Post Syndicated from xkcd.com original https://xkcd.com/3010/

Post Syndicated from xkcd.com original https://xkcd.com/3010/

Post Syndicated from The History Guy: History Deserves to Be Remembered original https://www.youtube.com/watch?v=I6FOKJJsgHY
Post Syndicated from Talks at Google original https://www.youtube.com/watch?v=914PD5uHlQI
Post Syndicated from Rohit Kumar original https://www.servethehome.com/tenda-tem2010f-8-port-2-5gbe-and-2-port-sfp-switch-review/
In our Tenda TEM2010F review, we see just how unexpected and funky this 8-port 2.5GbE and 2-port 2.5G SFP fanless switch is
The post Tenda TEM2010F 8-port 2.5GbE and 2-port SFP Switch Review appeared first on ServeTheHome.
Post Syndicated from The History Guy: History Deserves to Be Remembered original https://www.youtube.com/watch?v=Vi-6Tx6aV3M
Post Syndicated from Explosm.net original https://explosm.net/comics/masturbation-addiction
New Cyanide and Happiness Comic
Post Syndicated from Oglaf! -- Comics. Often dirty. original https://www.oglaf.com/beblunt/
Post Syndicated from The History Guy: History Deserves to Be Remembered original https://www.youtube.com/watch?v=qcG54DdDvi0
Post Syndicated from Talks at Google original https://www.youtube.com/watch?v=BsHzEyIjfbE
Post Syndicated from LGR original https://www.youtube.com/watch?v=5k0EQn67lGo
Post Syndicated from Matt Granger original https://www.youtube.com/watch?v=qXYAklp3vOU
Post Syndicated from Explosm.net original https://explosm.net/comics/acting-role
New Cyanide and Happiness Comic
Post Syndicated from Techmoan original https://www.youtube.com/watch?v=1STcX5IEuJM
Post Syndicated from Светла Енчева original https://www.toest.bg/sedmitsata-4-9-noemvri/

И това ще отмине. Въпросът обаче е как. Свикнали сме да възприемаме демокрацията като даденост. Тя обаче не е. Някои от нас дори си спомнят какво е да я няма.
Седмицата, в която Доналд Тръмп спечели президентските избори в САЩ, а разгневена тълпа провали премиерата на пиеса на Бърнард Шоу, режисирана от Джон Малкович, е към края си. След още четири години от живота ни и Тръмп вече няма да е президент на САЩ. Стига да не е изпълнил предизборното си обещание, че ако американците го изберат, повече никога няма да им се налага да гласуват.
В България се чуха и гласове: ето, в САЩ гледат себе си, хайде да правим и ние така, какво ни интересуват изборите там. Живеем обаче в глобализиран свят. Преизбирането на Тръмп ще се отрази на България поне по два начина.
Първо, щом е възможно страната, символизираща демокрацията и в немалка степен задаваща международния тон, да избере да я оглави осъждан престъпник, който си позволява да обижда и заплашва медии и политически противници, какво да очакваме от България?
Политик, санкциониран по закона „Магнитски“, върти държавата на пръста си? Чудо голямо, то Тръмп го осъдиха, ама… Тълпа провали театрална постановка? Е, ами американци, вдъхновени от Тръмп, нахлуха в Капитолия, пък ние – за един театър… Противопоставяме се на фалшиви новини? Тръмп може да си позволи да говори всякакви небивалици – например, че хаитянските имигранти в Спрингфийлд ядат домашни любимци или че в някои училища се извършват операции за смяна на пола на деца – и да го преизберат.
Второ, перспективите в международен план не изглеждат добре. За палестинците например става все по-трудно да се надяват на разрешение на конфликта с Израел, при което се признава тяхното право да съществуват. А ако в резултат на липсата на подкрепа от страна на САЩ Украйна е принудена да капитулира, това няма да означава край на войната, както обещава Тръмп. Ще означава развързване на ръцете на режима на Путин. При което нищо не ни гарантира, че бомбите няма да почнат да падат и над молдовски глави, после – над румънски и български, след това – над западноевропейски… В една такава ситуация на България бомбите може и да ѝ се разминат, ако тук се установи пропутински режим като този в Унгария. Впрочем точно натам сме се запътили.
Добре дошли в реалността, поздравява ни Йоанна Елми в анализа си защо и как Тръмп не само спечели президентските избори, а и народния вот (наричан „популярен“). Американците не харесват как се развива страната им, и държат досегашните управляващи отговорни за това. И не им пука особено за демокрацията. Изглежда, че и там традиционната партийна система е в криза, както и в Европа. Ала победата на Тръмп е пирова, защото той едва ли ще е спасителят, на когото избирателите се надяват. Няма време за сълзи обаче – животът продължава, трябва да се справяме, както можем.
