jcalvinowens

18 ms·

301.
by jcalvinowens 11mo ago
Personally, I choose to aggressively upgrade and engage with upstreams when I find problems, not to sit around waiting and hoping somebody will notice the bugs and fix them before they affect me :)
302.
by jcalvinowens 11mo ago
Obviously. Every release introduces bugs. There's an inevitable positive correlation between the amount of code we write and the number of bugs we introduce, we just try to minimize it. The probability of introducing bugs is a function
303.
by jcalvinowens 11mo ago
I upgrade all dependencies every time I deploy anything. If you don't, a zero day is going to bite you in the ass: that's the world we now live in. If upgrading like that scares you, your automated testing isn't good enough.
304.
by jcalvinowens 11mo ago
Yep. Not only vulnerabilities, but just bugs in general, which usually matter more than than vulnerabilities IMHO.
305.
by jcalvinowens 11mo ago
I hate this. Delaying real bugfixes to achieve some nebulous poorly defined security benefit is just bad engineering.
306.
by jcalvinowens 11mo ago
> Instead, the routine likely should have worked within `Result`. But it's a fatal error. It doesn't matter whether it's implicit or explicit, the result is the same. Maybe you're saying "it's better to be e
307.
by jcalvinowens 11mo ago
> This is the multi-million dollar .unwrap() story. That's too semantic IMHO. The failure mode was "enforced invariant stopped being true". If they'd written explicit code to fail the request when that happened, the e
308.
by jcalvinowens 11mo ago
How does rp_filter on the server side help at all? For a cloud server with a single interface it literally does nothing. Maybe I'm misunderstanding your suggestion.
309.
by jcalvinowens 11mo ago
Go try to actually recover damages from apple and let me know how that goes for you :)
310.
by jcalvinowens 11mo ago
Turned out those scattered IPs were from a very small number of places, blocking these five killed 100% of my crawler spam: AS4229 Zenlayer (Singapore) PTE. LTD AS21859 ZEN-ECN, US AS45102 ALIBABA-CN-NET Alibaba US Tech
311.
by jcalvinowens 11mo ago
Scrapers have constantly been running against my cgit server for the past year, but they're bizarrely polite in my case... 2-3 requests per minute. This whole enterprise is clearly run by exceptionally dumb people, since you can just c
312.
by jcalvinowens 11mo ago
> Just take apple to small claims court. You can't do that, you certainly agreed to binding arbitration with apple at some point.
313.
by jcalvinowens 1y ago
Yeah. The HDCP1 master key was leaked over a decade ago, it's a joke compared to widevine. Encoding the raw input is very feasible on modern hardware.
314.
by jcalvinowens 1y ago
Yes, that's exactly what happens!
315.
by jcalvinowens 1y ago
YT works pretty flawlessly for me with firefox on debian. What's the issue you're seeing?
316.
by jcalvinowens 1y ago
No, it provides no incentive at all! It's the users who suffer when this happens, not the manufacturers. The manufacturers couldn't care less, the money is already in the bank. If the manufacturers were required to replace all the
317.
by jcalvinowens 1y ago
Meh. NTP is just an awkward less accurate frontend for GPS these days. It's so easy to run your own NTP server. You can set up a pretty decent one using GPS PPS for like $200. My home ntp server is good for +/- 1us if you believe
318.
by jcalvinowens 1y ago
> Virtually every billboard on the 101 and virtually every ad at SFO and San Jose Airport are some AI thing now. Ads are meaningless drivel. If you let the ads shown on billboards around you affect your life experience and how you define
319.
by jcalvinowens 1y ago
The really shitty thing is that vulnerable devices get blacklisted en masse, so all legitimate users get stuck with 480p video content on streaming services. The Nexus 5 got this treatment, as I understand it, because it was too easy to ext
320.
by jcalvinowens 1y ago
> Someone recently said to me: “I’m tired of drinking in living rooms with overly smart people.” So stop doing that. "Tech people" are not even a plurality in the greater bay area, let alone a majority. If all you see is tech p
321.
by jcalvinowens 1y ago
> Family Hub™ refrigerators[4] with AI Vision Inside technology will receive upgrades to enable recognition of frequently used packaged foods and even more fresh fruits and vegetables to help families reduce food waste and save money. Th
322.
by jcalvinowens 1y ago
And I'm confused how they have to correct the TCP checksum but not the IPv4 header checksum...
323.
by jcalvinowens 1y ago
The idea that CPI sucks is far from a conspiracy theory... not sure why you're trying to color it like that. The problem is that the error integrates over time, which IMHO is why graphs like that seem to suggest our standard of livin
324.
by jcalvinowens 1y ago
> I don't know what the disconnect is with that chart and people's observations. The disconnect is that CPI consistently significantly underestimates inflation as experienced by real people.
325.
by jcalvinowens 1y ago
Oh, actually the original report was very specific: https://lore.kernel.org/all/20251018024010.4112396-1-gourry@...
326.
by jcalvinowens 1y ago
I wrote a silly little testcase: https://gist.github.com/jcalvinowens/06530e6fc86f3b2c97a7027... ...but both affected znver5 machines I have "pass", so clearly there's more to it than AMD is telling us.
327.
by jcalvinowens 1y ago
Location: Bay Area, CA, USA Remote: Yes Willing to relocate: No Technologies: C, C++, Linux, drivers, embedded, HPC, networking, video, radio, yocto Résumé/CV: https://github.com/jcalvinowens/misc/
328.
AMD Errata: RDSEED failure on AMD Zen 5 Processors(amd.com)
23 points by jcalvinowens 1y ago|6 comments
329.
by jcalvinowens 1y ago
See also: https://lore.kernel.org/lkml/20251103142800.GFaQi78AgT-qjY30...
330.
by jcalvinowens 1y ago
A ~dozen programmers are shipping a demonstrably more secure version of a multi-billion-dollar corporation's own operating system on that company's own hardware. That's incredible.

More ›