×
HP

HP Will Cut Up To 6,000 Jobs Over Next Three Years 32

Computer and printer maker HP said Tuesday it will cut between 4,000 and 6,000 jobs by the end of 2025 as part of a restructuring. Axios reports: HP said the move will save it at least $1.4 billion annually by the end of fiscal 2025. However, it expects to incur $1 billion in costs due to the restructuring, with $600 million in fiscal 2023 and the rest split over the remaining two years. It made the announcement alongside its quarterly earnings report.

As part of that report, HP said to expect per-share earnings of 70 cents to 80 cents, excluding items. That's below consensus expectations of about 86 cents per share, per CNBC.
Further reading: A Host of Tech Companies, Including Coinbase, Robinhood, Lyft, and Stripe, Announce Hiring Freezes and Job Cuts
IT

Hawaii is About To Launch One of the Nation's Most Ambitious Tech Waste Recycling Programs (hawaiinewsnow.com) 40

Hawaii is implementing one of the most ambitious electronic waste recycling plans in the country, but some Hawaii retailers are afraid it will mean higher prices and less selection. From a report: Ironically, Hawaii has no ability to recycle electronic devices. Instead, the material has to be collected and shipped to processing centers elsewhere. The goal of the new law is to have manufacturers collect and ship out more and more of the used-up products. But industry lobbyist Walter Alcorn, with the Consumer Technology Association, said the law sets goals that cannot be met. "On the industry side, it's been a scramble." Alcorn said. "Particularly for the computer and printer manufacturers that previously did not have to have this type of a program."

State Rep. Nicole Lowen, chair of the Energy and Environmental Protection Committee, was among the lead advocates for the law. She said putting the full responsibility on the manufacturers will incentivize them to pay more attention to the waste their industry is generating. "We are pushing them to rethink the design packaging, distribution systems of their products and create more efficiency, for the reuse and recycling of those products or the materials that they contain," Lowen said. The law required 49 manufacturers, from Apple to Samsung, to report how much product has been shipped in by weight and how they would set up systems to collect discarded devices and ship them to recycling locations. There are none in Hawaii so all the products would have to be shipped out.

OS X

Preview App On macOS Ventura Drops Support For PostScript Files (macrumors.com) 143

Starting with macOS Ventura, released this week, the built-in Preview app on Mac no longer supports PostScript (.ps) and Encapsulated PostScript (.eps) files, according to a new Apple support document. MacRumors reports: Preview can still be used to open these files on macOS Monterey and earlier. Apple did not provide a reason for the change. Apple recommends using other third-party Mac apps that can view or convert PostScript files. It also remains possible to print .ps and .eps files by dragging them into a Mac's printer queue [...].

Developed by Adobe in the 1980s, the .ps and .eps file formats were once widely used for desktop publishing/printing purposes. PostScript was the basis of rendering on the NeXT operating system, and was mostly replaced by the PDF format in Mac OS X.

Printer

New York Changes Gun Buyback After Seller Gets $21,000 For 3D-Printed Parts (theguardian.com) 277

An anonymous reader quotes a report from the Guardian: The attorney general of New York has changed the rules of a state gun buyback program, after a participant exploited the system by using a 3D printer to make firearm parts in bulk that he then exchanged for $21,000 in gift cards. The seller, who identified himself by a pseudonym, said he traveled from West Virginia to a gun buyback on August 27 in Utica, New York, to take advantage of a loophole in the program -- and to demonstrate that buybacks are futile in an era of printable weapons.

At the buyback, the seller turned in 60 printed auto sears, small devices that can convert firearms into fully automatic weapons. Under the rules of the buyback, hosted by the office of the attorney general, Letitia James, and city police, that entitled him to $350 for each of the printed parts, including a $100 premium, since they were deemed "ghost guns" lacking serial numbers. The seller, who declined to provide his real name, said in an email on Monday the prospect of making money was enticing, but that the big reason he took part in the buyback was to send a message.

