Completely isolated PC’s are vulnerable to data theft – via their switching power supplies.

Completely isolated PC’s are vulnerable to data theft – via their switching power supplies.

“Air gapping” is a security measure that involves a computer being physically isolated and incapable of connecting wirelessly or physically with other computers or network devices. It’s used in high security setups. The idea is that if the system is physically incapable of connecting to other systems or networks, it should be safe. Right?

A new attack method named COVID-bit uses electromagnetic waves from power supplies to transmit data from air-gapped systems. Using this attack, even if the computer is completely isolated and unplugged from the internet, the researchers demonstrated collecting information emanating from the device by a nearby smartphone or laptop over a distance of at least two meters – even if a wall separates the two.

Researchers created a malware program that regulates CPU load and core frequency in a particular manner to make the power supplies on air-gapped computers emanate electromagnetic radiation on a low-frequency band (0 – 48 kHz).

While the attack requires at least one instance of physical access to install the malware, such attacks have happened. Examples include the Stuxnet worm in Iran’s uranium enrichment facility at Natanz, Agent.BTZ that infected a U.S. military base, and the Remsec modular backdoor that collected information from air-gapped government networks for over five years.

Mordechai Guri explains the primary source of electromagnetic radiation in switched mode power supplies is due to their internal design and switching characteristics in the technical paper. “In the conversion from AC-DC and DC-DC, the MOSFET switching components turning on or off at specific frequencies create a square wave,” the researcher details. The electromagnetic wave can carry a payload of raw data, following a strain of eight bits that signify the beginning of the transmission.

The attack works against air gapped pc’s, laptops, and even a raspberry pi. The receiver can be as simple as a cell phone.

Definitely worth a read.

Links:

Quantum Computer solves 3,854 variable BMW sensor placement problem in 6 minutes

Quantum Computer solves 3,854 variable BMW sensor placement problem in 6 minutes

Quantum Computing Inc used their new Entropy Quantum Computing (EQC) quantum based hardware solution to solve BMW’s 2022 Vehicle Sensor Placement Challenge (VSPC) in just 6 minutes. It marks a new high water mark in the ability of quantum computers to solve real-world problems.

The 2021 BMW Group and Amazon Web Services (AWS) Quantum Computing Challenge included a Vehicle Sensor Placement use case that challenged participants to find optimal configurations of sensors for a given vehicle that would provide maximum coverage (i.e. detect obstacles in different driving scenarios) at minimum cost.

The problem consisted of 3,854 variables and over 500 constraints. Placing sensors in vehicles – and especially autonomous vehicles – is an incredible challenge. A multitude of variables have to be taken into account – variables such as chassis design (which has implications on vehicle security), absence of obstruction (different placements offer different fields of view or allow for lower error possibility), wind resistance and weight balancing to name a few.

Although QCI placed as a 2021 finalist, its 2022 acquisition of quantum photonics systems company QPhoton provided a powerful suite of new quantum hardware technologies, including EQC. As a result, QCI today presented BMW with a 2022 solution: a superior sensor configuration consisting of 15 sensors yielding 96% coverage using QCI’s quantum hardware and software system.

Links:

Tips from a digital nomad

Tips from a digital nomad

Paul Hunkin is a 36 year old developer that’s been to 83 countries and works as a digital nomad. His original article is something of a plug for Upwork – a freelancing platform. Upwork’s 2021 survey estimates that 40.7 million American professionals were expecting to be fully remote in the next five years (consider those marketing numbers). Hunkins, however, does has five tips he learned from his decade doing remote work abroad that I thought were helpful:

  1. Figure out how to make money before you leave
    You need to have marketable skills, a track record of earning a living online, and have a method to make money online abroad with those skills before you leave. Hunkins started doing freelance jobs while at home in New Zealand on Upwork. He built up his portfolio to the point he could charge $120/hour for jobs and $200 for hour-long consultations.
  2. Pick a home base
    He spent the first few years traveling from place to place, but found it got exhausting always moving around. He established a home base to explore from even if he was not there all the time. Having a more permanent address also had tax benefits if he picked the right countries.
  3. Ensure you have what you need
    Vetting what you need to do your job is important. Fast and stable network connectivity is critical if it’s your job so double-check. Easy transportation from where you are staying to key services is also important (mass transit, grocery, airport, etc). He preferred Airbnb’s since some have more comfortable dedicated work spaces. He also says you must be aware some countries like China or the Middle East that block apps like Skype and WhatsApp.
  4. Stick to a daily routine
    “Wherever I am in the world, I get up at the same time, do my email, then plan the day.” He might spend part of his day exploring a new city, but ticks tedious tasks off his to-do list first. “You must get the work done before the fun stuff.” Hunkins always stays available – by iPad or phone – during client’s core business hours and works a 40 hour week every week.
  5. Loneliness is a thing
    The social aspect of work disappears when you are in a different time zone, so meeting people outside the office is critical. Expat groups exist everywhere and that’s a great first place. You can find them on Facebook and expat Slack channels. He also suggested booking a co-working space to meet other like-minded folks.

Links:

What do you do at an office job

What do you do at an office job

So, this response has been making the rounds on the internet and has been probably loved by the whole anti-work crowd. The video compares office work to a cult. Called the Cult of Professionalism it has the worship of a non-human deity called a company, has a cult-like doctrine in the form of mission statements/vision statements/etc, the c-suite executives are the high priestesses/priests, have buzzword filled ‘scripture’ you are expected to follow, and … well, you get the picture.

From what I can tell from her many mischaracterizations, it is likely just sarcastic satire. I don’t think she’s actually worked an office job, or probably a terribly dysfunctional one. Sadly, this is an increasingly common form of pseudo-intellectual sarcasm that disenfranchised groups like the anti-work crowd gravitate towards. It’s not new. People have done this to actual religions, government, and in recent years just about all social structures. They paint with a broad brush while at the same time offering no viable or even sound alternatives.

That’s not to say there aren’t absolutely valid points in her sarcasm. I have long been extremely worried about the growing cult-like behavior in many small startups, non-profits, and larger corporations. Places that promise that you can ‘bring your whole self to work’ are known to be toxic. It creates an environment in which your sense of self worth and self-identity is now tied to your job. Emotional manipulation is easy by leadership and it’s often a temptation they can’t avoid. (Examples: “If you’re really committed to this cause, you’ll come in to our non-paid volunteer activity on Saturday to support the work we all need to do to fight <insert your chosen ‘evil’ here>”, “We require you give us access to all your social media accounts, expect you to post all our events on all your personal accounts, and send invites to our events to everyone on your friend lists”. Both are actual things I know have happened to friends at local Portland non-profits). Finally, some organizations are requiring ever greater disclosure and adherence to ideals that have very little to do with the work being done – which is probably why we’re now seeing ever-increasing lawsuits in this area and workplace environments becoming ever more actively hostile and divisive.

At any rate, her video made the rounds on Linked-In, and I thought one user had a great response:

I feel sorry for her because she’s probably been in an environment previously or currently, that feeds her evidence of these beliefs she holds. There is a different perspective to all this hierarchy and managing. It does serve its purpose. But if you’re mentally conditioned to be a victim, it’s a great premise for oppression, by people who don’t know better, isn’t it?

It’s good satire, but feeds newbies with pre-determined beliefs and then they validate it with the one thing that did not resonate with them, and conveniently choose to ignore the other 9 instances of learning, knowledge and professionalism. Our mental conditioning sets us up for bias against even the most well meaning actions.

It has actually become really cool to label everything fascist and oppressive without owning or taking responsibility for one’s own actions or limited capabilities.

