I'd love to know why the author (I've seen that elsewhere as well) would aim at not writing some plpgsql? Is it for the "tour-de-force" bragging rights? I've found that a plgpsql routine can be so much more efficient and faster to devise; especially with good use of triggers. Executing schema-related logic in "ring-0" is way faster and the transaction guarantees integrity? Isnt guaranteed integrity with some logic "vagrant-ish"? :-)
Interesting read. I wonder if this is only some bandwidth optimization to throw more hardware at the problem or an actual shift in perspective, ref no NaN/Inf, instead clamps to maxval. Could this introduce artifacts/will math libs need to code around this, or will this enable some new insight?
Totally unrelated: has anyone noticed that the bar on the F in the FORD logo ends with an e? It has been like that for a while. I remember reading somewhere that Henry Ford had forecasted that transportation was going to be all electric in the future; maybe related? Anyway, I think the demand for this will take them by suprise, and incidently, CT and Rivian need to get those factories churning quick.
Actually if they can build an Expedition SUV on this platform in short order, they could have another model T on their hands. That little e at the end of the bar crossing the capital F would finally take its meaning! (seriously in this price range, it could be a Panel van replacement for amazon, FEDEX, plumbers etc. A suburban ppl mover would be an absolute hit, I'd buy one in advance. (not a 100$ deposit, and cancel my CT reservation that I'm hoping to convert on to a yet to be announced hypothetical tesla SUV based on CT...)
I tried putting in a reservation in Canada yesteday. I think they got slashdoted. Spinning.... Victim of their success. Maybe they will understand why Tesla does not need paid for marketing?
I wonder if this is legal. I know Apple asks you to disable location tracking when returning devices to them for warranty. This could be abused by terrorists to use the postman nefariously...
A bit of hacking, some solar panels, a few stereos, tents, some poker chips, a rock band's visit... how long before the authorities would force him off? How many bitcoins would have he raked?
(OK this is thinking different in a slightly hollywoodesque way... still)
If enough grads do that, I would expect the university will do something about it, and that would send a message. It's about where the money comes from in the end; (tuition, grants, research partnerships etc) IMO none of these sources would be very happy about what might amount to defacement of public property and waste of the time of people that are working for the good of mankind by providing free tools(bicycle of the mind) to future generations.
There is no novelty in this research; bad actors have been trying to introduce bad patches for as long as open source has been open.
SQLite is a really neat thing. I was looking at extensions and how to augment it; you could even add a pg_notify -like feature: https://sqlite.org/c3ref/update_hook.html and have worker processes doing what would amount to out of process stored procedures in postgres (or UDF in SQLite) -- in any language you'd like.
You can only register one callback per table tho, although you could from this callback fire other functions... All in all it's an awesome tool for a project like tailscape, but I think the hackers there went for a flat file.
Personally I'd would love to see in process postgres; a build of postgres that is geared for integrating a set of your threads, and builds the whole of postgres with your app on all major OSs, only listening to the inside by default. For the same reason I'm using nodejs; to be able to run the same code anywhere. I think bundle size would be a minor issue, really, I downloaded Sage9.2 yesterday, it's 2GB! VSCode is 100MB download, and they refer to it as a small download...
Thank you for this post. I have been interested in rust because of matrix, and although I found it a bit more intimidating than go to toy with, I was inclined to try it on a real project over go because it felt like the closest to the hardware while not having the memory risks of C. The co-routines/async was/is the most daunting aspect of Rust, and a post with a sensational title like the grand-parent could have swayed me the other way.
As an aside, It would be great to have some sort of federated cred(meritocratic in some way) in hackernews, instead of a flat democratic populist point system; it would lower the potential eternal September effect.
I would love to see a personal meta-pointing system, it could be on wrapping site: if I downvote a "waste of hackers daytime" article (say a long form article about what is life) in my "daytime" profile, I get a weighted downvoted feed by other users that also downvoted this item--basically using peers that vote like you as a pre-filter. I could have multiple filters, one for quick daytime hacker scan, and one for leisure factoid. One could even meta-meta-vote and give some other hackers' handle a heavier weight...
I dont know what this does to you, but every time I read a PG essay I get an urge to write. This is a very virtuous habit, that allows one to have continuity.
Thanks PG again for a nicely written arc (pun intended), for the somehow diffuse encouragement to write a log, and good luck with what comes next! (if you come up with an august (both meaning implied, the month and the adjective) clubhouse written in bel with only a text interface, please send an invite my way)
:-)
cheers,
F
my question is: who benefits? Follow the money. About if this hack is true or not: It should have been simple to prove true.
Just show a single compromised article with an extra chip, at least one is bound to show up on ebay? Can three letter agencies round up all compromised hardware in all of America in secrecy?? To this day none has shown up, it's all theoretically true. A compromised sample is worth at least 1M vues on youtube, it's worth real money, yet it remains elusive.
A compromised BIOS update is more likely, a BMC IMPI infected by a trojan thing; the new piece is hinting to that in the FUD. Then again, that should be possible to find in a compromised board on ebay (prolly worth less yt vues since nothing physical to look at), and therefore prove this article is not a hit piece for someone with a short position.
BTW awesome products Hashicorp, way to go!