По другата голяма тема на седмицата – щурма срещу постановката „Оръжията и човекът“ в Народния театър – разсъждава Емилия Милчева в статията си „Моя страна, моя България. В кафяво“. Това не са просто „два свята на патриотизъм“, както твърди директорът на Народния театър, а диктат на единия свят над другия. Същевременно вътрешният министър не видя особен проблем. Все пак спектакълът, изглежда, ще се играе – билетите са разпродадени. Ала в България има твърде много хора, които с кеф биха се изпикали на изкуството, заключава Емилия.
Но да се върнем към нашите си избори, чието протичане според Валентин Вълканов може да се определи като игра на димки. Той смята за притеснителен факта, че мнозинството от парламентарните партии се възприемат като недостатъчно легитимни и неспособни да участват в правителство. Впрочем как да са легитимни при всички данни за манипулиране на изборните резултати, докато МВР само прави показни акции, а нищо не разкрива? Междувременно над нередностите се спуска медийна завеса, от която да останем с впечатление, че „всички са маскари“, и да престанем да търсим истински виновните.
Докато сме на вълната и на българските, и на американските избори, войната в Украйна си продължава. А с нея – и рубриката на Николета Атанасова „Несломимата Украйна“. В нея Николета този път ни разказва за музите по време на война. Освен бомбоубежища, украинците си имат и убежища за душата – многобройни книжарници и книжарнички, уроци по танци, изобщо – творчески дух, който войната катализира. Защото културата е лек за преживяването на непрестанна екзистенциална заплаха.
След културата в Украйна идва ред да обърнем внимание на българското образование. Според Донка Дойчева-Попова в него могат да се въведат 8 промени и без чаканата реформа, която десетилетие след десетилетие никое правителство не се осмелява да осъществи. Например да се въведат блокови часове. Моите часове в 8 клас бяха такива и досега си спомням колко удобно беше – подготовка по по-малко предмети всеки ден, повече концентрация в час. Или да се промени подредбата в стаята. Или учениците да не трябва непрекъснато да размъкват учебници, да подготвят домашни по образец от миналото хилядолетие, в час да има повече диалози, да се развиват полезни умения в часа на класа, да има изнесени уроци (още помня как учителят по рисуване провеждаше част от часовете си в двора). И най-важното – учителите да се отнасят с уважение към учениците.
От културата и образованието преминаваме към науката и нейните етични измерения. Анастасия Орманджиева ни обръща внимание върху големия въпрос за експерименталните животни в биомедицинските науки. Имаме ли морално право да подлагаме на изследвания животни с риск да им навредим само за да извлечем ползи за хората? Но пък без опитите с животни напредъкът в хуманната и ветеринарната медицина би бил невъзможен. Макар този дебат да изглежда като омагьосан кръг, все пак частични решения се намират. Например в някои случаи може да се експериментира с отделни клетки, а не с цели животни.
Хората възприемат не само животните като по-нисши от себе си, а и някои групи хора като по-нисши или по-висши от други. Българката Мая Донева научава, че в авторитетна брюкселска организация на предшественика ѝ са плащали 30% повече, отколкото на нея, защото е жена и е от Източна Европа. Донева се бори за справедливост дори с риска това да разочарова висшестоящите. Повече подробности – в статията „Колко е важно да бъдеш разочароващ(а)“.
Знам, че очаквате накрая да ви препоръчам нещо. Този път препоръката ми ще е по-различна от обикновено.
Пожелавам и на вас, и на себе си да бъдем с хората, които са важни за нас, и да правим нещата, които искаме и обичаме. Да гледаме театралните постановки и филмите, които искаме. Да четем книгите, които искаме. Да слушаме музиката, която обичаме. Да пътуваме, където искаме. Да следим и да подкрепяме медиите, на които имаме доверие.
Защото нищо от тези неща не е даденост и нищо не гарантира, че няма да ни бъде отнето.
Post Syndicated from John Lee original https://www.servethehome.com/what-is-different-with-a-cudimm-or-csodimm-micron-crucial/
We go into what is a CUDIMM or CSODIMM and what is different about the new memory technology by adding a clock driver onboard
The post The Difference between a Standard DIMM and a CUDIMM or CSODIMM appeared first on ServeTheHome.
Post Syndicated from The History Guy: History Deserves to Be Remembered original https://www.youtube.com/watch?v=4WJA1Pr4FRA
Post Syndicated from Bruce Schneier original https://www.schneier.com/blog/archives/2024/11/friday-squid-blogging-squid-a-rama-in-des-moines.html
Squid-A-Rama will be in Des Moines at the end of the month.