James' office said it responded to the loophole by giving buyback personnel more discretion to determine the value of weapons being handed in, and setting a standard that all 3D-printed guns accepted by the program must be capable of being fired more than once. The new rules were in place by September 17, when the attorney general's office hosted a gun buyback in a Syracuse suburb, Camillus. "It's shameful that this individual exploited a program that has successfully taken thousands of guns off the streets to protect our communities from gun violence," the attorney general's office said.

Hardware

Lenovo Doesn't Like Framework's Circular Power Button (theverge.com) 25

Lenovo has taken issue with the design of the Framework Laptop and one of its power buttons. The Verge reports: In a tweet, the startup claims to have been contacted by Lenovo's legal team, who say the circular design of the power button on one of Framework's designs is too similar to the stylized "O" Lenovo uses in the wordmark for its "Legion" brand of gaming laptops. "Consumers could believe that Framework's Broken O Case or the motherboards they cover are produced by, sponsored, endorsed, licensed, or otherwise affiliated with Lenovo, when that is not the case," a screenshot of the legal letter from Lenovo posted by Framework reads.

The offending power button design doesn't appear on any of Framework's laptops. Instead, the circle can be found in the 3D printer case schematics that Framework released back in April, which allow customers to build their own Raspberry Pi-style miniature PCs using just the laptop's motherboard (these can be bought separately, as well as harvested from a Framework laptop). This YouTube video gives a nice overview of how the 3D-printed enclosure is supposed to work (the power button gets pressed at the 9:35 minute mark). [...] Framework doesn't physically sell anything with the offending power button design on it, so fixing the problem is theoretically as simple as uploading a replacement set of CAD files to GitHub. So, rather than fighting Lenovo, Framework is holding a competition for its users to submit new designs for its power button. Entries are open until August 25th, and the winner gets a free i5-1135G7 Mainboard.

Printer

Bricked Epson Printers Make a Strong Case For User Repairability (theverge.com) 101

Epson has gained some scrutiny in recent weeks after the company disabled a printer that was otherwise working fine, leading to accusations of planned obsolescence. Epson knows its printers will stop working without simple maintenance at a predictable point in the future, and it knows that it won't be cost-effective for many owners to send their home printers in for service. So why not build them to be user serviceable in the first place? The Verge: The inciting post from @marktavern mentions that his wife was unable to use her "very expensive Epson printer" after an end-of-service error message appeared. This isn't anything new for Epson printers, sadly. Reports going back several years mention an infamous error message that reads "parts inside the printer have reached the end of their service life." Epson confirmed to The Verge that the error is related to the printer's ink pads, which had likely become saturated through extended use and were now at risk of spilling into the rest of the printer mechanism.

In a recently updated support document, Epson offers several solutions to resolve the problem. These include sending the printer into Epson to replace the ink pads or having a local certified technician do it. Previously (via Wayback Machine), just before the issue gained notoriety, Epson conceded that "repair may not be a good investment for lower cost printers because the printer's other components also may be near the end of usable life." It then added that "most consumers who are out of warranty elect to replace a lower-cost printer when they receive an end of life service message." Now, Epson suggests the feel-good option of sending the bricked unit in for recycling.

Printer

Epson Programs Some Printers To Stop Operating, Claiming Danger of 'Ink Spills' (substack.com) 182

Long-time Slashdot reader chicksdaddy writes: Printer maker Epson has programmed some models of its inkjet printers to "stop operating" at a pre-determined time, citing the risk of property damage linked to "ink spills," the Fight to Repair newsletter reports.

Epson printer owners have complained that their functioning printers have suddenly stopped working, displaying an error message declaring that a component of the printer has "reached the end of its service life" and that the device needs to be serviced. According to Epson's website, the message is linked to ink pads, which Epson describes as "porous pads in the printer that collect, distribute, and very importantly contain the ink that is not used on printed pages." Over time, these pads become saturated with ink though generally not "before the printer is replaced for other reasons" (??!)

"Like so many other products, all Epson consumer ink jet products have a finite life span due to component wear during normal use... The printers are designed to stop operating at the point where further use without replacing the ink pads could create risks of property damage from ink spills or safety issues related to excess ink contacting an electrical component," the company said on its website.

