News for hackers. Stuff that matters.

jmb99

The incentives aren't there (in my opinion) because the average person doesn't actually want to see that level of info. They're reading (or more likely, skimming) these sorts of reviews to have someone tell them what they should buy. The reviewer could go into a crazy amount of detail to figure out all of the thermal characteristics of the thing they're reviewing, but in the end it won't make a lick of difference compared to doing "just enough" and recommending something "good enough." Especially when, in most cases, coolers on the market these days are either "good enough or better" or "junk" and it's not hard to tell them apart.

There are exceptions to the above, like GamersNexus, who do take a slightly more scientific approach to things, but at the end of the day, most people don't care.

Not the end of the world to deal with, you just have to be very careful. No harder than mobile phone repair if that’s something you’ve ever done
Part of the problem is that any given cooler doesn’t have a single W/K value. It depends on the temperature gradient across the heatsink which depends on airflow over the heatsink (and both the heat and heat density of the CPU being cooled), and the airflow depends on the case (and fans). And airflow temperature matters too (are you cooling the CPU’s heatsink with air that’s already been warmed by a GPU?)

Note as well that I said heat density - different benchmarks (or applications) will load the CPU differently, and the same amount of power consumption will result in very different heat outputs (heavy single core use will result in part of the die and heat spreader getting really hot, whereas heavy multi core use will result in the whole die and heatspreader getting kinda hot). If the heatsink has a very high surface area and high airflow it might have the ability to dissipate quite a lot of heat, but if the contact surface sucks (or is aluminum) it might not actually be able to transfer heat away very effectively without a massive temperature delta - resulting in high CPU temps for single core use even with a high cooling capacity for multi core use, for example.

Your average person can’t understand all of these variables, and the average reviewer can’t control for all of them. So, “this CPU with these benchmarks in this case with this fan configuration” is the best you can really expect. Because otherwise, what reporting are you actually going to do? “This cooler with 3.2CFM of 26C airflow on a CPU dissipating 80W on one core and 10W on the other 7 cores results in a peak core temperature of 87°C and a package temperature of 81°C” is not useful reporting. Especially because, when the average person doesn’t understand it, they’re gonna buy a case fan that says 3.2CFM on the box and then wonder why their CPU’s throttling.

Re:Wayland desktop for Linux with skeuomorphic design on Thursday October 15, 2026 @06:31PM (#50111317)
> why would they make it hard to find the thing I just downloaded?

In… the downloads folder? How much more obvious does the location need to be?

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @08:53PM (#50097776)
You can’t change secure boot settings from the OS, even with root. You need the signing keys or to be in BIOS (if it’s configured correctly), which shouldn’t be on the device.

Now if the right kernel exploit and a secure boot exploit are chained together then it’s possible. But at the point, you’re gonna be hosed no matter what you do.

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @08:50PM (#50097751)
If you roll your own keys (preferably in a local HSM and use PKCS#11 for signing, with some kind of local auth) then it’s actually quite a good security feature. Obviously not for Windows, but trivial on Linux. It’s very easy to set up a hook for apt (or whatever package manager) to re-sign your kernel/init/modules on updates (requiring whatever your auth source is, password probably good enough for most people) and then as long as you’re booted with secure boot enabled, it’s a lot harder for someone with root to escalate further. Which you can then go down the rabbit hole of hardening the system to prevent becoming root, etc.

Pretty useless if you use Microsoft’s keys. But with your own, depending on the attack surfaces you care about, can be pretty helpful

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @08:42PM (#50097668)
>1password

If the solution to smooth passkey use is “spend money” why the hell is anyone going to use passkeys over just using passwords for free?

Re:New Apple TV 4K on Tuesday October 13, 2026 @07:00PM (#50080149)
It wouldn't surprise me if there's pressure from Dolby or the media companies to not do so, since Profile 7 is only used on BluRay (and the primary use case for playing back BluRays on Apple TVs I'm pretty sure is not playing backed-up personally-owned media). And, I'm sure Apple isn't losing many sales to not supporting it.

Lack of pass-through could probably be argued the same way, although it is a bit more surprising.

