<p>Lex Fridmans latest podcast features a nearly four hour long conversation with Edward Frenkel, under the title <a href= "https://www.youtube.com/watch?v=Osh0-J3T2nY">Reality is a Paradox Mathematics, Physics, Truth & Love. Normally Im fairly allergic to hearing mathematicians or physicists publicly sharing their wisdom about the larger human experience (since they tend to have less of it than the average person), and Im pretty sure Ive never before listened to a podcast/interview longer than an hour or so. But in this case I listened to and enjoyed the entire thing. Besides sharing Frenkels deep interests in the relation of representation theory and quantum mechanics, and views on the unity of mathematics (and physics), I envy his positive and thoughtful outlook on life and his openness to a range of human experience. The interview left me with a lot to think about and I recommend it highly.</p>

By Waqas

DDoS attacks have surged by 47% in Q1 2023, according to a StormWall report.

This is a post from HackRead.com Read the original post: US, India and China Most Targeted in DDoS Attacks, StormWall Q1 2023 Report

The Connectivity Standards Alliance released Zigbee PRO 2023 of the Zigbee protocol stack. The revision brings several enhancements and new features to the technology, allowing mesh networks to have a universal language that enables smart objects to work together. Whats new? Zigbee PRO 2023 expands on secure-by-design architecture by adding a number of security enhancements to address changing market needs while simplifying the user experience and extending supported bands beyond 2.4 GHz. The revision also More

The post Zigbee PRO 2023 introduces new security mechanisms, feature enhancements appeared first on Help Net Security.

TrueNAS SCALE is a Debian-based operating system developed by iXsystems for providing network attached storage solutions. The includes some enhancements to administration and authentication. The release notes state: "22.12.2 includes many new features and improved functionality that span....

In addition to releasing the GeForce RTX 4070 graphics card today (unfortunately, no launch day Linux review, still waiting on hardware...), NVIDIA has released as open-source the RTX Remix software for helping to add path tracing support to classic games...

Travellers are being told to be wary when plugging their smartphones and laptops into USB chargers. But has anyone ever actually been juice-jacked in the real world?

What if instead of defining a mesh as a series of vertices and edges in a 3D space, you could describe it as a single function? The easiest function would return the signed distance to the closest point (negative meaning you were inside the object). Thats precisely what a signed distance function (SDF) is. A signed distance field (also SDF) is just a voxel grid where the SDF is sampled at each point on the grid. First, well discuss SDFs in 2D and then jump to 3D.

SDFs in 2D

A signed distance function in 2D is more straightforward to reason about so well cover it first. Additionally, it is helpful for font rendering in specific scenarios. [Vassilis] of [Render Diagrams] has a beautiful demo on two-dimensional SDFs that covers the basics. The naive technique for rendering is to create a grid and calculate the distance at each point in the grid. If the distance is greater than the size of the grid cell, the pixel i...

Intel Foundry Services (IFS) has racked up a big win today with Arm over enabling chip designers to make use of Intel's upcoming 18A process for low-power Arm SoCs...

Contents

• GNU/Linux
  • Instructionals/Technical
  • Games
• Distributions and Operating Systems
  • BSD
  • Devices/Embedded
  • Open Hardware/Modding
  • Mobile Systems/Mobile Applications
• Free, Libre, and Open Source Software
  • Programming/Development
    • Shell/Bash/Zsh/Ksh
  • Standards/Consortia
• Leftovers
  • Education
  • Hardware
  • Health/Nutrition/Agriculture
  • Proprietary/Finance
  • Security
    • Privacy/Surveillance
    • Confidentiality
  • Defence/Aggression
  • Transparency/Investigative Reporting
  • Environment
    • Energy/Transportation
    • Wildlife/Nature
    • Overpopulation
  • Oligarchy
  • AstroTurf/Lobbying/Politics
  • Censorship/Free Speech
  • Freedom of Information / Freedom of the Press
  • Civil Rights/Policing
  • ...

By Deeba Ahmed

A Kaspersky study reveals security threats to the Google Play app store and how they have been exposing Android users to malware threats.

