Skip to content
I T S S
  • Welcome
  • Hardware
  • Internet
  • Networking
  • Security
  • Data Recovery
  • Support
  • Contact
  • Webmail

A Nice Little Cryptography Primer

By itss | 28/06/2021
0 Comment

Pun Intended.

Category: Technology
Post navigation
← pfSense / Wireguard / Bad Code / Close Call Why Quake3 was so fast : Fast Inverse Square Root →

Recent Posts

  • Hardware Exploits?
  • Why Quake3 was so fast : Fast Inverse Square Root
  • A Nice Little Cryptography Primer
  • pfSense / Wireguard / Bad Code / Close Call
  • Apple Continues Its Trip To The Dark Side With The Release of MacOS 17 (Big Sur)

Slashdot

News for nerds

  • Hackers Heat French Supermarket Fridges, Sparking Fires and Spoiling Food
    by BeauHD on 12/10/2026 at 6:00 pm

    Hackers remotely manipulated connected refrigeration systems at hundreds of French supermarkets, reportedly pushing some fridges and freezers to 50C (122F), spoiling food and even sparking fires. According to Reuters, French Prime Minister Sebastien Lecornu ordered a cybersecurity investigation into the hacks, with similar incidents reported in Spain, Portugal, Poland, Germany, and Belgium. In France, Carrefour reported 80 affected stores, Monoprix said 5% of its locations were hit, and Les Mousquetaires said refrigerators at roughly 150 Intermarche stores were heated to 50C for six hours. From the report: Supermarket cold aisles are typically run by control panels that manage an entire store's fridges and freezers and can be accessed over the internet, which lets maintenance companies adjust them from anywhere. The source close to Lecornu said ANSSI had identified a vulnerability in software supplied by Danish company Danfoss. Danfoss said it was "aware of incidents in France affecting a limited number of refrigeration management systems." The affected units "were running outdated firmware," Danfoss said, adding that it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions." On August 9, cybersecurity firm Claroty's Team82 published research detailing vulnerabilities in the Danfoss AK-SM 800A controller. According to the report, software updates issued by Danfoss addressed issues that could have allowed attackers to bypass authentication controls and execute code on compromised devices. Read more of this story at Slashdot.

  • AI Coding Agents Generate More Code, But Not More Software
    by BeauHD on 12/10/2026 at 5:00 pm

    A study of more than 700 software firms found that AI coding agents significantly increase the amount of code developers produce, but not the amount of software companies actually ship. Ars Technica reports: A recent study (PDF) of actual coding practices across hundreds of firms finds that human code review forms a significant "bottleneck" for the overall efficiency of AI coding tools, resulting in "little evidence that firms increase software output or reduce employment" by using them. Any efficiency increased during the actual coding phase, the study authors find, is "absorbed by downstream constraints in the production process"; as "the code review process significantly increases in length, pull requests are more likely to require revisions, and reviewers leave more comments." [...] In terms of raw code being produced, the results are clear and stark. The introduction of AI coding agents at a firm leads to a 30 percent increase in total lines of code generated, a 20 percent rise in the number of total commits, and a 23 percent increase in pull requests on average, the researchers write. But all that extra code doesn't translate directly into improved software output on the firm level. On the contrary, the resolution rate for Issues and Epics (i.e. wholesale software features) tracked by tools like Jira did not change in a statistically significant way after AI tools were introduced (the researchers also found no "compositional shift" in the size or complexity of those Jira-tracked issues across the AI introduction). The reason for that discrepancy can be found directly in the code review process, which takes markedly longer on average after the introduction of AI coding agents. Overall, the average "review process" time between a pull request getting submitted and it being merged into the codebase balloons 49 percent on average after AI agents are introduced. That effect can be seen in more granular data, too, with "the share of pull requests with changes requested nearly doubl[ing], and the number of comments per pull request increas[ing] by 35%" following the AI agent shift, the researchers write. In response to this change, the researchers found a 14 percent increase in the share of workers performing code reviews after AI agents' introduction. They also write that they "cannot attribute significant employment changes to AI" after looking at total active workers across Jellyfish and cross-referencing with LinkedIn data at those firms. While AI could also theoretically help with this review process, the researchers found that, so far, that impact has been marginal. Although 80 percent of measured firms used some form of AI code review by March 2026, AI agents were only responsible for 23.3 percent of all review comments and 10.8 percent of all pull requests, suggesting humans were still responsible for the vast majority of this work. Read more of this story at Slashdot.

