bonzini

39 ms·

781.
by bonzini 3y ago
The question is whether something is exploitable or just a crash. It is also a disservice to user to worry them about having to do an immediate update and evacuation of all hosts because of an out of bounds access in Gravis Ultrasound emula
782.
by bonzini 3y ago
Then can you explain how cloud workloads is the revenge of the microkernel, since there is exactly 1 major cloud provider that uses a microkernel-like hypervisor?
783.
by bonzini 3y ago
Yes, and the policy of QEMU is to not assign CVEs for bugs that would generally be hit only when QEMU is used as a development platform, as opposed to using it to offer virtualization services. https://www.qemu.org/contribut
784.
by bonzini 3y ago
No, "type 2" is defined by Goldberg's thesis as "The VMM runs on an extended host [53,75], under the host operating system", where: * VMM is treated as synonymous with hypervisor * "Extended host" is defin
785.
by bonzini 3y ago
KVM is pretty much the only hypervisor that cloud vendors use these days. So it's true that "most cloud workloads run on type 1 hypervisors" (KVM is one) but not that most cloud vendors/workloads run on microkernel-like
786.
by bonzini 3y ago
No, KVM is also a type 1 hypervisor but it doesn't attempt (with the exception of pKVM and of hardware protection features like SEV, neither of which is routinely used by cloud workloads) to protect the guest from a malicious host.
787.
by bonzini 3y ago
While QEMU uses C, which is not great, it has on its side 15+ years of hardening by the KVM developers. The problem with QEMU is not so much insecurity, it's that it contains the kitchen sink. However, most of the exploits you'll
788.
by bonzini 3y ago
Copilot was not included in the ban, only ChatGPT. Flagging.
789.
by bonzini 3y ago
I was going by memory but yes there's just a clock generator, nothing comparable to say a GPIO controller.
790.
by bonzini 3y ago
Does it still work? Or do you have to use ARIA?
791.
by bonzini 3y ago
Typo: "Even though the 8086 has four clock signals" 8086 should be 386. What if you looked at the 186, comparing it with the 8086? It should be interesting considering there is more efficient digital logic (including microcode) an
792.
by bonzini 3y ago
In order to protect its genome from the mitochondrial genome, the host cell had to evolve the nucleus and possibly also sexual reproduction. Once that's done, it works just as well for the chloroplast.
793.
by bonzini 3y ago
It is in Italy's ("Freedom and secrecy of correspondence and any other communication cannot be violated"), but I didn't think this was particularly unique? (Note that this article of the constitution doesn't include
794.
by bonzini 3y ago
Making it happen once is harder than doing it a second time. Plant cells have both mitochondria and chloroplasts.
795.
by bonzini 3y ago
> Up there with chickens descended from the T Rex for me. Archaeopteryx lived in the Jurassic, so it's not really possible that chicken descended from the T Rex. They're cousins though.
796.
by bonzini 3y ago
Presumably some mission during the Iran–Iraq war? Iraq was an ally of the US at the time.
797.
by bonzini 3y ago
> I don't know a single person that has ever fallen victim to a virus or malware on linux, and I've been using it almost exclusively for the past 20 years. If it was a threat vector, it clearly wasn't a very big issue. Do
798.
by bonzini 3y ago
> we’ve decided to remove Xorg server and other X servers (except Xwayland) from RHEL 10 and the following releases. Xwayland should be able to handle most X11 clients that won’t immediately be ported to Wayland, and if needed, our custo
799.
by bonzini 3y ago
Those projects exist because they are within the scope of Mozilla Foundation, which is wider than just building a browser.
800.
by bonzini 3y ago
Gecko is not worse, though it used to be worse before Electrolysis landed. It's just that Mozilla Corp is mostly kept alive by Google so might as well remove the indirection and go straight to the browser that Google maintains
801.
by bonzini 3y ago
It doesn't happen daily, does it? This one was a one in several thousand years event.
802.
by bonzini 3y ago
> The worst-case scenario would be if such a powerful blast came from much closer to home—say, within our own Milky Way galaxy. That could "completely erase" Earth's ozone layer, he said. The diameter of the Milky Way is 1
803.
by bonzini 3y ago
You can always clean-room reverse engineer it. Or you can look yourself for 0-days in the released version, and develop simultaneously the fix for the closed and the open source version. You just have to be creative.
804.
by bonzini 3y ago
63% is the Carnot efficiency between 565°C (838 K) and 30°C (303 K)
805.
by bonzini 3y ago
ModRM and SIB are not a prefix, they're part of the opcode (second and third byte after all the prefixes and the 0Fh/0F38h/0F3Ah opcode map selectors)
806.
by bonzini 3y ago
The microcode hardly needs the segment selector registers. It uses the descriptor cache which includes the base, limit and access rights of the 6 segments + GDTR, IDTR, LDTR and TR. The descriptor cache is update by the MOV to segment and L
807.
by bonzini 3y ago
Right, the 386 has 10 internal segment descriptor caches but only 8 segment selector registers. The 286 had 8 and 6 respectively. But wait, HIMEM.SYS used LOADALL to avoid going into protected mode and back?!? When you thought you knew ever
808.
by bonzini 3y ago
I would put my bet on LDTR and TR. They are read and written with different instructions but they are 16 bit and closely related to segment registers (they index into the GDT).
809.
by bonzini 3y ago
Sort of, refcell still enforces that shared and mutable borrows cannot coexist. A similar case to what the parent describes is RCU or crossbeam's epoch-based reclaim.
810.
by bonzini 3y ago
Oh, Meson is definitely a "sorry Dave" kind of build system. In many cases it's extremely opinionated, though I have only found a couple cases that get into "infuriating" territory. It does compensate by generally

More ›