Hi there! A while ago, Positive Technologies published the news that ATMs manufactured by Diebold Nixdorf (previously known as Wincor), or more specifically, the RM3 and CMDv5 cash dispensers, contained a vulnerability which allowed attackers to withdraw cash and upload modified (vulnerable) firmware. And since my former colleague Alexei Stennikov and I were directly involved in finding this vulnerability, I would like to share some details.
RPCS3 is an interesting project that emulates the PS3 console. It is actively evolving. Recently we heard the news that the emulator learned how run all the games from the console's catalog. That's a good excuse to analyze the project. We'll see which errors remained after new fixes were added to the project.
Hello, everybody!
My name is Alexander Zubkov and today I’d like to talk about routing loops.
People often see work in support as something negative. Today we'll look at it from a different perspective. This article is about a real communication of 100+ messages, exceptions, the analysis that didn't complete in three days...
Tools to improve and control code quality can be a key success factor in a complex software project implementation. Static analyzers belong to such tools. Nowadays, you can find various static analyzers: from free open-source to cross-functional commercial solutions. On the one hand, it's great – you can choose from many options. On the other hand – you have to perform advanced research to find the right tool for your team.
Back in 2016 an United States based music composer and performer Sergio Elisondo released an one-man band music album A Winner Is You (know your meme), with multi-instrumental cover versions of tunes from numerous memorable classic NES games. A special feature of this release has been its version released in the NES cartridge format that would run on a classic unmodified console and play digitized audio of the full album, instead of the typical chiptune sound you would expect to come from this humble console. I was involved with the software development part of this project.
This year Sergio makes a return with a brand new music release. This time it is all original music album You Are Error, heavily influenced with the video game music aesthetics. It also comes with a special extra. This time we have raised the stakes, and a new NES cartridge release includes not only the digitized audio, but full motion videos for each song, done in the silhouette cutout style similar to the famous Bad Apple video. Yet again, this project is crowdfunded via Kickstarter. It already got the asked amount in a mere 7 hours, but there is still a little time to jump on the bandwagon and get yourself a copy. In the meantime I would like to share an insight on the technical side of both projects.
This is the translation of my speech at T-Meetup: DevOps Life Cycle.
I believe that you have heard about SDLC (Systems development life cycle). Is it possible that the same things are applicable for the IaC?
Protocol Buffers is a very popular, cool, and high-quality product that is mostly developed by Google. This is a good challenge for the PVS-Studio static code analyzer. Finding at least something is already an achievement. Let's give it a shot.
It’s a harsh reality that any investment or security that you have is subject to systematic risk, that’s just the nature of the financial world, with mispricing — causing a divergence between the market price of a security and the fundamental value of that security — a guilty party quite often. This is brought about by the world we now live in, information-heavy, with masses of unstructured data sets and with an infinite number of possible outcomes.
Luckily, there are now methods in place that can combat some of these difficulties and, with any luck, bring the investor a healthy return on their investment.
And it comes in the form of Al-driven, quantum-inspired solutions fuelled by state-of-the-art processors that are able to leverage the unique attributes of quantum physics to solve some of the most, up to now, unsolvable problems, with a handful of startups at the forefront of it.
These include Adaptive Finance Technologies, QuantFi and Zapata Computing which, to a greater or lesser degree, have their own unique approach to investment strategies in the global markets in securities pricing, portfolio optimization, equities, derivatives and the like.
We’ll look now, just at a handful of these whose data readers will be able to find on TQD’s very own data platform, The Quantum Insider (TQI), starting off with the three already mentioned before moving on:
JiraCLI is an interactive command line tool for Atlassian Jira that will help you avoid Jira UI to some extent. This tool is not yet considered complete but has all the essential features required to improve your workflow with Jira.
The tool started with the idea of making issue search and navigation as straightforward as possible. However, the tool now includes all necessary features like issue creation, cloning, linking, ticket transition, and much more.
The tool supports both jira cloud and on-premise jira installation since the latest release.
This shows the Bacon–Shor subsystem code implemented on a 15-ion chain.
Multiple heads are better than one in real world calculations. Now, a team of University of Maryland-led quantum engineers report that multiple qubits may be better than one when it comes to error-corrections.
In what’s been described as a foundational step toward using quantum computers to tackle practical problems, the team combined nine qubits — a quantum bit — to make a single, improved logical qubit. A logical qubit can be used to probe for mistakes that extremely sensitive quantum computers are subject to, according to the researchers.
In the paper, which was just published in Nature, the team write that “Although fault-tolerant design works in principle, it has not previously been demonstrated in an error-corrected physical system with native noise characteristics. Here we experimentally demonstrate fault-tolerant circuits for the preparation, measurement, rotation and stabilizer measurement of a Bacon–Shor logical qubit using 13 trapped ion qubits.”