  • Amazon In Talks To Buy AI Startup Decart For Around $7 Billion
    by BeauHD on 12/10/2026 at 4:00 pm

    Amazon is reportedly in talks to acquire AI startup Decart in a deal that could value the company at up to $7 billion. Decart's DOS software helps developers optimize AI models for different processors in weeks rather than months, a capability that could be particularly useful to AWS as it pushes its own Trainium chips. SiliconANGLE reports: The company has developed software called DOS, which can help developers to speed up AI training and inference workloads by optimizing their neural networks to run on a specific processor. In most AI workloads, developers must optimize a neural network for the chip they plan to run it on. This process used to take months, but with DOS, the workflow necessary to do this can be compressed into just a couple of weeks. As a result, companies can use Decart's software to shift AI workloads to different processors if their requirements change, or if chip availability becomes an issue. In addition to DOS, Decart is also a model developer, responsible for creating the Lucy and Oasis world models, which are designed to generate and simulate realistic three-dimensional environments for video games, robotic training and other use cases. It's still possible another suitor could emerge and outbid Amazon. Last month, Anthropic PBC was reportedly engaged in talks to buy Decart, according to a report by Bloomberg. However, it ultimately pulled out of a reported $6 billion deal after conducting due diligence on the startup. It's not clear what ultimately dissuaded Anthropic from pursuing a deal. The Wall Street Journal first reported (paywalled) the news. Read more of this story at Slashdot.

  • Q3 2026 Was Historically Bad For PC Shipments
    by BeauHD on 12/10/2026 at 3:00 pm

    PC shipments fell 20.1% year over year to 62.7 million units in the third quarter of 2026, the worst Q3 decline IDC has recorded. "The top three PC makers -- Lenovo, Dell, and HP -- also saw their shipments fall by over 20% year over year," reports PCMag. From the report: "If looking at all quarters, then we have seen other quarters in recent years with larger declines, such as 2022Q4, which was -28.2%, and 2023Q1, which was -28.7%. Both were coming off pandemic highs," IDC Director Jitesh Ubrani told PCMag in an email. The numbers aren't a great sign, since third-quarter PC shipments usually outpace those in the second quarter as vendors introduce new products ahead of the holiday shopping season. Instead, PC shipments were at 62.7 million units, down 9.1% from the previous quarter. [...] Of course, the downturn isn't a surprise. IDC and other research firms have warned that the ongoing AI-driven memory shortage threatens to sap demand for PCs and phones due to soaring memory and storage costs. "What we're seeing is the result of the strong first half pull-in. Vendors and channels loaded up on inventory early in the year to get ahead of [memory-related] price hikes, and that has thrown off the usual seasonality, where Q3 is typically larger than Q2," Ubrani said in a report covering IDC's preliminary estimates for the quarter. In one bright spot, Ubrani said vendors and retailers might cut prices to generate interest and clear out products they have in stock. "Channels are now worried about carrying too much inventory into a market where high prices are suppressing demand. That could translate into promotions and some short-term relief for consumers, but we don't expect pricing anywhere near what it was a year ago. Prices will remain elevated," he added. Read more of this story at Slashdot.

  • Should We Beware of Other License Plate Surveillance Companies Besides Flock?
    by EditorDavid on 12/10/2026 at 11:34 am

    NPR reports: Police officers in cities across the U.S. are quick to extol the virtues of real-time crime centers as a game changer that helps them find missing children, monitor large events from the skies and scope out dangerous scenes before putting an officer in harm's way. Hundreds of police departments have one of these central hubs, which have existed for years. But many are now being powered with AI software, such as Fusus, from the public-safety technology giant Axon... synthesizing the data it pulls in and allowing police command centers to watch an entire city from one place. Flock cameras, the automated license plate readers (ALPRs), have faced intense backlash in recent months amid stories of abuse. Yet privacy experts say they're just the tip of the iceberg when it comes to police surveillance. "I have been watching the debate about Flock with a little bit of puzzlement," says Andrew Guthrie Ferguson, a law professor at George Washington University. "Because real-time crime centers have not just ALPR cameras and sensors, but video analytics and drones and essentially a way to create a visual single-pane-of-glass vision of what's going on in a city, with time machine capabilities where you can go back and investigate crime." Tools like Axon Fusus, which is a leader in this type of software, also pull in footage and data from police body cameras, law enforcement dashcams, 911 dispatch, gunshot detectors and surveillance cameras, including sometimes those of private businesses that opt in. Its use is growing fast. In 2024, the technology news site 404 Media reported that just over 100 law enforcement agencies had deployed Fusus, which was then its own company and was acquired by Axon that year. The number of law enforcement agencies using the tool has more than doubled since then, according to Axon. Even the American Civil Liberties Union warned concerned citizens in August that "Flock is far from the only vendor," adding that "it's important to realize that its competitors aren't so great either, and that simply replacing Flock surveillance with another company's surveillance won't necessarily solve any of the privacy and other civil liberties problems posed by this mass surveillance technology." Communities can't simply assume that their residents will be better off from a privacy and civil liberties perspective by dropping Flock and replacing it with another ALPR provider, as some customers have done. They should ask hard questions about whether they really want to create that kind of a system, and if they do, ensure it doesn't function as a mass surveillance system... One of Flock's most significant competitors is Motorola. This company, which has been expanding its police technology offerings through an aggressive acquisition strategy in recent years, offers a nationwide law enforcement data sharing system similar to Flock's called the National Vehicle Location Service, operated by Motorola unit Vigilant Solutions. In addition to collecting data from law enforcement clients' cameras, it also runs a large separate commercial ALPR unit that makes deals for tow trucks and other fleet vehicles to carry cameras and collect data for Motorola as they drive around, amassing billions of plate reads (a claimed 500 million monthly, subject to no apparent data retention policy). Known as the Digital Recognition Network, that unit sells its data for commercial purposes but also makes it available to its law enforcement customers for an extra charge. Motorola tells agencies they can have "access to billions of detections beyond your own." Abandoning Flock for another system doesn't protect privacy, their article argues. "If a jurisdiction decides to allow license scanners to be installed, how that system operates is more important than which vendor provides it..." They recommend strong restrictions like data retention limits — and imposing them by law rather than in the language of contracts with vendors (which could always be renegotiated). Read more of this story at Slashdot.