Re:New Apple TV 4K on Tuesday October 13, 2026 @06:48PM (#50080022)
Today, just don't connect your smart TV to a network, and you should be fine. (Assuming there's no open/passwordless WiFi networks nearby.)

If/when devices start shipping with cellular modems and eSIMs... honestly not sure. Faraday cage? Physically remove the modem? (If that doesn't prevent the device from booting.)

Re:New Apple TV 4K on Tuesday October 13, 2026 @06:37PM (#50079908)
Settings -> Spotlight -> Turn off everything you don't want. The first few times you open it it even tells you this.

Admittedly I haven't confirmed that this results in no API calls in the latest few macOS releases but it definitely used to stop them, at least a few years ago.

Re:Using Blu-ray M-Disk as Backup of Last Resort on Tuesday October 06, 2026 @01:52AM (#49974713)
Ignoring the cost of a tape drive, tapes are cheaper per TB, yes. I wouldn’t write off used hard drives though - buying only the cheapest per TB used enterprise drives, I’ve only had a ~5% failure rate across roughly 200 drives with 2-5 years of runtime (while I’ve owned them - they usually have 4-6 years when I get them). I usually get rid of them once they hit 8-10 years of uptime (or if any get any uncorrectable sectors).

If you only need ~50TB it’s probably both cheaper and easier to just buy hard drives, even today, factoring in the cost of the tape drive. Maybe even 100TB. I’m personally backing up ~225TB off-site these days and I still find AWS S3 glacier deep archive to be cheap enough - at current prices I’ve decided the hassle of doing tape again isn’t worth my time unless I’m over 300TB.

Re:Using Blu-ray M-Disk as Backup of Last Resort on Tuesday October 06, 2026 @01:37AM (#49974617)
EBay has a bunch of LTO-3 tape drives for sale for <$300. LTO-3 is 22 years old and can read LTO-1, originally released 26 years ago. I expect them to still be for sale 20 years from now, albeit fewer in number. I see no reason why LTO-7/8/9 drives won’t be readily available for the foreseeable future.
Re:Federal judge calls Flock 'indiscriminate mass surveillance' on Saturday October 03, 2026 @08:15PM (#49949206)
If there are, say, ten thousand license plates of interest at any given time (which seems high), that’s what, 10KB? Not really that hard to update that every 15 minutes (or hell, every minute).

I don’t really see any drawbacks with storing them on the device, they should already be quasi-public knowledge (from warrants/etc) so it’s not like there’s a privacy/security risk there

Re:How Delhi cut electricity loss from 50 to 5 percent on Tuesday September 29, 2026 @02:27PM (#49898123)
Have you ever been to India? In particular Delhi and Gurugram, and the surrounding manufacturing/industrial areas.
Re:Plan Mode Is Dead on Friday September 25, 2026 @10:10PM (#49852505)
Probably the same way they have for the last 30 years: poorly, in a dozen different ways, depending on what that particular hiring manager thinks has correlated with successful hiring in the past
Re:Plan Mode Is Dead on Friday September 25, 2026 @10:08PM (#49852496)
I’m a big proponent of writing simple, understandable code, so I’m playing devil’s advocate here a bit, but: who cares?

A significant (majority?) portion of developers have been shipping JavaScript/node applications for the last decade that contain hundreds of MB to GB of code from god knows where doing god knows what with dependency trees the size of redwoods. It’s not like your average mediocre dev really knew what was going on behind their gluing of frameworks together - at least from what I’ve seen.

If you have remotely competent tech leadership that enforces relatively intelligent patterns (a good one I’ve found is “write everything backend in rust”) you can make AI churn out monstrous amounts of code that… isn’t all that bad? And if you enforce it writing and updating a docs/API.md on every commit/PR you’re probably doing better than 80+% of devs I’ve ever met. Up until a few years ago it wasn’t uncommon to roll up to a new job that was a “legacy” pile of garbage concocted over 20+ years with no comments or API docs and a readme that tells you to ask for help from someone who has been dead for 5 years. At least AI code is full of comments (some of which might even be accurate) and there’s a finite (relatively low!) cost to figuring out “wtf is this doing and how is it doing it”

Re:Plan Mode Is Dead on Friday September 25, 2026 @09:56PM (#49852421)
By the time my plan’s done I’m usually between 200 and 350k context. Even if keeping that around gives a performance bump for the implementation (which I haven’t noticed to be the case) it balloons the cost. I would much rather put everything in a plan file and start fresh.

