Showing posts with label Programming. Show all posts
Showing posts with label Programming. Show all posts

Tuesday, May 9, 2017

Why The Sally Yates Hearing Was Very Bad News For The Trump White House

The president just lost his favorite piece of spin for countering the Russia scandal.



The much-anticipated Senate hearing on Monday afternoon with former acting attorney general Sally Yates and former director of national intelligence James Clapper confirmed an important point: the Russia story still poses tremendous trouble for President Donald Trump and his crew.

Yates recounted a disturbing tale. She recalled that on January 26, she requested and received a meeting with Don McGahn, Trump's White House counsel. At the time, Vice President Mike Pence and other White House officials were saying that ret. Lt. Gen. Michael Flynn, Trump's national security adviser, had not spoken the month before with the Russian ambassador to the United States, Sergey Kislyak, about the sanctions then-President Barack Obama had imposed on the Russians as punishment for Moscow's meddling in the 2016 presidential campaign. Yates' Justice Department had evidence—presumably intercepts of Flynn's communications with Kislyak—that showed this assertion was flat-out false.

At that meeting, Yates shared two pressing concerns with McGahn: that Flynn had lied to the vice president and that Flynn could now be blackmailed by the Russians because they knew he had lied about his conversations with Kislyak. As Yates told the members of the Senate subcommittee on crime and terrorism, "To state the obvious: you don't want your national security adviser compromised by the Russians." She and McGahn also discussed whether Flynn had violated any laws.

The next day, McGahn asked Yates to return to the White House, and they had another discussion. According to Yates, McGahn asked whether it would interfere with the FBI's ongoing investigation of Flynn if the White House took action regarding this matter. No, Yates said she told him. The FBI had already interviewed Flynn. And Yates explained to the senators that she had assumed that the White House would not sit on the information she presented McGahn and do nothing.

But that's what the White House did. McGahn in that second meeting did ask if the White House could review the evidence the Justice Department had. She agreed to make it available. (Yates testified that she did not know whether this material was ever reviewed by the White House. She was fired at that point because she would not support Trump's Muslim travel ban.) Whether McGahn examined that evidence about Flynn, the White House did not take action against him. It stood by Flynn. He remained in the job, hiring staff for the National Security Council and participating in key policy decision-making.

On February 9, the Washington Post revealed that Flynn had indeed spoken with Kislyak about the sanctions. And still the Trump White House backed him up. Four days later, Kellyanne Conway, a top Trump White House official, declared that Trump still had "full confidence" in Flynn. The next day—as a media firestorm continued—Trump fired him. Still, the day after he canned Flynn, Trump declared, "Gen. Flynn is a wonderful man. I think he has been treated very, very unfairly by the media, as I call it, the fake media in many cases. And I think it is really a sad thing that he was treated so badly." Trump displayed no concern about Flynn's misconduct.

The conclusion from Yates' testimony was clear: Trump didn't dump Flynn until the Kislyak matter became a public scandal and embarrassment. The Justice Department warning—hey, your national security adviser could be compromised by the foreign government that just intervened in the American presidential campaign—appeared to have had no impact on Trump's actions regarding Flynn. Imagine what Republicans would say if a President Hillary Clinton retained as national security adviser a person who could be blackmailed by Moscow.

The subcommittee's hearing was also inconvenient for Trump and his supporters on another key topic: it destroyed one of their favorite talking points.

On March 5, Clapper was interviewed by NBC News' Chuck Todd on Meet the Press and asked if there was any evidence of collusion between members of the Trump campaign and the Russians. "Not to my knowledge," Clapper replied. Since then, Trump and his champions have cited Clapper to say there is no there there with the Russia story. Trump on March 20 tweeted, "James Clapper and others stated that there is no evidence Potus colluded with Russia. The story is FAKE NEWS and everyone knows it!" White House press secretary Sean Spicer has repeatedly deployed this Clapper statement to insist there was no collusion.