Rather than measure the saturation of the ink pads to determine when that point is reached, however, Epson appears to have programmed a counter on its printers that disables the device when a threshold has been reached. For printer owners who use Windows, Epson makes a reset utility that can reset the counter though it can "only be used once and will allow printing for a short period of time." For Mac users, or Windows users who have already run the reset utility once, Epson urges them to have the printer serviced by an Epson authorized service shop or — preferably — to replace the printer with a new printer. "Repair may not be a cost-effective option for lower-cost printers because other components may also be near the end of their usable life," the company said. Despite the company's claims about the unfixability of the ink pad issue, YouTube videos suggest that the ink pads are, in fact, simple to replace, as this video illustrates.

Some legal experts say that Epson's hard coding an end of life for its printers may be illegal — an example of "Deceptive trade practices," unless it is clearly disclosing the existence of the programmed end of life to consumers prior to purchase.

Here's how the Fight to Repair newsletter sees the situation. Epson "pushes its customers to throw away the entire, working printer unit simply because some sponges are saturated with ink.

"In doing so, the company amplifies our epidemic of e-waste and forces customers into an expensive and (as it turns out) unneeded upgrade."
Star Wars Prequels

Hasbro Can Now 3D Print Your Face Onto a Star Wars Action Figure (cnn.com) 29

"Customized action figures at massive scale," promises a video at CNN. They'll be priced at $59.99, and it'll all start happening this fall — thanks to Hasbro's new partnership with 3D printer company Formlabs.

Long-time Slashdot reader destinyland explains: "It wasn't until recently that two technologies came into play at once," Brian Chapman, Hasbro's head of global design and development tells CNN. "One is a very simple way to scan someone's face and head" — which can now be accomplished with a Hasbro mobile app (which also allows customers to select other customizations like specific costumes). "And then, a very affordable way to print that head in a one-off way" (so it can be affixed to the standard body of Hasbro's action figures).

Imagine your face on Star Wars and Marvel action figures, as well as Power Rangers, Ghostbusters — and more.

CNN adds that Hasbro say it will not sell user face data, and will delete it after 60 days.

Printer

'How the 3D-Printing Community Worldwide is Aiding Ukraine' (msn.com) 41

Jakub Kaminski is a robotics engineering graduate student at Worcester Polytechnic Institute in Massachusetts. With some volunteers he spent two months designing the perfect tourniquet for the battlefields of Ukraine, designed meet the highest medical standards — and then uploaded it to 3DPrintingForUkraine.com.

Now in less than 8 weeks "around 120 individuals and companies worldwide with 3D printers have accessed the design," reports the Washington Post. [Alternate URL here] "Together, they have made roughly 5,000 reusable tourniquets that are bound for Ukraine, where they will be stitched and sent off to the battlefield, Kaminski said..." Using digital files, people are designing supplies such as bandages, tourniquets, splints and add-ons to AK-47 guns.... [In February, as Russia began its invasion] people in the 3D-printing community talked with Ukrainian military officials, hospital administrators and charity organizations, trying to gauge what they could print quickly that would be most helpful. Tourniquets and bandages were repeated requests. Mykhailo Shulhan, the chief operating officer of a Ukrainian 3D-printing company in Lviv, said that as soon as the invasion began, he started researching how 3D printers helped in other conflicts....

These days, his company, 3D Tech Addtive, develops and prints an array of weapons accessories: AK-47 holsters so soldiers have a way to rest their guns; bullet magazines since empty cartridges often get thrown away instead of reused; carrying bags for grenades; and most recently, anti-reflective lenses for sniper scopes to reduce glare and prevent Ukrainian snipers from being seen. (All together, they have provided over 5,000 components to the front lines, Shulhan estimated....)

While most 3D printers create supplies to stop death or ease fighting conditions, others are focusing on rehabilitating soldiers. Brett Carey, a physical therapist in Hawaii, designs 3D printed splints that can be sent to fighters... Carey has created two digital designs for splints that have been uploaded online and 3D printed over 1,500 times. If injuries are advanced, he has people send him images of their injuries using EM3D — a 3D imaging app — which allows him to make a custom made splint which is then shipped to Ukraine...

The Post also got this quote from the robotics engineering student whose team designed the tourniquets.

