zrm

55 ms·

571.
by zrm 7y ago
That's not really the problem. I can take the ATX case that I used for a DDR2 Core 2 Duo and put a DDR4 Ryzen in there. I can use the same PC screen for as long as I'm satisfied with it even if it lasts through four generations of
572.
by zrm 7y ago
What makes it work is the asymmetry. With normal human communication you talk to the same person thousands of times, or send thousands of messages from the same account, so spending computation equivalent to something like $1 worth of Bitco
573.
by zrm 7y ago
Fraud and spam are two separate problems. One of the best solutions for spam for a new system is to impose a proof of work requirement on sending the first message between any pair of users, or any (new username, hosting service) pairing fo
574.
by zrm 7y ago
> You lose out on the discoverability that centralized hubs give you. This isn't a real trade off. Consider how the web traditionally worked. Everyone has their own website, then you have search engines like Google or Yahoo that all
575.
by zrm 7y ago
Which is the advantage of implementing it by default in common browsers. Sites can afford to neglect the experience of the 1% of users who are using Tor but not the 80% of users who have installed the latest browsers.
576.
by zrm 7y ago
Operating systems have supported readahead for a long time. It's even more benefit for spinning rust than SSDs because the benefit of a correct prediction is larger when the drive is slower. But it's also a trade off, because if y
577.
by zrm 7y ago
That explains why they're cheaper than Windows, but what makes them cheaper than equivalent hardware with e.g. Ubuntu?
578.
by zrm 7y ago
> Would you like a warning every time the compiler made your loops faster by relying on this UB? Yes, because then I know to convert the loop counter to unsigned, which it ought to be anyway so that there isn't problematic behavior
579.
by zrm 7y ago
> Setting aside the question of what exactly "undefined behavior" means, why does a language spec have to include it? If there is behavior that cannot be defined, why not just omit it from the standard? The original reason
580.
by zrm 7y ago
It's probably a combination of target market and trade offs. To make SMT-4 perform well you want to have larger caches so that cache contention between the threads doesn't become the bottleneck, but that eats a lot of transistors.
581.
by zrm 7y ago
It's going to be highly dependent on the workload. For some it's counterproductive because the working set of fewer threads will fit into a given cache level when more threads won't, and then it slows things down -- but then
582.
by zrm 7y ago
Not only that, there are asymmetric encryption algorithms not vulnerable to Shor's algorithm, we're just not using them yet (because they're slower and haven't been as well-studied as RSA or ECC).
583.
by zrm 7y ago
> What we do have to worry about is digital privacy being unevenly distributed with people that have more money being able to afford more privacy. That's assuming it's only a matter of Apple vs. Google and there is nothing to b
584.
by zrm 7y ago
> you now have to worry about your hypervisor’s attack surface and your actual OS’ attack surface But the same is true of iLO. Worse in that case, because the iLO won't receive security updates for as long and is less well scrutin
585.
by zrm 7y ago
We're already there. There are already ISPs in some parts of the world redirecting DNS queries to any DNS server to the ISP's DNS server, which gives invalid responses to queries that authenticate the DNS server (DNSCurve) or inva
586.
by zrm 7y ago
We need something to encrypt and authenticate DNS, but that exists in DNSCurve. The problem with it is that it doesn't try to hide what it is, so an adversarial middlebox can detect and block it to try to force you to use their own DNS
587.
by zrm 7y ago
> Also, I feel like the number of devs out there who understand that mmap'd files — including binaries/libraries — are basically mini-swap files when memory pressure is high is really low; more than once I've diagnosed a m
588.
by zrm 7y ago
> With AWS, the programmers got their sandbox servers in spun up minutes instead of weeks or months. That's how it starts but not how it ends. Once you move everything to the cloud, the same IT staff get put in charge of it. Becau
589.
by zrm 7y ago
Maintaining the list for the most popular sites is not a huge ordeal. You have a bug tracker where people can submit issues, when you get one you take a few minutes to check that the whois matches the main site and the page actually links t
590.
by zrm 7y ago
A possible solution for this would be for the extension blocking third party scripts to have a list of domains that are known to be associated, like stackoverflow.com and sstatic.net, and then consider the latter to be first party for the f
591.
by zrm 7y ago
> I imagine it would stop you from client-side warnings of password insecurity, but is there a bigger problem? The bigger problem is that passwords aren't half the sensitive data on the web, they're just the example people are
592.
by zrm 7y ago
The trouble is gamers are susceptible to it. They're running running all kinds of untrusted code (javascript, custom game levels created by other users) as well as receiving untrusted game data from other users in multiplayer games w
593.
by zrm 7y ago
Why does it need a browser extension instead of just being a page on the bank's website?
594.
by zrm 7y ago
That's certainly better than zero, but those are each huge projects in their own right, with their own full time staff. How many small external projects are using it?
595.
by zrm 7y ago
> Perhaps the easiest way to encourage new contributors, who are assumed to be casual, is to encourage incomplete and partial fixes that the main team completes? A better way is to reduce the complexity and, especially, tight coupling in
596.
by zrm 7y ago
> Sacrificial PoW (as in LF, hashcash) only has value if reorgs happen. That's assuming you need a reorg to adjust values. The original purpose of hashcash was anti-spam. That lends itself to allowing variable work factors and havin
597.
by zrm 7y ago
Another possibility would be to create ad blockers that do that, i.e. block third party javascript but not pure text or images. Then you get the same result, simple ads get through but ad scripts don't, so the people who use ads with
598.
by zrm 7y ago
> How the hell do financial applications not take security more seriously? This is what taking security more seriously looks like. The lazy company doesn't even bother to look for problems like this, never finds them, and then an at
599.
by zrm 7y ago
> no, he's being hyperbolic to make the point that in an extreme situation, a default-deny approach could facilitate mass suppression of 'undesirable' traffic without creating an insurmountable backlog of traffic for the &
600.
by zrm 7y ago
You're proposing that the penalty for being suspected of subverting the firewall is death . In those cases you're going to want a highly refined system for avoiding detection, and it's also very important that one exist, b

More ›