Visitors will be able to dissect squid, explore fascinating facts about the species, and witness a live squid release conducted by local divers.
How are they doing a live squid release? Simple: this is Des Moines, Washington; not Des Moines, Iowa.
Post Syndicated from Simon Janusz original https://blog.rapid7.com/2024/11/08/metasploit-wrap-up-11-08-2024/

This release of Metasploit Framework has added exciting new features such as new payloads that target the RISC-V architecture. These payloads allow for the execution of commands on compromised hardware, allowing Metasploit Framework and Metasploit Payloads to be used in more environments.
This new exploit worked on by Rapid7 contributors targets the ESC8 vulnerability. This work is a part of the recent Kerberos and Active Directory efforts targeting multiple ESC vulnerabilities, implementing modern security workflows into Metasploit Framework.
It includes a modified SMB capture server to repackage and forward authentication from the SMB capture server to an NTLM-authenticating HTTP server. The authenticated HTTP Client is then passed to the ESC8 module which then requests the creation of certificates and downloads them.
A new addition to the payloads catalog this week has been a new Python payload, developed by zeroSteiner allowing for the execution of arbitrary OS commands. This payload is compatible with Python 2.7 and 3.4+.
Authors: Michael Heinzl and Zach Hanley
Type: Auxiliary
Pull request: #19499 contributed by h4x-x0r
Path: gather/solarwinds_webhelpdesk_backdoor
AttackerKB reference: CVE-2024-28987
Description: This module exploits a backdoor in SolarWinds Web Help Desk (CVE-2024-28987) <= v12.8.3 to retrieve all tickets from the system.
Authors: Rafie Muhammad and Valentin Lobstein
Type: Auxiliary
Pull request: #19517 contributed by Chocapikk
Path: scanner/http/wp_ti_woocommerce_wishlist_sqli
AttackerKB reference: CVE-2024-43917
Description: This new auxiliary module exploits an unauthenticated SQL injection vulnerability in the TI WooCommerce Wishlist plugin for WordPress (versions <= 2.8.2). The vulnerability allows attackers to execute SQL queries via the order parameter which can be used to dump usernames and their hashed passwords.
Authors: Spencer McIntyre, bwatters-r7, and jhicks-r7
Type: Auxiliary
Pull request: #19404 contributed by bwatters-r7
Path: server/relay/esc8
Description: This is an implementation of the AD CS ESC8. It includes a library that uses a modified SMB capture server to repackage and forward authentication from the SMB capture server to an NTLM-authenticating HTTP server. The authenticated HTTP Client is then passed to the ESC8 module which then requests the creation of certificates and downloads them.
Author: bcoles [email protected]
Type: Nop
Pull request: #19518 contributed by bcoles
Path: riscv32le/simple
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Author: bcoles [email protected]
Type: Nop
Pull request: #19518 contributed by bcoles
Path: riscv64le/simple
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Authors: bcoles [email protected] and modexp
Type: Payload (Single)
Pull request: #19518 contributed by bcoles
Path: linux/riscv32le/exec
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Author: bcoles [email protected]
Type: Payload (Single)
Pull request: #19518 contributed by bcoles
Path: linux/riscv32le/reboot
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Authors: bcoles [email protected] and modexp
Type: Payload (Single)
Pull request: #19518 contributed by bcoles
Path: linux/riscv64le/exec
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Author: bcoles [email protected]
Type: Payload (Single)
Pull request: #19518 contributed by bcoles
Path: linux/riscv64le/reboot
Description: Add support for RISC-V 32-bit / 64-bit Little Endian payloads. Includes Linux Execute Command payloads and Linux Reboot payloads for testing.
Author: Spencer McIntyre
Type: Payload (Single)
Pull request: #19528 contributed by zeroSteiner
Path: python/exec
Description: Adds a new exec payload leveraging python.
pipe_dcerpc_auditor module to use the new pattern for handling port settings which offers users greater control over their targeting.USER_AS_PASS as pass was enabled the USERNAME would not be attempted as a PASSWORD.auxiliary/admin/kerberos/get_ticket module.You can find the latest Metasploit documentation on our docsite at docs.metasploit.com.
As always, you can update to the latest Metasploit Framework with msfupdate
and you can get more details on the changes since the last blog post from
GitHub:
If you are a git user, you can clone the Metasploit Framework repo (master branch) for the latest.
To install fresh without using git, you can use the open-source-only Nightly Installers or the
commercial edition Metasploit Pro
Post Syndicated from daroc original https://lwn.net/Articles/996720/
Back In Time is a GPL-2.0-licensed backup tool based on
rsync and written in Python. It has both graphical and command-line interfaces, and
supports backups to local disks or over SSH.
