the8472

28 ms·

361.
by the8472 2y ago
Old crypto profiles often can't be removed because there's still ancient hardware that needs to be interacted with. Exhibit A: the SSH server in my modem only speaks diffie-hellman-group1-sha1 and 3des-cbc. So putting it in separa
362.
by the8472 2y ago
Either pin the appropriate server cert in each application or run your internal CA (scoped to that domain via name constriants) and deploy the root cert to all client machines.
363.
by the8472 2y ago
EVEX prefix can address XMM/YMM/ZMM registers. So you can apply the AVX512 instruction set to 128bit and 256bit registers too.
364.
by the8472 2y ago
Toasting CPUs via overclocking and overvolting has been possible for a long time. Back in the day they didn't even have thermal throttling. It just used to be jumpers and dip switches, then the BIOS before some of it moved into the CPU
365.
by the8472 2y ago
> but as an application programmer, it's really sad we don't take advantage of FD passing to build more modular programs. For that programming languages need better unix socket (with SCM_RIGHTS) and directory-handle (openat &am
366.
by the8472 2y ago
The classifier still has to learn a model, which is a lossy, compressed representation of the world. Classifiers can be very lossy. The outputs from Google's Deepdream are the kind of things that a classifier would "uncompress&quo
367.
by the8472 2y ago
> In order to translate C code to Rust code that missing information must be produced by someone or something. If you don't go for preserving the formal semantics of C code and instead only require the test-suite to still pass after
368.
by the8472 2y ago
The C++ forward progress guarantee enables more optimizations since it allows the compiler to reason more easily about loops: > The standards added the forward progress guarantees to change an optimization problem from "solve the ha
369.
by the8472 2y ago
I did mention using sanitizers in the verification step of the optimization loop. The optimization goal here would be reducing the lines of `unsafe` while preserving program semantics.
370.
by the8472 2y ago
Write tests for your C code. Run c2rust (mechanical translation), including the tests. Let a LLM/MCTS/verifier loop go to town. Verifier here means it passes compiler checks, tests, santiziers and miri. Additional training data ca
371.
by the8472 2y ago
The trophy cases in miri are about bugs in unsafe code. Yes, you can write UB with unsafe code. This should not be news. And miri is a blessing. There even is a known case where someone found a bug in C by translating it to rust and then
372.
by the8472 2y ago
The sanctioned way to this would be masked aligned load intrinsics, alignment avoids page faults, masking avoids reading undef bits, being an intrinsic conveys the intent to the compiler so it'll know that this is not an OOB read. The
373.
by the8472 2y ago
NNs/learning/function approximation are compression.
374.
by the8472 2y ago
ZFS online deduplication is not comparable with on-demand dedup offered btrfs and xfs and is prohibitively expensive for many workloads. The new block cloning still had data corruption bugs quite recently.
375.
by the8472 2y ago
If the filters are loaded at boot and hook into everything then a bug can still lock down the system to a point where it can't be operated or patched anymore (e.g. because you loaded an empty whitelist). So it could end up replacing a
376.
by the8472 2y ago
Shouldn't IOMMUs block that these days?
377.
by the8472 2y ago
Linux already considers kernels with proprietary modules tainted. And with secure boot you can lock it down so that root can't load kernel modules. It's up to the distro and user to decide whether they want to allow it or not.
378.
by the8472 2y ago
I don't think this follows. Those vendors are third parties and reach for whatever they can get. Yes, if microsoft didn't allow kernel extensions then crowdstrike would run as SYSTEM in userspace, but that doesn't tell use wh
379.
by the8472 2y ago
At work we have two sets of computers. One gets beamed down by our multi-national overlords, loaded with all kinds of compliance software. The other is managed by local IT and only uses windows defender, has some strict group policies appli
380.
by the8472 2y ago
None of those things require a kernel module with remote code execution to configure properly.
381.
by the8472 2y ago
Regulation or auditors rarely require specific solutions. It's the companies themselves that choose to achieve the goals by applying security like tinctures: "security solutions". The issue is that the tinctures are an approv
382.
by the8472 2y ago
Stopping at 3 might already be enough if the background script has a sufficiently juicy bug that can be triggered by a message, e.g. if you can exfiltrate cookies or trigger requests with the user's credentials.
383.
by the8472 2y ago
0x100002ec0: b 0x100002d1c ; jump back to the dispatch loop I'd expect tail call based control flow - i.e. computing the jump destination at the end of each opcode function - to be nicer to the branch predictor becaus
384.
by the8472 2y ago
> If it’s as they say, switching to AMD shouldn’t lead to 100x fewer crashes, it should lead to no crashes. No, this does not follow, at all. Few things in life are monocausal and systems (here the aggregate of hardware and software) ten
385.
by the8472 2y ago
The headline could equally say "AT&T kept data for criminals to steal". If wiretapping laws didn't exist then most of this data would not be justified to exist. Flat-rate billing doesn't need to keep track of this in
386.
Hubble finds evidence for rare black hole in Omega Centauri(esa.int)
4 points by the8472 2y ago|0 comments
387.
by the8472 2y ago
Depends on your goals, bittorrent does without STUN servers by coordinating over other peers in the network. Time-based coordination and simultanous-open is another strategy.. And there's IPv6. Local peer-to-peer wifi can probably use
388.
by the8472 2y ago
For physically local use: You could turn the session initiation tokens into QR codes and show them to each other For P2P over the broader internet: Either use another channel to convey the token or use a native application that can speak UD
389.
by the8472 2y ago
Buffering... please wait
390.
by the8472 2y ago
> This can go terribly wrong and kill us all (x-risk). Or it can succeed where the people making the AGI aligned it with their goals. The jump you are making is to assume that if the people making the AGI aligned it with their goals tha

More ›