IRC: #techbytes @ Techrights IRC Network: Saturday, October 01, 2022

schestowitz

<h5><a href="https://theevilskeleton.gitlab.io/2022/09/30/the-fedora-project-remains-community-driven.html">The Fedora Project Remains Community Driven</a></h5>

-TechBytesBot/#techbytes-theevilskeleton.gitlab.io | The Fedora Project Remains Community Driven | TheEvilSkeleton

schestowitz

schestowitz

<p>Recently, the Fedora Project removed all patented codecs from their Mesa builds, without the rest of the community’s input. This decision was heavily criticized from the community. For that decision, some even asked the Fedora Project to remove “community driven” from its official description. I’d like to spend some time to explain why, in my opinion, this decision was completely justified, and how

schestowitz

the Fedora Project remains community driven.</p>

schestowitz

</blockquote>

schestowitz

</li>

schestowitz

<li>

schestowitz

<h5><a href="https://blog.arduino.cc/2022/09/29/digitize-your-collection-of-35mm-slides/">Digitize your collection of 35mm slides</a></h5>

-TechBytesBot/#techbytes-blog.arduino.cc | Digitize your collection of 35mm slides | Arduino Blog

schestowitz

schestowitz

<p>As great as 35mm slides were, they don’t have much of a place in our modern world. Not many people have working slide projectors these days and most would prefer digital photos that they can share on social media, store on their computer, or display on a TV. There are 35mm slide digitizing services, but those can cost more than 50 cents (USD) per slide. That becomes very expensive if your slide collection

schestowitz

is large. If you have a slide projector, even if its projection bulb is burnt out, this tutorial will help you digitize the slides by snapping photos with a modern DSLR camera.</p>

schestowitz

</blockquote>

schestowitz

</li>

schestowitz

<li>

schestowitz

<h5><a href="https://itwire.com/business-it-news/security/microsoft-investigating-two-zero-days-affecting-exchange-server.html">Microsoft investigating two zero-days affecting Exchange Server</a></h5>

-TechBytesBot/#techbytes-iTWire - Microsoft investigating two zero-days affecting Exchange Server

schestowitz

schestowitz

<p>A blog post issued by the Microsoft Security Response Centre on Thursday said the first, identified as CVE-2022-41040, was a Server-Side Request Forgery vulnerability</p>

schestowitz

<p>The second, identified as CVE-2022-41082, allowed remote code execution when PowerShell was accessible to the attacker.</p>

schestowitz

</blockquote>

schestowitz

</li>

schestowitz

<li>

schestowitz

<h5><a href="https://www.schneier.com/blog/archives/2022/09/security-vulnerabilities-in-covert-cia-websites.html">Security Vulnerabilities in Covert CIA Websites</a></h5>

-TechBytesBot/#techbytes-Security Vulnerabilities in Covert CIA Websites - Schneier on Security

schestowitz

schestowitz

<p>Back in 2018, we learned that covert system of websites that the CIA used for communications was compromised by—at least—China and Iran, and that the blunder caused a bunch of arrests, imprisonments, and executions. We’re now learning that the CIA is still “using an irresponsibly secured system for asset communication.”</p>

schestowitz

</blockquote>

schestowitz

</li>

schestowitz

<li>

schestowitz

<h5><a href="https://citizenlab.ca/2022/09/statement-on-the-fatal-flaws-found-in-a-defunct-cia-covert-communications-system/">Statement on the fatal flaws found in a defunct CIA covert communications system</a></h5>

-TechBytesBot/#techbytes-citizenlab.ca | Statement on the fatal flaws found in a defunct CIA covert communications system - The Citizen Lab

schestowitz

schestowitz

<p>In 2022, we learned from Reuters journalist Joel Schectman that a CIA asset who was captured in Iran, and subsequently served seven years in prison, communicated with his agency handlers via a hidden communications app on a website iraniangoals[.]com. Reuters reports that Iran’s compromise of the network may have led to the asset’s capture. We investigated the website in an effort to understand the

schestowitz

vulnerabilities leveraged by Iran and China, and to learn whether the United States had been using an irresponsibly secured system for asset communication. Our investigation, led by Citizen Lab senior researcher Bill Marczak, confirmed the reports of a fatally insecure network.</p>

schestowitz

<p>We shared our findings with Schectman, whose Reuters story can be found here: America’s Throwaway Spies: How the CIA failed Iranian informants in its secret war with Tehran.</p>

schestowitz

</blockquote>

schestowitz

</li>

scientes

who cares?

Oct 01 08:28

scientes

ARM processors now have chinese SM2 and SM3 encryption algorithm acceleration

scientes

this is a multi-polar world we live in

scientes

although those are not used widely outside china

scientes

although SM9 looks interesting

scientes

as it is ID-based