In dem Paper haben einige Kryptologen mal das Internet nach RSA-Schlüsseln durchsucht, einige Millionen eingesammelt, und geguckt, ob es da gemeinsame Primfaktoren in den Modulen gibt.

More worrisome is that among the 4.7 million distinct 1024-bit RSA moduli that we had originally collected, more than 12500 have a single prime factor in common. [...] in our current collection of 7.1 million 1024-bit RSA moduli, almost 27000 are vulnerable and 2048-bit RSA moduli are affacted as well.

Das ist ein sehr gruseliges Ergebnis. Ihre Schlussfolgerung ist, dass das Generieren von RSA-Schlüsseln deutlich risikobehafteter ist als das Generieren von Schlüsseln mit nur einer Komponente, wie bei ElGamal oder (EC)DSA.

The Electronic Frontier Foundation's SSL Observatory is a research project that gathers and analyzes the cryptographic certificates used to secure Internet connections, systematically cataloging them and exposing their database for other scientists, researchers and cryptographers to consult.

Now Arjen Lenstra of École polytechnique fédérale de Lausanne has used the SSL Observatory dataset to show that tens of thousands of SSL certificates "offer effectively no security due to weak random number generation algorithms." Lenstra's research means that much of what we think of as gold-standard, rock-solid network security is deeply flawed, but it also means that users and website operators can detect and repair these vulnerabilities.

Mutmaßliche chinesische Hacker haben laut einem Zeitungsbericht über viele Jahre Zugang zum Computersystem des Telekom-Ausrüsters Nortel gehabt – und diesen auch ausgiebig genutzt. Dank sieben gestohlener Passwörter von Top-Managern habe es für die Eindringlinge ab dem Jahr 2000 bei Nortel kaum Geheimnisse gegeben, berichtete das "Wall Street Journal" am Dienstag unter Berufung auf eine interne Untersuchung.

It's been highly underreported that ICANN is now accepting submissions for new gTLD's, or 'generic top level domains'. #

Without getting into all the details of what that means, other than possibly hundreds if not thousands of new domains like .shop .dork .shill and .drone that you will be able to register vanity domain names under, ICANN has come up with a new requirement upon registration: #

You must verify who you are when you register a new domain name, even an international one. #

So, if I pay GoDaddy or any other outfit my $9 for curry.blog and have it point to my server at blog.curry.com, I will have to prove my identity upon registration. Presumably with some form of government approved ID. #

This way, when OPEN or perhaps a non-NDS-version of SOPA is passed, if you break the rules, you will be hunted down, regardless of where you live or operate since this also includes international domain names. #

Once upon a time, there lived a little DJ, in a big, wild world with
weirdly tagged or untagged or re-tagged mp3 files all over the place - and all
he would've asked for was just a wee bit of order. Back then (he still vividly
remembered the days when he used to walk through man-high snow, barefoot, uphill
both ways and... well, you get the idea), the DJing business was hard enough to
be honest.
Now, one day, a fairy little fairy (true story!) would listen to one of his gigs
by chance, and was so amazed by the deep house and tech house and what-not he
mixed, that she'd approach him and granted him a wish - and oh, our dear DJ did
know exactly what he wanted!
He placed the tiny bot he was given by our fair fairy in his folder with freshly
hunted-down tracks, and the bot would make sure all ID3 tags were kept clean...
that meaning, discarded of; and the artist & title taken from the file names of
all .mp3s present in said directory written in ID3v2.

The new restaurant, which is being built in a former branch of Midland bank, was being excavated when the tapes were found, alongside guns, gold and jewellery. The total value of the haul is £1.1 million, reports Holy Moly. Oliver has since given everything found in the basement to the treasury.

We all know that there's no such thing as a size 10. But I'm a computer programmer as well as a fashion fan, so I built a website to beat the sizing madness

Here are some recommendations for fonts to use in gvim, particularly for writing programs.

Das Landesarbeitsgericht Köln hat mit einer Entscheidung vom 18.02.2011 (4 Sa 1122/10) verdeutlicht, dass die gemäß § 1 Abs. 3 KSchG im Rahmen der Sozialauswahl zu beachtenden Kriterien zwar grundsätzlich gleichrangig sind, hat jedoch ein Arbeitnehmer altersbedingt schlechtere Chancen auf dem Arbeitsmarkt, so ist das Lebensalter regelmäßig höher zu bewerten als Unterhaltspflichten. Somit ist in einem solchen Fall die Kündigung eines erheblich jüngeren Arbeitnehmers auch dann gerechtfertigt, wenn dieser gegenüber Kindern unterhaltspflichtig ist.

IBM says: "eXFlash is optimized for a heavy mix of random read and write operations, such as transaction processing, data mining, business intelligence and decision support, and other random I/O-intensive applications."

Read the Redbook for more information. In summary: IBM has a VFCache equivalent and has had for over a year.

Access Optical Networks says it has developed a 1.2TB holographic storage cube that can transfer data at 155MB/sec and last longer than 50 years. Oh, and it's done using mirrors – but no smoke.

The storage medium is a 1cm cube of photorefractive lithium niobate crystalline material and the claimed cost/GB is $0.11 in 1,000 unit quantities.

Having succeeded in halting the runaway SOPA/PIPA train, Internet users don’t intend to just stand down and let a few tech companies, who need to worry about their bottom line along with the needs of users, or even crucial nonprofit organizations like Wikipedia, speak for everyone. Indeed, it’s pretty ironic, and telling, that Sherman’s piece points to the “six-strikes” deal big content made with ISPs last year as a model for the “voluntary cooperation.” Users weren’t at the table when that deal was struck either, even though they’ll be stuck with much of the bill. If they had been, that deal could have been very different, and a lot more fair.

Intel has announced that its Haswell architecture, due to ship some time in 2013, will include hardware support for transactional memory.

Transactional memory is a promising technique designed to make the creation of reliable multithreaded programs easier. It does this by using a transactional model wherein complex operations can be performed concurrently, in isolation from each other, with those operations either completing or being undone as if they'd never been started—a model that developers are already familiar with from database programming.