Back In Time was originally written by
Oprea Dan and released in 2009. The tool has been
through some rough patches over the years, and is currently on its third set of
maintainers. Christian Buhtz, one of the current maintainers, explained to me
how he and his co-maintainers had revived the project, as well as why he thought
Back In Time stood out from all of the existing backup solutions.
Post Syndicated from Sébastien Stormacq original https://aws.amazon.com/blogs/aws/announcing-new-apis-for-amazon-location-service-routes-places-and-maps/
Today, Amazon Location Service released 17 new and enhanced APIs that expand and improve capabilities for the Routes, Places, and Maps functionalities, creating a more cohesive and streamlined experience for developers. By introducing enhanced features and offering simplified migration, these updates make Amazon Location Service more accessible and useful for a wide range of applications.
You can now access advanced route optimization, toll cost calculations, GPS traces snapping, and a variety of map styles with static and dynamic rendering options, and perform proximity-based search and predictive suggestions, with rich, detailed information on points of interest.
At Amazon, the vast majority of our roadmaps are driven by customer feedback. Many customers building applications with Amazon Location Service have shared that they need purpose-built APIs and more granular details, such as contact information and business hours, when working with location-based data. Although the current API set has provided valuable tools for many customers, developers have expressed a desire for additional capabilities, such as detailed route planning, proximity-based searches, additional places details, and static map images. These new APIs address these requests and provide a more comprehensive, out-of-the-box location solution.
New and enhanced capabilities
Today’s launch introduces 10 updated APIs and seven entirely new APIs, responding directly to your feedback. Each service—Routes, Places, and Maps—receives specific enhancements designed to support a broader range of use cases.
Routes
The Amazon Location Routes API now supports advanced route planning and customization options, allowing users to:
CalculateIsolines to identify service areas within specific travel time, or distanceOptimizeWaypoints to determine the most efficient sequence of waypoints, helping to minimize either travel time or distanceSnapToRoads, to enable precise matching of GPS traces by snapping points to the road networkWith these capabilities, you can design more accurate and dynamic route experiences for your users. For example, a logistics company could optimize driver routes in real-time, factoring in live traffic and minimizing travel costs for deliveries.
Maps
The updated Amazon Location Maps API includes more purpose-built map styles crafted by skilled cartographers. These map styles offer professional designs that accelerate time to market and eliminate the need for custom map creation. Additionally, the Static Map Image feature allows developers to integrate static maps within applications, reducing the need for continuous data streaming and improving performance in use cases where interactivity isn’t necessary.
Key features of the Maps API include:
GetTile, to download a tile from a tileset, with a specified X, Y, and Z axis valuesGetStyleDescriptor, to return information about the styleGetStaticMap, which enables the rendering of non-interactive maps for reporting or visualization purposesPlaces
The Amazon Location Places API enhancements allow more detailed search capabilities, addressing requests for increased granularity in location data. The new capabilities include:
SearchNearby and Autocomplete, which support proximity-based queries and enable predictive text features for better user experiencesThese features are especially useful for applications where users need detailed information about nearby locations, such as food delivery services or retail applications. Imagine that a customer opens a food delivery application, searches for nearby restaurants using SearchNearby, and retrieves restaurant details such as business hours and contact information to confirm availability. Once multiple delivery orders are assigned to a driver, the application uses OptimizeWaypoints to suggest the most efficient route for pickups and deliveries. As the driver follows the route, SnaptoRoads provides precise visualization of their location, enhancing the customer’s real-time tracking experience.
Enhanced Location Service in action
Calling the API is straightforward. You can use the AWS Command Line Interface (AWS CLI), one of our AWS SDKs, or the plain REST API. However, displaying the information on a map in a web or mobile app requires some additional setup. Although the process is well documented, it’s too detailed to cover fully here. In this demo, I’ll focus on using the API.
Amazon Location Service allows API calls to be authenticated in two ways: through AWS API authentication (AWS Sigv4 authentication) or through API keys. API keys can be more convenient for developers of mobile applications where the end user is not authenticated or when integrating with Amazon Cognito is not feasible. This is the recommended authentication method for front-end applications.
To demonstrate the versatility of the APIs and how easily you can integrate inside your applications, I use a combination of the AWS CLI, cURL, and a graphical REST API client for each step of the demo.
Step 1: Create an API key
First, I create an API key for my application using the AWS CLI. You can also manage API keys in the AWS Management Console.