"It's a beautiful thing," he said. "If you make people in Ukraine feel better, and enable people to help. ... This is something really special."
Printer

GM 3D Prints 60,000 Parts to Keep Producing SUVs (cnet.com) 57

General Motors couldn't produce the component it needed for its 2022 SUV, the Chevrolet Tahoe, reports CNET. So the company's engineers "turned to a novel solution: 3D printing..." GM made a major investment in the tech in 2020, dedicating 15,000 square feet of space to a facility dubbed the Additive Industralization Center, then filling it with HP Multi Jet Fusion 3D printers, among others.... A year later, GM's big investment paid off. Chevrolet engineers made a late change to the 2022 Tahoe's design, necessitating the creation of an additional part: A new, flexible "spoiler closeout seal" fills a gap at the rear of the big SUV. Developing the tooling to injection-mold the things would have taken too long, delaying the delivery of 30,000 vehicles.

Enter 3D printing. Engineers were able to quickly design and print the components using a flexible material that met GM's criteria. They even used a process called vapor polishing to give the parts a perfect shine... Since each Tahoe requires two seals, Chevrolet needed a whopping 60,000 of them. From design to completion took just five weeks. That's less than half the time going the injection-molding route would have taken, which got all those SUVs out the door on time.

CNET calls it "almost certainly the largest deployment of additive tech in a production car" — and "an interesting preview of what's to come."
Displays

Custom LEGO Computer Brick Has Working OLED Display (tomshardware.com) 17

Developer James Brown created a custom LEGO computer terminal brick, complete with "an actual processor and a working screen to help bring the fictional computer to reality," reports Tom's Hardware. From the report: The iconic computer terminal brick it's based off of is made using the 2 x 2 slope brick. James has created this one entirely from scratch with the help of a 3D printer and an ARM-based microcontroller. It powers up and features screen animations that look like lines of terminal code scrolling by as well as a loading animation. The screen used inside this custom LEGO is super tiny -- less than half an inch across -- and Brown appears to have ordered tons of these things. Just last month, he used a handful of them to create a custom mechanical keyboard on which each key has its own OLED display. The keyboard can be programmed with a demo video showing the letters changing from lowercase to capital on the fly.

Rather than using a Raspberry Pi to power the tiny terminal, Brown had a custom PCB printed just for the project using a different ARM-based chip. On this board is an STM32F030F4P6TR -- an ARM Cortex M0 series microcontroller with a 32-bit single core and 16KB of flash. An RP2040 SoC could be used in its place, should you wish to spin your own PCB. It's connected to a .42-inch OLED display which has a resolution of 72 x 40px. Brown explains that it gets power from an old LEGO 9V system that uses conductive strips inside the studs.

Instead of taking apart an existing brick, Brown opted to design one from scratch. This process involved 3D-printing a mold in which he could cast the brick with the electronic components fit inside. The final product is a semi-translucent blue brick that illuminates with the light from the OLED display.

Printer

New Type of 3D Printing Uses Sound Waves To Build Up Objects (newatlas.com) 23

A team of scientists at Canada's Concordia University are using sound waves to print intricate three-dimensional objects. The technology is known as direct sound printing (DSP). New Atlas reports: In the current version of the technique, a transducer is used to send focused pulses of ultrasound through the sides of a chamber, into liquid polydimethylsiloxane (PDMS) resin contained within. Doing so produces ultrasonic fields, which cause rapidly oscillating microscopic bubbles to temporarily form at specific points in the resin. As those bubbles oscillate, the temperature inside them rises to about 15,000 degrees Kelvin (14,727C or 26,540F) and the pressure within them climbs to over 1,000 bar (14,504 psi). Although this sudden increase in temperature and pressure only lasts for picoseconds (trillionths of a second), it causes the resin to solidify at the exact location of the bubble. Therefore, by incrementally moving the transducer along a predetermined path, it's possible to build up an intricate three-dimensional object -- one tiny pixel at a time. Along with its ability to produce very small, detailed items, DSP also allows structures to be non-invasively printed inside other structures that have opaque surfaces. [...] Besides the PDMS resin, the scientists have also successfully used DSP to print objects made of ceramic material. They now plan on experimenting with polymer-metal composites, followed by pure metal. The research has been published in the journal Nature Communications.
Medicine

