Harder Drive: Hard drives we didn't want or need
http://tom7.org/harder/ [tom7.org]
2022-04-13 04:29
Making hard drives out of pings, tetris, and covid tests.
tag: storage
Harder Drive: Hard drives we didn't want or need
http://tom7.org/harder/ [tom7.org]
2022-04-13 04:29
Making hard drives out of pings, tetris, and covid tests.
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective
https://signal.org/blog/cellebrite-vulnerabilities/ [signal.org]
2021-04-21 20:18
As just one example (unrelated to what follows), their software bundles FFmpeg DLLs that were built in 2012 and have not been updated since then. There have been over a hundred security updates in that time, none of which have been applied.
In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. These files are never used for anything inside Signal and never interact with Signal software or data, but they look nice, and aesthetics are important in software. Files will only be returned for accounts that have been active installs for some time already, and only probabilistically in low percentages based on phone number sharding. We have a few different versions of files that we think are aesthetically pleasing, and will iterate through those slowly over time. There is no other significance to these files.
Achieving 11M IOPS & 66 GB/s IO on a Single ThreadRipper Workstation
https://tanelpoder.com/posts/11m-iops-with-10-ssds-on-amd-threadripper-pro-workstation/ [tanelpoder.com]
2021-01-30 09:08
In this post I’ll explain how I configured my AMD ThreadRipper Pro workstation with 10 PCIe 4.0 SSDs to achieve 11M IOPS with 4kB random reads and 66 GiB/s throughput with larger IOs - and what bottlenecks & issues I fixed to get there. We’ll look into Linux block I/O internals and their interaction with modern hardware. We’ll use tools & techniques, old and new, for measuring bottlenecks - and other adventures in the kernel I/O stack.
source: HN
Micro-Optimizing .tar.gz Archives by Changing File Order
https://justinblank.com/experiments/optimizingtar.html [justinblank.com]
2021-01-20 06:50
A few weeks ago, I was doing something with a sizeable .tar.gz file, and wondered how the order of files affected the process. I’m not that knowledgable about compression, but I know that gzip uses a sliding window in which it looks for opportunities to compress repeating chunks of text. If you give it highly repetitive text, it does well, if you give it random data, it will probably give you a bigger file than when you started. So reordering files seems like it could matter.
source: danluu
ZFS versus RAID: Eight Ironwolf disks, two filesystems, one winner
https://arstechnica.com/gadgets/2020/05/zfs-versus-raid-eight-ironwolf-disks-two-filesystems-one-winner/ [arstechnica.com]
2020-05-18 19:32
DVD+R and DVD-R; What was that about?
https://www.youtube.com/watch?v=e1mJv9pxm7M [www.youtube.com]
2020-05-13 00:57
A format war within a format...
Speeding up Linux disk encryption
https://blog.cloudflare.com/speeding-up-linux-disk-encryption/ [blog.cloudflare.com]
2020-03-25 18:16
At one point we noticed that our disks were not as fast as we would like them to be. Some profiling as well as a quick A/B test pointed to Linux disk encryption. Because not encrypting the data (even if it is supposed-to-be a public Internet cache) is not a sustainable option, we decided to take a closer look into Linux disk encryption performance.
To be fair the request does not always traverse all these queues, but the important part here is that write requests may be queued up to 4 times in dm-crypt and read requests up to 3 times. At this point we were wondering if all this extra queueing can cause any performance issues. For example, there is a nice presentation from Google about the relationship between queueing and tail latency. One key takeaway from the presentation is: A significant amount of tail latency is due to queueing effects
source: HN
age is a simple, modern and secure file encryption tool.
https://github.com/FiloSottile/age [github.com]
2019-12-28 02:50
A simple, modern and secure encryption tool with small explicit keys, no config options, and UNIX-style composability.
I think it’s ready now?
source: L
Project Silica proof of concept stores Warner Bros. ‘Superman’ movie on quartz glass
https://news.microsoft.com/innovation-stories/ignite-project-silica-superman/ [news.microsoft.com]
2019-11-08 19:34
It was the first proof of concept test for Project Silica, a Microsoft Research project that uses recent discoveries in ultrafast laser optics and artificial intelligence to store data in quartz glass. A laser encodes data in glass by creating layers of three-dimensional nanoscale gratings and deformations at various depths and angles. Machine learning algorithms read the data back by decoding images and patterns that are created as polarized light shines through the glass.
source: HN
How did MS-DOS decide that two seconds was the amount of time to keep the floppy disk cache valid?
https://devblogs.microsoft.com/oldnewthing/20190924-00/?p=102915 [devblogs.microsoft.com]
2019-09-25 02:12
Mark Zbikowski led the MS-DOS 2.0 project, and he sat down with a stopwatch while Aaron Reynolds and Chris Peters tried to swap floppy disks on an IBM PC as fast as they could.
They couldn’t do it under two seconds.
A followup: https://devblogs.microsoft.com/oldnewthing/20191001-00/?p=102946
Deconstruct files
https://danluu.com/deconstruct-files/ [danluu.com]
2019-07-13 16:55
Let’s talk about files! Most developers seem to think that files are easy.
