In dem Paper haben einige Kryptologen mal das Internet nach RSA-Schlüsseln durchsucht, einige Millionen eingesammelt, und geguckt, ob es da gemeinsame Primfaktoren in den Modulen gibt.

More worrisome is that among the 4.7 million distinct 1024-bit RSA moduli that we had originally collected, more than 12500 have a single prime factor in common. [...] in our current collection of 7.1 million 1024-bit RSA moduli, almost 27000 are vulnerable and 2048-bit RSA moduli are affacted as well.

Das ist ein sehr gruseliges Ergebnis. Ihre Schlussfolgerung ist, dass das Generieren von RSA-Schlüsseln deutlich risikobehafteter ist als das Generieren von Schlüsseln mit nur einer Komponente, wie bei ElGamal oder (EC)DSA.

The Electronic Frontier Foundation's SSL Observatory is a research project that gathers and analyzes the cryptographic certificates used to secure Internet connections, systematically cataloging them and exposing their database for other scientists, researchers and cryptographers to consult.

Now Arjen Lenstra of École polytechnique fédérale de Lausanne has used the SSL Observatory dataset to show that tens of thousands of SSL certificates "offer effectively no security due to weak random number generation algorithms." Lenstra's research means that much of what we think of as gold-standard, rock-solid network security is deeply flawed, but it also means that users and website operators can detect and repair these vulnerabilities.

Mutmaßliche chinesische Hacker haben laut einem Zeitungsbericht über viele Jahre Zugang zum Computersystem des Telekom-Ausrüsters Nortel gehabt – und diesen auch ausgiebig genutzt. Dank sieben gestohlener Passwörter von Top-Managern habe es für die Eindringlinge ab dem Jahr 2000 bei Nortel kaum Geheimnisse gegeben, berichtete das "Wall Street Journal" am Dienstag unter Berufung auf eine interne Untersuchung.

It's been highly underreported that ICANN is now accepting submissions for new gTLD's, or 'generic top level domains'. #

Without getting into all the details of what that means, other than possibly hundreds if not thousands of new domains like .shop .dork .shill and .drone that you will be able to register vanity domain names under, ICANN has come up with a new requirement upon registration: #

You must verify who you are when you register a new domain name, even an international one. #

So, if I pay GoDaddy or any other outfit my $9 for curry.blog and have it point to my server at blog.curry.com, I will have to prove my identity upon registration. Presumably with some form of government approved ID. #

This way, when OPEN or perhaps a non-NDS-version of SOPA is passed, if you break the rules, you will be hunted down, regardless of where you live or operate since this also includes international domain names. #

Once upon a time, there lived a little DJ, in a big, wild world with
weirdly tagged or untagged or re-tagged mp3 files all over the place - and all
he would've asked for was just a wee bit of order. Back then (he still vividly
remembered the days when he used to walk through man-high snow, barefoot, uphill
both ways and... well, you get the idea), the DJing business was hard enough to
be honest.
Now, one day, a fairy little fairy (true story!) would listen to one of his gigs
by chance, and was so amazed by the deep house and tech house and what-not he
mixed, that she'd approach him and granted him a wish - and oh, our dear DJ did
know exactly what he wanted!
He placed the tiny bot he was given by our fair fairy in his folder with freshly
hunted-down tracks, and the bot would make sure all ID3 tags were kept clean...
that meaning, discarded of; and the artist & title taken from the file names of
all .mp3s present in said directory written in ID3v2.

The new restaurant, which is being built in a former branch of Midland bank, was being excavated when the tapes were found, alongside guns, gold and jewellery. The total value of the haul is £1.1 million, reports Holy Moly. Oliver has since given everything found in the basement to the treasury.

We all know that there's no such thing as a size 10. But I'm a computer programmer as well as a fashion fan, so I built a website to beat the sizing madness

Here are some recommendations for fonts to use in gvim, particularly for writing programs.

Das Landesarbeitsgericht Köln hat mit einer Entscheidung vom 18.02.2011 (4 Sa 1122/10) verdeutlicht, dass die gemäß § 1 Abs. 3 KSchG im Rahmen der Sozialauswahl zu beachtenden Kriterien zwar grundsätzlich gleichrangig sind, hat jedoch ein Arbeitnehmer altersbedingt schlechtere Chancen auf dem Arbeitsmarkt, so ist das Lebensalter regelmäßig höher zu bewerten als Unterhaltspflichten. Somit ist in einem solchen Fall die Kündigung eines erheblich jüngeren Arbeitnehmers auch dann gerechtfertigt, wenn dieser gegenüber Kindern unterhaltspflichtig ist.

