jo909

10 ms·

31.
by jo909 9y ago
His conflict started with the Ontario Human Rights Commission policy which clearly includes gender pronouns. That is often getting mixed up with when he also spoke out against C 16 later, with different arguments. http://www.ohrc
32.
by jo909 9y ago
Sure it is. They allow the link to be shared nevertheless. https://lwn.net/op/FAQ.lwn#slinks Where is it appropriate to post a subscriber link? Almost anywhere. Private mail, messages to project mailing lists, and blog
33.
by jo909 9y ago
You can find a "shared by a subscriber" non-paywall link of the lwn.net article mentioned in the article here: https://news.ycombinator.com/item?id=16177525
34.
by jo909 9y ago
That is a lot of wasted time for an already known and fixed bug. At the scale of cloudflare I would have expected them to have a few people intimately familiar with their server hardware and in steady contact with their vendors, and to know
35.
by jo909 9y ago
A lot of the issues were kind of "external" and while worth thinking about for every deployment, not really something the k8s project can do much about other than warn in the documentation. - disk latency - monitoring querie
36.
by jo909 9y ago
I understand where your coming from, Intel's communication on this issue was pretty awful. But in this specific case I don't really mind them publishing an "expected" result of one benchmark together with a lot of other
37.
by jo909 9y ago
For people that don't want to dare their companies filter: Traffic graph: https://pbs.twimg.com/media/DTwcgMZXUAAn1uX.jpg The blog post reads as follows: On Saturday January 13, residents all across Hawaii receive
38.
by jo909 9y ago
> Anyway, Meltdown is only fixable by an os update (that software patch which causes the massive 5-20%). Yes, currently the OS update with the performance degradation is all we have. But could there be other future solutions that work di
39.
by jo909 9y ago
But that behavior is true and exploitable for HTTP as well, isn't it? It is a risk if there is no specific vhost config for the validated domain, which means a customer pointed the DNS to the shared host without also configuring that h
40.
by jo909 9y ago
From my point of view the big advantage of TLS-SNI is that it uses the same protocol and port as 90%+ of certificate users want to use with the issued certificate: HTTPS. That is especially useful for webserver plugins. Also this is much be
41.
by jo909 9y ago
I don't advocate for such hosting providers to not mitigate that attack. It's a real problem and needs a real solution, no matter the technical or political reasons that lead to this. Those hosting providers might not ever want to
42.
by jo909 9y ago
Maybe, but that is a different issue. If as a hosting provider I have accounts for foo.com and bar.com, I certainly need to make sure to never reply to requests for foo.com with data from the account bar.com. But I might still allow the acc
43.
by jo909 9y ago
I agree completely with that sentence factually and as an explanation why we have such issues, but still think HTTP and DNS are fundamentally different to this issue with the TLS-SNI challenge. The domain under attack is not part of the act
44.
by jo909 9y ago
I don't think they are really equivalent. We are talking about Domain Validated Certificates, and for DNS and HTTP "attacks" you need to be able to serve content in the name/as part of that domain. In this attack you nee
45.
by jo909 9y ago
I read that in the sense that you don't need very many ("a bunch") of PhDs in a small company. That does not imply that one or a few people of that background might not be useful. If AI is an integral part of my startup I wou
46.
by jo909 9y ago
But I think it is also clear that the theoretical buyer of every last share of Apple stock does not end up with a company "worth" $900 billion (it's current market cap). That metric and measurement of value just vanishes if t
47.
by jo909 9y ago
I don't think there is much wisdom in factoring in the price of company assets in its stock price. That's just obvious. That's like selling your car vs selling your car with 10.000 dollars in the trunk. Obviously it affects w
48.
by jo909 9y ago
Your job is to get your children to behave in a way that keeps _you_ liking _them_. I don't mean that in the sense of "unconditional love" but a pragmatic day to day annoyance and dissatisfaction that keeps building up. Don&#
49.
by jo909 9y ago
I don't think the actual technical "how" is of much importance so the article doesn't spend much time on it. They communicated effectively, and more important openly, over company boundaries. Many tools would have worked
50.
by jo909 9y ago
No, that would be bad design any day of the year. You would limit the attack surface of the hypervisor as much as possible, which means near to zero network access from the internet or customer networks. But that is just not enough. As thei
51.
by jo909 9y ago
Their sentence as such is correct, but only half the truth. You can not change the behavior of the system using this specific attack. It is only an information leak. BUT you might be able use the privileged information you might gain to lau
52.
by jo909 9y ago
It is a reasonable _assumption_ that other container runtimes on linux might be affected by the same kernel bug. The article does not explore that and the author has no duty to do so just to avoid using a branded technology name. How would
53.
by jo909 9y ago
"Ubuntu container" is just not a name typically used for anything. "Docker container" is. Let's make it realistic and say he had used RedHat OpenShift as his target and example for the exploit. I'd be completel
54.
by jo909 9y ago
What do you mean by "branded"? The author shows a concrete exploit of the kernel bug described in CVE-2017-5123 as he has developed it in the context of the docker container environment. He shows how to use this bug to break out o
55.
by jo909 9y ago
I recently bought a Lenovo Tab 8 Plus as a Nexus 7 replacement, and am fairly happy with it. The screen is excellent and sound is good. It's slightly bigger, but I got used to that quickly. I disliked the slippery glass back, but a hom
56.
by jo909 9y ago
I follow your argument, but I think that's certainly not what the author of the article was intending. And that's a very hard number to come by, because as I've argued you would have to factor in all other reasons why a pensi
57.
by jo909 9y ago
This is totally an important factor for the pension provider, your are right about that. They will factor in how many people will never reach the payout age, the distribution of payout age, maybe if the spouse is covered too how long they m
58.
by jo909 9y ago
> The average life expectancy in 1950 was 68, meaning that a pension had to pay out only three years past the typical retirement age of 65. Today, average life expectancy is about 79, meaning that the same plan would have to pay out 13
59.
by jo909 9y ago
They don't want commercial cloud and bare metal and "machine learning as a service" platforms to be based on GeForce cards. Such a service is either insignificant in it's size, or based in a Datacenter. I would not stres
60.
by jo909 9y ago
This is the relevant change in the EULA you need to accept when downloading (installing?) the GeForce driver. The article is weirdly translated, this is apparently a global NVIDIA thing and not specific to "NVIDIA Japan". > No

More ›