zrm

5 ms·

31.
by zrm 6mo ago
The problem with fibre isn't the sensitivity. It's that most endpoints have a 1Gbps copper port on them and then Cat6A ports can be used with the common devices but also allow you to add or relocate 10Gbps devices without rewiring
32.
by zrm 6mo ago
> There is almost certainly no way that writing a "magic" byte sequence to a file will cause the storage device to misinterpret it as control data and change the mapping of logical to physical blocks. Which is also what happens
33.
by zrm 6mo ago
The header and length of the payload are control data. It's still being concatenated even if it's binary. A common way to screw that one up is to measure the "length of payload" in two different ways, for example by usin
34.
by zrm 6mo ago
> If we can get that to raise a red flag with people (and agents), people won’t be trying to put control instructions alongside user content (without considering safeguards) as much. At a basic level there is no avoiding this. There is o
35.
by zrm 6mo ago
You expect the files to still be accessible using relative paths. What do you expect to happen if your cloud storage file path is 50 characters long and is mounted in a folder which is 4050 characters long when PATH_MAX is 4096? The sync
36.
by zrm 6mo ago
If you create the file with 'mkswap --file' it allocates the blocks. Trying to use 'swapon' with an existing sparse file won't remove the holes for you but does notice them and then refuse to use it.
37.
by zrm 6mo ago
That's not a great idea for three different reasons: Filesystems have to do ugly things when they're almost full like split files into many small blocks and store more metadata to keep track of them all, SSDs get slower and have c
38.
by zrm 6mo ago
A good way to do this is to create a swap file, both because then you can use it as a swap file until you need to delete it and because swap files are required to not be sparse.
39.
by zrm 6mo ago
There are different governments and different subdivisions within any given government. The only thing you need to get a government that had been pushing Chat Control to do some trust busting is to get more votes.
40.
by zrm 6mo ago
> First you confuse API and ABI. I'm not confusing API with ABI. If you don't have a stable ABI then you essentially forfeit the traditional method of having every program on the system use the same copy (and therefore vers
41.
by zrm 6mo ago
> C and C++ are usually stuck in that antiquated thinking that you should build a module, package it into some libraries, install/export the library binaries and associated assets, then import those in other projects. That makes eve
42.
by zrm 6mo ago
> No root certificate is decentralized. The root certificates are pretty decentralized. There isn't just one and you can use whichever one you like for your certificate. The browsers or other clients then themselves choose which roo
43.
by zrm 6mo ago
Let's Encrypt is a non-profit that defeated the certificate cartel. The main thing you get from using HTTP without it is bad security. DNS can answer thousands of queries per second on a Raspberry Pi and crazy numbers on a single piece
44.
by zrm 6mo ago
> Use HTTP (secure is not the way to decentralize). This doesn't seem like useful advice. If you're going to use HTTP at all there is essentially zero practical advantage in not using Let's Encrypt. The better alternative
45.
by zrm 7mo ago
I have two younger brothers. They have the same last name, first initial, a history of having lived at the same address, and the same birth date, because they're twins. Every time one of them goes to a particular medical facility, he h
46.
by zrm 7mo ago
https://xkcd.com/2015/
47.
by zrm 8mo ago
With Linux distros they typically put the web link right on the main page and have a torrent available if you go look for it, because they want you to try their distro more than they want to save some bandwidth. Suppose HF did the opposite
48.
by zrm 8mo ago
https://xkcd.com/1321/
49.
by zrm 8mo ago
That's assuming you're requiring the ordinary HTTPS port to be used. For that matter, why would it even need to use HTTPS? Have the peer make a TLS connection to the XMPP server to get the CA. But it still seems like the premise i
50.
by zrm 8mo ago
The second one doesn't seem excessively complicated and the latency could be mitigated by caching the CA for a reasonable period of time. But if you're going to modify the protocol anyway then why not just put it in the protocol t
51.
by zrm 9mo ago
A probable implementation is that you bootstrap the initial key exchange using web PKI (if you want to talk to Alice@example.com then your client makes a TLS connection to example.com and asks for Alice's public key) and thereafter you
52.
by zrm 9mo ago
Triage gets outsourced because the quality of reports is low. If filing a bad report costs money, low quality reports go down. Meanwhile anyone still doing it is funding your top notch security team because then they can thoroughly investig
53.
by zrm 10mo ago
A VPN provider could easily support Port Control Protocol / NAT-PMP without giving each VPN client its own public IPv4.
54.
by zrm 10mo ago
> Bus width is 64 vs 384. The bus width is the number of channels. They don't call them channels when they're soldered but 384 is already the equivalent of 6. The premise is that you would have more. Dual socket Epyc systems al
55.
by zrm 10mo ago
DDR5 is ~8GT/s, GDDR6 is ~16GT/s, GDDR7 is ~32GT/s. It's faster but the difference isn't crazy and if the premise was to have a lot of slots then you could also have a lot of channels. 16 channels of DDR5-8200 would
56.
by zrm 10mo ago
To some extent the only way around that is to use non-uniform hardware though. Suppose you have each server commit the data "to disk" but it's really a RAID controller with a battery-backed write cache or enterprise SSD with
57.
by zrm 10mo ago
> Then your memory requirements always were potentially 512GB. It may just happen to be even with that amount of allocation you may only need 64GB of actual physical storage; however, there is clearly a path for your application to sudde
58.
by zrm 10mo ago
Which is a major way turning off overcommit can cause problems. The expectation for disabling it is that if you request memory you're going to use it, which is frequently not true. So if you turn it off, your memory requirements go fro
59.
by zrm 10mo ago
These have been my go-to for a while now: https://en.wikipedia.org/wiki/List_of_Intel_Core_processors https://en.wikipedia.org/wiki/List_of_Intel_Xeon_processors It doesn't have the CPUID but
60.
by zrm 10mo ago
Most people have access to the internet where you can ask people what they recommend if you don't know yourself.

More ›