It was advertised as a match vs. Deep Blue. In an time before SaaS and automatic online updates, this would be understood to mean a single immutable system like any other software product. If they change it mid-match then it's a match vs. the team of Deep Blue + IBM programmers.

Deep Blue + IBM programmers + team of chess grandmasters they also had assisting. In general I would not give Kasparov's claims that much credit if not for the fact that after the match IBM immediately dismantled the machine which just looked absurdly guilty, especially given the historic value of the machine.

In a normal world this is hardware you should still be able to go play a game against at either at some IBM building, the Smithsonian, or whatever.

Lots of new USB DVD drives are available from brands I've never heard of. But the availability of Bluray drives is so low I suspect they're only new old stock.

I'm almost certain the reason is licenses - DVDs licenses have long expired and back when they were in effect DVDs were the mainstream option, so lots of devices and machines around for them when licenses were needed and that gave momentum to DVDs. Blurays on the other hand still require licensing and they never became as mainstream as DVDs.

I can find a bunch of small businesses pressing CDs and DVDs but they rarely provide a Bluray option. I have a feeling that even after Bluray patents expire, DVDs will still outlast Blurays :-P.

You should look for Blu-ray drives instead of Bluray which does not exist /s

Back around 2007 during the red vs blue HD laser format war, the spelling was hammered into me as the incorrect spelling was tirelessly brought to one's attention. Since we're going down memory lane on shiny discs, I couldn't resist bringing this one back too

Creating a centralized log is monitoring. It doesn't need write access to the defrost setting.

Yep, but once you have internet connectivity, things escalate and people say "wouldn't it be convenient if we can also...."

Monitoring doesn't need write access. RS-422 is simple and reliable. It uses separate receive and transmit pairs and you don't need to connect both. The freezer can continually transmit its telemetry over unidirectional RS-422 and a separate system can forward it over the Internet.

Hackers can still tamper with the telemetry and create false reports of problems, but actually changing the thermostat settings would require local access, so there's opportunity for somebody to verify the problem really exists.

Importance is a function of culture and biology. We already gave AI access to culture, so it just needs to capture some wild mathematicians for vivisection. Once it has a good model of mathematician biology they can be efficiently recycled.

>the kernel handed those saved options from the request socket to the new connection without copying them, then freed them immediately when the connection went away, while another CPU could still be reading them to build a handshake reply.

If this requires a multi-core system to exploit, it's good news for most of the consumer routers that will never get updates. Saved by cheap single-core hardware.

You would be surprised. A lot of cheap consumer routers are have two or four ARM cores. The bigger issue is that they are typically running a kernel from the stone age (< 6.0.0). Sometimes a still-supported LTS kernel like 5.10 or 5.15, but then they stopped at an old patch level.

Heck, apparently even the new Unifi UCG Fiber is running 5.4.213 (September 2022), but maybe they backport some fixes?

[1] https://community.ui.com/releases/dd0283dc-bf71-4140-ae1d-c1...

Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112

IIUC it doesn't have any listening sockets open on WAN by default at least?

I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*

They'd also need to MPTCP right?

Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."

I’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.

If you wants something with a nice web interface, probably OpenWrt [1] or OPNsense?

[1] Yes, it seems that they are still on 6.12.112, but they'll probably roll out an update quickly. Also see: https://forum.openwrt.org/t/cve-2026-98432-kernel-update-or-...

If you have a separate WiFi AP running your own router on your *nix of choice is quite achievable. I use NixOS since I use it everywhere else, if I didn't I'd probably go with OpenBSD.

My $50 router has two cores.

  root@OpenWrt2:~# lscpu
  Architecture:        mips
  Byte Order:          Little Endian
  CPU(s):              4
  On-line CPU(s) list: 0-3
  Model name:          -
  Model:               MIPS 1004Kc V2.15
  Thread(s) per core:  2
  Core(s) per socket:  2
  Socket(s):           1

Those routers probably have 20 other critical un-patched exploits ...

An entire ecosystem of malware crawling and cohabiting in them.

>forcing AV1 regardless of the presence of on-device hardware support

I'm posting from a machine without AV1 acceleration. I disabled AV1 in Firefox's about:config and Youtube falls back to VP9.

>Isn’t this usually defined by “open” vs “free” ?

No. In the context of software licensing, "open" vs. "free" is more a question of philosophy than any practical difference. The Free Software Definition and the Open Source Definition agree so closely that I can't think of any license that meets one but not the other. But the Free Software Foundation sees freedom as an end in itself, even if it requires sacrificing quality, while the Open Source Initiative sees freedom as a tool to be used to improve software quality.

>I've also heard it used to describe projects that are open source by anyone's measure but have contribution or project governance requirements like for example sqlite.

Anybody calling SQLite "source available" is mistaken. Are you sure they weren't confusing "source available" with "open core" (Open Source + proprietary add-ons)? SQLite's source code is public domain, which meets the Open Source Definition and is true Open Source. But they also sell proprietary add-ons to fund its development:

https://sqlite.org/prosupport.html