Doctors Transplant Ear of Human Cells, Made By 3D Printer (nytimes.com) 13

An anonymous reader quotes a report from the New York Times: A 20-year-old woman who was born with a small and misshapen right ear has received a 3-D printed ear implant made from her own cells, the manufacturer announced on Thursday. Independent experts said that the transplant, part of the first clinical trial of a successful medical application of this technology, was a stunning advance in the field of tissue engineering. The new ear was printed in a shape that precisely matched the woman's left ear, according to 3DBio Therapeutics, a regenerative medicine company based in Queens. The new ear, transplanted in March, will continue to regenerate cartilage tissue, giving it the look and feel of a natural ear, the company said.

The results of the woman's reconstructive surgery were announced by 3DBio in a news release. Citing proprietary concerns, the company has not publicly disclosed the technical details of the process, making it more difficult for outside experts to evaluate. The company said that federal regulators had reviewed the trial design and set strict manufacturing standards, and that the data would be published in a medical journal when the study was complete. The clinical trial, which includes 11 patients, is still ongoing, and it's possible that the transplants could fail or bring unanticipated health complications. But since the cells originated from the patient's own tissue, the new ear is not likely to be rejected by the body, doctors and company officials said.

Printer

Canon Wireless Printers Are Getting Stuck In Reboot Loops (theverge.com) 85

Over the last day or two, there have been a growing number of reports by people who own certain Canon Pixma printers that the devices either won't turn on at all or, once turned on, get stuck in a reboot loop, cycling on and off as long as they're plugged in. The Verge reports: Verge reader Jamie pointed us to posts on Reddit about the problem and Canon's own support forum, citing problems with models including the MX490, MX492, MB2010, and MG7520. Some believe their problem is due to a software update Canon pushed to the printers, but that hasn't been confirmed yet. In response to an inquiry from The Verge, corporate communications senior director and general manager Christine Sedlacek said, "We are currently investigating this issue and hope to bring resolution shortly as customer satisfaction is our highest priority."

Until there is an official update or fix, some people in the forums have found that disconnecting the printers from the internet is enough to keep them from rebooting, with control still possible via USB. To get the printers to work while maintaining your connection to the internet and their connection to local network devices, one reply from a customer on Canon's support forum suggests a method that many people report has worked for them.

Space

Mitsubishi Develops Technology for 3D Printing in Outer Space (mitsubishielectric.com) 9

"Made In Space, Redwire, and Bigelow, move over," writes long-time Slashdot reader Dr. Crash. "There's yet another 3D printing in space group — and it's not a startup." Mitsubishi Electric just went public with a UV-sensitive resin specially made to print in zero-G and in a hard vacuum — as in outside the airlock.

The polymer is tuned to harden with solar ultraviolet light, so no UV lasers needed (saving power and launch weight).

Their first goal? Printing cubesat parabolic dishes in orbit, so a 300mm cubesat could have what looks like a one-meter dish antenna — or anything else that can be freeform-printed.

This "photopolymerization" technology "specifically addresses the challenge of equipping small, inexpensive spacecraft buses with large structures, such as high-gain antenna reflectors," according to Mitsubishi's announcement — arguing that it also ultimately "enables on-orbit fabrication of structures that greatly exceed the dimensions of launch vehicle fairings."
Printer

Making 3D Printing Truly 3D (phys.org) 14

An anonymous reader quotes a report from Phys.Org: Don't be fooled by the name. While 3D printers do print tangible objects (and quite well), how they do the job doesn't actually happen in 3D, but rather in regular old 2D. Working to change that is a group of former and current researchers from the Rowland Institute at Harvard. [...] The researchers present a method to help the printers live up to their names and deliver a "true" 3D form of printing. In a new paper in Nature, they describe a technique of volumetric 3D printing that goes beyond the bottom-up, layered approach. The process eliminates the need for support structures because the resin it creates is self-supporting.