This is a post from HackRead.com Read the original post: Android App Trojans Sold on Dark Web for $25-$20,000

Security updates have been issued by Fedora (chromium, ghostscript, glusterfs, netatalk, php-Smarty, and skopeo), Mageia (ghostscript, imgagmagick, ipmitool, openssl, sudo, thunderbird, tigervnc/x11-server, and vim), Oracle (curl, haproxy, and postgresql), Red Hat (curl, haproxy, httpd:2.4, kernel, kernel-rt, kpatch-patch, and postgresql), Slackware (mozilla), SUSE (firefox), and Ubuntu (dotnet6, dotnet7, firefox, json-smart, linux-gcp, linux-intel-iotg, and sudo).

In 1918, the American chemist Irving Langmuir published a paper examining the behavior of gas molecules sticking to a solid surface. Guided by the results of careful experiments, as well as his theory that solids offer discrete sites for the gas molecules to fill, he worked out a series of equations that describe how much gas will stick, given the pressure.

Now, about a hundred years later, an AI scientist developed by researchers at IBM Research, Samsung AI, and the University of Maryland, Baltimore County (UMBC) has reproduced a key part of Langmuirs Nobel Prize-winning work. The system artificial intelligence (AI) functioning as a scientistalso rediscovered Keplers third law of planetary motion, which can calculate the time it takes one space object to orbit another given the distance separating them, and produced a good approximation of Einsteins relativistic time-dilation law, which shows that time slows down for fast-moving objects.

A paper describing the results is published in Nature Communications on April 12.

Playlist: https://www.youtube.com/playlist?list=PLnK6MrIqGXsJfcBdppW3CKJ858zR8P4eP
Download PowerPoint: https://github.com/hywong2/Intro_to_Quantum_Computing.
Book (Free with institution subscription): https://link.springer.com/book/10.1007/978-3-030-98339-0
Book: https://www.amazon.com/Introduction-Quantum-Computing-Layperatfound-20

Can quantum computing replace classical computing? State, Superposition, Measurement, Entanglement, Qubit Implementation, No-cloning Theorem, Error Correction, Caveats.

Elon Musk has been warning of the dangers of artificial intelligence for as long he can remember and now, it looks like his worst fears might be coming true

Nearly 200 years since its discovery, industry rarely uses the carboncarbon bond-forming Kolbe reaction but now US researchers have shown it can sustainably make valuable substances.

Phil Barans team at Scripps Research Institute in La Jolla has done away with high voltages and platinum electrodes best established in the Kolbe reaction. In doing so, the researchers have made it much more versatile. The most important feature is the ability to take waste or similarly priced products convert them into extremely high value materials, Baran tells Chemistry World.

upstart writes:

What Flight 50 Means for the Ingenuity Mars Helicopter:

JPL's Ingenuity helicopter is preparing for the 50th flight of its 5-flight mission to Mars. Flight 49, which took place last weekend, was its fastest and highest yetthe little helicopter flew 282 meters at an altitude of 16 meters, reaching a top speed of 6.50 meters per second. Not a bad performance for a tech demo that was supposed to be terminated two years ago.

From here, things are only going to get more difficult for Ingenuity. As the Perseverance rover continues its climb up Jezero crater's ancient river delta, Ingenuity is trying its best to scout ahead. But, the winding hills and valleys make it difficult for the helicopter to communicate with the rover, and through the rover, to its team back on Earth. And there isn't a lot of time or room to spare, because Ingenuity isn't allowed to fly too close to Perseverance, meaning that if the rover ever catches up to the helicopter, the helicopter may have to be left behind for the rover's own safety. This high-stakes race between the helicopter scout and the science rover will continue for kilometers.

For the Ingenuity team, this new mode of operation was both a challenge and an opportunity. This was nothing new for folks who have managed to keep this 30-day technology demo alive and healthy and productive for years, all from a couple hundred million kilometers away. IEEE Spectrum spoke with Ingenuity Team Lead Teddy Tzanetos at JPL last week about whether flying on Mars is ever routine, how they upgraded Ingenuity for its extended mission, and what the helicopter's success means for the future of airborne exploration and science on Mars.