Nine of the qubits were termed data qubits and the four remaining are referred to as ancilla — or extra — qubits. The logical qubit was based on a quantum error correction code to easily detect and correct errors and made it to be fault-tolerant, or minimize the negative effects of errors.
“Qubits composed of identical atomic ions are natively very clean by themselves,” said Christopher Monroe, who is a Fellow of the Joint Center for Quantum Information and Computer Science and a College Park Professor in the Department of Physics at the University of Maryland in a university news release. “However, at some point, when many qubits and operations are required, errors must be reduced further, and it is simpler to add more qubits and encode information differently. The beauty of error correction codes for atomic ions is they can be very efficient and can be flexibly switched on through software controls.”
We often check retro games. In our company, many developers like to find interesting projects for themselves. They feel nostalgic when they're studying these projects. But we need to run retro games on something, right? This time we checked a project that helps to run old games on modern hardware.
Money theft is one of the most important risks for any organization, regardless of its scope of activity. According to our data, 42% of cyberattacks on companies are committed to obtain direct financial benefits. You can detect an attack at various stages—from network penetration to the moment when attackers start withdrawing money. In this article, we will show how to detect an attack at each of its stages and minimize the risk, as well as analyze two common scenarios of such attacks: money theft manually using remote control programs and using special malware—a banking trojan.
The PVS-Studio developers often check open-source projects and write articles about that. Sometimes, when writing an article, we come across interesting situations or epic errors. Of course, we want to write a small note about it. This is one of those cases.
Hello! It’s Top 3D Shop and this is Part 2 of our introduction to the world of 3D scanners by Chinese manufacturer Shining. The first part covered the desktop scanners. Now we are going to talk about the handheld line. We will compare the specs, provide overviews and talk about both the strong points and limitations of the devices.
Hello! It’s Top 3D Shop and in this article we will talk about Shining 3D. This manufacturer is among the few companies that offer a comprehensive ecosystem of 3D digitization solutions, covering not only 3D printing, but 3D scanning and software solutions for engineering and medical teams.
Most importantly, the company is constantly innovating to bring these technologies not only to the production floors of industrial conglomerates, but small businesses, R&D and engineering labs. For example, the Einscan HX is the most affordable handheld laser 3D scanner currently available on the market, bringing the price down to only $9,999.
The professionals and hobbyists alike will find value in reading about this brand and its products, and the article will cover precisely that. In part 1 we’ll focus on the overview of the company’s history and the Einscan desktop line of 3D scanners: Einscan SE and Einscan SP. In part 2 we’ll focus on their handheld line: Einscan H, Einscan Pro 2X 2020, Einscan Pro HD and Einscan HX.
If you're interested in learning new languages or teaching them, then you probably know such a way as parallel reading. It helps to immerse yourself in the context, increases the vocabulary, and allows you to enjoy the learning process. When it comes to reading, you most likely want to choose your favorite author, theme, or something familiar and this is often impossible if no one has published such a variant of a parallel book. It's becoming even worse when you're learning some cool language like Hungarian or Japanese.
Today we are taking a big step forward toward breaking this situation.
We will use the lingtrain_aligner tool. It's an open-source project on Python which aims to help all the people eager to learn foreign languages. It's a part of the Lingtrain project, you can follow us on Telegram, Facebook and Instagram. Let's start!
At first, we should find two texts we want to align. Let's take two editions of "To Kill a Mockingbird" by Harper Lee, in Russian and the original one.
Once upon a time our DBA team had a task. We had to move a ZooKeeper ensemble which we had been using for Clickhouse cluster. Everyone is used to moving an ensemble by moving its data files. It seems easy and obvious but our Clickhouse cluster had more than 400 TB replicated data. All replication information had been collected in ZooKeeper cluster from the very beginning. At the end of the day we couldn’t miss even a row of data. Then we looked for information on the internet. Unfortunately there was a good tutorial about 3.4.5 and didn’t fit our version 3.6.2. So we decided to use “the extending” for moving our ensemble.
Hello! This article will cover 3D printer manufacturer Modix and its professional large-scale 3D printers. The review will include the history of the brand, its products, their functions and possible applications.
Everyone who runs the static analyzer on a project for the first time is slightly shocked by hundreds, thousands or even tens of thousands of warnings. It may be frustrating. Is my code so terrible? Or is the analyzer lying? In any case, filtering by the severity changes the situation, not completely though. That's why we thought about how we could improve the first experience with the analyzer. Let me show you the new feature step by step...