I think that last bit is really good. In the end, we can only own and control our own actions. We cannot own the actions of others and change can only begin with yourself. If there is one thing I have learned, it’s that the fastest way to get yourself into a whole host of troubles is to give into the easy temptation to start blaming others and focusing on what others are doing wrong instead of focusing 100% on myself and my actions. Secondly, we must recognize we have limited capabilities. Even the most ardent startup leaders say working together and with others is critical to getting anything done – no matter what people want to believe. We simply cannot do things by ourselves – we must work together. And when we must work together, structure develops. No matter how much people have tried to deny that in the past – to horrific consequences.

I think a vast untapped area of need is the growing disenfranchised population of young people that now mistake meme-like anti-intellectual sarcasm for real wisdom – while ignoring being educated on the countless decades of empirical research and well understood social and behavioral data. Sadly, we seem to be slipping into the same mistakes we made in the early 20th century – mistakes that cost millions of lives and lead to the most oppressive political regimes in all of human history.

Libby stinks, I want my Overdrive

Libby stinks, I want my Overdrive

Overdive Media pulled their app for PC Windows 10/11 in February 23, 2022. Unfortunately, their new app, Libby, doesn’t allow you to actually download and listen to the mp3’s on your Windows desktop.

I seemed to have 2 copies of the app and they do seem to still work as of Dec 2022.

Download links:

ODMediaConsoleSetup.msi version 3.6.0 – Copyright 2016 Overdrive, Inc.

ODMediaConsoleSetup.msi version 3.2.0 from software.informer

Links:

John Carmack quits Meta and its VR efforts

John Carmack quits Meta and its VR efforts

John Carmack has quit Meta and their Meta VR efforts. I think that this is a perfect example of how visionary people get sucked in and are often ill equipped to the workings of large corporate machinations. The very things that make big corporations hugely successful (ability to work at scale, massive market share, highly disciplined and tracked execution) can ultimately be the reason they struggle with prototype development, innovation, or innovative people.

Some clues are in some of the interesting things Carmack says,

Carmack complained that it has been a “struggle” for him to influence Meta’s overall direction and that he’s “wearied of the fight.” Despite his high-ranking “consulting CTO / executive advisor” title, Carmack complained that he is “evidently not persuasive enough” to change Meta’s VR efforts for the better.

“We have a ridiculous amount of people and resources, but we constantly self-sabotage and squander effort. There is no way to sugar coat this,” he wrote. “I think our organization is operating at half the effectiveness that would make me happy.”

There he talked about his internal efforts to push for the development of a “super cheap, super lightweight” Meta VR headset that could come in at “$250 and 250 grams.” Instead, Meta has put its recent VR hardware efforts behind the heavily overdesigned and $1,500 Quest Pro. In his October keynote Carmack told Meta that “the basic usability of Quest really does need to get better” and that “our app startup times are slow, our transitions are glitchy… We need to make it a whole lot better… much, much faster to get into.”

I think Carmack is a skunkworks technical leader. He’s used to working with a small team of extremely talented engineers on rapid development of extraordinary projects. Skunkworks and vision projects like this get crushed when you try to scale too quickly to dozens of interconnected teams. Instead, one must develop the solid core of the idea and prove it 100% – then scale to production. If you try to scale without 100% coherent vision and the issues sorted out, you’ll end up bleeding money, vision, and worst of all: time and energy switching direction. I think that’s why he feels exhausted and only sees people being 50% effective.

It’s the common case of agility vs scale. Big organizations with skilled but compartmentalized development teams often fail slowly after wasting tons of people’s time. Not because they are bad teams, but because they are often given delivery goals and usually do not have the power to switch direction on their own or often see the bigger picture to ensure the solution works properly across groups. This costs a lot in money, management time, and possibly reworks. Instead of one person failing, approaching the lead with alternatives and then re-thinking the approach at a higher level, the team continues to try to meet the goal without the ability to see the bigger picture or make better wholistic changes.

Anyway – the article is a fascinating read.

blindfold duck catching

blindfold duck catching

Catching a duck is a very entertaining folk game in the festive life of Hanoi people. If you go to festivals in Hanoi in the days after the Lunar New Year, you will probably have the opportunity to participate in this game. https://hanoidiscover.com/

Reminds me of our local county fair chicken drop contest.