Xz format inadequate for long-term archiving (2016)

Xz format inadequate for long-term archiving (2016)

Key findings include: (1) safe interoperability among xz implementations is not guaranteed; (2) xz’s extensibility is unreasonable and problematic; (3) xz is vulnerable to unprotected flags and length fields; (4) LZMA2 is unsafe and less efficient than the original LZMA; (5) xz includes useless features that increase the number of false positives for corruption; (6) xz shows inconsistent behavior with respect to trailing data; (7) error detection in xz is several times less accurate than in bzip2, gzip and lzip. For example, xz tries to appear as a very safe format by offering overkill check sequences like SHA-256 but, at the same time it fails to protect the length fields needed to decompress the data in the first place. Error detection in the xz format is broken; depending on how the file was created and on what decompressor is available, the integrity check in xz is sometimes performed and sometimes not.

Source: lzip.nongnu.org

Quantum Leaps, Long Assumed to Be Instantaneous, Take Time

Quantum Leaps, Long Assumed to Be Instantaneous, Take Time

The state to and from which the researchers are actually looking for quantum jumps is, meanwhile, the “dark” state — because it remains hidden from direct view. That ambiguity is crucial for maintaining quantum coherence during a jump between these two states. During that silent time, the system had presumably undergone a transition to the dark state, since that’s the only thing that can prevent flipping back and forth between the ground and bright states.

Source: www.quantamagazine.org

Sealed Rust: A plan to bring Rust to safety critical software domains

Sealed Rust: A plan to bring Rust to safety critical software domains

This is the first post in a series detailing Ferrous System’s plan to qualify the Rust Language and Compiler for use in the Safety Critical domain. Although Rust as a language has been stable since 2015, use of a programming language and compiler within projects that have safety critical demands, such as Automotive, Industrial, or Avionics, requires a higher bar of entry than the Rust compiler can offer today. We believe that this is a process that will take a significant amount of time and effort to see realized, but something we choose to do for the long term value we believe this will provide to both the Rust Programming Language, as well as industries developing safety critical software.

Source: ferrous-systems.com

Carnival Cruise Lines Hit with $20M Penalty for Environmental Crimes

Carnival Cruise Lines Hit with $20M Penalty for Environmental Crimes

The cruise line giant Carnival Corporation and its Princess subsidiary have agreed to pay a criminal penalty of $20 million for environmental violations such as dumping plastic waste into the ocean. The company also admitted sending teams to visit ships before the inspections to fix any environmental compliance violations, falsifying training records and contacting the U.S. Coast Guard to try to redefine what would be a “major non-conformity” of their environmental compliance plan. Part of the 2016 plea agreement required ships from eight of Carnival’s companies to submit to court-supervised monitoring, which is how the most recent violations were discovered.

Source: www.npr.org

YouTube to Remove Thousands of Videos Pushing Extreme Views

YouTube to Remove Thousands of Videos Pushing Extreme Views

The kind of content that will be prohibited under YouTube’s new hate speech policies includes videos that claim Jews secretly control the world, those that say women are intellectually inferior to men and therefore should be denied certain rights, or that suggest that the white race is superior to another race, a YouTube spokesman said. The company also said that channels that “repeatedly brush up against our hate speech policies,” but don’t violate them outright, would be removed from YouTube’s advertising program, which allows channel owners to share in the advertising revenue their videos generate. In addition to tightening its hate speech rules, YouTube announced it would also tweak its recommendation algorithm, the automated software that shows users videos based on their interests and past viewing habits.

Source: www.nytimes.com

The charm of buying old workstation hardware on the cheap

The charm of buying old workstation hardware on the cheap

And it’s with that in mind that I recently tested the waters of the upgrade arbitrage market, in an effort to build a workable home computer that I could use when I wanted a little more graphical oomph or I wanted to mess with some experiments. To put it simply: Back when a computer or similar product was originally released, it was prohibitively expensive for many consumers, while also being significantly more powerful than anything the average consumer could buy, anyway. If a six-year-old workstation can get you within shouting distance of a modern consumer-grade computer for a lower price, even with a little not-made-for-the-home weirdness, you’re coming out ahead while wringing additional value from something that otherwise wouldn’t be worth very much.

Source: tedium.co

Biggest Offender in Outsize Debt: Graduate Schools

Biggest Offender in Outsize Debt: Graduate Schools

The full scope of the borrowing was revealed May 21, when, for the first time, the Department of Education released information about how much debt students are taking on to earn degrees from various academic programs at American colleges and universities. In releasing the college loan data, Education Secretary Betsy DeVos described it as part of President Trump’s executive order to address the student debt crisis. At the same time, the department is preparing to uproot the Obama administration’s approach to the debt crisis, by repealing regulations that cut college programs out of the federal financial aid system if students don’t earn enough money to pay their loans back.

Source: www.nytimes.com

Requiem for a Sports Bettor

Requiem for a Sports Bettor

But the way the business is taking shape in the United States troubles many professional gamblers, including Spanky, who has invited me to Atlantic City so I can learn more about what he calls the “dying art form” of bookmaking. In the less than one year that bookmaking has been legal in New Jersey, a number of European companies have swooped in to offer their services to the racetracks and casinos licensed to book sports bets. DraftKings, the daily fantasy sports company that has pivoted into bookmaking in New Jersey, has signed a deal with Kambi Group, which is headquartered in Malta and takes a similar approach to so-called sharp players.

Source: www.theringer.com

Microsoft and Oracle link up their clouds

Microsoft and Oracle link up their clouds

Microsoft and Oracle announced a new alliance today that will see the two companies directly connect their clouds over a direct network connection so that their users can then move workloads and data seamlessly between the two. For Oracle, this alliance means that its users can run services like the Oracle E-Business Suite and Oracle JD Edwards on Azure while still using an Oracle database in the Oracle cloud, for example. “With Oracle’s enterprise expertise, this alliance is a natural choice for us as we help our joint customers accelerate the migration of enterprise applications and databases to the public cloud.”

Source: techcrunch.com