1
I was going to say "Oh, you ran into the YouTube error as well?"
Then I was "How did you get the text in your screenshot so sharp?"
Then I was "And how did you get it to scroll like that?"
Then I was "Oh."
Posted by: Pixy Misa at Tue Oct 16 20:52:47 2018 (PiXy!)
2
That, sir, was golden. There's not much on the internet that can hold both my brother and I spellbound, but that did it. Second biggest surprise: the bell sound. I always thought it was a sound clip spliced in.
Posted by: ubu at Wed Oct 17 09:03:35 2018 (UlsdO)
Larry Correia doesn't work in comics. He doesn't draw comics, he doesn't ink comics, he doesn't write comics, he doesn't really opine on comics to the best of my knowledge. He just writes his fantasy and sci-fi books.
But he's been PREEMPTIVELY blacklisted, because he associates with the wrong sort of people, or has the wrong sort of views (they're vague on this point).
"Marxists SUCK!"
While the mercurial, enforcement of random and ever-changing rules that might theoretically be broken at some future date has a undeniable appeal to certain termagant totalitarians, for legal reasons, it might be advisable that the industry settle on some sort of standard policy regarding defenestration of potential contributors.
Wow!Jerry Miculek takes his trusty Barret M-82 "Light .50" against body armor. This seems pretty pointless, as an anti material rifle against a foam chest plate light enough to be used in a life preserver is not even a....Wait. What!
1
Whiskey Tango Foxtrot?!? I could have understood 1 or 2 F-22s not moved for maintenance reasons, but 1 or 2 DOZEN? Either we have a lot of hanger queens in F-22 fleet, or somebody was derelict in their duty to move them to a safer part of the US until the storm passed. This storm wasn't a surprise.
If we really lost 1 or 2 dozen F-22s, Congress should be giving a full galaxy's worth of general's stars the Klieg lights, and Trump should be thinking of getting some new generals.
Posted by: StargazerA5 at Sun Oct 14 10:59:55 2018 (Q7Wqc)
2
Just to clarify, I know the F-22 spends an inordinate amount of time in the hanger, but in this case we're talking between 6-12% of the entire fleet not even being capable of a ferry flight under optimal conditions.
Posted by: StargazerA5 at Sun Oct 14 11:26:35 2018 (Q7Wqc)
3
Yeah, when I first saw the report (Mainly from Ace of Spades, not known for either loving the F-22 or understanding the importance of air supremacy/superiority; i.e. Ace honestly does not understand what it is like to not control the skies.), my first thought was that someone from Air Combat Command was going to lose their job and rank. Anything that could fly should have been gone - and it felt too much like someone forgot to get that done.
Posted by: cxt217 at Sun Oct 14 12:28:06 2018 (2ZW6Y)
4
I heard third hand that the original plan was for all the aircraft on that base to shelter in place, but the new commander decided to err on the side of caution and moved everything that could be moved. Clearly it could have been a LOT worse.
Posted by: Mauser at Sun Oct 14 14:05:08 2018 (Ix1l6)
Well, Power's Back
The 3 out of four freezers need to be cleaned out.
The storm did damage out of all proportion to its actual strength when it hit here. It was a mere tropical storm, yet trees are still down all over. I attribute this to a combination of wet ground and the fact that big storms around here generally don't come from the west, so many trees which had survived hurricanes and nor'easters were tested from a new direction and found wanting.
As of last night 200,000 people in Virginia were still without power.
From what little I've seen over the last few minutes, we got off very easy here. The people in Florida and Georgia are going to take years to recover from this.
1
I sincerely hope that El Paso DOES get wet. They've been in a drought for the better part of a decade. Let's hope that Sergio drops 10 inches of rain to refill the reservoirs, ponds, aquifers and tanks.
Posted by: Chuck Skinner at Wed Oct 10 16:39:05 2018 (2CkGP)
Regarding that Bloomberg Story about the hardware hacking that is alleged to have affected 30 companies and the U.S. military.. Here's a video of Jordan Robertson, one of the story's authors, being interviewed by...Bloomberg.
Interestingly, one of the Bloomberg anchors asks Robertson some very pointed questions regarding various details in the first two minutes or so.
