Troels Nørgaard

The xz/liblzma CVE-2024-3094 backdoor is door with a key: 🕵️Obfuscated code hidden in test data files 🎯Injects code during Debian or RPM package build process 🔐Redirects crypto functions used during SSH logins 👻 Tries to evade analysis & debugging 🔎Detected by Andres Freund

@mariofusco Trying to understand. A 6 plane highway has a capacity of around 150,000 vehicles/day. And let’s assume every car need 2x charges (DC) of around 20 min. Let’s assume the majority of traffic is in 18 hours. I get that to be ~3,500 DC chargers at 100% utilization. Seems doable?

@troelsnorgaard Sorry but you have no clue of what you're saying or maybe you have no idea of what happens in Italy during xmas. There will be literally millions of cars on the same road (A1 connecting Milano to Napoli) at the same time. How could you recharge all of them?

It's estimated that during this weekend around 3 million cars will traverse Italy from north to south driving an average of 800km each. Question for european governments and car manufacturers: what would it happen if they were ALL pure electric? Would it be sustainable?

@mariofusco I assume you were referring to the argument that there wouldn’t be enough electricity. We need more charging stations for sure, the market is moving to build them out, but they have to walk a fine line of not overbuilding.

@mariofusco Yes, grids do forecasting and charging stations do load balancing. You are parroting big oil arguments. It’s going to be just fine with EVs.

@mariofusco Unlike a lot of other electricity consumer, it’s very easy to quickly control a EVSE, which is why it’s possible to do frequency response with a pool of charging stations.

👀 “We also found that a few minutes of testing could completely break AWS RDS’s MySQL replication: even a simple CREATE DATABASE would succeed on the primary and fail to appear on the secondaries.” - jepsen.io/analyses/mysql…

🛠️ Ever dealt with glitches in your SaaS app where actions yield unexpected results? That can be a transaction isolation issue. I blogged about transaction isolation, how it works in Postgres and how to use the right isolation to build better apps: thenile.dev/blog/transacti…

👏Zero traffic cost for Kafka consumers👏 A superb write up on how Grab achieved 25% drop in cross-AZ traffic by enablin consumers to fetch from the closest replica🤯 Faced gotchas too: increased end-to-end latency, skewed load, lack of broker isolation engineering.grab.com/zero-traffic-c…

@doctorow on just about any topic is spot on. As much as Iove making things in Midjourney or having an AI Trump voice recite a lyric or movie or TV show quote, I'm not ignoring that AI everything immediately turned into the new crypto shit. link.medium.com/uFTA4C7Fmyb

@SimonHoejbjerg Hvis man er i krig, det vel en ganske fin ide at kunne opdatere sine radar-signaturer lidt hurtigere end den årlige release? :-) Hurtig release-cyklus behøver ikke at være af dårligere kvalitet.

Det er “lidt” anderledes når man laver våbenkritisk software.

Dixa is remote friendly (globally) and similar stack to Twitter (Scala, finagle, and thirft): jobs.lever.co/dixa

The Danish tax system is broken. linkedin.com/feed/update/ur…

Alright, ligner at #MitId “chip” (token) er en FTSafe / Feitian (Kinesisk) MultiPass FIDO. Feitian er normalt en ganske fin token leverandør og deres ePass2003 var ret populær.

Med hardware tokens kan man normalt selv generere den private nøgle eller importere ude fra hvis man ikke stoler på pseudo-random generator’en, men kan ikke finde info omkring dette for #MitID. Alting skal være properitær og lukket ned, vi er jo bare dumme brugere.

Hey @DigstStatus, verden bliver altså ikke mere sikker af #MitID disabler paste på password input fields. Vi lever i 2022 og password managers eksistere! 😀 cc @EngbrgDK

I disagree with John Mearsheimer on the causes of the Ukraine-Russian War. Instead, I think...and stay with me on this one... Offensive Realism offers a better explanation. [THREAD]

Wrote some notes summarizing my first impressions of web3: moxie.org/2022/01/07/web…