Month: September 2023

Enlarge / Wooden mallet and esparto sandals from Cueva de los Murciélagos in Spain dated to the Neolithic period, 6,200 years ago. (credit: MUTERMUR project)

In the 19th century, miners in southern Spain unearthed a prehistoric burial site in a cave containing some 22 pairs of ancient sandals woven out of esparto (a type of grass). The latest radiocarbon dating revealed that those sandals could be 6,200 years old—centuries older than similar footwear found elsewhere around the world, according to a new paper published in the journal Science Advances. The interdisciplinary team analyzed 76 artifacts made of wood, reeds, and esparto, including basketry, cords, mats, and a wooden mallet. Some of the basketry turned out to be even older than the sandals, providing the first direct evidence of basketry weaving among the hunter-gatherers and early farmers of the region.

Organic plant-based materials rarely survive the passage of thousands of years, but when they do, archaeologists can learn quite a bit about the culture in which they were produced. For example, last year we reported on the world's oldest known pants, produced in China around 3,000 years ago. With the help of an expert weaver—who created a replica of the pants—archaeologists unraveled the design secrets behind the 3,000-year-old wool trousers that were part of the burial outfit of a warrior now called Turfan Man, who died between 1000 and 1200 BCE in Western China. To make them, ancient weavers combined four techniques to create a garment specially engineered for fighting on horseback, with flexibility in some places and sturdiness in others.

A local landowner discovered Cueva de los Murciélagos  ("Cave of the bats") in 1831, and made good use of all that bat guano in the main chamber to fertilize his land. At some point it was also used to house goats, but then the discovery of galena turned the site into a mining operation. As the miners removed blocks to access the vein, they opened up a gallery containing several partially mummified corpses, along with an array of baskets, wooden tools, and other artifacts. Most of the plant-based artifacts were either burned or given to the local villagers.

Enlarge (credit: Getty Images)

Thousands of servers running the Exim mail transfer agent are vulnerable to potential attacks that exploit critical vulnerabilities, allowing remote execution of malicious code with little or no user interaction.

The vulnerabilities were reported on Wednesday by Zero Day Initiative, but they largely escaped notice until Friday when they surfaced in a security mail list. Four of the six bugs allow for remote code execution and carry severity ratings of 7.5 to 9.8 out of a possible 10. Exim said it has made patches for three of the vulnerabilities available in a private repository. The status of patches for the remaining three vulnerabilities—two of which allow for RCE—are unknown. Exim is an open source mail transfer agent that is used by as many as 253,000 servers on the Internet.

“Sloppy handling” on both sides

ZDI provided no indication that Exim has published patches for any of the vulnerabilities, and at the time this post went live on Ars, the Exim website made no mention of any of the vulnerabilities or patches. On the OSS-Sec mail list on Friday, an Exim project team member said that fixes for two of the most severe vulnerabilities and a third, less severe one are available in a “protected repository and are ready to be applied by the distribution maintainers.”