paulmd

27 ms·

211.
by paulmd 2y ago
> KPTI won't be default enabled on Linux on AMD CPUs is the issue here. Yet it provides valuable separation between kernel and userspace address ranges. AMD's security bulletin is actually incredibly weaselly and in fact qui
212.
by paulmd 2y ago
these are the tests you need to run: https://github.com/amdprefetch/amd-prefetch-attacks/blob/mas... you probably want to do `export WITH_TLB_EVICT=1` before you make, then run ./kaslr. The power stuff
213.
by paulmd 2y ago
> Ultimately, it takes ~6-8 hours on average to obtain a remote root shell, because we can only guess the glibc's address correctly half of the time (because of ASLR). AMD to the rescue - fortunately they decided to leave the take-a
214.
by paulmd 2y ago
even if you look at something like DLSS where “all” it’s doing is giving you a tractable approximation of a difficult optimization problem (weighting temporal samples inside a TAA algorithm), that’s such a broadly-applicable approach that i
215.
by paulmd 2y ago
that sounds like a badly home-rolled uuid4 with extra steps. How about instead we just generate a uuid4, insert it into a sqlite file or Postgres database, and then the postzegelcode value is threefry(SECRET,uuid)?
216.
by paulmd 2y ago
Well, in the real word eminent domain literally is routinely used to hand the land to developers to profit from. Famously, shopping malls, but any development can be framed as an economic benefit. I hate when people seem to justify handing
217.
by paulmd 2y ago
> It's the same survival of fittest, except the weakest constituance is hurt most. They are very sparse so their voice is never heard. their voice is heard to a disproportionate extent because there are entire companies like Walmart
218.
by paulmd 2y ago
> It almost always made sense to buy the cheap fake ones knowing you might have to replacement them again sooner, lovely how people throw away a working system that prevents this problem and returns us to the path of e-waste, while oppos
219.
by paulmd 2y ago
the assertion from grandparent comment was that nobody needed it. parent asserts that yes, they do. it’s nice that you don’t need it, but lots of people do. It’s a pretty basic durability/longevity thing. don’t worry you can always mov
220.
by paulmd 2y ago
SQLite, sure, but I don’t want a coworker who chooses the hand-crafted full-scan on artisanal csv libraries or w/e
221.
by paulmd 2y ago
> Phones are supported for 5-7 years across the major makers. More like 3-4 for android vendors, with the exception of google, and it’s a new thing for them.
222.
by paulmd 2y ago
> Gatekeeper companies whose platforms are all-reaching and all-encompassing (ie. not just toys or games) stopped reading. You can instantly tell when someone’s being disingenuous when they pull out the “this device has been so successfu
223.
by paulmd 2y ago
> Such as? AAC-ELD is unsupported. https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/14... > Linux has had functioning AAC, MOV and MP4 drivers for almost a decade at this point. ok that’s
224.
by paulmd 2y ago
Now do this one for AMD - “intel didn’t force you to only dell intel chips, but doing so would lose certain discounts on intel processors if you also wanted to sell pcs with intel processors included.” Anticompetitive or no?
225.
by paulmd 2y ago
No App Store runs at 3% transacgoon fee - that’s the credit card interchange fee. Steam is 30% (with limited exceptions for review samples and humble bundle and other limited off-platform transactions). Microsoft store and PlayStation store
226.
by paulmd 2y ago
in fairness, you also are a high-profile cloud provider with a pre-existing relationship - if small. ;)
227.
by paulmd 2y ago
> and to get back good debug info because I needed to move data from VRAM to normal RAM. I was trying to learn at the time so efficiency wasn't really a factor I mean you're literally using the calvinball programming language -
228.
by paulmd 2y ago
how much do you know about bluetooth device and codec profiles? ooh, boy, I envy you, you see, the bluetooth connection was never about the bluetooth at all... https://en.wikipedia.org/wiki/List_of_Bluetooth_profil
229.
by paulmd 2y ago
I was thinking yesterday what a mockery of the concept of justiceability some of their past decisions have made. Like the court is forced into a Sophie’s choice on whether to agree to let a Captain Planet villain go free or let the lawyers
230.
by paulmd 2y ago
Yeah, grandparent is being infantilizing/patronizing
231.
by paulmd 2y ago
too many temporarily embarrassed millionaires in the US. (or rather, not that people on the bottom think they’ll be on the top someday, but they’ve come to identify with the ruling class , and bought into the arguments that we can’t have n
232.
by paulmd 2y ago
this is honestly a very enlightening interview because - as pointed out at the time - Lisa Su is basically repeatedly asked about software and every single time she blatantly dodges the question and tries to steer the conversation back to
233.
by paulmd 2y ago
that's a mechanism intended to grant keys to reviewers and such, you can't use that as a primary transaction mechanism. steam has an unspecified threshold at which they will kick you off the platform for abusing that, they aren&#
234.
by paulmd 2y ago
Steam also leans on the same anticompetitive "most-favored nation" agreements as Amazon. Sure, you don't have to list on Steam... but if you do, you better not try to go around their cut and list elsewhere at a lower price,
235.
by paulmd 2y ago
this problem isn't entirely windows-related/driver-related either. even with the very last-gen 2020 macbooks with ice lake, they still have a pretty significant amount of discharge while sleeping. and apple is running their ow
236.
by paulmd 2y ago
it's not that you go 6 hours straight in front of a computer as much as the laptop can't get 2 hours of charge in the 15 minutes I'm inside getting a drink and going to the bathroom. it's better now that everything doe
237.
by paulmd 2y ago
costco already has this for ID cards in the states (and I've also seen it for account ID for home depot and some other places where it's tied to discounts). the app will pull up an ID card with a QR code that changes every 60 sec
238.
by paulmd 2y ago
I mean we do have “old growth standards” that are legally mandated in the tech industry… EU mandates for USB micro-B and usb-C are an example, as are PCI standards and similar security standards around banking endpoint security etc.
239.
by paulmd 2y ago
Yeah. The power grid is on the verge of falling over on an overly warm summer day, that’s not a useful metric. Our infrastructure is trash and utilities have systematically underinvested despite constant increases for delivery fees and capa
240.
by paulmd 2y ago
There are some decent sales on B+H and Microcenter on older higher-spec units. B+H had a 16” MBP M1 Max 10/32 (upper bin) with 4TB/64GB for $3.3k (then $3k, lol jebaited) this time last year. Microcenter has M1 Max 14” 64GB/1

More ›