For a story as potentially explosive as this is, it hasn't been getting a lot of coverage over here past the initial flurry of interest, but it is reportedly making some waves in Asia. Note, that to the best of my Googling however, as of 4 days later, no one has produced a single rice grain sized spy chip.
However, there IS an interview in NY Mag with a guy who wrote a techno thriller based on the concept.
1
Everything is proceeding exactly as I have foreseen, as the wall of denials is starting to crumble.
"The security expert, Yossi Appleboum, provided documents, analysis and other evidence of the discovery following the publication of an investigative report in Bloomberg Businessweek that
detailed how China’s intelligence serviceshad ordered subcontractors
to plant malicious chips in Supermicro server motherboards over a
two-year period ending in 2015."
And attacking the credibility of Bloomberg isn't going to help.
Posted by: Pete Zaitcev at Tue Oct 9 12:56:02 2018 (LZ7Bg)
...And then I go to read what Pixy posted - and I get whiplash from reading 'The wall of denial of the Bloomberg's story is crumbling' to 'The supporting structure for Bloomberg's story is crumbling.'
Something is not kosher here.
Posted by: cxt217 at Tue Oct 9 23:46:49 2018 (2ZW6Y)
This is a weird one. The head of INTERPOL was Meng Hongwei, a Chinese citizen. He recently just up and disappeared. According to his wife, right before he went missing, he sent her a cryptic but ominous text. Now the Chinese have stepped forward and are saying that he was arrested as part of their ongoing political purge "corruption investigation"...oh and that he resigns so there's nothing to see here.
Also, while the FBI was conducting an investigation into the meaning of the word "boof"...
War Between India and Pakistan is Imminent (reads article)..oh.. CONCEIVABLE War Between India and Pakistan is Conceivable seeing as how they share a border and have had wars in the past, but they don't appear to be shooting at each other at the moment (stupid headline).
Remember kids...it's not all doom and gloom, sometimes it's just poor word choice and hysteria.
Going South
My parents are running against the clock to salvage tools and other things from the mud and the city is demanding that the debris get removed, so I'm heading back down there to give them a hand.
Here, via Dustbury, is something rather related...
On That Other Thing That Happened
Regarding the recent unpleasantness in Washington there is erudite and comprehensive discussion of the matter from David French and Susan Collins. There is also commentary in a more partisan vein at American Thinker and Powerline as well as by Neo that I'm in broad agreement on. There's a short post at Instapundit that gets into the possible strategies of the white house in this matter. I must confess that I tend to be quite skeptical of the 3D-Chess explanations for Trump's more unconventional behavior, but this affair has me reasessing my premises.
1
Oddly with respect to that last piece, I've been blocking people on Twitter who demonised the other side. Post political memes into my timeline and I don't care who you are, you get blocked.
As for the 3D-Chess thing... It's getting into Captain Tylor territory.
Posted by: Pixy Misa at Sat Oct 6 01:29:36 2018 (PiXy!)
2
Heh, Pixy's comparing Trump to Captain Taylor is one of the more interesting, and apt, analogies for Trump heard in a while. Is it strategy? Is it luck? With the results happening, does it matter? We may be getting into the realm of a new variant of Clarke's law: Any sufficiently cunning strategy is indistinguishable from luck.
Why do I have a feeling that if we had Steven still around, Pixy's comment would have generated an entire post.
Posted by: StargazerA5 at Sat Oct 6 08:34:58 2018 (Q7Wqc)
1
"Your tail hook isn't down! Come around and try again."
Posted by: Avatar_exADV at Fri Oct 5 14:27:16 2018 (v29Tn)
2
Hmm, if it keeps circling in the same area, how about dumping a tanker full of red food coloring into its path? That way the Earth can have its own Great Red Spot...
Posted by: Siergen at Sat Oct 6 16:00:01 2018 (IAebY)
3
Have to watch out for TD 14, now forming in the gulf.
Posted by: jon spencer at Sun Oct 7 07:37:50 2018 (6SO50)
When I hit "publish" everything went wonky, but this time....THIS TIME when I got that sinking feeling that comes from a post taking too long to publish....THIS TIME I block selected the whole post and copied. And I did so the instant before I got the 504 code.
And then I pasted it into word.
