zrm

62 ms·

631.
by zrm 7y ago
It's not really opaque as much as it is application-specific. But then how do you fix that? If you give applications the ability to tag things then one mail program uses a tag called "unread mail" and another uses a tag calle
632.
by zrm 7y ago
8MB is itty bitty? There are a few narrow workloads where having a huge unified cache is an advantage, but it generally isn't. If you have many independent processes or VMs it can actually be worse, because when you have one thrashing
633.
by zrm 7y ago
> Doesn't every major app have to do this itself, in some container (document/mail folder/image definition/contact list and on and on)? It does, but it's also something that can be provided by a library as easily
634.
by zrm 7y ago
> Why do we need isolated virtual address spaces so that application always believes it is the only application running? Historically mostly because of swap, so the OS can move a page from memory to disk and then back to a different phys
635.
by zrm 7y ago
> We are talking about what the user/application sees and is capable of accessing. But how is that different than a filesystem? Suppose we add application-based ACLs to file permissions. Then the app does open("/path&#x
636.
by zrm 7y ago
> No, it is not reinventing the filesystem -- it's more like a file-vault or a file-bank. Anyone looking to operate on the files must either borrow (to read) or take ownership of (to write). So flock() and file permissions then? The
637.
by zrm 7y ago
So the short version is that they try to fingerprint the user and then distinguish fingerprints that seem like humans from fingerprints that don't. The interesting question then becomes how this is going to interact with future browser
638.
by zrm 7y ago
How hard would it be to create an alternative using GPT-2 or the like? Create a dozen models based on different things. Street signs, cats, houses, cars, etc. Then show the user a random selection of images generated from different models a
639.
by zrm 7y ago
> For any critical tech platform, though, has there ever been more than 2 major players? Here's a partial list of major server operating system vendors over the years: IBM, Sun, HP, Red Hat, Novell, Microsoft ... Everyone one of tho
640.
by zrm 7y ago
> and because an open source search engine will be tricked by all kind of nasty SEO Experts and it will be very hard to promote actually good Content. FWIW I suspect that would be the opposite, because if it was free software then you wo
641.
by zrm 7y ago
The other thing to keep in mind is that most of the benchmarks you see on the internet for these older systems haven't been redone with the mitigations needed for the new speculative execution vulnerabilities, but the ones for the newe
642.
by zrm 7y ago
The Intel hate is somewhat consequentialist. Software was written under a security assumption that wasn't true, the alternative code is slower. Whose fault it is and the ramifications for the relative performance between different proc
643.
by zrm 7y ago
> No low latency system will be anonymous in the face of a global passive adversary. That isn't true. The trivial system is the one where everyone has a broadcast transmitter and transmits constantly even when there isn't a rea
644.
by zrm 7y ago
Ah, you're proposing a solution for Meltdown rather than Spectre. The difference is that with Meltdown there is speculative access to memory that isn't even mapped to the original process. Memory encryption might work as a way to
645.
by zrm 7y ago
> Since the assumption is that this class of exploit is known and patched, it might be less attractive for exploit makers to target. Given that, you can actually disable the mitigation to get the performance back without suffering a brea
646.
by zrm 7y ago
These are really timing attacks. It's not a matter of directly reading the data, it's a matter of being able to deduce what's there based on how long it takes to do it.
647.
by zrm 7y ago
Has anybody tried feeding it comedy to begin with to see what it spits back out?
648.
by zrm 8y ago
Couldn't we just go back to the older transistor densities? Forget about 5nm and instead keep tuning the 32nm process (or whatever the last reliable one was) for yields and power efficiency. Modern processors are faster than Sandy Brid
649.
by zrm 8y ago
Ubuntu has been getting this right for a while now. You can install it by basically booting the install media and clicking "next" a bunch of times, then it gives you an interface with icons for Firefox and LibreOffice that someone
650.
by zrm 8y ago
Depending on what the cover is made of, it may not be opaque to infrared, which some cameras support. Also, microphones.
651.
by zrm 8y ago
Though you can just do both. Support both Android apps as well as New Better Thing and then all new apps use the new thing but the existing apps let you hit the ground running.
652.
by zrm 8y ago
Then it becomes opaque even though the developer often needs it. For example, WireGuard uses a nonce window for replay detection.
653.
by zrm 8y ago
That's always the trouble. Nothing is optimal for everything but you don't want a different API for every possible combination. Particularly in a case like this, you would end up with two APIs, one that takes an immutable state pl
654.
by zrm 8y ago
Calls to the symmetric encryption function typically are the bottleneck. It's optimizing the thing known to actually be the bottleneck in the majority of cases. Moreover, RNGs require internal state to prevent giving the same random
655.
by zrm 8y ago
The symmetric encryption functions are meant to be fast and efficient. Calls to the RNG are often not, which is why they're used for key generation but not for every encryption operation. The nonce could be stored as an internal counte
656.
by zrm 8y ago
> For example, you might need to setup a camera in some outdoor spot that's too far for a wired connection to be practical (Ethernet only runs so far, and I ain't aware of very many cameras that use fiber), in which case a wire
657.
by zrm 8y ago
On the other hand, discouraging wireless security cameras is a benefit because they have poor security properties. Wireless exposes the cameras to attack by anyone within wireless range rather than requiring the attacker to have physical ac
658.
by zrm 8y ago
> One of the biggest challenges with IPFS in my mind is the lack of a story around how to delete content. "One of the biggest challenges with [HTTP|ZFS|TLS|USB|ATX|VHS|USPS] in my mind is the lack of a story around how to delete con
659.
by zrm 8y ago
Or you can have the local interface and the cellular interface up at the same time, have the default route through the local interface but have a route to your preferred DNS server through cellular. Then the only traffic you have to pay for
660.
by zrm 8y ago
> It wasn't me that came up with the backup example - which I do think is the best example of the point they were making because you wouldn't expect that particular service to fail nor someone to get fired. And if it does, it&#

More ›