Read more of this story at SoylentNews.

Set up a quick application observability solution that records metrics in real time and pipes them into a database for analysis.

Read More at Enable Sysadmin

The post Monitor and troubleshoot applications with Glances and InfluxDB appeared first on Linux.com.

Summary: The EPO is preparing to start its own (controlled) kangaroo court to help hide the effect of patent bubbles (mountains of legally-invalid monopolies)

The EUs unwillingness to do something about the EPO will imperil the EU itself (the EU and EPO are very much connected through the illegal Unified Patent Court)

Summary: Gender inequality, or the considerably lower probability of women progressing at Europes largest patent office, as explained by the EPOs elected staff representation only days ago

The Central Staff Committee at the EPO started talking about the empty words from Antnio Campinos regarding inclusion, equality etc. Campinos is basically a low-grade liar. He last brought that up just weeks ago in a pre-recorded speech.

Under the current career system, the Central Staff Committee says, the gender pay gap has widened after every reward exercise. Progress has been made to fix the huge under rewarding of colleagues on maternity leave, but there is still much work to do in other areas. In particular, three issues are highlighted, including the under-rewarding of double-steps and promotions to women, and the under-rewarding of colleagues working part-time.

The paper below is dated 5 days ago. Originally a PDF circulated among stuff, here it is as HTML:

Zentraler Personalausschuss
Central Staff Committee
Le Comit Central du Personnel

Munich, 07/04/2023
sc23040cp

Gender Pay Gap: at last a fair reward exercise in 2023?

Dear colleagues,

Under the current career system, the gender pay gap has widened after every reward exercise. Progress has been made to fix the huge under rewarding of colleagues on maternity leave, but there is still much work to do regarding other minority groups, such as part-time workers and women, as detailed below.

The Presidents Instructions on Rewards confirm the reality of this trend with his recommendation to managers that states as a proactive measure in order to ensure a fair distribution of rewards to all...

Posted by Matthew Vernon on Apr 12

Oxeye discovered a new vulnerability (CVE-2023-0620) in the HashiCorp Vault Project, an identity-based secrets and encryption management system that controls access to API encryption keys, passwords, and certificates. The vulnerability was an SQL injection vulnerability that potentially could lead to a Remote Code Execution (RCE). Oxeye reported this vulnerability to HashiCorp, and the team quickly patched it in versions 1.13.1, 1.12.5, and 1.11.9. of Vault. HashiCorp Vault HashiCorp Vault provides encryption services for modern, microservices-based More

The post HashiCorp Vault vulnerability could lead to RCE, patch today! (CVE-2023-0620) appeared first on Help Net Security.

Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, Southeast Asia, Europe, and the Middle East. According to findings from a group of researchers from the Citizen Lab, the spyware campaign was directed against journalists, political opposition figures, and an NGO worker in 2021.

Here's a hard question to answer: 'How many service accounts do you have in your environment?'. A harder one is: 'Do you know what these accounts are doing?'. And the hardest is probably: 'If any of your service account was compromised and used to access resources would you be able to detect and stop that in real-time?'.  Since most identity and security teams would provide a negative reply,

Researchers in Boston are on the verge of what they say is a major advancement in lung cancer screening: Artificial intelligence that can detect early signs of the disease years before doctors would find it on a CT scan.

The new AI tool, called Sybil, was developed by scientists at the Mass General Cancer Center and the Massachusetts Institute of Technology in Cambridge. In one study, it was shown to accurately predict whether a person will develop lung cancer in the next year 86% to 94% of the time.

The Centers for Disease Control and Prevention currently recommends that adults at risk for lung cancer get a low-dose CT scan to screen for the disease annually.

Scientists are still getting to grips with the ins and outs of strange materials known as time crystals; structures that buzz with movement for eternity. Now a new variety might help deepen our understanding of the perplexing state of matter.

Just as regular crystals are atoms and molecules that repeat over a volume of space, time crystals are collections of particles that tick-tock in patterns over a duration of time in ways that initially seem to defy science.