  • How the US Nuclear Plant Fleet Is Leaning Into AI
    by EditorDavid on 12/10/2026 at 7:22 am

    "This year, nearly the entire fleet of 94 U.S. nuclear reactors has been offered the chance to integrate AI into its operations, and most have taken it," reports IEEE Spectrum: In August, California-based Atomic Canyon launched NIVA, the Nuclear Industry Virtual Assistant, which was developed in cooperation with nuclear-industry groups. The assistant was pilot-tested in nuclear plants run by Constellation Energy and is now available to the United States' entire fleet of reactors.... Meanwhile, the AI-for-nuclear startup Nuclearn says its products have gone to work with more than 65 U.S. partners, a total that includes many traditional plants but also an integration with NuScale Power Corp. that is working toward advanced small nuclear reactors. Microsoft and Nvidia have collaborated on a project to apply AI toward optimizing "the entire life cycle of a nuclear plant, spanning site permitting, design, construction, and continuous operations." The reason for the rapid adoption, according to Nuclearn CFO and cofounder Jerrold Vincent, is twofold. First, the technology companies banking their futures on AI are also keen on a revival of nuclear power to provide the electricity for all those data centers. Vincent says AI is also ideal for addressing some of the nuclear industry's most pressing problems. Many of the things that make reactors so difficult to operate — intricate regulations, along with complex systems for management and maintenance — are exactly the kinds of tasks that AI is good at. The industry is staggering to deal with aging hardware and an aging workforce. If it is going to survive, and have a real shot at a nuclear revival, it will need help from machine intelligence, Vincent says... Right now, the principal output of a nuclear reactor (aside from electricity) is paperwork. Nuclear plants produce piles of documentation to demonstrate regulatory compliance and to record how they respond to any potential problem, from a crack in the sidewalk to a fault in the reactor... Nuclearn's AI products help plants search through large repositories of data more efficiently to more quickly file paperwork with the federal government or figure out how a particular problem was solved in the past. "If you think of it as ChatGPT for nuclear," he says, "it's actually not a bad place to start." It's especially important because the nuclear power industry "has a remarkably skilled but quickly shrinking workforce tasked with keeping old reactors online and possibly starting up new ones to meet surging demand for electricity," the article points out. It also stresses that "So far, both the Nuclearn and NIVA large language models used in the nuclear world report to humans and don't go anywhere near power plant operations." Read more of this story at Slashdot.

Archives

  • September 2022
  • November 2021
  • June 2021
  • March 2021
  • November 2020
  • October 2020
  • September 2020
  • February 2020
  • January 2020
  • October 2019
  • August 2018
  • July 2018
  • April 2018
  • February 2018
  • January 2018
  • December 2017
  • October 2017
  • September 2017
  • August 2016
  • July 2016
  • March 2016
  • February 2016
  • August 2015
  • May 2015

Categories

  • Innovation
  • Security
  • Software
  • Technology

Tags

backdoor cisco coding json laziness patterns public information announcement security vulnerability
© 2017 IT Sales & Services Ltd
Quality IT solutions in Tanzania since 2010
Iconic One Theme | Powered by Wordpress