At Monday's hearing, Clapper pulled this rug out from under the White House and its comrades. He noted that it was standard policy for the FBI not to share with him details about ongoing counterintelligence investigations. And he said he had not been aware of the FBI's investigation of contacts between Trump associates and Russia that FBI director James Comey revealed weeks ago at a House intelligence committee hearing. Consequently, when Clapper told Todd that he was not familiar with any evidence of Trump-Russia collusion, he was speaking accurately. But he essentially told the Senate subcommittee that he was not in a position to know for certain. This piece of spin should now be buried. Trump can no longer hide behind this one Clapper statement.

Clapper also dropped another piece of information disquieting for the Trump camp. Last month, the Guardian reported that British intelligence in late 2015 collected intelligence on suspicious interactions between Trump associates and known or suspected Russian agents and passed this information to to the United States "as part of a routine exchange of information." Asked about this report, Clapper said it was "accurate." He added, "The specifics are quite sensitive." This may well have been the first public confirmation from an intelligence community leader that US intelligence agencies have possessed secret information about ties between Trump's circle and Moscow. (Comey testified that the FBI's counterintelligence investigation of links between Trump associates and Russian began in late July 2016.)

So this hearing indicated that the Trump White House protected a national security adviser who lied and who could be compromised by Moscow, that Trump can no longer cite Clapper to claim there was no collusion, and that US intelligence had sensitive information on interactions between Trump associates and possible Russian agents as early as late 2015. Still, most of the Republicans on the panel focused on leaks and "unmasking"—not the main issues at hand. They collectively pounded more on Yates for her action regarding the Muslim travel ban than on Moscow for its covert operation to subvert the 2016 election to help Trump.

This Senate subcommittee, which is chaired by Sen. Lindsey Graham (R-S.C.), is not mounting a full investigation comparable to the inquiry being conducted by the Senate intelligence committee (and presumably the hobbled House intelligence committee). It has far less staff, and its jurisdiction is limited. But this hearing demonstrated that serious inquiry can expand the public knowledge of the Trump-Russia scandal—and that there remains much more to examine and unearth.

Wednesday, December 28, 2016

FORTRAN for the Web

By Al Williams




There’s an old saying: “I don’t know what programming language scientists and engineers will use in the 22nd century, but I know it will be called FORTRAN.” FORTRAN was among the first real programming languages and, along with LISP, one of the oldest still in common use. If you are one of those that still loves FORTRAN, you no longer have to be left out of the Web development craze thanks to Fortran.io.

Naturally, the Fortran.io site is served by — what else — FORTRAN. The system allows for Jade templates, SQLite databases, and other features aimed at serving up web pages. The code is hosted on GitHub, and you can find several examples there, as well.

If you’ve ever wanted to do formatted I/O to a web page, here’s your chance. Come to think of it, why not? We’ve seen servers in BASIC and even in Linux shell script. Of course, today’s FORTRAN isn’t the one we learned back in the 1970’s (we assume if you didn’t learn about FORTRAN in the 1970’s, you quit reading this post a while back… prove us wrong and show us your FORTRAN projects).

Friday, December 2, 2016

DS Programming For Newbies

This is a PDF file that contains the posts made by Foxi4 in this post as an introduction into C programming.

This is so that people can download & view on mobile devices or print out, without having to go through each & every post he's done.

Wednesday, August 31, 2016

Thursday, December 24, 2015

Fail0verflow to announce a PS4 Jailbreak next week?

Some hints at a potential PS4 hack form popular group Fail0verflow just came to my attention. This is just at the rumor level at this point and could turn out to be something entirely different, but the evidence is quite compelling.

I was just contacted with a link to the CCC Wiki, indicating that Marcan, one of the main members of Team Fail0verflow (known for having hacked the Wii U, and, before that, the PS3), will be having a talk at the CCC event this year. The talk is entitled: “Console Hacking 2015: Penguins on Aeolia

So how does this point to a PS4 hack? Well, let’s rewind a bit.

What is the CCC?

Wikipedia tells us: The Chaos Communication Congress is an annual conference organized by the Chaos Computer Club. The congress features a variety of lectures and workshops on technical and political issues related to Security, Cryptography, Privacy and online Freedom of Speech.

Every year a bunch of hackers meet at the CCC and talk about hacking and security. Console hacking, every year, is a big part of the conference. This year, Smealum will be there to talk about his work on the 3DS, and apparently fail0verflow will be here too.