Theorized in 2012 before being observed in the lab for the first time just four years later, researchers have been busy tinkering with the structures to probe deeper foundations of particle physics and uncover potential applications.

If Mesa 23.1 couldn't get anymore exciting with RADV GPL support enabled by default, more RDNA3 optimizations, continued Zink optimizations, more Intel DG2/Alchemist enhancements, and a load of other features... Support for RadeonSI with the Rusticl Rust-written OpenCL driver has been merged!..

Weve all heard the incredible claims made about graphene and its many promising applications, but so far the wonder-material has been held back by the difficulty of producing it in large quantities. Although small-scale production was demonstrated many years ago using basic Scotch tape, producing grams or even kilograms of it in a scalable industrial process seemed like a pipedream until recently. As [Tech Ingredients] demonstrates in a new video, the technique of flash Joule heating of carbon may enable industrial graphene production.

The production of this flash graphene (FG) was first demonstrated by Duy X. Luong and colleagues in a 2020 paper in Nature, which describes a fairly straightforward process. In the [Tech Ingredients] demonstration it becomes obvious how easy graphene manufacturing is using this method, requiring nothing more t...

The mainline Linux 6.4 kernel is set to see a new touchscreen driver for supporting the Novatek NVT-ts, which is used by at least a once popular Intel Atom powered Android tablet from a decade prior...

3CX has released an interim report about Mandiants findings related to the compromise the company suffered last month, which resulted in a supply chain attack targeting cryptocurrency companies. They discovered that: The attackers infected targeted 3CX systems with TAXHAUL (aka TxRLoader) malware, which decrypts and executes shellcode containee in a file with a name and location aimed to make it to blend into standard Windows installations The executed shellcode is the COLDCAT downloader They also More

The post 3CX compromise: More details about the breach, new PWA app released appeared first on Help Net Security.

upstart writes:

Videos obtained by WIRED from public transit vehicles reveal self-driving cars causing delays and potential danger to buses, trains, and passengers:

[...] The 54 [Felton line], brought to a halt by an autonomous vehicle belonging to Alphabet's Waymo, isn't the only bus that's run into trouble with San Francisco's growing crowd of driverless vehicles. Bus and train surveillance videos obtained by WIRED through public records requests show a litany of incidents since September in which anxiety and confusion stirred up by driverless cars has spilled onto the streets of the US city that has become the epicenter for testing them.

As the incidents stack up, the companies behind the autonomous vehicles, such as Waymo and General Motors' Cruise, want to add more robotaxis to San Francisco's streets, cover more territory, and run at all hours. Waymo and Cruise say they learn from every incident. Each has logged over 1 million driverless miles and say their cars are safe enough to keep powering forward. But expansions are subject to approval from California state regulators, which have been pressed by San Francisco officials for years to restrict autonomous vehicles until issues subside.

Driverless cars have completed thousands of journeys in San Franciscotaking people to work, to school, and to and from dates. They have also proven to be a glitchy nuisance, snarling traffic and creeping into hazardous terrain such as construction zones and downed...

KDE Connect is the great software that allows for interfacing between the KDE desktop and your various mobile devices running Android, Plasma Mobile, Apple iOS, or even Sailfish OS. KDE Connect allows easily sharing files and data with your mobile device(s), receiving phone notifications on your desktop, and a lot of other remote/cross-device functionality. The KDE Connect 2.0 initiative that is taking shape this year thanks to full-time development work is going to modernize this open-source solution...

Video download link | md5sum 2505cca4353b58b6a2bd075ca0a698b2
Facts About Microsoft
Creative Commons Attribution-No Derivative Works 4.0

Summary: Grifting Microsoft, propped up by bailout money and "defence" contracts from Trump and Biden, isnt doing as well as Microsoft-funded media wants us to think; there are many layoffs, rapid erosion in market share, and deep losses in the buzzwords' departments

THE media has made it exceptionally easy to be cynical and sceptical of it. Yes, the media (or mass media, corporate media, mainstream media) is gaslighting people, lying to people, blaming the victims, and glorifying the criminals. Its absurd, but thats what happens when money buys the news and lobbying can become reporting.