REGION=eu-central-1
KEYNAME=geo-key-seb
aws location create-key --region ${REGION} --key-name ${KEYNAME} --restrictions \
AllowActions="geo-routes:*","geo-places:*","geo-maps:*",\
AllowResources="arn:aws:geo-routes:${REGION}::provider/default",\
"arn:aws:geo-places:${REGION}::provider/default",\
"arn:aws:geo-maps:${REGION}::provider/default" \
--no-expiry
{
"Key": "v1.public.ey...cy",
"KeyArn": "arn:aws:geo:eu-central-1:02345678901:api-key/geo-key-seb",
"KeyName": "geo-key-seb",
"CreateTime": "2024-09-29T09:35:53.115000+00:00"
}
This command generates the API key, which I can now use to call Amazon Location APIs.
Step 2: Get geographic coordinates
Next, I use cURL to retrieve the geographic coordinates (a longitude and latitude) for the city center of Lille, France, by calling GeoCode and passing an address in the QueryText parameter.
$ curl --silent -X "POST" "https://places.geo.eu-central-1.amazonaws.com/v2/geocode?key=v1.public.ey...cy" \
-d $'{ "QueryText": "Grand Place, Lille, France" }'
{"ResultItems":[{"PlaceId":"AQ...5U","PlaceType":"Street","Title":"Grand'Place, 59800 Lille, France",
"Address":{"Label":"Grand'Place, 59800 Lille, France",
"Country":{"Code2":"FR","Code3":"FRA","Name":"France"},
"Region":{"Code":"HDF","Name":"Hauts-de-France"},"SubRegion":{"Name":"Nord"},
"Locality":"Lille","District":"Centre","PostalCode":"59800",
"Street":"Grand'Place","StreetComponents":[{"BaseName":"Grand'Place","Language":"fr"}]},
"Position":[3.06361,50.63706],
"MapView":[3.0628,50.6367,3.06413,50.63729],
"MatchScores":{"Overall":1,"Components":{"Address":{"Country":1,"Locality":1,"Intersection":[1]}}}}]}
This returns several data points, including the GPS coordinates for the city center: [3.06361, 50.63706].
Step 3: Search for nearby places
Using the coordinates retrieved, I use a REST API client tool to call the SearchNearby API to find places of interest around Lille’s city center.
On the right side of the screen, I can read the API response: a list of nearby places, such as restaurants, banks, and parking areas. I can further refine the search by specifying categories or restricting the search area.
The SearchNearby API accepts an optional Filter parameter that helps you restrict the search within a bounding box or to include or exclude business chains, categories, countries, or food types.
"Filter": {
"BoundingBox": [ number ],
"ExcludeBusinessChains": [ "string" ],
"ExcludeCategories": [ "string" ],
"ExcludeFoodTypes": [ "string" ],
"IncludeBusinessChains": [ "string" ],
"IncludeCategories": [ "string" ],
"IncludeCountries": [ "string" ],
"IncludeFoodTypes": [ "string" ]
},
In my search for nearby points of interest, one of the results returned was a McDonald’s, a well-known international reference
.
Step 4: Get driving directions
Finally, I use the AWS CLI to calculate driving directions between two city centers: Brussels, Belgium, and Lille, France.
aws location calculate-routes \
--origin 4.35278 50.84687 \
--destination 3.06361 50.63706 \
--key "v1.public.ey...cy"
The response includes a polyline for rendering the path on a map and a step-by-step list of driving directions.
...
"TravelMode": "Car",
"Type": "Vehicle",
"VehicleLegDetails": {
"TravelSteps": [
{
"Duration": 15,
"Distance": 75,
"ExitNumber": [],
"GeometryOffset": 0,
"Type": "Depart"
},
{
"Duration": 10,
"Distance": 8,
"ExitNumber": [],
"GeometryOffset": 2,
"Type": "Turn",
"TurnStepDetails": {
"Intersection": [],
"SteeringDirection": "Right",
"TurnIntensity": "Typical"
}
},
...
Step 5: Displaying the driving directions on a map
To visualize the route on a map, I use the MapLibre library, which is a rendering engine for displaying maps in web and mobile applications. Following the Amazon Location Service Developer Guide, I built a basic app to display the route.
In addition to MapLibre, you can use AWS Amplify to integrate and display Amazon Location data in your applications.
Getting started
With these new and updated APIs, Amazon Location Service offers a more comprehensive suite of mapping and location data for your business needs. These will help to accelerate your development lifecyle by increasing developers’ agility and scalability.
To get started, explore the updated Amazon Location Service Developer Guide and begin integrating these features today. You can also visit the Amazon Location Service page to learn more or try out the APIs with your favorite AWS SDKs to see how they can enhance your applications.