hugo1789

no profile record

comments

12 days agodiscuss

Maybe but still a little better than closed source like Windows. Everytime whem someone asked me if I could hack my way into his Windows PC I always told "After all it's Windows, how bad can it be?" Doing that since 25 years still waiting for a Windows machine that doesn't open... On the other hand I failed to open about 50% of Apple Devices I was asked to open and about 10% of Linux machines. (Not because Linux is insecure by itself but because most Linux distros install with insecure defaults and users don't care.)

3 months agodiscuss

I think RPKI is good enough. As we have TLS on top it doesn't need to be perfect.

4 months agodiscuss

Since revocation is also a big pain.

4 months agodiscuss

No I would not. They posed no immediate danger to anyone of us until that attack.

4 months agodiscuss

At least it's more interesting than all those AI stuff.

5 months agodiscuss

That also changed somehow... LTO-10 drives are not backward compatible and can only read/write LTO-10 media.

6 months agodiscuss

That is a critical observation. Last time I had to root an Android device it hat pretty robust defenses like dm-verity and strict SELinux policies (correctly configured) and then everything collapsed because the system loaded a exfat kernel module from an unverified filesystem.

Permitting user-loaded kernel modules effectively invalidates all other security measures.

7 months agodiscuss

What’s the alternative—locking down all legitimate users and still losing the data anyway?

Network controls alone don’t stop exfiltration. HDMI/DP can move data faster than most consumer NICs. Does the system account for that scenario?

7 months agodiscuss

What is not only true for police but for every sufficiently big group of people.

7 months agodiscuss

Could you please stop that? First it is not true. "Open Source" has nothing to do with the "Open Source Initiative" it existed long before. Second you are making people keep their source closed (not available) which is not a good thing.

7 months agodiscuss

I think mandatory S/MIME without user-friendly key management would either be reverted pretty soon or it would kill Gmail.

9 months agodiscuss

I think he would attempting a landing despite the issue in most cases because running out of fuel during go-around would be worse.

9 months agodiscuss

https://xcancel.com/karpathy/status/1976082963382272334

10 months agodiscuss

Too late, switched to DBeaver Community some months ago and it works too well for me to switch back again.

10 months agodiscuss

Maybe because xen is a type 1 hypervisor in its original meaning and all the other ones are type 2? (yes, ESX(i) doesn't use linux but it also brings its own os on which it runs on top)

10 months agodiscuss

And debug many tools which still ignore the fact that malloc could fail.

10 months agodiscuss

That works if there is enough memory after the "bad" process has been killed. The question is, is it necessary? Many systems can live with processes performing a little bit poorly for some minutes and I wouldn't do it.

10 months agodiscuss

Imo that's a pretty complicated topic. On one side if you just build LWRs you just don't need very highly enriched uranium or plutonium so posession of those is a red flag. On the other side fast breeder reactors are the ones which are able to produce the least harmful waste. But fast breeders and closed fuel cycles produce and handle plutonium which in turn can be used for bad things.

11 months agodiscuss

Linux kernel image or another stage of bootloader loaded by the GPU is pretty normal in mobile SOCs like the one that is used here. At least they did not enable secure boot so that it's still possible to execute something else.

11 months agodiscuss

Why another WinApps instead of contributing and fix problems there?