archi42

13 ms·

121.
by archi42 3y ago
The foolproof way is to not send codes as a 2FA (be it mail, SMS or whatever). There is always a risk that the user fails to verify where they're putting that code. Instead use something that verifies the domain without relying on the
122.
by archi42 3y ago
Nope. No separate AC and DC conductors for CCS2. From wikipedia [1], the DC cable has: PE, CP & PP (comms), fat DC+ and fat DC-. That's it. In the AC portion of CCS2 there are connectors for Neutral and up to three lines (for three
123.
by archi42 3y ago
"But they're ISO certified!" /s Strictly speaking audit is the wrong word for what I did (I'm not a certified auditor). I don't want to say too much in case I break some confidentiality agreement. Though I&#x27
124.
by archi42 3y ago
> everyone should update ssh Uh, if it was that easy. I recently(!) audited a brand new system for deployment in what most nations consider critical infrastructure. They had just updated to the newest firmware supplied by a well-known
125.
by archi42 3y ago
You're sure you're not hearing some harmonic? IIRC THD at lower frequency increases drastically. Or wind noise of the subs (they're moving lots of air)? You can check with a measurement mic what's audible (& make sur
126.
by archi42 3y ago
Hah, next step: Add a simple PLC the players can program to try to control it (or modbus to hook up an actual PLC) ;-)
127.
by archi42 3y ago
It's a long read (and pretty good at that), and I only just now saw your remark... There is not a single phrase that really sums it up: The report covers a lot of time and many facets, making it hard to pick "that one phrase"
128.
by archi42 3y ago
The Zoe is EOL and IIRC replaced by the Clio E-Tech. Also, Renault is french? (Not to talk badly about the specific car or the move to BEV in general - I applaud that and am at the same time disappointed how our [German] manufacturers ignor
129.
by archi42 3y ago
It's not possible for every workload, and sometimes the necessary effort makes it infeasible. Getting a Xeon might be the cheaper option then ;-) Edit: Though I'd still recommend heeding menaerus excellent sibling answer. Maybe no
130.
by archi42 3y ago
You can try to make your code aware of the situation and distribute the tasks accordingly. IIRC that's what people do on NUMA systems.
131.
by archi42 3y ago
Because the framing is wrong and click bait... As anyone with many cores can tell you: Those are used. The issue us more subtle: "[the minimum granularity] is supposed to allow tasks to run for a minimum amount of [3ms] when the syste
132.
by archi42 3y ago
I did some work on a toolchain used in automotive (and other industries) to proof^W prove certain software properties related to safety. This is already a massive effort, expensive to build & maintain - but after all a small cog in the
133.
by archi42 3y ago
The compiler takes care of this kind of optimization via static analysis. And who said x86? You're right, but what about Power9 register windows vs the three-and-a-half brain cells of x86? I'm not in the mood of discussing this or
134.
by archi42 3y ago
You have to check sizeof(int) somewhere. Why not do that in a header? To make sure you're using the checked int, define a new type, eg "int4" in that header, too, and use that. Congratulations, you'll fulfill this MISRA
135.
by archi42 3y ago
I agree, and there is tooling to do this kind of thing with C/C++. If this was embedded into the language, you'll quickly learn that static checking has its limits; dynamic checking introduces a new class of failure mode into your
136.
by archi42 3y ago
Cross-platform code - Is your int still 16 bits on your new CPU? Of course you know* your variable is always between 0 and 15, but the MISRA checker might not**. Today we have int16_t et al., so this is much less of an issue. *) IME "k
137.
by archi42 3y ago
That's illegal then. But the pihole won't do the trick, you need to remove the mandated certs from your browsers certstore. If these certs are used for legitimate places (e.g. EU or state websites, and I'll bet they will) you
138.
by archi42 3y ago
1. If an attacker got your credentials, they'll probably also have the server URL. Reasoning: They probably infected your machine with infostealer malware and keylogged the password. Or are you using the exact same credentials someplac
139.
by archi42 3y ago
The local hardware stores' own brands offer a wide range of cheap, torx-compatible screws. I think this started not too long ago (but can't say for sure, probably 2019 when the latest torx patent expired?), and they still offer sc
140.
by archi42 3y ago
But how does that sell ad space on my consumer attention spot market? And then they can't see the product they're about to buy! /s
141.
by archi42 3y ago
We have a restaurant that only took cash for a long time. Because I usually pay everything with card, I have a card-only wallet and rarely any significant amount of cash on me. There is no ATM in the vicinity (it's in a small suburb).
142.
by archi42 3y ago
A screen+camera would actually enable insanely good insulation, compared to glass. A 4cm/1.6" PUR sheet weights next to nothing and has a thermal transmittance (aka u-value) of 0.4 W/(m²K). That's about twice as good as
143.
by archi42 3y ago
"Thanks for self-reporting this. We are handling sensitive information in accordance with the European GDPR. Due to not having a suitable data processing agreement in place, you are in risk of violating national law in multiple countri
144.
by archi42 3y ago
I'm surprised they're not keeping 2G GSM/GPRS for legacy applications. E.g. considering the life time of cars, for an eCall-like[1] solution having a network that'll be available for a few decades would make sense; or us
145.
by archi42 3y ago
s/even the super wealthy/especially the super wealthy/ The wealth of the wealthy depend a lot on the infrastructure build from tax money. E.g. they don't build nation-scale road networks, but would make much less profit
146.
by archi42 3y ago
"Energy consumption per capita is 2.2 toe, with electricity accounting for 4300 kWh (2021). These figures are around 25% below the EU averages." https://www.enerdata.net/estore/energy-market/croatia/
147.
by archi42 3y ago
Ah, thanks, that's what I had in mind :) So while the original advise holds, commercial users are locked out of three weeks of payments of they're frozen for random bs.
148.
by archi42 3y ago
And curl has --limit-rate and supports more protocols. But so what? If they are happy using FileZilla and it helps them getting stuff done, why berate them? It's not even like they're abusing a tool in an entirely unintended way,
149.
by archi42 3y ago
I think for a normal customer that's true. IIRC it's mostly commerical users who don't always seem to have immediate access to funds?
150.
by archi42 3y ago
Uh, I think my friend ordered one locally and (because that was the last one in stock) another one for his parents from AliExpress. I didn't do the replacement, but it seems reasonably simple - the cylindrical sensor unit has a cable w

More ›