IBM says: "eXFlash is optimized for a heavy mix of random read and write operations, such as transaction processing, data mining, business intelligence and decision support, and other random I/O-intensive applications."

Read the Redbook for more information. In summary: IBM has a VFCache equivalent and has had for over a year.

Access Optical Networks says it has developed a 1.2TB holographic storage cube that can transfer data at 155MB/sec and last longer than 50 years. Oh, and it's done using mirrors – but no smoke.

The storage medium is a 1cm cube of photorefractive lithium niobate crystalline material and the claimed cost/GB is $0.11 in 1,000 unit quantities.

Having succeeded in halting the runaway SOPA/PIPA train, Internet users don’t intend to just stand down and let a few tech companies, who need to worry about their bottom line along with the needs of users, or even crucial nonprofit organizations like Wikipedia, speak for everyone. Indeed, it’s pretty ironic, and telling, that Sherman’s piece points to the “six-strikes” deal big content made with ISPs last year as a model for the “voluntary cooperation.” Users weren’t at the table when that deal was struck either, even though they’ll be stuck with much of the bill. If they had been, that deal could have been very different, and a lot more fair.

Intel has announced that its Haswell architecture, due to ship some time in 2013, will include hardware support for transactional memory.

Transactional memory is a promising technique designed to make the creation of reliable multithreaded programs easier. It does this by using a transactional model wherein complex operations can be performed concurrently, in isolation from each other, with those operations either completing or being undone as if they'd never been started—a model that developers are already familiar with from database programming.

I’ve been working, during the past few months, on Firefox startup performance, with a particular focus on I/O, even more particularly focusing on the core library: libxul. As I’ve been saying all along, my current work is focused on GNU/Linux systems, though some of it has a direct impact on OSX, and similar work is most probably applicable on Windows.

The Computer Sciences Corporation has had to bite the bullet and take a $1.49 billion write-off in the fall out of a catastrophic NHS IT project.

It is thought that the write off is the single largest for a UK IT project, after plans to implement a nationwide patients record system hit the rocks.

Perl Data Language (PDL) – the extension that allows Perl to quickly and compactly store and manipulate large N-dimensional arrays – has been updated to version 2.4.10 and adds automatic multi-thread parallelisation support.

In yet another episode in Hollywood’s year-long legal battle with one of the world’s biggest cyberlocker services, the MPAA has now drawn Google into the dispute. The MPAA says that Google holds valuable information on Hotfile and should produce it, but the search giant is refusing without the file-hoster’s consent. Hotfile says ‘no’ on the basis that the deadline for discovery expired last year.

The EU followed in the footsteps of Australia, Canada, Japan, South Korea, Morocco, New Zealand, Singapore and the United States, who already signed it last October. This brings ACTA a step closer to passing, but individual EU member states and the European Parliament still have to ratify the treaty later this year.

To prevent this from happening, hundreds of thousands of people across the world are taking to the streets today, and millions more are expected to do their part online. In Europe demonstrations are being held in more than 200 cities, the largest in Sofia, Bulgaria, with more than 50,000 participants.

Da Busybox unter der GPL steht, viele Firmen sich aber einen Dreck um Copyright scheren, wenn es sie selber statt ihre Endkunden betrifft, wird es gerne in Router und andere Geräte eingebaut und ist dann Gegenstand einer Lizenzklage, die am Ende dazu führt, daß die Firmen ihre Firmware offenlegen müssen, weil sie zu faul sind, selber zu programmieren und zu blöd, sich genau das Urheberrecht zu halten, für dessen Verschärfung sie Unsummen an die diversen Lobbyfeen bezahlt haben (wir reden hier unter anderem von Sony).

Release 2.0 of the IBM SmartCloud Enterprise introduces several new features. Two of these features are the ability for an IBM SmartCloud Enterprise account to have multiple virtual private network tunnels (VPNs) into a IBM SmartCloud Enterprise data center and multiple virtual local area networks (VLANs) in each data center. The authors examine the details of these new features.