And now...the blog is back up and the post is below and doesn't have to be rewritten.
1
The server was getting hit hard again by web crawlers and I needed to restart the application. Bad timing. Glad you managed to grab a copy.
I'm going to start getting things migrated over the the new server this weekend, and also see what I can do about rate-limiting these guys.
Posted by: Pixy Misa at Thu Oct 4 21:12:35 2018 (PiXy!)
2
Oh BTW Pixy did you get my message regarding Pi?
Posted by: The Brickmuppet at Thu Oct 4 21:29:08 2018 (3bBAK)
3
Yes. I could see the Pi though, so I was slightly confused.
Posted by: Pixy Misa at Thu Oct 4 22:33:14 2018 (PiXy!)
4
Hmmm...It may be a mac issue, because the symbol I'm looking at doesn't look like Pi it looks like an arch.
Posted by: The Brickmuppet at Fri Oct 5 08:22:19 2018 (3bBAK)
5
Oh... The Pi symbol I'm used to is actually some type of cursive.
I had literally never seen it written correctly in any textbook.
Well....sorry for wasting your time.
I'll just crawl under this convenient rock.
Help! I'm working for morons!
Posted by: The Brickmuppet at Fri Oct 5 08:42:29 2018 (3bBAK)
6
I edit all posts in a text file, without exception. So, in theory, I can re-create any of my blogs, given enough scripting. In practice, I was too lazy to write a program to do it. I started on one when Ani-nouto was down, but abandoned it as soon as the server came back.
Posted by: Pete Zaitcev at Mon Oct 8 20:22:57 2018 (LZ7Bg)
Are we Surprised? No. (UPDATED)
Are we terrified concerned?
Yes.
It appears that there has been a hack involving at least 30 companies, as well as the D.O.D and C.I.A.
Worse, it's a hardware issue.
Nested on the servers’ motherboards, the testers found a tiny microchip, not much bigger than a grain of rice, that wasn’t part of the boards’ original design. Amazon reported the discovery to U.S. authorities, sending a shudder through the intelligence community. Elemental’s servers could be found in Department of Defense data centers, the CIA’s drone operations, and the onboard networks of Navy warships. And Elemental was just one of hundreds of Supermicro customers.
During the ensuing top-secret probe, which remains open more than three years later, investigators determined that the chips allowed the attackers to create a stealth doorway into any network that included the altered machines. Multiple people familiar with the matter say investigators found that the chips had been inserted at factories run by manufacturing subcontractors in China.
This attack was something graver than the software-based incidents the world has grown accustomed to seeing. Hardware hacks are more difficult to pull off and potentially more devastating, promising the kind of long-term, stealth access that spy agencies are willing to invest millions of dollars and many years to get.
One can assume that this is NOT an isolated incident. This is probably one of many, and one can infer that very little is now beyond the reach of the CCP. On a global level, it is very likely that all those Chinese funded infrastructure projects in Oceana, Latin America, Africa and South Asia are riddled with similar, and perhaps more hard to detect bugs, possibly embedded into the very structures of the facillities.
Pretty much every technical advancement made by compromised companies as well as state and military secrets can now be assumed to be in China's possession.
This doesn't mean they know them all yet. The sheer quantity of data that China must now have to sift through is daunting, and to be useful needs to be looked at by people who have enough knowledge in the given subject matter and sufficient imagination to be able to recognize something's merits. Encryption is a further obstacle. However, they probably have at least as big an edge on our Military as we had over the Japanese and German's after breaking or acquiring their respective codes in WW2.
This turn of events should not be the least bit surprising given that our self anointed aristocracy has off-shored much of our electronics manufacture to China (because slave labor is so cheap). Well, as we learned from Google & Facebook, if one finds something exceedingly cheap, one might well be the product.
Of course, knowing is the first step to fixing, so it should be pretty straightforward to correct this right?
Fixing this is beyond daunting. The expense of pulling out all the old circuit boards is going to be phenomenal and replacing them is subject to the same issue. The complexities of the global supply chain means that tracking down not just the manufacturers, but subcontractors, will be next to impossible.
Going forward, we may need to have some blockchain certification for all our electronic components, certainly for D.O.D. related applications. This is a sufficient breach of trust with sufficiently troubling ramifications that it ought to remove some of the opposition to restrictions on imports from the Middle Kingdom.
