rfoo

55 ms·

781.
by rfoo 5y ago
Are you sure what you described works? Last I tried it didn't work, and this is explicitly stated on wireguard.com: > In other words, when sending packets, the list of allowed IPs behaves as a sort of routing table, and when receivi
782.
by rfoo 5y ago
The point is M1 is extremely fast at video editing because it has DSAs designed for these workloads. So using them as a general purpose workload proxy is just bad.
783.
by rfoo 5y ago
Ryzen chips are more of less, SoC.
784.
by rfoo 5y ago
Given that Apple devices already have 2-3x premium, as long as Apple absorbs the extra cost, people would be fine with it. This is also why the approach is an "Apple-only" one.
785.
by rfoo 5y ago
Sell you a few racks of servers, ready to use out of the box, I guess?
786.
by rfoo 5y ago
In a way this is a very nice explanation of something we called "offensive mind" :)
787.
by rfoo 5y ago
I think all your examples are "simpler but less powerful" instead of "simpler yet more powerful". 25 years later and still, worse is better.
788.
by rfoo 5y ago
> once they realize Omicron isn’t that serious in vaccinated individuals They already do. And more than one public figures of ChinaCDC posted "we had to live with COVID eventually" online. This is not what Xi is trying to do th
789.
by rfoo 5y ago
> Because I think, it would influence my opinions I would dare to share. I would be amazed if the MSS decides to respond to these random pseudonymous comments I posted on HN/Reddit/Twitter, in English. I expect that talking to
790.
by rfoo 5y ago
I think the point is the original author did not prove anything was sent to Avira in this case. All they have is speculation that "the router is making DNS queries about a Avira safe things domain and the DNS query QPS is correlated
791.
by rfoo 5y ago
Depending on your use case. Assuming no video editing (since this is HN), for equivalent performance I guess they can't beat their rivals on price. Different story for power tho.
792.
by rfoo 5y ago
TBH the thing annoyed me most in this story is the "Someone had to start the disclosure process on linux-distros again and if they didn't no one would know"-part. There are certainly silent bug fixes where the author intentio
793.
by rfoo 5y ago
Not OP, but please do try to influence this policy if you can: 1. The commit message [1] does not mention any security implication. This is reasonable, because the patch is usually released to the public earlier and it makes sense to do som
794.
by rfoo 5y ago
No. Rust can not prevent this bug. The bug is that they are reusing (or, repurposing) an already-allocated-and-used buffer and forgot to reset flags. This is a logic bug, not a memory safety bug. In fact, this might be a prime example of &q
795.
by rfoo 5y ago
> there are millions of devices that will never be updated Luckily, almost all (if not just all) these millions of devices which will never be updated never ever received the vulnerable version in the first place. The bug was only introd
796.
by rfoo 5y ago
Yes? This is faster and easier than you may think it to be. Building a reasonably small kernel only takes ~a minute. People usually have fully automated git-bisect-run scripts for build & test in qemu.
797.
by rfoo 5y ago
Not to say such attack scenario does not exist, but: A USB HID device cannot listen on what other keyboards typed, except for NumLock/CapsLock/ScreenLock indicator.
798.
by rfoo 5y ago
> That infrastructure is mostly run on NVIDIA chips Not anymore.
799.
by rfoo 5y ago
Third, accept that when someone found your code is broken, they don't have to tell you.
800.
by rfoo 5y ago
Yeah, that's what I meant by "morphing dependency management problem to a source control problem". With a monorepo dependency management is way easier! But, sometimes: - git on large repo 100% pain 0% fun. hg is slightly bett
801.
by rfoo 5y ago
FWIW I like that there aren't much gatekeeping in the industry and think it is a genuinely good thing, not only because my "hobby" (application security) relies on it :) Also, with an unsolved problem you get paid to make wha
802.
by rfoo 5y ago
There should be a big warning on the top: Monorepo is a way to morph dependency management problem into source control problem within your organization. Currently, FOSS tools solve none of them.
803.
by rfoo 5y ago
Except we don't live in the past decade anymore. Even though people are still sometimes reluctant to updates ("it only made my device slow!"), We made significant progress on patch distribution. In the past a bug in the SMS s
804.
by rfoo 5y ago
Yeah. If the same thing happens to a brand-less garbage SSD you purchased from Aliexpress it's clearly cheat and plainly malicious and incompetence, but the Apple tag certainly made us believe there is a second reason. Trading correctn
805.
by rfoo 5y ago
You forgot to replace database with blockchain.
806.
by rfoo 5y ago
But none of the young Taiwan people I talked to claim they are Chinese. YMMV.
807.
by rfoo 5y ago
> CPython does not do these things. Again, it is. https://github.com/python/cpython/blob/2d080347d74078a55c477... This is the memmove() I mentioned above. Like, I actually perf-d the code and confirmed thi
808.
by rfoo 5y ago
2e5 is enough for making a naive O(n^2) solution to get TLE. This is likely due to the fact that in AlphaCode's solution the "inner O(n) loop" is actually a memmove(), which is optimized to be insanely fast.
809.
by rfoo 5y ago
1553D is a quite confusing case though. On the AlphaCode Attention Visualization website [1], the Accepted code shown for 1553D is a O(n^2) Python one, which is supposed to be TLE. It correctly implements a two-pointer solution, but faile
810.
by rfoo 5y ago
This is also the thing I don't like in Go: sometimes it's really hard to find what interface a type implements, why a type implements (or not) a certain interface and where the f the implementations are.

More ›