In this talk, we’re going to look at how file systems differ from each other and other issues we might encounter when writing to files. We’re going to look at the file “stack”, starting at the top with the file API, moving down to the filesystem, and then moving down to disk.
source: danluu
What is WofCompressedData?
https://devblogs.microsoft.com/oldnewthing/20190618-00/?p=102597 [devblogs.microsoft.com]
2019-06-18 23:12
The documentation for wofapi.h says merely “This header is used by Data Access and Storage.” For more information, it refers you to another web page that contains no additional information. WOF stands for Windows Overlay Filter, which is a nice name that doesn’t really tell you much about what it does or what it’s for.
Changing the native NTFS file compression would be a disk format breaking change, which is not something taken lightly. Doing it as a filter provides much more flexibility. The downside is that if you mount the volume on a system that doesn’t support the Windows Overlay Filter, all you see is an empty file. Fortunately, WOF is used only for system-installed files, and if you are mounting the volume onto another system, it’s probably for data recovery purposes, so you’re interested in user data, not system files.
Looking inside the box
https://anvilventures.com/blog/looking-inside-the-box.html [anvilventures.com]
2019-05-19 14:15
This blog post talks about reverse engineering the Dropbox client, breaking its obfuscation mechanisms, de-compiling it to Python code as well as modifying the client in order to use debug features which are normally hidden from view. If you’re just interested in relevant code and notes please scroll to the end. As of this writing it is up to date with the current versions of Dropbox which are based on the CPython 3.6 interpreter.
source: solar
age - A simple file encryption tool & format
https://docs.google.com/document/d/11yHom20CrsuX8KQJXBBw04s80Unjv8zCg_A7sPAX_9Y [docs.google.com]
2019-05-16 19:58
This is a design for a simple file encryption CLI tool, Go library, and format. It’s meant to replace the use of gpg for encrypting files, backups, streams, etc. It’s going to be called “age”, which might be an acronym for Actually Good Encryption.
ufs - Expand time_t support to 48 bits
http://lists.dragonflybsd.org/pipermail/commits/2019-March/718475.html [lists.dragonflybsd.org]
2019-04-24 22:42
Fix time overflow issues in the original 32-bit UFS code in two ways. First, treat the original 32-bit seconds fields as unsigned.Second, utilize the spare fields to expand these fields to 48 bits each. Retain the nanosecond-grain accuracy of the nsec fields.
source: Dfly
The Intel Optane Memory H10 Review: QLC and Optane In One SSD
https://www.anandtech.com/show/14249/the-intel-optane-memory-h10-review-two-ssds-in-one [www.anandtech.com]
2019-04-23 01:45
The Optane Memory H10 does not introduce any new ASICs or any hardware to make the Optane and QLC portions of the drive appear as a single device. The caching is managed entirely in software, and the host system accesses the Optane and QLC sides of the H10 independently. Each half of the drive has two PCIe lanes dedicated to it.
Could work, but alas.
Compatibility with older platforms and non-Intel platforms is mostly as expected, with only the NAND side of the H10 accessible—those motherboards don’t expect to find two PCIe devices sharing a physical M.2 x4 slot, and aren’t configured to detect and initialize both devices.
How I Couldn’t Stop Poking at Mysterious CompuServe Server Hard Disk Images
https://medium.com/@mpnet/trying-to-make-sense-of-compuserve-server-hard-disk-images-posted-on-archive-org-b1c62ce6012b [medium.com]
2019-04-03 02:22
This is about digital archeology. I hope people interested in the legacy of early online services will find it useful. And I hope other digital archeologists more knowledgable than me will find it and provide additional information. Maybe someone even feels compelled to pick up where I left off? Please bear in mind that this is the work of just a couple of long winter evenings. My knowledge of traditional mainframes and minicomputers was close to zero before I started this project. I might have misconceived things or overlooked others.
source: L
The Perfect Container
https://tedium.co/2019/03/19/milk-crate-theft-history/ [tedium.co]
2019-03-22 10:09
Sometimes, it’s possible to create something that’s too useful, that is designed for a niche purpose but is so well-attuned to that purpose that it attracts other people, who find a similar value but different use case than was intended. And because of the sheer prevalence of said useful tool, it suddenly is everywhere—finding purpose as a cheap alternative to a trip to the local department store. If you’re the maker of that too-useful something, whaddya do? Well, in the case of the dairy industry, you use your political influence to try to ban all those college students from using milk crates. In today’s Tedium, we talk about the bizarre legal status of the plastic milk crate.
“They are looking for people who are doing even the smallest crime, because, what we’ve learned is, those who will go out and steal a milk crate, for example, are the same people who are probably breaking into cars, breaking into your house.”
Extracting BitLocker keys from a TPM
https://pulsesecurity.co.nz/articles/TPM-sniffing [pulsesecurity.co.nz]
2019-03-15 16:06
By default, Microsoft BitLocker protected OS drives can be accessed by sniffing the LPC bus, retrieving the volume master key when it’s returned by the TPM, and using the retrieved VMK to decrypt the protected drive. This post will look at extracting the clear-text key from a TPM chip by sniffing the LPC bus, either with a logic analyzer or a cheap FPGA board. This post demonstrates the attack against an HP laptop logic board using a TPM1.2 chip and a Surface Pro 3 using a TPM2.0 chip. From bus wiring through to volume decryption. Source code included.
source: L
Introducing Firefox Send
https://blog.mozilla.org/blog/2019/03/12/introducing-firefox-send-providing-free-file-transfers-while-keeping-your-personal-information-private/ [blog.mozilla.org]
2019-03-13 00:46
Send is a free encrypted file transfer service that allows users to safely and simply share files from any browser.
source: L