CCC is big, back in the days, Tyranid also explained the PSP Prometheus project at the CCC. The Prometheus project resulted in what is known today as the Pandora batteries for PSP, a way to mod the PSP batteries so that the PSP will enter “maintenance mode” and make it possible to install custom firmwares and downgrades.

Who are Fail0verflow?

Fail0verflow are the group who hacked the PS3. You might remember the screenshot below:

sony_random

That screenshot is from their presentation at the CCC in 2010, when they explained how they had hacked the PS3.

Defeating the PS3 encryption was definitely not Fail0verflow’s only successful hack. They were also the first ones to run unsigned code on the Wii in 2007, and hacked the Wii U two years ago.

So in general, when these guys have a presentation at the CCC, you know something heavy is going to happen.

Penguins on Aeolia == Linux on PS4?

Aeolia, the Floating Island
Aeolia, the Floating Island

Fail0verflow had announced earlier on the CCC wiki that they would be hosting an event to talk about console hacking in general, hinting more at some Wii U follow up and existing hacks than anything else.

This new entry in the Wiki however indicates a full presentation from Marcan. And it strongly hints at a PS4 hack, specifically, installing Linux on the PS4.

Looking at the content of the talk again, we see: Console Hacking 2015: Penguins on Aeolia – To boldly go where no penguin has gone before.

What do we make of this? Well, it’s going to be a presentation about console hacking (duh), and it’s probably going to be about installing Linux (penguins). Because the presentation states “where no penguin has gone before”, it is safe to assume we’re talking of one of the new generation consoles (Wii U, XBO, or PS4).

The last, and probably most crucial part of the title, is “Aeolia”.

WTH is Aeolia? Well, digging into the PS4 Dev Wiki (thanks John!), we find lots of references to Aeolia in the PS4 Boot process log. At this point, it is now very likely that Marcan’s talk is going to be about installing Linux on the PS4.

aeolia_ps4_jailbreak

Now, the talk is short (5 minutes), so Fail0verflow will probably only showcase that they have Linux running on the console, without going into details of the hack. That part might, or might not, happen next year.

It’s unclear at this point if this PS4 Jailbreak will be running on the latest firmware, or 1.76 and below just like the most recent announced PS4 Kernel exploit. So, do you think this will be a huge reveal, or just some kind of troll?

Many thanks to John who sent me the wiki link!

Linux on PS4: More confirmation bubbling up from the scene

Friday, July 10, 2015

PSM+ is now publicly available

By Wololo

PSM+ is now available for all registered members on our /talk forum. you can access psmplus here.

What is PSM+

PSM+ allows you to access PSM and PSM Unity (coming soon) without a license from Sony. This means you can develop and test with the PSM SDK and PSM for Unity without a publisher license–even after Sony shuts down developer access. Additionally, it allows for hacks such as Rejuvenate to work on any device with PSM DevAssistant installed for unrestricted native homebrew.

You must be running firmware 3.51 or lower and have PSM DevAssistant installed on your PS Vita.

PSM+ is compatible with the PSM Unity Assistant app, but the rejuvenate hack has not been ported to this yet. You should be able to try PSM+ if you have the PSM App for unity, though, in order to confirm you can run PSM apps with it.
rejuvenate

How to use PSM+

PSM+ works in two steps.

In the first step, you receive a special license by email that needs to be installed on your Vita , + matching files for your computer.

The second step is something you need to do on a daily basis: you need to update your license to prevent it from expiring. This is also done through an email sent by our servers.

PSM Plus pages

You can access PSM+ here. Remember that you need to be signed in to your /talk account in order to access the tool.

Monday, May 11, 2015

CHIP - $9 Computer To Beat Pi & Arduino

Written by Harry Fairhead   
Monday, 11 May 2015

I have seen a lot of amazing low-cost, single-board computers recently, but the CHIP is perhaps an amazement too far. It's not that I don't believe in it, I do, it is more that this really does threaten to be a revolution and I hope it succeeds.

The C.H.I.P is a small computer, similar to the Raspberry Pi with Arduino compatible I/O, that is set to cost only $9!

