if this is the case, then I'd say that the best-case scenario happened. They had an expensive learning exercise. They won't forget these $2k.

We don't know that it's a key that's being sent. For all we know, it could be just random data. Obviously it's most likely not random data, but ciphertext. Either way, we have no idea what the message is.

It wasn't. It was going to be a military-only system, until KAL007 presented the obvious life-saving civilian case.

But yes, the title of this article might as well read "Satellite system developed for military use is being used for a military purpose."

sounds VERY low, also, wouldn't random read/write speed be MUCH more relevant here?

This is the 3rd time this has happened in roughly 2 decades by the way.

ppc/ppc64 -> x86_64 x86_64 -> x64 only x64 -> arm64

I much prefer Apple just forcing the developers to update their apps. Perhaps it’s just me though.

selling to the highest bidder doesn’t generate headlines though.

in Latvia we need to do this for domestic payments anyway. We use IBAN even for domestic payments..

> and likely your legal name.

not mandatory. If provided, the bank tells you whether the recipient name matches the account, but if not, you can proceed with the payment anyway.

I've never had to do any of this, and I quire frequently send SEPA payments from Latvia.

SEPA Instant Payments also solves that.

Linux kernel is one of the most audited open-source projects ever. I guarantee you that someone did reverse the patch.

> but forgot to tell the distros

Probably an oversight, but irrelevant. The bug was in the linux kernel. It's insane to suggest that they should have notified everyone shipping the linux kernel.

Considering that the patches have been available for a while, someone surely reversed what they were for and was actually exploiting this in the wild.

In the age of AI, I’d argue that “responsible disclosure” is dead. Arguably even in closed source projects. Just ask Claude to do a diff between the previous version and to see whether anything fixed in there could have had security implications.

We’re not there yet, but very soon the only way to responsibly disclose a vulnerability will be immediately.

USB 4 is actually going into an even worse direction. USB 4 = Thunderbolt 4, except everything is optional. e.g. USB 4 might not even support DP Alt mode. Thunderbolt 4 always will.

Except active optical cables. None exist yet that I'm aware of though.

They are everywhere. It's a global carrier. Carriers also know no geographic boundaries.

And yes, absolutely. All you need is a bootchain exploit. However unlike in the old jailbreaking days when people found and publicized them for fun, these days they are worth millions. Apple will pay you $500k for sandbox escape into the kernel. If you nail the bootchain, it'll be in the millions. From Apple. And god knows how much such a thing would go for in the black market.

Not always + there are no consequences whatsoever.

Plenty of leasing services will just provide you with IRR & RPKI, without ever touching the actual records.

> Ping time from different locations on their upstream AS gives a good guess.

Upstream AS is meaningless if it's a T1 carrier. Ping AS6939. They are everywhere.