Plus, I usually plan with a more expensive model and guide implementation with a cheaper model (with smaller validation calls back to a more expensive model)

Back of the napkin math says a bare minimum of ~2000kg of solid fuel in three stages to “get to” GEO using a 3-stage rocket, to deliver 1kg of “something.” You’d need a gravity assist highly elliptical orbit which is a touch harder to pull off (but probably not harder than getting 2000kg of ammonium perchlorate). Plus building the actual rocket, guidance computer, etc.

Not trivial but not impossible. If you’ve got a few hundred million people with nothing better to do, I’m sure a few dozen/hundred could pull it off.

Re:Disruption with Some GitHub Services on Wednesday August 26, 2026 @03:41PM (#49454686)
Well, the alternatives are:

> It would be really cool if someone built an extension to show GitHub status live

"These already exist, why wouldn't you search before posting?"

> There exist quite a few extensions to show live GitHub status

"Why would you not post them if you know they exist?"

Or, what actually happened:

> Here are some extensions that might work for you to show live GitHub status

"Why would you recommend extensions to do this?"

Seems to me like, if your goal is to pick apart someone suggesting something, you'll find a way to.

Re:Advancing the price-performance frontier with GPT‑5.6 on Thursday July 30, 2026 @07:21PM (#49117095)
My uneducated guess says, not much. For running massive models you still need a ton of high-bandwidth interconnects between many individual chips/GPUs/etc since you need to do math across a few TB worth of weights. That's simply going to require more power (and more die area in I/O, and therefore more cost). Being able to run small models in tiny power envelopes is incredibly useful to people, but I believe it will be covering a different niche than what datacenters can provide. Likewise, you'll still need crazy amounts of high-end memory to populate whatever goes in these datacenters.

The only thing that will crash prices is reduced demand (duh) or, more interestingly, increased production. In particular, if CXMT is able to get their DR5 fabs up to a reasonably high yield, that could add some downward price pressure (as could government subsidies). As well, if Micron/Kingston/Hynix think that CXMT is going to start cutting into their market share, they might be willing to either increases supply or drop prices. Unfortunately CXMT looks to be taking quite a while to get their new fab up to max capacity so that may take a year+ before anything manifests.

If you're interested in following the (publicly available) info on these sorts of things, check out what companies like Axelera, DeepX, and MemoryX are doing today and have on their roadmaps, as well as the sorts of chips/SoCs Qualcomm, Kinara (now NXP), and Ambarella currently have announced (or have on the market). And remember, that pretty much all of these chips on the market today were in initial development more or less when ChatGPT first launched. If you knew what you knew today (or a year ago) about what requirements current- and next-generation models would have (from a silicon perspective), what might you do differently? Think for instance, host system interconnects, amount and speed of on-package or on-die memory, image/video decode capabilities, int8 vs fp8 vs fp16 vs bf16 compute units, etc. And, consider that most "AI" stuff in development a few years ago was all 15nm or 12nm - because who was gonna pay big money to get fab capacity at 3nm to run some object detection models? So most of the stuff on the market today is on very old nodes and therefore not super power efficient.

Re:Advancing the price-performance frontier with GPT‑5.6 on Thursday July 30, 2026 @04:12PM (#49115131)
I'm not who you responded to and I don't have any info on Google. Nor can I explain in detail due to NDAs. But multiple major players are working on something along the lines of what the parent is alluding to.

The "edge" AI landscape (in particular, what you can do with ~5W) is going to be nuts in about 18 months.

Re:ECC and DDR5 on Monday July 20, 2026 @01:07PM (#48981611)
How is “all RAM sold in consumer PCs must be registered ECC” equivalent to age verification laws? I’m not saying I agree with the premise but that is a bit of a leap
Re:ECC and DDR5 on Monday July 20, 2026 @01:03PM (#48981566)
> ECC DIMMs are available only for the memory speeds guaranteed to work by the manufacturers of CPUs, like Intel and AMD, e.g. for up to DDR5-5600 in UDIMMs or DDR5-6400 in RDIMMs.

