wolf550e

35 ms·

361.
by wolf550e 7y ago
https://www.percona.com/doc/percona-toolkit/LATEST/pt-online...
362.
by wolf550e 7y ago
How is this MariaDB specific? It's MyISAM specific, I think.
363.
by wolf550e 7y ago
The shell script uses lsof to read file offsets of files. This is neat. But it won't work for database tables in tablespaces (i.e. when not using file per table).
364.
by wolf550e 7y ago
1. The certbot client is not a product of the Let's Encrypt CA and is not mandatory. You can use another client. 2. With the certbot client, instead of using a deep integration with your http server, you can use `certbot certonly --web
365.
by wolf550e 7y ago
Current Intel chipsets and CPUs cannot initialize the system without the ME. You can disable all the applications running on the ME, but it is required to bring up the system.
366.
by wolf550e 7y ago
tpm2-tss is not an implementation of a TPM, it's a client of the TPM protocol that talks to a server. The server in this protocol can be a real TPM reached by a linux device file or a TPM arbitrator (in kernel on in userspace) or a TPM
367.
by wolf550e 7y ago
They do: https://developers.google.com/web/updates/2018/07/site-isola...
368.
by wolf550e 7y ago
Against the Pentium 4, AMD was amazing.
369.
by wolf550e 7y ago
Falcon 9's reusable first stage has been claimed by reputable people to be impossible, before it happened. Not just "economically not worth pursuing", which was wrong but forgivable, but straight "impossible".
370.
by wolf550e 7y ago
Thank you! L1TF is this: https://software.intel.com/security-software-guidance/insigh... I'm surprised IBM did this. I thought better of them.
371.
by wolf550e 7y ago
L1TF was an incredibly stupid bug in Intel's L1 cache implementation. I very much doubt IBM's POWER chips had the same issue. Do you have any source for this?
372.
by wolf550e 7y ago
Nothing like that happens. Writes to dram or pcie devices or data bus cannot be rolled back. You have a misunderstanding of what speculative execution entails. The things that get rolled back are writes to general purpose registers.
373.
by wolf550e 7y ago
There used to be a time when people thought relying on if statements for security was enough and proposing an OS [1] where everything is in a single process was plausible. Same for JS JITs. Now we know better. 1 - https://en.wiki
374.
by wolf550e 7y ago
No. This timeline shows incompetence, not sitting on their hands: https://mdsattacks.com/#ng-full-story
375.
by wolf550e 7y ago
Your web browser runs untrusted code. On a computer that never runs untrusted code you can do that.
376.
by wolf550e 7y ago
AMD and others are fine. Just have security people on the team during microarchitecture design. Spectre variant 1 is probably unavoidable so security inside a single virtual address space is kinda dead. Use separate processes and mmu.
377.
by wolf550e 7y ago
I hope that's what happens, yes.
378.
by wolf550e 7y ago
AMD (and ARM OoO chips) are vulnerable to Spectre variant 1 (bypass in-process array bounds checking) but not to the vast majority (any?) of the other issues which are Intel-only. AMD chips don't have the feature that speculation failu
379.
by wolf550e 7y ago
"really cold" is incorrect in a global context. The coldest place in Israel[1] gets to only just below freezing temperature in the winter. 1 - https://en.wikipedia.org/wiki/Mount_Hermon#Climate
380.
More Intel speculative execution vulnerabilities(mdsattacks.com)
640 points by wolf550e 7y ago|249 comments
381.
by wolf550e 7y ago
To me this sounds like exactly the same as Minerva [1][2] but in TPM instead of in smart card. 1 - https://minerva.crocs.fi.muni.cz/ 2 - https://news.ycombinator.com/item?id=21147865
382.
by wolf550e 7y ago
You're not supposed to use the IBM TPM emulator for anything except developing software that talks to a real TPM without using a real TPM.
383.
by wolf550e 7y ago
so is "MaxSessions 1" the correct fix if you can use it?
384.
by wolf550e 7y ago
Why not a patch to openssh to disable multiplexing on the server? At least as an option.
385.
by wolf550e 7y ago
There used to be a requirement that anyone receiving an academic degree has to demonstrate proficiency in a second language. The purpose is not so you could use the second language, instead the purpose is that learning a second language for
386.
by wolf550e 7y ago
The simple query: explain (analyze, timing) SELECT id FROM a WHERE a_val LIKE 'something%' OR a_val LIKE 'other%'; QUERY PLAN
387.
by wolf550e 7y ago
A Caesar cipher is encryption, there this too is encryption. Is the encryption very weak? Yes.
388.
by wolf550e 7y ago
Segment registers are the source of a bunch of C language rules about undefined behavior.
389.
by wolf550e 7y ago
Why can't a fab with something like 28nm use public design rules? I guess there aren't valuable trade secrets still in a process that old. But some chips can usably be made on such a process.
390.
by wolf550e 7y ago
IP cores are sometimes deployed on FPGAs though, so that can be a working chip (depending on definitions).

More ›