muricula

21 ms·

181.
by muricula 7y ago
llvm-go is checked into the (recently unified) llvm repo now, so I think that it's official now. They do lag behind though.
182.
by muricula 7y ago
Three counting google go, gcc-go and llvm-go. Last I checked the latter two were quite incomplete.
183.
by muricula 7y ago
If they built with debug there would be dramatically more load/store uops than you see in the benchmark. Debug mode builds disable optimizations and store variables back to memory after most expressions to aid debugging.
184.
by muricula 7y ago
The side channel for most of the spectre variants is the latency of misses on the cache lines. L1 and L2 cache lines are local to a physical core. As far as I know, nobody has made any of the spectre variants work by measuring the latency o
185.
by muricula 7y ago
Close but not quite -- sibling hyperthreads (logical cores) share cache state. Physical cores do not share cache state. Different processes, threads, or VMs on sibling hyperthreads (by definition on the same physical core) can infer the oth
186.
by muricula 7y ago
Judging by the comments here I wonder how many people on HN have actually been to many protests, even small ones. If there's a cause you support, local or global, there may be demonstrations in your city. Get out there and make a diffe
187.
by muricula 7y ago
The concern probably isn't the acidity, but the heavy metals and other toxins in the solutions. Pouring tpxins down the drain isn't a good idea.
188.
by muricula 7y ago
There's a nice table with five high security issues. The lack of authentication within the cluster is pretty damning.
189.
by muricula 7y ago
I always figured its position on the querty keyboard had something to do with it, but would love to know the actual history.
190.
by muricula 7y ago
In light of what was later revealed, this article seems dangerously naive.
191.
by muricula 7y ago
Last I checked all the kernel bits were in C++.
192.
by muricula 7y ago
Unikernels are mostly a mirage these days. I also have serious security concerns about the entire OS being in one address space.
193.
by muricula 7y ago
Most of those things can only be found in museums.
194.
by muricula 7y ago
What happened? Microsoft used to have an army of testers who would do a mix of manual and automated testing to help ensure the quality of the product. In 2014 they were all fired. Their strategy for testing Windows is now three fold: - Devs
195.
by muricula 7y ago
Here's to hoping this succeeds and Apple spins off the company to meet the demand of other manufacturers, similar to how it was involved with founding ARM Holdings.
196.
by muricula 7y ago
Midori was laid to rest a few years ago. Production OS kernels in GC'd languages remain a pipe dream.
197.
by muricula 7y ago
UAC is not a security boundary, unfortunately :(
198.
by muricula 7y ago
Hello from Redmond. It's all good old NT under the hood. NT is in Azure, XBox, anything which MS builds really. What is interesting is that Windows Subsystem for Linux v2 will actually run a Linux kernel in a VM. I guess implementing a
199.
by muricula 7y ago
Chrome's v8 Javascript JIT gets attacked all the time. I can only imagine the fun to be had attacking a kernel which uses JIT extensively.
200.
by muricula 7y ago
Linux doesn't have a stable driver ABI: https://github.com/torvalds/linux/blob/master/Documentation/...
201.
by muricula 7y ago
In order for this to work the apps have to listen to bluetooth signals from the beacons (or register a hook for an OS level beacon listening service?). How do I prevent an app from listening to bluetooth? Is this gated by the iOS "acce
202.
by muricula 7y ago
There are no paramilitary/security forces loyal to Hong Kong capable of a coup, right? Just trying to put it in context with contentious protests in other nations.
203.
by muricula 7y ago
Are there options for recalling the legislature or triggering new elections, similar to a British vote of no-confidence?
204.
by muricula 7y ago
"The dollars printed to go overseas to buy oil and other stuff don't come back to cause inflation." I think this part is wrong. When overseas oil companies get the dollars they are going to spend them, otherwise they wouldn&#
205.
by muricula 7y ago
There are experiments incorporating it into the OS and build system, but they've barely begun. Some teams use it for internal tooling. To make Rust work in Windows there would need to be a lot of work put into incorporating it into the
206.
by muricula 7y ago
Yesterday a coworker had an issue where ASAN wasn't finding a std::vector out of bounds error. It turns out the code doing the deference was in libc++, which was not ASAN instrumented even though his program was. Valgrind found the err
207.
by muricula 7y ago
I'm very skeptical about the platform and don't have the time to devote to reading the codebase or having conversations as I would like. The TL;DR is that the syscall interception technique seems expensive and I wonder if you will
208.
by muricula 7y ago
You're right, that's not the chart I wanted to see. I'm just dubious that reimplementing lots of the Linux kernel in Go while paying the cost of the ptrace interception is worthwhile. It seems like you're just adding a l
209.
by muricula 7y ago
Look at the syscalls chart. It's hard to tell exactly what the numbers are on the log log scale on the syscalls chart, and it's probably not the graph I want anyway, but it looks like their runsc-kvm platform clocks in at 1k ns&#x
210.
by muricula 7y ago
GKE Sandbox/gVisor syscall performance is at least 100x worse than virtualization[0], which is huge. Why shouldn't I just run everything in a VM/lxc container instead? Is it worth proxying everything through your syscall brok

More ›