As noted above, the GNU/Linux world isnt immune to that. For instance, Clickfraud Spamnil [1, 2] (TFIR) is producing Microsoft spam this week, sponsored by Linux Foundation. Yesterday we spoke about all the fake coverage that hyped up chaffbots, which months later seem like a forgotten fad.

In order for the media to regain peoples trust itll need to act like media again.We now have...

The developers of Kodi, the widely used open-source media player app, have revealed a data breach of its user forum. What happened? The breach did not happen due to a vulnerability. Instead, an unknown attacker used the account of a legitimate but inactive member of the forum admin team to access the MyBB admin console on two occasions: February 16 and 21, 2023. The attacker was able to create backups of databases, which they then More

The post Kodi forum breach: User data, encrypted passwords grabbed appeared first on Help Net Security.

Take a look at our missions to Jupiter in context. The image below shows the history back to 1973, with the launch of Pioneer 10, and of course, the Voyager encounters. We also have the flybys by Ulysses, Cassini and New Horizons, each designed for other destinations, for Jupiter offers that highly useful gravitational assist to help us get places fast. JUICE (Jupiter Icy Moons Explorer) joins the orbiter side of the image tomorrow, with launch aboard an Ariane 5 from Kourou (French Guiana) scheduled for 1215 UTC (0815 EDT) on Thursday. You can follow the launch live here or here.

The first gravitational maneuver will be in August of next year with a Lunar-Earth flyby, followed by Venus in 2025 and then two more Earth flybys (2026 and 2029) before arrival at Jupiter in July of 2031. Ive written a good deal about both Europa Clipper and JUICE in these pages and wont go back to repeat the details, but we can expect 35 icy moon flybys past Europa, Ganymede and Callisto before insertion into orbit at Ganymede, making JUICE the first mission that will go into orbit around a satellite of another planet. Needless to say, well track JUICE closely in these pages.

Image: Ariane 5 VA 260 with JUICE, start of rollout on Tuesday 11 April. Credit for this and the above infographic: ESA.

A new Intel graphics kernel driver patch posted by Intel on Tuesday confirm that upcoming Meteor Lake processors will feature an ADM/L4 cache...

A magnetic cage keeps the more than 100 million degree Celsius hot plasmas in nuclear fusion devices at a distance from the vessel wall so that they do not melt. Now researchers at the Max Planck Institute for Plasma Physics (IPP) have found a way to significantly reduce this distance. This could make it possible to build smaller and cheaper fusion reactors for energy production. The work was published in the journal Physical Review Letters.

In a recent study published in the journal Maturitas, researchers conducted a systematic review and meta-analysis to compare the risk of cardiovascular events in women with and without endometriosis.

Study: Endometriosis and cardiovascular disease: A systematic review and meta-analysis. Image Credit: Bangkok Click Studio / Shutterstock.

Apart from autoimmune disorders, polycystic ovary syndrome, depression, and premature menopause, there are pregnancy-associated risk factors for cardiovascular diseases, such as gestational diabetes, pregnancy-related hypertensive disorders, placental abruption, preterm delivery, and pregnancy loss. Women experience a higher mortality rate due to cardiovascular diseases, and while the treatment methods are the same for men and women, the presentation, symptoms, diagnosis, risk factors, and response to treatment differ for women.

Simultaneously detecting the gravitational-wave and neutrino signals emitted during the last second of a massive stars life could show how such stars die.

Summary: The crimes of Sirius Open Source help highlight abuse by pension providers; after more than 3 months theyre still not holding accountable pension fraudsters (at least 3 people were involved in the fraud and two of them are based in the UK, so extradition proceedings arent even required)

Latest (today):

>> I hope this helps to settle your concerns regarding your
>> NOW Pension fund, as you can see from the above, they
>> have outlined how and who is responsible for protecting
>> your pension savings and applies to all NOW Pensions members.
>
> Hi,
>
> Please send the full letter, as promised, to
> 1) my wife
> 2) myself
>
> as promised by ???????? (staff)
> as promised by ???????? (staff)
> as promised by ???????? (manager)
>
> several times since February. We need this obligation in
> writing.

