anyfoo

19 ms·

271.
by anyfoo 1y ago
You are right, I sort of misread the statement I was replying to, but also wanted to reinforce that the large class of personal desktop machines is still very much affected, even if you "think" that you don't run "arbitr
272.
by anyfoo 1y ago
This only matters if the mainline kernel since then somehow experienced changes which would affect this hardware vulnerability (fixed through microcode), which I see no indication of?
273.
by anyfoo 1y ago
I'm not an expert, but I think you can only make this harder by intentionally making timers less precise (even adding some random fuzz). Someone may correct me if I'm wrong, but I think statistically, a less precise timer means yo
274.
by anyfoo 1y ago
I challenge you to name another readily available "read arbitrary RAM from userspace"[1] vulnerability. [1] Not even including "potentially exploitable from JavaScript", which Spectre was. It's sufficient if you nam
275.
by anyfoo 1y ago
> Or people could just understand the scope of the issue better Do you understand the scope of the issue? Do you know that this couldn't personally affect you in a dragnet (so, not targeted, but spread out, think opportunistic ranso
276.
by anyfoo 1y ago
You run "arbitrary code from the internet" as soon as you use a web browser with JS enabled.
277.
by anyfoo 1y ago
There are many things to say about this, but one of those things is that I think you are making the assumption that an (e.g.) C programmer who does not want (or even cannot) get into OCaml would somehow be better for this highly specialized
278.
by anyfoo 1y ago
Wow, someone else who (used to be) using Clash. I still use it for everything I can in my (hobby) FPGA projects. I'm not sure I've used GADTs, but I've certainly made use of other more "advanced" parts of the type s
279.
by anyfoo 1y ago
Nobody declared divide by zero as undefined behavior for any optimization benefit.
280.
by anyfoo 1y ago
The compiler generally cannot know when the program runs into undefined behavior, because of the halting problem. For detecting undefined behavior at runtime, there’s UBSan. It’s good, but it makes things slower.
281.
by anyfoo 1y ago
Ah. Is that why LFSRs (linear feedback shift registers) and specifically PRBS generators (pseudo-random binary sequences) produce Sierpinski triangles as well? PRBS sequences are well-known, well-used "pseudo-random" sequences tha
282.
by anyfoo 1y ago
Never, the 386 is way too important.
283.
by anyfoo 1y ago
That's not what I mean. The C standard contains some rules that exist for the sole purpose of providing better optimization, and some of these rules give raise to undefined behavior. The compiler leverages undefined behavior by allowin
284.
by anyfoo 1y ago
In the kernel developer world on the other hand, it's still very common to think about how the C code one writes translates into assembly. (Honestly, I think C should not be used much outside developing kernels anyway, and even there i
285.
by anyfoo 1y ago
Of course, my bad. Otherwise the speed of light would have to be constant in any reference frame, and that would just be ridiculous .
286.
by anyfoo 1y ago
Well to be fair, the person you reply to has a point. There’s a continuous range of directions, but even though I’m no spaceship engineer, I suspect they’re probably engineered to withstand acceleration better in some directions than others
287.
by anyfoo 1y ago
Acceleration, deceleration, point is: Something is going to apply 300 gs in a certain direction to design for. It's not like you can tell whether you're going slow or fast, in one direction, the other direction, or even just stand
288.
by anyfoo 1y ago
I really liked the old German university concept, the one before we just took over Bachelor/Master. Throughout my CS studies, I was just collecting "tickets" (very hard to translate the actual word, "Schein"), which
289.
by anyfoo 1y ago
Ah you are right, I mixed CTCP and DCC up. The former was also used to set up the latter I think? (Among other things.) I joined IRC in the early 90s, there was no NAT then, packet filtering was uncommon, and practically nothing on the Inte
290.
by anyfoo 1y ago
Hard to believe that during those times in IRC, you were used to automatically (and proudly) advertising your IP address, your exact client version, and the means for a direct connection to your client without any server in between (CTCP, l
291.
by anyfoo 1y ago
Yap. But as hinted by the comments before you, if you have CPUs without FPUs, you probably want to enable userspace (e.g. glibc) soft math support anyway, since it doesn’t have the overhead of trapping the instructions and context switching
292.
by anyfoo 1y ago
Still use it for my “home server” and a few others, still love it! I’m actually genuinely excited when a new version comes out, taking time to read the changelog.
293.
by anyfoo 1y ago
FreeBSD’s printf is my goto, too! It’s indeed enormously simple to pluck out, instantly gives you full-featured printf, and has added features such as dumping memory as hex.
294.
by anyfoo 1y ago
It’s a feature to rewrite your OS kernel on the fly.
295.
by anyfoo 1y ago
Out of curiosity, why can’t you spare time? I’d be pretty lost without my hobby projects (one of them was a toy OS, but that stopped when low level OS development became my actual job), ever since I was a kid.
296.
by anyfoo 1y ago
Your "Cucumber street" is exactly like Germany works, as far as I can tell, including the even/odd split, and the a/b/c/d... when inserting new houses, or separate building sections. (I've seen as far as &
297.
by anyfoo 1y ago
I don't understand this discussion. What I said was that for our big projects internally, we keep them warning-free, and -Werror obviously helps tremendously with that. Nobody said you need to ship externally with -Werror, or anything
298.
by anyfoo 1y ago
I mean, yeah, obviously that a)only works when we build our projects ourselves, and b) for external libraries you have less control over that.
299.
by anyfoo 1y ago
True, so?
300.
by anyfoo 1y ago
It's worth looking at this from multiple angles, though. Intuitively, I'm also extremely said that "workstations" aren't a thing anymore. That there are no professional, well-engineered, powerful Sun or SGI workstat

More ›