zrm

6 ms·

1.
by zrm 22d ago
How does the customer service rep tell that a name with some Unicode gubbins is an attack rather than a customer from Juárez or 서울? Having a busy hand copy and paste the attacker-provided string into the system doesn't get you out of i
2.
by zrm 1mo ago
> Any stenographic system that you have the code for can be trivially defeated. They're giving you an oracle regardless, which is almost as good. Take LLM output, make some modification, ask the detector if it's LLM output, rep
3.
by zrm 2mo ago
> we're approaching a time where a single processor has hundreds of threads Approaching? EPYC 9996 has 512 threads. EPYC 9754 had 256 threads three years ago.
4.
by zrm 3mo ago
It seems like what's missing here is lower cost plans, because the existing plans had been fairly affordable, but now they're basically triple. The least expensive one seems to be CPX11, old price $6.99, new price $20.49. That&#
5.
by zrm 3mo ago
> I did not. This is the exact quote: > And at least for connected devices at home, a dedicated app can have lower friction for initial setup for the "I'm not a computer person" crowd than other alternatives do. What go
6.
by zrm 3mo ago
You made the claim that companies require apps because it has lower friction for ordinary users. That claim is in error. The implication that there is nothing anyone can do to improve the existing state of affairs is also incorrect.
7.
by zrm 3mo ago
> And at least for connected devices at home, a dedicated app can have lower friction for initial setup for the "I'm not a computer person" crowd than other alternatives do. For a router ? This is the device that you will
8.
by zrm 4mo ago
You only need things like that for non-iterated games. A company that gets a reputation for keeping the money when it's a real bug would stop getting real bug reports.
9.
by zrm 4mo ago
You don't have to determine if it's an AI or not. If AI finds a real bug then it can get the bounty. If a human pays to make you read artisanal hand-crafted word salad then they don't get a refund. Real bugs get the bounty, i
10.
by zrm 4mo ago
Bounties already have that whenever you reject one for being nothing.
11.
by zrm 4mo ago
Just require people submitting a bounty to post an evaluation fee. If it's a real bug they get a refund and the bounty. If it's AI slop, you keep the evaluation fee.
12.
by zrm 4mo ago
It seems like what this needs is the return of video arcades. Fill a room at the mall with Linux boxen with midrange GPUs and fiber internet and the sort of keyboards you can clean with pressurized water. Charge an entry fee and then sell p
13.
by zrm 4mo ago
There are two different kinds of updates. One is security updates and bug fixes. These need to fix the problem with the smallest change to minimize the amount of possible breakage, because the code is already vulnerable/broken in pro
14.
by zrm 4mo ago
> That whole model dates to before automated testing was even really a thing, and no one knew how to do QA; your QA was all the people willing to run your code and report bugs, and that took time. That's not what it's about. Wh
15.
by zrm 4mo ago
They can block traffic to update servers so the computers behind the router aren't all patched up, then exploit them. They also get access to all the IoT devices on the internal network. They can also use your router as a proxy so th
16.
by zrm 4mo ago
They're not going to put a newer version in stable. The way stable gets newer versions of things is that you get the newer version into testing and then every two years testing becomes stable and stable becomes oldstable, at which poin
17.
by zrm 4mo ago
For that you really only need CAP_NET_BIND_SERVICE. The bigger issue is that if you want to install or update system-wide packages, many of those will be used by privileged processes. Suppose you want to update /bin/sh. Even if
18.
by zrm 4mo ago
> But if you want to participate in the writing, debugging, and maintenance, it has to be in a language that a human can read. I think the idea is that languages like Python and JavaScript make it easier for humans to write the initial i
19.
by zrm 4mo ago
"When you thrash them" is kind of the issue. There are ten year old business desktops with a <10W idle power consumption. If your use for it is to have something to rsync files to and host your personal website and the like, ev
20.
by zrm 4mo ago
> You cannot utilize that type of speed with a Mac Mini. Mostly because the base Mini has Thunderbolt 4 which maxes out at 40Gbps. Anything with a PCIe 4.0 x16 slot will take a 100Gbps NIC. 100Gbps is around 10GBps (8 bits per byte plus
21.
by zrm 4mo ago
The noise problem is pretty easy to mitigate by choosing 2U servers instead of 1U. The latter are forced by the form factor to use smaller, higher speed fans. A bigger issue for enterprise hardware is that it's optimized for performanc
22.
by zrm 5mo ago
Its performance is pretty unbalanced. If you're using it for the couple of things that it's good at, the TDP is competitive.
23.
by zrm 5mo ago
Which is why people run only copper because that costs less than running multiple types of cable everywhere when most drops only have one device, and then pull fibre through using the existing copper cable in the rare instances where they f
24.
by zrm 5mo ago
The original problem was that everyone runs copper instead of fibre because there are too many existing devices that only have copper. Running both everywhere would require you to buy and terminate twice as much cable as you expect to use
25.
by zrm 5mo ago
> If you're connecting a single device, why the hell would you use that when you could slap a copper SFP or SFP+ module in the switch's cage and run a cable? The problem to be solved is that you want to be able to put fibre ins
26.
by zrm 5mo ago
You can get copper ones for $5.99 (quality may vary): https://www.amazon.com/1000Mbps-Network-Performance-Gigabit-... https://www.amazon.com/SALAN-Ethernet-Portable-Internet-Conv... But it's not compet
27.
by zrm 5mo ago
That doesn't solve the chicken and egg problem. What probably would is something like having PCIe and USB to 1Gbps fiber adapters that cost $5.
28.
by zrm 5mo ago
The problem with fibre isn't the sensitivity. It's that most endpoints have a 1Gbps copper port on them and then Cat6A ports can be used with the common devices but also allow you to add or relocate 10Gbps devices without rewiring
29.
by zrm 5mo ago
> There is almost certainly no way that writing a "magic" byte sequence to a file will cause the storage device to misinterpret it as control data and change the mapping of logical to physical blocks. Which is also what happens
30.
by zrm 5mo ago
The header and length of the payload are control data. It's still being concatenated even if it's binary. A common way to screw that one up is to measure the "length of payload" in two different ways, for example by usin

More ›