I need an update on this. There are multiple complainants about the pension fraud. We need action, not stalling tactics. You behave like lawyers, not like a pension provider.

A new electron-scattering experiment challenges our understanding of the first excited state of the helium nucleus.

A helium nucleus, also known as an particle, consists of two protons and two neutrons and is one of the most extensively studied atomic nuclei. Given the small number of constituents, the particle can be accurately described by first principles calculations. And yet, the excited states of the particle remain a bit of a mystery, as evidenced by a disagreement surrounding the excitation from the ground state 01+ to the first excited state 02+ [1]. Theoretical predictions for this transition do not match measurements, but the experimental uncertainties have been too large for implications to be drawn. Now, the A1 Collaboration at Mainz Microtron (MAMI) in Germany has remeasured this transition via inelastic electron scattering [2]. The new data significantly improves the precision compared to previous measurements and confirms the initial discrepancy.

Summary: The crimes of Sirius Open Source help highlight abuse by pension providers; after more than 3 months theyre still not holding accountable pension fraudsters (at least 3 people were involved in the fraud and two of them are based in the UK, so extradition proceedings arent even required)

Latest (today):

>> I hope this helps to settle your concerns regarding your
>> NOW Pension fund, as you can see from the above, they
>> have outlined how and who is responsible for protecting
>> your pension savings and applies to all NOW Pensions members.
>
> Hi,
>
> Please send the full letter, as promised, to
> 1) my wife
> 2) myself
>
> as promised by (staff)
> as promised by (staff)
> as promised by (manager)
>
> several times since February. We need this obligation in
> writing.

I need an update on this. There are multiple complainants about the pension fraud. We need action, not stalling tactics. You behave like lawyers, not like a pension provider.

The Pirate Bay has been around for nearly two decades, which is quite an achievement considering the immense legal pressure it has faced over the years.

Swedish police tried to shut the site down, twice, raiding dozens of servers. This ultimate goal failed but local authorities did prosecute the sites three co-founders, who all served time in prison for their involvement.

The notorious torrent site stood tall in the midst of this turmoil and continues to operate from thepiratebay.org until this day. While it is no longer the largest piracy site online, anti-piracy forces havent forgotten about it.

Pirate Bay Targeted in New Subpoena Wave

This week, we spotted yet another attempt to uncover the current operators. Through the Motion Picture Association, the Alliance for Creativity and Entertainment (ACE) requested a DMCA subpoena at the U.S. District Court for the Central District of California.

These subpoenas are not uncommon and are typically directed at third-party intermediaries, Cloudflare in this case. The Pirate Bay is a Cloudflare customer and through the court, ACE requests all useful information the California company has on its illustrious client.

The subpoena requires that you provide information concerning the individuals offering infringing material described in the attached notice, ACE informs Cloudflare.

[Y]ou are required to disclose [] information sufficient to identify the infringers. This would include the individuals names, physical addresses, IP addresses, telephone numbers, e-mail addresses, payment information, account updates and account history.

These DMCA subpoenas dont require any judicial oversight. In most cases, they are swiftly signed off by a court clerk. The legal paperwork is then sent to Cloudflare, which typically replies with all relevant information it has on file.

Actionable Intel?

Whether this...

Theres been plenty of research into smart fabrics, and weve seen several projects involving items of clothing with electronics integrated inside. These typically include sensors and simple actuators like LEDS, but theres no reason you cant integrate moving electromechanical systems as well. [Rehana Al-Soltane] did just that: she made an elegant evening dress with flowers that open and close on command.

It took [Rehana] a bit of experimentation to figure out a floral design that opens and closes smoothly without crumpling the fabric or requiring excessive force to actuate. She finally settled on a plastic sheet sandwiched between two layers of fabric, with pieces of fishing line attached that pull the edges inward. The lines are guided through a tube down the back of the dress, where a servo pulls or releases them.

The mechanical flower can be operated by touch [Rehana] made one of the other flowers conductive by embedding copper tape betwee...

