Veserv

42 ms·

511.
by Veserv 2y ago
The very concept of “offensive security” is indicative of the problem. If you want to make a secure military base, you do not hire a spec ops team to develop one. If you want to make a bulletproof vest, you do not hire a gunsmith to design
512.
by Veserv 2y ago
Of course nobody believes them. Companies have explicitly pushed for the current state of affairs where legal entities can only be held to legally binding statements; everything else is fair game. If that is the standard you want, then any
513.
by Veserv 2y ago
He knowingly sells fatally defective products that he misrepresents with a reckless disregard for the truth at the cost of killing his customers and members of the public. He has resisted all calls to rectify obvious and public fatal design
514.
by Veserv 2y ago
Yes. Flight around the moon with passengers scheduled for 2023 [1][2]. No point looking to the public statements of a person who is legally recognized [3] as making such fanciful claims that no reasonable person could possibly believe them.
515.
by Veserv 2y ago
It is cheaper, your product takes fewer people to operate, you can outsource the operations, if you deliver IoT solutions you get to call yourself a tech company which gets you valued at 30x earnings instead of 10x earnings, getting hacked
516.
by Veserv 2y ago
Gear selection is done via the screen on a Model 3 [1]. Technically, there is a touchscreen button on the rearview mirror unit, but I doubt anybody actually uses that. Alternatively, you can use the AI gear selector from park which guesses
517.
by Veserv 2y ago
I do not know Zig, but it looks like it just means "call default constructor for parameter/variable/type". I do not see how you could expect it to be elided unless every function auto-constructs any elided arguments or a
518.
by Veserv 2y ago
There are plenty with good security track records, formal specifications, formal proofs of various security properties, and decades of deployments. SCOMP, GEMSOS, INTEGRITY-178, seL4.
519.
by Veserv 2y ago
It is not a real solution. The people delivering memory-safe code today do not think their systems are secure against individual, lone attackers, let alone fully-funded state actors. The overwhelming majority of them, all software developer
520.
by Veserv 2y ago
Cool. Is this going to require phasing out systems written in C/C++ with horrible security track records like Linux and Windows? Or are they going to get a "too critical to be improved" exemption?
521.
by Veserv 2y ago
I do not really understand the mentioned difficulties with instruction profiling. Are they saying it is hard to sample the stacks across the boundary? Are they saying it is hard to do so coherently because the accelerator engine is actually
522.
by Veserv 2y ago
Except that is the opposite of reality in the USA. The fraction of energy generated from small scale PV generation in the USA has decreased as total PV generation has increased [1]. 10 years ago, in 2014, utility scale PV generation was 57%
523.
by Veserv 2y ago
Thank you for providing a more thorough and complete technical explanation. As you can see from my final statement, I made no argument that it was not a travesty. It was ABSOLUTELY UNACCEPTABLE. This is not a defense of their inadequacy. I
524.
by Veserv 2y ago
That is a massive over-simplification and that invites patently false characterizations like it was a "stupid mistake" that would have been fixed if they were not stupid (i.e. adopted average development process). That is absolute
525.
by Veserv 2y ago
First of all, passenger-distance per event (or its inverse) is the standard metric used when comparing transportation safety. You would be hard-pressed to find any broad, rigorous comparison that does not compare on that metric. It encodes
526.
by Veserv 2y ago
Actually, the Shinkansen seems to average ~100 billion passenger-km per year [1] or ~60 billion passenger-miles per year. Using that as a overestimate for the last 60 years, that is a grand total of 3.6 trillion passenger-miles. US commerci
527.
by Veserv 2y ago
First of all, who got blamed for the 737 MAX? Boeing did. This is one of the few industries where the responsibility does not get easily sloughed off. Second, 787s have been flying for ~13 years and ~4.5 million flights [1]. Assuming they w
528.
by Veserv 2y ago
Because there has never been a single commercial jetliner fatality caused by software in its intended operational domain failing to operate according to specification. That makes the commercial jetliner software development and deployment p
529.
by Veserv 2y ago
Revokation that demands a full memory sweep is problematic in high security use cases, but potentially workable. Which is my point about questions; there exists a potential solution but it remains to be seen how effective it would be in the
530.
by Veserv 2y ago
Handling fragmentation is likely the bigger problem. There are some questions about revokation, demand paging, and probably some other things that I am forgetting, but most of those have potential, non-intrusive solutions. However I have no
531.
by Veserv 2y ago
Cubicles were invented in the 1960s to provide a superior and more private alternative to open plan (bullpen) offices of the 1950s [1]. The silly part of all this is the people arguing for open plan offices in the present/recent past a
532.
by Veserv 2y ago
To what state? Suppose I have 28 GB of trace data in memory on a machine and then I fire that off. What do I have after 1000 seconds? Do I just have a file of 28 GB of raw trace? Do I have 28 GB of raw trace in memory ready to be indexed? D
533.
by Veserv 2y ago
Why is it only 28 MB/core-second? Is that production rate, inbound bandwidth, rate to persistence, rate to processed, or rate to display?
534.
by Veserv 2y ago
You do not need to say precisely 76%. Nobody is going to complain if you spend less resources to get a less strict upper bound like 80%. Hell, you can make it easy for yourself and just say 100%; costs nothing and guaranteed to not understa
535.
by Veserv 2y ago
Why does 1 syscall per 1 GB versus 1 syscall per 1 MB have any meaningful performance cost? syscall overhead is only on the order of 100-1000 ns. Even at a blistering per core memory bandwidth of 100 GB/s, just the single copy fundamen
536.
by Veserv 2y ago
You can in theory. You just need a accurate model of your available bandwidth and enough buffering/storage to avoid stalls while you wait for acknowledgement. It is, frankly, not even that hard to do it right. But in practice many impl
537.
by Veserv 2y ago
What? Humans are excellent drivers. Humans go ~70 years between injury-causing accidents and ~5,000 years between fatal accidents even if we count the drunk drivers. If you started driving when the Pyramids were still new, you would still h
538.
by Veserv 2y ago
It is absolutely fair to continue to point out his ongoing hypocrisy. “If we have a choice of either our people go to prison or we comply with the laws, we will comply with the laws.” in 2023. Here he is on Brazil just a few months ago [1]:
539.
by Veserv 2y ago
As other posters have pointed out, that is the household number. The individual number is ~300 liters per day. But, ignoring that point, even if it were 1000 extra liters per person, 1000 liters is only ~0.40$ of desalinated water. These Am
540.
by Veserv 2y ago
If you want something passable, most compilers have function prologue/epilogue hooks that you can write in plain code. Realistically, development and test systems are only going to target like 1 or 2 compilers, so it is not very much w

More ›