This is not true[1]. These DIMMs are not guaranteed to work with all Threadripper CPUs, but they are guaranteed themselves to be stable at their advertised frequencies, which are higher than JEDEC. (And from my experience, 9000-series threadripper is perfectly happy to drive 8-channel 1Rx8 at 7200MT/s.)

AMD (and possibly Intel, I don’t have any experience with their recent offerings) also lets you overclock memory completely on WRX90. So if you buy JEDEC sticks, you’re welcome to try to push them as hard as you can.

[1] https://v-color.net/products/ddr5-ocrdimm-amd-wrx90-workstat...

Re:ECC and DDR5 on Monday July 20, 2026 @12:58PM (#48981505)
There are absolutely fast DDR5 ECC DIMMs[1]. Just break out your wallet (and piggy bank, and rainy day fund, and..)

The main reason there aren’t more options here is that a) high-frequency memory usually isn’t sufficiently stable, unless binned, and b) there’s very, very, very little demand.

[1] https://v-color.net/products/ddr5-ocrdimm-amd-wrx90-workstat...

Re:HomeLab #1: MikroTik as a Home Router on Monday July 20, 2026 @08:03AM (#48977595)
I’ve been running a Supermicro X10SLH-LN6TF as my router, and it’s very well suited for the job. Power use is very high for a home router, but reasonable for a 1U router - especially considering the era it’s from and its capabilities (routing 5-8Gbps per stream depending on firewall config, able to handle a couple active streams, and line rate routing with no firewall).

I wouldn’t suggest anyone buy something like this today for home use, but 6 years ago when I purchased it there were not many 10GbE routers to be had period, let alone for the price ($300 roughly if I remember correctly ). Even considering the cost of power over the last 6 years, I still come out much cheaper than if I’d bought something more power efficient new at the time.

Do you think it’s legal to shoot a firework at someone’s house?
Re:The bottleneck might be the air in the room on Saturday July 04, 2026 @08:57AM (#48785097)
> O2 sensor in cars compare the O2 concentration between the outside air and exhaust gases, it needs outside air as a reference

Source?

Re:NPM packages from Red Hat have been compromised on Monday June 01, 2026 @05:41PM (#48363048)
In ~300k km worth of diy oil changes, I’ve yet to change a crush washer, and yet to have a drain plug leak.

I always replace them on friends’ Toyotas, because they seem more important, but on every car I’ve owned it hasn’t mattered. And if you take the least amount of effort to google “how to change oil on ________” (fill in the blank for your year, make, model), some forum or video will probably tell you exactly what steps to take, including whether or not changing a washer is necessary.

Re:NPM packages from Red Hat have been compromised on Monday June 01, 2026 @01:56PM (#48360316)
Changing oil requires

> a place where you have sufficient access to the vehicle to drain it

Probably the only valid argument for people who park on the street.

> the right equipment

One $5 wrench, one $10 filter wrench (optional). One set of ramps ($40), or jack stands ($30) if you already have a jack. One drain pan, $10 (or free if you're resourceful). Total cost max $65. Cheaper if you look for deals, buy used, borrow from a friend. If you can't afford $65 once to save money in the long run while owning a car, you probably should've bought a cheaper car.

> the right disposal solutions

Every oil change requires a jug of oil to be purchased. You can drain your used oil into this jug and then dispose of it along with your other household hazardous waste. This is not hard.

> Most people who have cars do not have that.

I might believe this for a place to do an oil change, maybe. I struggle to believe most, but I would believe many. Aside from that, if you don't have those things, you are choosing not to have them.

Which is kind of the point. None of these things are hard, at all. The majority of car owners 100 years ago could adjust their own timing, clean distributor points, replace belts, etc. because if they couldn't, they'd be calling for a tow truck every few hundred miles. Those are all harder, and things have only gotten easier with time. If you can't do them, you are choosing not to, because there's an even easier solution - spending more money and getting someone else to do it for you.

I am typing this on my return flight home from a business trip in Delhi. There are many other areas the Indian government needs to be focussing on first.

I had a similar view to you ~2 weeks ago. Spending some time there very quickly made me realize that there’s a lot of other things that are much more pressing.

Older »