roku Exits the Smart Home Market and Poor Reporting/Journalism Regarding Slop Plagiarism
Links for the day
Links 13/11/2026: "Apple Support Community Forums to Permanently Close" and "The Slop Market is Getting Nervous"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 12, 2026
IRC logs for Thursday, November 12, 2026