SAP fixed two critical bugs that affect the Diagnostics Agent and the BusinessObjects Business Intelligence Platform.

SAP April 2023 security updates include a total of 24 notes, 19 of which are new vulnerabilities. The most critical vulnerabilities are:

• CVE-2023-27267: missing authentication and insufficient input validation in the exploited by an attacker to execute scripts on connected Diagnostics Agents. Successful exploitation can potentially lead to full compromise of the system.
• CVE-2023-28765: An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) versions 420, 430, can exploit the issue to access to lcmbiar file and further decrypt the file. Once the attacker gained access to BI users passwords and depending on the privileges of the BI user, he can perform operations that can completely compromise the application.

The complete list of the notes is reported in the latest security bulletin:

SAP administrators are urged to apply the available security patches as soon as possible.

Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 VOTE FOR YOUR WINNERS
Vote for me in the sections:

• The Teacher Most Educational Blog
• The Entertainer Most Entertaining Blog
• The Tech Whizz Best Technical Blog
• Best Social Media Account to Follow (@securityaffairs)

Please nominate Security Affairs as your favorite blog.

Nominate here: https://docs.google.com/forms/d/e/1FAIpQLSfaFMkrMlrLhOBsRPKdv56Y4HgC88Bcji4V7OCxCm_OmyPoLw/viewform

Follow me on Twitter: @securityaffairs and Facebook and Ma...

upstart writes:

The 3D5000 has come out of the oven:

Loongson, a Chinese fabless chipmaker, has launched the new 3D5000 processor for data centers and cloud computing. MyDrivers (opens in new tab) reported that Loongson claims its 32-core domestic chips deliver 4X higher performance than rival Arm processors.

The 3D5000 still leverages LoongArch, Loongson's homemade instruction set architecture (ISA) from 2020. The chipmaker was previously a firm believer in MIPS. However, Loongson eventually built LoongArch from the ground up with the sole objective of not relying on foreign technology to develop its processors. LoongArch is a RISC (reduced instruction set computer) ISA, similar to MIPS or RISC-V.

The 3D5000 arrives with 32 LA464 cores running at 2 GHz. The 32-core processor has 64MB of L3 cache, supports eight-channel DDR4-3200 ECC memory, and up to five HyperTransport (HT) 3.0 interfaces. It also supports dynamic frequency and voltage adjustments. Officially, the 3D5000 has a 300W TDP; however, Loongson stated that the conventional power consumption is around 150W. That's roughly 5W per core.

The 3D5000 flaunts a chiplet design since Loongson has glued together two 16-core 3C5000 processors. Loongson developed the 3C5000 server part to compete with AMD's Zen and Zen+ architectures. The latest 3D5000, which measures 75.4 x 58.5 x 7.1mm, slides into a custom LGA4129 socket.

Read more of this story at SoylentNews.

Nadine Hoosen, Chief Science Officer at TAFFDs, joins our Biotech/Medical Board.

Also available via the Gemini protocol at:

• gemini://gemini.techrights.org/irc-gmi/irc-log-techrights-110423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-110423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-social-110423.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-techbytes-110423.gmi

Over HTTP:

AI company OpenAI launched a bug bounty program and announced payouts of up to $20,000 for security flaws in its ChatGPT chatbot service.

OpenAI launched a bug bounty program and it is offering up to $20,000 to bug hunters that will report vulnerabilities in its ChatGPT chatbot service.

The company explained that ChatGPT is in scope, including ChatGPT Plus, logins, subscriptions, OpenAI-created plugins (e.g. Browsing, Code Interpreter), plugins users create themselves, and all other functionality. Plugins developed by other people are out of the scope.

The bug bounty program, which is operated via the Bugcrowd crowdsourced security platform, also covers APIs, API keys, and other assets belonging to OpenAI. The company is also interested in confidential OpenAI corporate information that may be exposed through third parties, such as Google Workspace, Trello, Jira, Salesforce and Stripe.

The bounties range from $200 for low-severity security issues up to $20,000 for critical vulnerabilities.