If oughts were dollars though we would have no debt.
This is outside my ballywick, so I eagerly look forward to the perspectives of commenters on this mess.
Now. Answer the following question. Did you read Pixy's post?
No: Go back and read it.
Yes: Proceed.
I found the story credible because I already have concerns about China and spying. That something like this could be done seems completely plausible.
However, all other sources I've looked at since posting this have been either rewritten versions of, or link back to, the Bloomberg article with no additional info. The Bloomberg article is anonymously sourced.
One thing I had not fully grokked, but Pixy mentions extensively, is how LONG this story has been in development.
To Wit: The following excerpt from the article on the nuts and bolts of the alleged hack sounds plausible to me, partly because it comports with my limited understanding of how these systems work, but mainly because the words, Dilithium, turbo-encabulator, and Midichloreans do not appear anywhere in it.
Officials familiar with the investigation say the primary role of implants such as these is to open doors that other attackers can go through. "Hardware attacks are about access,†as one former senior official puts it. In simplified terms, the implants on Supermicro hardware manipulated the core operating instructions that tell the server what to do as data move across a motherboard, two people familiar with the chips’ operation say. This happened at a crucial moment, as small bits of the operating system were being stored in the board’s temporary memory en route to the server’s central processor, the CPU. The implant was placed on the board in a way that allowed it to effectively edit this information queue, injecting its own code or altering the order of the instructions the CPU was meant to follow. Deviously small changes could create disastrous effects.
Since the implants were small, the amount of code they contained was small as well. But they were capable of doing two very important things: telling the device to communicate with one of several anonymous computers elsewhere on the internet that were loaded with more complex code; and preparing the device’s operating system to accept this new code. The illicit chips could do all this because they were connected to the baseboard management controller, a kind of superchip that administrators use to remotely log in to problematic servers, giving them access to the most sensitive code even on machines that have crashed or are turned off.
This system could let the attackers alter how the device functioned, line by line, however they wanted, leaving no one the wiser.
In the comments, Pixy (who, again, does IT for a living) seemed spectacularly unimpressed with the plausibility of this scenario.
Over at Medium, one of those linked to in Pixy's piece on the subject has objections , but they are mostly about how on earth this would have been detected, as it would have been an insanely comprehensive audit to detect this. However, he closes with this...
For me, Bloomberg’s article could go either way. The logic of backdooring the BMC makes a lot of sense. Whether it happened in this case — given all the categorical denials — I have no idea.
I will go so far as to say that I think something along these lines is likely to happen at some point, however, if this story does turn out to be bunk then Bloomberg will, via the cry wolf effect will have facilitated the very thing they pretended to report on.
This story is looking sketchy, but for now, we await more info....
1
I'll see what I can find, but a couple of thoughts:
1. If the network is secure, this doesn't matter. If the server can't make unauthorised connections to the internet, that's it.
2. There's a limited amount of functionality you can put on a chip that size. A keylogger, sure. Which is great if you want to hack laptops, but servers don't have keyboards. Snooping on a 100GbE connection? No chance.
3. The companies named - including the victims - have very explicitly denied it.
4. The sources are anonymous.
5. The chief selling point for the story is Bloomberg's credibility.
Posted by: Pixy Misa at Thu Oct 4 20:17:55 2018 (PiXy!)
Each time, we have conducted rigorous internal investigations based on their inquiries and each time we have found absolutely no evidence to support any of them. We have repeatedly and consistently offered factual responses, on the record, refuting virtually every aspect of Bloomberg’s story relating to Apple.
To translate: Bloomberg is full of shit.
Posted by: Pixy Misa at Thu Oct 4 20:21:57 2018 (PiXy!)
Well...I can't let all those keystrokes go to waste, so I'll resort to special pleading.
Everyone denying it has considerable incentive to do so. If this were true this could be their end.
Special Pleading Ends:
The sheer capacity issues of the chip were something I hadn't the expertise to consider, though the logistics of sifting through the Yotabits of data are daunting on their own.
I am concerned, perhaps unwarrantedly so, about back doors and such in our millitary IT, C4i, and fire control hardware.
On the Gripping hand...