The key component in their novel design is turning red light into blue light by adding what's known as an upconversion process to the resin, the light reactive liquid used in 3D printers that hardens into plastic. In 3D printing, resin hardens in a flat and straight line along the path of the light. Here, the researchers use nano capsules to add chemicals so that it only reacts to a certain kind of light -- a blue light at the focal point of the laser that's created by the upconversion process. This beam is scanned in three dimensions, so it prints that way without needing to be layered onto something. The resulting resin has a greater viscosity than in the traditional method, so it can stand support-free once it's printed.

"We designed the resin, we designed the system so that the red light does nothing," Congreve said. "But that little dot of blue light triggers a chemical reaction that makes the resin harden and turn into plastic. Basically, what that means is you have this laser passing all the way through the system and only at that little blue do you get the polymerization, [only there] do you get the printing happening. We just scan that blue dot around in three dimensions and anywhere that blue dot hits it polymerizes and you get your 3D printing." The researchers used their printer to produce a 3D Harvard logo, Stanford logo, and a small boat, a standard yet difficult test for 3D printers because of the boat's small size and fine details like overhanging portholes and open cabin spaces.

Printer

Can We Beat the Housing Crisis By 3D-Printing Homes? (msn.com) 160

"As housing prices across the country continue to skyrocket, an Iowa-based company, Alquist 3D, is looking to combat the crisis by 3D-printing homes," reports NexStar Media: Alquist, one of a few U.S. companies that 3D-prints houses, is looking to build 200 of these homes in Virginia starting this summer.

The process is somewhat simple. First, a person designs what they want the frame of the house to look like by using a computer program. Then, a file is transmitted to a machine, which tells it what to do and how to move. On-site workers pour in cement material, then the concrete is pumped through the tubes and dispersed in layers...

Zachary Mannheimer, founder and CEO of Alquist 3D, believes 3D-printing is a game changer because it cuts costs up to 15% by scaling back labor, materials, and time. He does understand that there are concerns about displacing traditional construction jobs, and some environmental impacts of this method, but he says he is working to attack those issues.

Printer

Honda Hits 3D Printing Sites With Takedown Orders Over Honda-Compatible Parts (thedrive.com) 120

A writer for The Drive reports that "Recently, I noticed a part that I made for my Honda Accord was removed from Printables, the newly rebranded 3D printing repository offered by Prusa.

"There seemed to be no rhyme or reason for it, but I didn't think anything else about it...until reports of a mass deletion started popping up on Reddit." All models referencing the word "Honda" posted prior to March 30, 2022, were seemingly removed from Printables without warning. These included speaker brackets, key housings, hood latches, shifter bushings, washer fluid caps, roof latch handles, and my trunk lid handle — a part not offered on 10th generation Accords sold in the U.S. at all. In fact, many of the removed parts had no Honda branding but were just compatible with Honda vehicles. As it turns out, Prusa says it was issued a takedown notice from Honda and removed all 3D models that referenced the brand.

"I can confirm to you that we have received a letter from a lawyer representing Honda, informing us that we were required to remove any model which used 'Honda' in the listing, the model itself, or one of several trademarks/logos also associated with Honda," a Prusa spokesperson told The Drive in an email. "This will also be related to the naming of the files it self (sic), as for Honda this would be considered as a violation of their trademark/patents." A Prusa employee responded to a post on the company's forums, noting that Honda sent a "huge legal document" that covered every model that the company wished to have deleted. The document reportedly included items that did not have Honda logos, but also specific items with certain shapes and dimensions — like a washer fluid reservoir cap, for example.

A response from another employee was posted suggesting other sites that host 3D models were also sent a similar takedown notice.

Businesses

Peloton Got Trapped in Its Trillion-Dollar Fantasy (bloomberg.com) 85

Fueled by manic demand during the early days of Covid, Peloton spent the next two years chasing a dream of fitness dominance. From a report: If Peloton's story thus far were a Peloton class, it would be a high-intensity one, perhaps even a Tabata ride. Everyone would pedal as fast as they could, recover for not long enough, then do it again, as a charismatic figure on the screen urged them on with promises of transformational personal growth and of the massiveness of the total addressable market of subscription fitness. Midway through, the instructor would announce that the 20-minute class would actually go for an hour. Here and there, riders would injure themselves. There would be technical issues with the machines. At the end, right after recommending a five-minute post-ride stretching class and intoning his mantra -- "We're not a stationary bike company, we're not a treadmill company, we are an innovation company that is at the nexus of fitness, technology, and media!" -- the instructor would announce his transition to a new role at the company. It would be exhilarating and entertaining, but perhaps not a ride you'd want to do every day.