Even if it cost a little more it would still be a revolution because it has Bluetooth and WiFi built in. If this isn't enough for you, then consider that is powered by a LiPO battery without needing any extras.

chip0

There is a Kickstarter running at the moment and it has already exceeded its goal of $50,000 reaching over $350,000 with 28 days still to go. It has been funded but you can still buy a CHIP for a $9 pledge. The company behind the project has run one successful Kickstarter project before, see OTTO - The Hackable Raspberry Pi GIF Camera.   

If you are expecting some limited PIC chip running the show then you would be wrong. The device has a 1GHz ARM A13 (Single core Cortex A8) compatible processor with 512MB of RAM and 4GB of Flash storage. It also has a Mali GPU with OpenGL support.  Notice that the latest Pi 2 has quad core A7 running at 900MHz and the original Pi has a single core version 6 ARM running at 700MHz - so the CHIP is some where between the original Pi and the new Pi in terms of processor.

Chip1

It is also more powerful and an Arduino and it has a composite video output which can be converted to VGA or HDMI as required. The first models to be available will only have the composite output converters will be available later. You can connect a keyboard and mouse via Bluetooth or via USB.

There are two USB ports a full size USB and a micro USB with OTG. This means that you can use a CHIP as a "desktop" computer if you want to.

And if you do want to then there is Pocket CHIP. This is a slightly unlikely, tiny, case for the CHIP complete with tiny keyboard and 4.3-inch touch screen. It claims to operate for 5 hours from a battery and it will fit in your pocket. I'm not at all sure what this could be useful for, but I still want one. The case also has a full GPIO breakout connector on the back so one possible use is as a teaching/experimental IoT setup. A CHIP plus a Pocket CHIP costs $49.

chip2

Turning to its IoT capabilities, the first thing to say is that this is already WiFi-enabled so no need to use Zigbee or Zwave to get connected. The basic CHIP has connectors that are compatible with Arduino shields, although there is no way to know what will or will not work.

As standard you get eight GPIO lines, PWM, I2C, SPI and a UART. There is also support for MIPI-CSI cameras and LCD display. The connector for  the 3.7V LiPo battery is also a charger and power can be supplied via the microUSB connector. There is also an audio connector.

It comes with a version of Debian Linux and a lot of standard software such as LibreOffice and Scratch. Of course you can install other applications using the usual package manager.

chip3

Take a look at this OTT video and try not to be put off the really good idea:




Why is CHIP so cheap?

The answer given is:
"QUANTITY. Our partners at Allwinner worked hard to help us find how to reduce costs, so that we could introduce C.H.I.P. to EVERYBODY. To sell C.H.I.P. for $9, we need to order tens of thousands of chips. By using common, available, and volume-produced processor, memory, and wifi chips, we are able to leverage the scales at which tablet manufacturers operate to get everyone the best price."

Allwinner is a Chinese chip manufacturer responsible for the chips that power so many of the low cost (around $50) Android tablets that you can buy at the moment. Even so, $9 seems like a very low price and it is hard to see where the profit is coming from on the basic model. However, if you want a VGA or HDMI adaptor as well the price rises to $19 and $24 respectively.  Add a PocketCHIP and an HDMI adapter to the basic CHIP and you arrive at a cost of $64. Still amazing value, but there might be a little more margin built in.

You might be wondering why I think this might be a revolution?

There are two aspects to the revolution that a successful CHIP might bring about.

The first is in the hi-tech world of IoT. A battery-backed SBC with WiFi connection for $9 makes it possible to think of building disposable sensors. If you need to measure something, throw a CHIP with a sensor at it. You can instrument lots and lots of things without having to justify the cost. In the same way an appliance module based on CHIP could control lights, motors and other equipment without using unreliable and complex radio protocols such as Z-wave.

This might just be where the IoT revolution actually starts.

The second is in computers as appliances. If an additional computer just costs $9, you can always throw another CPU at the problem. In education you can use Pocket CHIP and give one per student and still have some over for spares. You can assign a media server to each TV, have your own VPN server, mail server and so on.

This is the move from personal computing to personal disposable computing and it could be as revolutionary as the move from the fine handcrafted pen to the ballpoint.

And, of course, it is all open source.
chipicon
The first units should ship in December.