Gell Mann Amnesia Effect.
Posted by: The Brickmuppet at Thu Oct 4 21:26:59 2018 (3bBAK)
4
Yeah, it's being taken seriously and independent researchers are looking into it. Too soon for confirmation or disconfirmation yet.
Posted by: Pixy Misa at Thu Oct 4 22:34:10 2018 (PiXy!)
5
Though one researcher I follow simply responded with a GIF of Bloomberg getting egg on its face, so there's a fair bit of skepticism.
Posted by: Pixy Misa at Thu Oct 4 22:35:13 2018 (PiXy!)
As we shared with Bloomberg BusinessWeek multiple times over the last couple months, this is untrue. At no time, past or present, have we ever found any issues relating to modified hardware or malicious chips in SuperMicro motherboards in any Elemental or Amazon systems. Nor have we engaged in an investigation with the government.
Apple
On this we can be very clear: Apple has never found malicious chips, "hardware manipulations†or vulnerabilities purposely planted in any server. Apple never had any contact with the FBI or any other agency about such an incident. We are not aware of any investigation by the FBI, nor are our contacts in law enforcement.
Posted by: Pixy Misa at Fri Oct 5 03:35:48 2018 (PiXy!)
Posted by: Pixy Misa at Fri Oct 5 21:23:53 2018 (PiXy!)
10
Actually, for the story to be developed for a long time is a good thing, IMHO. I remember how National Enquirer developed John Edwards story. It dragged on for months before they ambushed him in the hotel lobby. They had anonymous sources. This prompted people to share what they knew. Finally, they managed to buy photos of Edwards holding his love child. And even that was not enough for most, so they had to stage the operation to get him. I'm sure Bloomberg marshalled resources in a similar fashion.
As for the chip being small, puleeeeeeeeeeeze. The important part is what trace on the mobo it taps, and the power consumption in doing so. I think it probably goes into an I2C EEPROM that boots one of stupid Intel controllers.
So, my bet is it's almost certainly true.
Posted by: Pete Zaitcev at Sat Oct 6 18:33:40 2018 (LZ7Bg)
Devil's Advocate here, but comparing Bloomberg's coverage of the nano-spychip vis-a-vis the National Enquirer's coverage of John Edwards' affair not of state is not quite an apples to apples comparison.
The love affairs of a politician with someone who is not his or her significant other is something that most newspapers and periodicals would be suited to cover. That is the kind of story the gossip pages are for - except that the subject in question would make it to the front page.
Bloomberg's coverage of cyber-warfare, on the other hand, causes one to wonder if they know what they are talking about. Have they demonstrated they are well-equipped to report a cyber-warfare story?
Or are they pulling a Stephen Glass on us?
Posted by: cxt217 at Sun Oct 7 21:46:22 2018 (2ZW6Y)
So...someone was opening a brothel in Houston, cleverly cutting down on payroll and getting around local vice laws by replacing their...er...customer service professionals with animatronic Tengas.
Houston is now safe from the shame of being at the forefront of the newest manifestation of the oldest profession.
As someone with a functional amygdala who understands that sex doll time shares are as close to objectively disgusting as something as subjective as disgusting can be...
...and perhaps problematic in other ways...
...let me say that this is why we need smaller, less intrusive government. I'm not completely opposed to zoning laws, but this is not a hog farm or an antimatter containment facillity in a downtown, it wasn't going to be oppressing anyone or depriving them of their rights. It was going to be a business making somebody money, making somebody happy and contributing to the tax base of the city to pay for things Houston might need like...flood control. But now, because someone couldn't stand that something they didn't like would be happening behind closed doors, well, a small business never got off the ground.
I further note that Houston's regulatory dragnet seems to have applied to magical maids with glasses as well...at least at the time of writing.
1
The funny thing is this - Houston has very little in the way of zoning restrictions to begin with. Not just "better than California", but a genuine low-regulation outlier.
I wouldn't worry about the magical girls. Houston's mayor has done Naruto cosplay before...
Posted by: Avatar_exADV at Thu Oct 4 00:36:29 2018 (v29Tn)
2
The subject matter of that picture was explored by Fritz Leiber in The Silver Eggheads all the way back in - hey, it's available on Kindle! That's been out of print since forever!