[...] The bring-your-own-bike model holds evident appeal for Barry McCarthy (new CEO), who's less interested in the physical machines than in his company's content. "The magic happens in the tablet," he says. He muses that perhaps the Peloton screen should be an open platform where third-party programmers can place apps. Or maybe the company could try the inkjet printer business model, offering machines for cheap and making money through higher monthly subscription fees. At the moment, you can ride your bike even if you're not paying for classes. McCarthy plans to experiment with making those payments mandatory. (On March 10, the company announced such a test, saying it would create a monthly subscription that combines the price of its hardware and content and lacks an upfront hardware payment.) In all of this, McCarthy says he'll let the data be his instructor. It's a familiar narrative: Startup founder gives way to the bean counters and market researchers. Peloton, more than perhaps any other company, trades on charisma -- of its instructors, of its corporate leadership, of its hardcore users cheerfully touting the brand. But even cults need accountants.

Encryption

Researcher Uses 379-Year-Old Algorithm To Crack Crypto Keys Found In the Wild (arstechnica.com) 17

An anonymous reader quotes a report from Ars Technica: Cryptographic keys generated with older software now owned by technology company Rambus are weak enough to be broken instantly using commodity hardware, a researcher reported on Monday. This revelation is part of an investigation that also uncovered a handful of weak keys in the wild. The software comes from a basic version of the SafeZone Crypto Libraries, which were developed by a company called Inside Secure and acquired by Rambus as part of its 2019 acquisition of Verimatrix, a Rambus representative said. That version was deprecated prior to the acquisition and is distinct from a FIPS-certified version that the company now sells under the Rambus FIPS Security Toolkit brand.

Researcher Hanno Bock said that the vulnerable SafeZone library doesn't sufficiently randomize the two prime numbers it used to generate RSA keys. (These keys can be used to secure Web traffic, shells, and other online connections.) Instead, after the SafeZone tool selects one prime number, it chooses a prime in close proximity as the second one needed to form the key. "The problem is that both primes are too similar," Bock said in an interview. "So the difference between the two primes is really small." The SafeZone vulnerability is tracked as CVE-2022-26320. Cryptographers have long known that RSA keys that are generated with primes that are too close together can be trivially broken with Fermat's factorization method. French mathematician Pierre de Fermat first described this method in 1643. Fermat's algorithm was based on the fact that any number can be expressed as the difference between two squares. When the factors are near the root of the number, they can be calculated easily and quickly. The method isn't feasible when factors are truly random and hence far apart. The security of RSA keys depends on the difficulty of factoring a key's large composite number (usually denoted as N) to derive its two factors (usually denoted as P and Q). When P and Q are known publicly, the key they make up is broken, meaning anyone can decrypt data protected by the key or use the key to authenticate messages.

So far, Bock has identified only a handful of keys in the wild that are vulnerable to the factorization attack. Some of the keys belong to printers originally branded as Fuji Xerox and now belonging to Canon. Printer users can use the keys to generate a Certificate Signing Request. The creation date for the keys was 2020 or later. The weak Canon keys are tracked as CVE-2022-26351. Bock also found four vulnerable PGP keys, typically used to encrypt email, on SKS PGP key servers. A user ID tied to the keys implied they were created for testing, so he doesn't believe they're in active use. Bock said he believes all the keys he found were generated using software or methods not connected to the SafeZone library. If true, other software that generates keys might be easily broken using the Fermat algorithm. It's plausible also that the keys were generated manually, "possibly by people aware of this attack creating test data." The researcher found the keys by searching through billions of public keys that he either had access to, were shared with him by other researchers, or that were available through certificate transparency programs.
UPDATE: The headline incorrectly stated that a "600-Year-Old Algorithm" was used. It's been changed to "379-Year-Old-Algorithm" to reflect the updated headline on Ars.

Slashdot Top Deals