convivialdingo

7 ms·

31.
by convivialdingo 2y ago
Finally? Google has basically turned search and news into a political-corporate mouthpiece. Android is essentially a vacuum for surveillance capitalism. I rarely even use google to find anything beyond Chinese food and such. If we could go
32.
by convivialdingo 2y ago
Incredibly odd system which had no assembler. Almost a pure stack machine, some models had a 51 bit word (48 bit and a 3 bit tag). One of the first machines with NUMA & SMP, segmented memory, and virtual memory (but with all the oddne
33.
by convivialdingo 2y ago
A driver that crashes with bad input is not “fine.” Bad design, bad configuration loading and crap input validation. Did they even fuzz the code? We’d spend 20x development time on kernel code because BSOD is never an option. I get that t
34.
by convivialdingo 2y ago
Here’s my take as a security software dev for 15 years. We put too much code in kernel simply because it’s considered more elite than other software. It’s just dumb. Also - if a driver is causing a crash MSFT should boot from the last known
35.
by convivialdingo 2y ago
This is awesome work. I’ve coded some extensions for mp4 livestream to handling dozens of real-time streams and I’d love to try out the multi stream mux / demux…
36.
by convivialdingo 2y ago
This is freaking fantastic- I only wish it existed when I wrote my last encrypted filesystem a few years back. Nonce collision is a huge concern on large file system deployments. 2^32 seems huge but when you’re writing 100k iops a second on
37.
by convivialdingo 2y ago
My story about X windows... I was invited to the Atlanta Linux Symposium in the late 90s and met just about everyone around the Linux/Slashdot/X11 world. I had been hacking on OpenGL drivers and one of the first to "integrat
38.
by convivialdingo 2y ago
Really interesting how China changes the output to these questions in different languages. Shouldn’t model developers disclose their alignment training questions and censorship triggers? I don’t disagree that there needs to be guardrails on
39.
by convivialdingo 2y ago
You could hash the city names using something like a djb2a algorithm?
40.
by convivialdingo 3y ago
A few years back, I worked at a startup that got a contract with a major software company. Our job was to implement a crypto storage system for an OSS database where each user only had access to data based on their own authentication keys.
41.
by convivialdingo 3y ago
I thought it was hilarious. Perhaps I’ve suffered through one too-many corporate culture synergistic vision realignments…
42.
by convivialdingo 3y ago
I did some work with testing a cross platform in-house library for read-write locking. We tested cmpxchg16b and found the performance was terrible with more than 4 cores. Ended up using spin-locks similar to Linux kernel RCU.
43.
by convivialdingo 3y ago
If you watch it very slowly, the paper initially folds under the mouth and then it blows out straight. I'm guessing the initial puff creates a high pressure area on top of the paper, rolling it downward and back. Them after the puff h
44.
by convivialdingo 3y ago
Funny enough Glibc has a lock for threaded printing internally. You can disable the lock in glibc with the __fsetlocking function and the FSETLOCKING_BYCALLER parameter. I had a threaded server that we were debugging which would only dump s
45.
by convivialdingo 3y ago
Yes, something in recording was reset and it worked again. I really like the concept - good execution. I picked up the ability to click on a word for translation easily.
46.
by convivialdingo 3y ago
I really like it! It worked the first time after asking for mic permission. But second time, I did have a problem with the mic button on iOS 16.6.1 getting stuck on but not taking audio input. Pushing the button again (to cancel perhaps) di
47.
by convivialdingo 3y ago
I've often wondered how fermentation effects bean flavor. It was a surprise for me to learn recently that coffee beans were fermented in the first place!
48.
by convivialdingo 3y ago
It would be nice if something in Zig could auto-magically generate the zig to c interop call and type declarations. I see there's "translate-c" to help migrate C to Zig, and maybe that's enough. Generally I fall on the s
49.
by convivialdingo 3y ago
At my old company, we engaged with a contractor from France. We went to university together and I knew he was well qualified to do the work we needed in OpenCV. We researched ways to pay him legally, but for a six month contract it turned o
50.
by convivialdingo 3y ago
There's a lot of handwritten texts out there. I spent a few months transcribing my great-great grandmother's journals as a military wife in the late 19the century. It was an enormous task - I'd spend an hour or two a week a
51.
by convivialdingo 3y ago
We use Yolov8 with custom training for people detection - in our situation (hospital) we regularly get 96% accuracy. I highly recommend - best model we tried out of dozens of public models.
52.
by convivialdingo 3y ago
Somewhat related, I have found The On-Line Encyclopedia of Integer Sequences[1] to be an amazing resource when I come across interesting numeric sequences. [1] https://oeis.org/
53.
by convivialdingo 3y ago
This was a well done and engaging series, kudos. I remember creating projects like this - still amazed that you can step a CPU like that one cycle at a time.
54.
by convivialdingo 3y ago
Well, true.. the Hash_DRBG hashing algorithm remains. But it's rather likely that previous FIPS validations occurred utilizing the actual backdoored and deprecated algorithm as an input to the Hash_DRBG, rendering it's security p
55.
by convivialdingo 3y ago
Well, there's several Cavium devices that support the deprecated/back-doored Hash_DRBG. For example, these devices were validated for the completely appropriately named "SonicOS 6.2.5 for TZ, SM and NSA". Gotta appreci
56.
by convivialdingo 3y ago
Looking more closely at this, the backdoor is almost certainly based on the back-doored random number generator, Dual_EC_DRBG, which is implemented as NIST SP 800-90A. From Wiki: >>> NIST SP 800-90A ("SP" stands for &quot
57.
by convivialdingo 3y ago
As a developer and a consumer, what I'd really like to see is: - Manufacturer voluntary guarantee of 1/3/5 years security updates with an expiration date. - Separation of functionality and security updates. - The ability to &
58.
by convivialdingo 3y ago
It depends... I just worked my part of certifying a product(security) and it was only ~$40k. Agreed on the current state of the FDA filings - there's a lot of paperwork and process auditing - but guidance is lacking and I'd like
59.
by convivialdingo 3y ago
An index is most efficient when it represents a unique set of values. It's still very useful to have an index for grouping, but if the groups represent a severe minority then you will end up wasting a lot of space and cycles searching
60.
by convivialdingo 3y ago
Opposite experience for me. So far my 2016 Tesla has been the best car-owning experience I’ve ever had. Last week had to fix the instrument clusters, door handle, and a couple of recall issues. My 100k warranty ends in 400 miles - so needed

More ›