Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dmitrygr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
17 ms
·
451.
▲
by
dmitrygr
7mo ago
One word for you: dieselgate https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal
452.
▲
by
dmitrygr
7mo ago
That proves that the one they checked, had the correct firmware. It does not prove that the one from the next batch that you bought did. We are all technical people here we and understand that there isn’t really an easy way to do this that
453.
▲
by
dmitrygr
7mo ago
> They have complained that they are paid far less than their colleagues who are on track for tenure. Well, yeah… Lower standard for hiring (try getting a tenure-track position) -> lower pay.
454.
▲
by
dmitrygr
7mo ago
Self-Funding Bug Bounties strike again.
455.
▲
by
dmitrygr
7mo ago
problem is: how do you prove the firmware in the flash chip matches source? And I do not mean me, with a disassembler and a pi pico to read out the flash chip. I mean the 70-yaer-old corner shop owner that buys this router to provide free W
456.
▲
by
dmitrygr
7mo ago
It is the "potentially" that is the problem. Remove that and i am 100% onboard
457.
▲
by
dmitrygr
7mo ago
I had "PUSH EAX" and "BX LR" :)
458.
▲
by
dmitrygr
7mo ago
Dropping google for .... > Titan OS operates on a Chromium browser, Google....
459.
▲
by
dmitrygr
7mo ago
I specified slave specifically because slave is a LOT harder. Master is always easy. Waiting for someone else’s clock and then capturing and replying asap is the hard part. Especially if as a slave you need to simulate a read. On rp2350 it
460.
▲
by
dmitrygr
7mo ago
What are your thoughts on efficiency? BIO vs PIO implementing, say, 68k 16-bit-wide bus slave. I know i can support 66MHz 68K bus clock with PIO at 300MHz. How much clock speed would BIO need?
461.
▲
by
dmitrygr
7mo ago
You think USA punishes criminals too much?!?! You mean like this? https://komonews.com/news/nation-world/minnesota-judge-sarah... Or like that?? https://www.kiro7.com/news/local/seattle-m
462.
▲
by
dmitrygr
7mo ago
very cool. tiny processors everywhere. but be nice to PIO. PIO is good :)
463.
▲
by
dmitrygr
7mo ago
Yes, my point is that the article throws a lot of shade at PIO while the real issue is that the author is trying to shove a third-party FPGA reimpl of it into a place it never belonged. PIO itself is a perfectly good design for what it does
464.
▲
by
dmitrygr
7mo ago
> Above is the logic path isolated as one of the longest combination paths in the design, and below is a detailed report of what the cells are. which is an argument that "fpga_pio" is badly implemented or that PIO is unsuitable
465.
▲
by
dmitrygr
7mo ago
I am curious how long the approval process in some large corp or the military would be for either of those options... Hand over our private keys to a third party or run this binary written by some volunteers in some basements who will not s
466.
▲
by
dmitrygr
7mo ago
And the original article shows you how that is going
467.
▲
by
dmitrygr
7mo ago
This was the predictable outcome of shortening certificate length validity to appoint where they are now.
468.
▲
by
dmitrygr
7mo ago
It did until it got so short that it created a new potential attack surface — the scripts everyone is using to auto update them.
469.
▲
by
dmitrygr
7mo ago
No. The sister comment gave the correct answer. It is because nobody checks revocation lists. I promise you there’s nobody out there who can factor a private key out of your certificate in 10, 40, 1000, or even 10,000 days.
470.
▲
by
dmitrygr
7mo ago
Which would make sense if they were valid for 10 years and somebody forgot about them. Not when they’re valid for, what is it now, 40 days?
471.
▲
by
dmitrygr
7mo ago
Which is yet another chore. And it doesn’t add any security. A certificate expired yesterday proves I am who I am just as much as it did yesterday. As long as the validity length is shorter than how long it would take somebody to work out t
472.
▲
by
dmitrygr
7mo ago
So what? They keep shortening the validity length of these certificates, making them more and more of a pain to deal with.
473.
▲
by
dmitrygr
7mo ago
they will do it for unsigned. for signed they will do a bit more to do the same rounding as C promises
474.
▲
by
dmitrygr
7mo ago
> The new system will have a positive impact both for the EU budget as well as for national public finances Will it though...?
475.
▲
by
dmitrygr
7mo ago
Yes! Now do the same on beaches, busses, streets. Same punishment: banishment from the area.
476.
▲
by
dmitrygr
7mo ago
This is too little and too late, but you must give them credit for having the introspection ability to even go this far. Yes, the bar for microsoft is so low as to be handicap-accessible.
477.
▲
by
dmitrygr
7mo ago
Not a realistic option in today's world, sorry. I can suggest some literature
478.
▲
by
dmitrygr
7mo ago
People keep saying this and it a profound misunderstanding of how the world works. Nobody likes USA. Nor is that required. It is irrelevant. International politics do not run on emotions. As long as USA is capable of enforcing its will, USA
479.
▲
by
dmitrygr
7mo ago
They have families to feed. This might forever protect their families from any financial misfortune. Any sane person would do the same. I would.
480.
▲
by
dmitrygr
7mo ago
Simply put: The US has the ability to enforce or to cause enough pain to cause self-enforcement </realpolitik>
More ›