I have other disks, including personal files, that are not mass market. Including some very fun early "Rietta Solutions" programs by my learning days. I was very early mimicking the look and feel of commercial shareware at the time, including printing diskette labels with version numbers and copyright dates with an inkjet.
The disk appears visually in good shape. It has been stored all these years in the original box in an air conditioned basement. I am not seeing any white material or other obvious corrosion. However, I can confirm that my first attempt to read the imaged data failed. I did not record the output from ddrescue but it was something like 34% on the 1.4 MB. Got a corrupted screen when trying to run the installer in a Windows 98 SE QEMU vm. I have not dug into it very deeply.
I wanted to say I really, really appreciate your comment here John. libvips is a very useful tool set and maintaining it is certainly a bigger public challenge than I ever took on. I just wish the Ruby on Rails community had hardened their use of it sooner. Again, thank you.
This is awesome! I have used LibreOffice (and Open Office) extensively for decades now. It is my real office suite I use for real work and real business accounting tasks. Yes, I am very well aware that Calc is different than Excel but it can get nearly all the same tasks done as long as you are not tied deep into a corporate environment passing Excel-specific files around. I have also made great business uses of it in Docker too, generating perfect PDFS from templates, and normalizing document formats for analysis. I donate a modest $19/month personally to the foundation, much rather pay them than Microsoft!
Normalize into flat xml that I could then parse in Nokogiri.
Edit for clarity: I am a Rubyist at heart so I reach for Ruby for almost all of my automation, ML, and even now AI stuff. Fro a very long time, I have been able to use CLI LibreOffice to do amazing things. It can read everything, even obscure formats by today's standards, going back into the 1990s. And then once in OpenOffice XML you have one target to parse in your scripting language of choice to do document analysis, data loss prevention detection, and more. All with a clean open source license with no server usage restrictions, unlike MS Office.
Neat! Thank you for the info on that one. Bookmarked!
Before I spend well over $100 importing that device, I previously was thinking of brining up a 2001 era motherboard with a USB stack and can natively host the drives, but the 486 that has sat unused may be a solid option. I presumably can find a way to transfer data to a modern system over serial cable or something.
Almost any two floppy drives you can get a hold of will be mechanically different in sometimes significant ways.
I've got one business tower from over 20 years ago still having the floppy drive connected directly to the motherboard the traditional way.
Plus 3 USB models from HP, Sony, and Teac and they don't all behave the same.
Last month for another floppy article I mentioned that one pack of old floppy disks are offgassing(!), the way they continue to inflate the ziplock bag they are in. Replaced the bag with an new Ikea "ISTAD" ziplock and it's almost fully inflated again by now.
I am working an a fictional world set 1800 years in the future. A whole subplot is the digital resurrection of 1990s Microsoft Encarta encylopedia which was the first time in a millennia they had a glimpse into this time beyond fragmentary evidence from printed materials. In the timeline of the novel, the disks had been discovered 300 years prior but no one knew how to read them and the general degradation of the substrates. Then 150 years before a graduate student figured out how to use imaging from multiple different disks and piece together to get an entire rendering of the bit pattern. But it took only at the time of the narration that the breakthrough was made on how to decode and render the data in part because of "digital Rossetta stone discovery" found at a dig in North America encrusted in volcanic obsidian glass. Anyway, the professor protagonist ends up traveling in a post oil world by sail to Argentina as an invited guest in a highly interest lecture scene reminiscent of the Dead Sea scrolls discovery.
There is a lot of work to do, but I am actually intellectually interested in realistically understanding how the far future can deal with interpreting the digital dark ages that we currently live in now which are completely forgotten because the administrators stopped copying data one day.
Thanks for the heads up. The navigation header does not collapse as I never liked hamburger menus but it should be more than two lines. Works more than that on my iPhone 16. What size is yours? I will pull it up in the Firefox simulator next week and try to make it better.
We recently updated the design. This is a very old site so it has some quirks in the design for sure.
You’re welcome. The banner obscures the view almost totally and I can read only 2 lines of text and scroll through that. I have a small device, Iphone se2022 if it helps.
Same. So much spacing between the 3 lines. If they want to keep that huge header I'd suggest it gracefully entirely disappear when scrolling down and reappear when scrolling up.
I agree. And unstated in this write up is the direct upload route. Even if your Cloudflare was perfect, once the attacker got the preflight they send the binary file up to S3 directly and then hit the variant route directly. The first code to “validate” the upload was the exploitable libvips code.
I am not sure, but my read on the original disclosure is no. libvips itself has a variant processor for matlab v5 files, which the exploit took advantage of.
Correct, which is how the ActiveStorage gem was patched. After this, Rails raises a Vips::Error: VipsForeignLoad exception on an attempted variant render of a malicious file. I plan on writing a technical detail post soon with some more code level details and "indicators of compromise" but this one was getting long. This is more for management to understand why wait to patch is a major issue. The discovery to active exploit attempt timeline is the story here.
reply