Security is essential to OpenAIs mission. We appreciate the contributions of ethical hackers who help us uphold high privacy and security standards for our users and technology. This policy (based on disclose.io) outlines our definition of good faith regarding the discovery and reporting of vulnerabilities, and clarifies what you can expect from us in return. reads the announcement published by the company.

The initial priority rating for most findings will use the Bugcrowd Vulnerability Rating Taxonomy. However, vulnerability priority and reward may be modified based on likelihood or impact at OpenAIs sole discretion. In cases of downgraded issues, researchers will receive a detailed explanation.

In March, 2023, OpenAI addressed multiple severe vulnerabilities in ChatGPT that could have allowed attackers to take over user accounts and view chat histories.

One of the issues was a Web Cache Deception vulnerability reported by the bug bounty hunter and Shockwave founder Gal Nagli, it could lead to an account takeover.

Please vote for Security Affairs (https://securityaffairs.com/) as the best European Cybersecurity Blogger Awards 2022 VOTE FOR YOUR WINNERS
Vote for me in the sections:

• The Teacher Most Educational Blog
• The Entertainer Most Entertaining Blog
• The Tech Whizz Best Technical Blog
• Best Social Media Account to Follow (@securityaffairs)

Please nominate Secur...

Video download link | md5sum 0728ff8efe7b4350ffebfe6c23131bb0
COVID-19 Remains Untackled
Creative Commons Attribution-No Derivative Works 4.0

ve just published some hard data to show how deaths have soared this year, probably in relation to the neglect of COVID-19 response. Institutions and media compel us to think that COVID-19 is a thing of the past or old news while publicly-available data shows alarming numbers, including total mortality across all age groups (its up sharply).

Media gaslighting wont be the solution to all this. We need proper research and real, hard answers.

The more i get my mind around the neutral neutron pair or NNP for short, the more i am convinced that it lies dense about us and permeates the whole earth.  It is scaled at the same size as the hydrogen atom without having the orbital and free electron of the hydrogen atom which enlarges the scale..  My point is that however spaced our NNPs are, at a size of half an angstrom they easily pass through all our matter and been effrectively chargeless, there is scant drag.  I am not going to say zero but it is still so little that we have been almost unable to detect them.

Having said all that, let us return to lightening.  First off a 3D mass of free electrons or free ions for that matter is an explosive.  When we look at lightening bolts we actually see a massive column passing down to the earth.  It follows that freee atmospheric ions flee to the surface and interact with free electrons to produce really hot electrons.

Thus it appears that a mass of NNPs carries charged ions down to toward the ground for discharge.  When it hits the ground it opens a live surface for electrons to flow back up the column. If the column breaks up, the NNPs will drain into the ground which leaves both free ions and electrons in position to explode.  Plenty of energy for both thunder and heat lightening.  The take home is that by simply invoking NNPs we can clearly explain and understand what we see going on up in the skies.

another consequernce of all this is that a vacuum tube is no true vacuum tube at all, but contains a full load of NNPs.  I do recall that odd observations exist likely to respond well to this model.

 And just where does coherant light fit into all this?  Suddenly we have a convenient ordered, but neutral structure around all that we see and measure.

This also explains the nature of gravity and what i have also observed.  I have already posted that we can drive gravity out of a given mass, simply because I have seen it done.  The big take home is that the mass of NNPs is neutral and has zero effect on our bodies which by the way, after been separat...

I have posted in the past about the likely virtues of walking  barefoot on the ground.  These werte simply my own observations ,but i did put a note together to see if we could drum up some interest.  As it was, i need not have bothered because others have also woken up to the possibilities.

This is from seven years ago already and it turns out that serious effort is underway to make it easier to do.

I actually went barefoot in the summer until I turned six and went to school.  That was the common deal then.  winter time saw rubber boots and thick socks of course.  also i stayed with leather shoes for office work until recently.  All that is now harder to do.

The real take home is that been grounded empowers your body to heal pro[erly, simply because your nervous system can scavenge free electrons when needed.  all those stories here go back to allowing your body to do its job and wrapping yourself in insulators is obviously stupid.