News for hackers. Stuff that matters.

dmt314159

Re:Storing Data in Pointers on Monday November 27, 2023 @05:35PM (#38439429)
This will be a problem when trying this on Capability Hardware Enhanced RISC Instructions (CHERI) https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ systems. Currently the only CPU with this implemented is Arm's Morello prototype.

Pointers are replaced by 128-bit capabilities containing what operations are valid, a 64-bit base address and a size. These capabilities are unforgeable, so trying to play with "unused" parts of 64-bit pointers simply won't work.

FreeBSD & Gnome are running on hardware after minor source-code changes, along with a significant proportion of FreeBSD ports collection.

As well as ARM, Microsoft is interested: https://www.microsoft.com/en-us/research/project/portmeirion...

Re:Ground Temperatures Hit 118 Degrees in the Arctic Circle on Wednesday June 23, 2021 @07:37PM (#27611978)
fake news: inaccurate thermometers in urban heat island
Re:How Elbrus CPU helped me find a bug in Tar on Monday June 14, 2021 @05:32AM (#27500774)
This would seem to have some similarities with Capability Hardware Enhanced RISC Instructions (CHERI). The project has matured to the point of a complete FreeBSD stack with nearly all packages building. ARM are going to release the experimental Morello system later this year.
Asian longhorned tick?

"the ticks can attack en masse and drain young animals of blood so quickly that they die—an execution method called exsanguination"

https://arstechnica.com/science/2018/08/us-invaded-by-savage...

Re:The Med Student That Cured Castleman Disease on Saturday September 14, 2019 @11:41PM (#20975446)
I used everolimus, which works the same way as sirolomus, for a few years. Like a fair proportion of people taking this class of drug, I developed severe proteiuria. Large protein molecules making their way through the kidney are considered likely to cause kidney damage.
Re:A Perfect DNS Storm (2018) on Friday September 13, 2019 @09:47PM (#20968386)
is it practical to use fully-qualified domain-names everywhere, which means no search path or ndots entries are needed.

it can be interesting looking in nameserver logs for hosts making successive queries for variations of FQDNs based on their search paths, and/or A vs AAAA lookups.

similarly with Trump's tax cuts which largely did not end up in pay rises or investment.
Re:Are central banks losing their big bet? on Saturday July 20, 2019 @09:32PM (#20489407)
Don't blame central banks so much.

They only directly control one lever in the economy, interest rates augmented by QE-purchase of company bonds in Europe & US.

In retrospect, they've been caught in a downward spiral of interest rates because politicians have been unable to add pro-growth policies.

Unfortunately the "wealth effect" of shares in the US, even after Trump's unaffordable tax-cuts, has been channelled towards shareholders (via dividends & buybacks) rather than wage increases or capital investment.

Something's wrong when companies can't find worthwhile ways to spend money investing in their own future, but instead direct profits and BORROWINGS into share buy-backs.

I do suspect one of the factors encouraging buybacks is that executive remuneration is often based on the share price. I've tried searching but haven't found anything suggesting executive remuneration excluding the effects of buybacks on share prices.

The rationale is that the reference NTP implementation codebase was old and would benefit from a large cleanup. It was in a similar position to openssl in that the code was used by large numbers of commercial entities yet they provided no steady stream of money to maintain it. Openssl only had one paid developer in pre-heartblead days, while NTP only had Harlan whose efforts were maligned a few years ago.

Both of the projects also generally required knowledgeable people as they're in specialist areas.

Like any implementation of NTP, NTPsec needs to work at the protocol level, but I don't know whether it was practical for the NTP project to accept the degree of change in it's codebase that the NTPsec people wanted. In an ideal world the fork could have been avoided and a more vibrant community of developers would have happened.

Re:Ask HN: Who uses SQLite database in production? on Saturday July 06, 2019 @11:32PM (#20373429)
"SQLite is used by literally millions of applications with literally billions and billions of deployments. SQLite is the most widely deployed database engine in the world today."

https://www.sqlite.org/famous.html

notably Airbus, which may be (one of) the companies

"At about that same time, some avionics manufacturers were expressing interest in SQLite, which prompted the SQLite developers to design TH3 to support the rigorous testing standards of DO-178B.

The first code for TH3 was laid down on 2008-09-25. An intense effort over the next 10 months resulted in TH3 achieving 100% MC/DC on 2009-07-25. The TH3 code continues to be improved and expanded."

https://sqlite.org/th3.html

https://www.sqlite.org/qmplan.html

I believe global economies have fundamentally changed post GFC, so previous indicators may no longer be relevant. Interest rates have already gone below historic levels so it's not clear how economies will be turned-around. One of the few suggestions I've seen is https://www.smh.com.au/business/markets/the-world-needs-shoc...
perl5's DateTime "is a class for the representation of date/time combinations"

Apart from the modules included in the DateTimeDistribution, there are many others as returned by https://metacpan.org/search?q=DateTime

My favorite use DateTime::Format::Baby;

my $Baby = DateTime::Format::Baby->new('en'); my $dt = $Baby->parse_datetime('The big hand is on the twelve and the little hand is on the six.');

Re:IP address can be written 121 ways on Tuesday March 05, 2019 @12:25PM (#19312203)
obviously FF not running these through POSIX inet_pton

"The inet_pton() function does not accept other formats (such as the octal numbers, hexadecimal numbers, and fewer than four numbers that inet_addr() accepts)."

Re:Can you build an atomic clock at home? on Saturday January 05, 2019 @06:13AM (#18831096)
for time enthusiasts, rubidium oscillators were one approach as second-hand ones became available from CDMA shutdown even to the point of hacking one http://phk.freebsd.dk/hacks/HP5065A/index.html

or see https://hackaday.com/2016/09/25/rubidium-disciplined-real-ti... https://deltafabri.wordpress.com/2015/03/08/under-60-ns-an-a... I'm not sure the TAPR clock block is still available

several modules are listed on https://www.microsemi.com/product-directory/timing-synchroni... both for a rubidium oscillator & a Chip Scale Atomic Clock https://en.wikipedia.org/wiki/Chip-scale_atomic_clock and from Jackson Labs http://www.jackson-labs.com/index.php/products/csac

some links on https://www.raspberrypi.org/forums/viewtopic.php?t=212429

rambus touting benefits of open hardware ecosystem, no irony here