Posted by: Pixy Misa at Thu Oct 4 10:35:26 2018 (PiXy!)
3
When I hear the phrase "sex doll brothel", for some reason it sounds like "Thomas the Tank Engine porn". You know, just a bunch of sad engineers pulling a train.
-j
Posted by: J Greely at Thu Oct 4 15:19:33 2018 (tgyIO)
Posted by: Pixy Misa at Thu Oct 4 19:12:06 2018 (PiXy!)
5
Sorry, I was busy putting in job applications. For Quality Control Inspector, of course.
Gotta be sorry for the folks applying for the "Sanitation Engineer" jobs.
Posted by: Ubu at Thu Oct 11 12:52:06 2018 (SlLGE)
6
Well, they certainly won't have much use for Human Relations. I'm not sure about applying for the IT job, though; "Okay, exactly what were you doing when it crashed. No, not when it went down."
-j
Posted by: J Greely at Thu Oct 11 21:45:59 2018 (tgyIO)
Hobby Space News of the commercial space industry A Babe In The Universe Rather Eclectic Cosmology Encyclopedia Astronautica Superb spacecraft resource The Unwanted Blog Scott Lowther blogs about forgotten aerospace projects and sells amazingly informative articles on the same. Also, there are cats. Transterrestrial Musings Commentary on Infinity...and beyond! Colony WorldsSpace colonization news! The Alternate Energy Blog It's a blog about alternate energy (DUH!) Next Big Future Brian Wang: Tracking our progress to the FUTURE. Nuclear Green Charles Barton, who seems to be either a cool curmudgeon, or a rational hippy, talks about energy policy and the terrible environmental consequences of not going nuclear Energy From Thorium Focuses on the merits of thorium cycle nuclear reactors WizBang Current events commentary...with a wiz and a bang The Gates of Vienna Tenaciously studying a very old war The Anchoress insightful blogging, presumably from the catacombs Murdoc Online"Howling Mad Murdoc" has a millblog...golly! EaglespeakMaritime security matters Commander Salamander Fullbore blackshoe blogging! Belmont Club Richard Fernandez blogs on current events BaldilocksUnderstated and interesting blog on current events The Dissident Frogman French bi-lingual current events blog The "Moderate" VoiceI don't think that word means what they think it does....but this lefty blog is a worthy read nonetheless. Meryl Yourish News, Jews and Meryls' Views Classical Values Eric Scheie blogs about the culture war and its incompatibility with our republic. Jerry Pournell: Chaos ManorOne of Science fictions greats blogs on futurism, current events, technology and wisdom A Distant Soil The website of Colleen Dorans' superb fantasy comic, includes a blog focused on the comic industry, creator issues and human rights. John C. Wright The Sci-Fi/ Fantasy writer muses on a wide range of topics. Now Read This! The founder of the UK Comics Creators Guild blogs on comics past and present. The Rambling Rebuilder Charity, relief work, roleplaying games Rats NestThe Art and rantings of Vince Riley Gorilla Daze Allan Harvey, UK based cartoonist and comics historian has a comicophillic blog! Pulpjunkie Tim Driscoll reviews old movies, silents and talkies, classics and clunkers. Suburban Banshee Just like a suburban Leprechaun....but taller, more dangerous and a certified genius. Satharn's Musings Through TimeThe Crazy Catlady of The Barony of Tir Ysgithr アニ・ノート(Ani-Nouto) Thoughtful, curmudgeonly, otakuism that pulls no punches and suffers no fools. Chizumatic Stephen Den Beste analyzes anime...with a microscope, a slide rule and a tricorder. Wonderduck Anime, Formula One Racing, Sad Girls in Snow...Duck Triumphalism Beta Waffle What will likely be the most thoroughly tested waffle evah! Zoopraxiscope Too In this thrilling sequel to Zoopraxiscope, Don, Middle American Man of Mystery, keeps tabs on anime, orchids, and absurdities. Mahou Meido MeganekkoUbu blogs on Anime, computer games and other non-vital interests Twentysided More geekery than you can shake a stick at Shoplifting in the Marketplace of Ideas Sounds like Plaigarism...but isn't Ambient IronyAll Meenuvians Praise the lathe of the maker! Hail Pixy!!