Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
bonzini
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
40 ms
·
541.
▲
by
bonzini
2y ago
> That's also why FM is in stereo! Stereo FM is essentially two waves transmitted at the same time (it's common and difference instead of left and right, but that's math). Stereo AM would be possible, it was never done bec
542.
▲
by
bonzini
2y ago
Sure they do. There are people who have taken worlds from 10 years ago and brought them all the way to the latest Minecraft release, and breaking changes are done very carefully. The only two substantial nerfs that I can remember are zero-t
543.
▲
by
bonzini
2y ago
Because they had enough of Trump after 4 years. Dick Cheney is voting for Harris, that's the equivalent of Norman Osborn voting for Peter Parker.
544.
▲
by
bonzini
2y ago
In the past yes, but right now UK and France have not used the veto for over 30 years; while the Biden administration (just because those are the numbers I found most easily) has already used it over ten times on Israel-Palestine relationsh
545.
▲
by
bonzini
2y ago
> It's a spiral, the moment you allow a nuclear power to use that status to force the hand of an opposing nation at war you open a can of worms. Since 1945 the world has been trying to control proliferation through other means, wars
546.
▲
by
bonzini
2y ago
If we lost access to electricity, we'd be completely screwed; we can't even get drinkable water in many places without electricity. For example where I live there is water around 10-20m depth, but it's polluted (it may be usa
547.
▲
by
bonzini
2y ago
Is that the vocabulary of Germanic origin and imported from Germanic, or is it just the part of PIE that has not diverged between Latin and Germanic languages?
548.
▲
by
bonzini
2y ago
There are several complications; see here: https://lwn.net/Articles/984249/ . For example, if the copyright holder applies a security fix to an old version that had "expired" and is now open source, will
549.
▲
by
bonzini
2y ago
Well, they should? Or if they prefer, their insurance will pay on their behalf.
550.
▲
by
bonzini
2y ago
Disabling foomatic seems hard since the PPD can be distributed by the attacker and foomatic-rip is part of the cups-filter package. But yes, lp user + SELinux should be enough to make this not a 9.9.
551.
▲
by
bonzini
2y ago
Maybe, maybe not. If I understand correctly, you still need to print something to the printer to achieve RCE via foomatic-rip.
552.
▲
by
bonzini
2y ago
The 9.9 issue is the foomatic-rip vulnerability; not cups-browsed listening on 0.0.0.0. See here: > LAN: a local attacker can spoof zeroconf / mDNS / DNS-SD advertisements (we will talk more about this in the next writeup) and
553.
▲
by
bonzini
2y ago
OpenSUSE But it looks like cups-browsed is only needed on the Internet; locally you only need mDNS.
554.
▲
by
bonzini
2y ago
Regarding Itanium, that could be just by chance because Fujitsu is the main (or almost only) seller of supercomputers in Japan partnered with HP. Also interesting however is how they switched to it from SPARC and actually kept using SPARC l
555.
▲
by
bonzini
2y ago
Unary and binary - can be given different precedence, because there is never ambiguity as to whether you're in front of a unary minus or a binary minus. A binary operator is never encountered at the beginning, or after a parenthesis, o
556.
▲
by
bonzini
2y ago
In the 90s what made MSFT shoot up was Windows becoming a household name, and Windows NT becoming the standard enterprise setup (often at the expense of mini-mainframes like the AS/400, rather than Unix); not Microsoft network. The (al
557.
▲
by
bonzini
2y ago
Pivoting to internet didn't work great for Bill Gates. Nobody really used MSN other than for chat and possibly hotmail, the browser wars were lost, and the bulk of the revenue was done on Windows at the time Nardella took the helm. How
558.
▲
by
bonzini
2y ago
To some extent it is. The current world chess champion was going to go to a xiangqi (Chinese chess) class and ended up by mistake at a chess class.
559.
▲
by
bonzini
2y ago
KVM can emulate the Xen hypercall interface. Amazon is not using Xen anymore.
560.
▲
by
bonzini
2y ago
IBM cloud, DigitalOcean, Linode, OVH, Hetzner,...
561.
▲
by
bonzini
2y ago
No, QEMU is a huge C program which can have its own vulnerabilities. Usually QEMU runs heavily confined, but remote code execution in QEMU (remote = "from the guest") can be a first step towards exploiting a more serious local esc
562.
▲
by
bonzini
2y ago
That would be a damn good record though, isn't it? (I am fairly sure that more were found since, but the point is that these are pretty rare). Firecracker, which is written in Rust, had one in 2019: https://www.cve.org/
563.
▲
by
bonzini
2y ago
AWS uses KVM in the kernel but they have a different, non-open source userspace stack for EC2; plus Firecracker which is open source but is only used for Lambda, and runs on EC2 bare metal instances. Google also uses KVM with a variety of u
564.
▲
by
bonzini
2y ago
Founder mode existed, it just didn't have a catchy name. And I absolutely believe that it was the right choice for your team, exactly for "founder mode" reasons. In other words, I don't think that the social or technolog
565.
▲
by
bonzini
2y ago
It doesn't perform poorly in fact. It can be tuned at 90% of non-nested virtualization, and for workloads where it doesn't, that's more than anything else a testimony to how close virtualized performance is to bare-metal. Tha
566.
▲
by
bonzini
2y ago
KVM got more and more integrated with the rest of Linux as more virtualization features became general system features (e.g. posted interrupts). Also Google and Amazon are working more upstream and the pace of development increased a lot. K
567.
▲
by
bonzini
2y ago
Exactly, then why would they be dragged into systemd-or-not-systemd discussion? If you want to use Linux, use either Debian or the CentOS hyperscaler spin (the one that Meta uses) and call it a day. I am obviously biased as I am a KVM (and
568.
▲
by
bonzini
2y ago
But do they? Oxide targets the enterprise, and people there don't care that much about how the underlying OS works. It's been ten years since a RHEL release started using systemd and there has been no exodus to either Windows or I
569.
▲
by
bonzini
2y ago
Talking about "technological and political issues" without mentioning any, or without mentioning which components would need to be revived, sounds a lot like FUD unfortunately. Mixing and matching traditional and systemd compone
570.
▲
by
bonzini
2y ago
> QEMU is often the subject of bugs affecting its reliability and security. {{citation needed}}? When I ran the numbers in 2019, there hadn't been guest exploitable vulnerabilities that affected devices normally used for IaaS for 3
More ›