swinglock

NixOS is often far behind when it matters. Not this time.

So their live patching is a larp too. Security theatre, pathetic company, pointless existence.

Over the years its meaning has drifted to mean something like "I won't install Debian". It's easy now!

Has Ubuntu rolled out the patch only via live patching?

If it's a small number it's even worse. Then you have still been hacked but are also dealing with an APT instead of just some mundane noisy botnet.

Oh yeah, it's still there. I remember some uproar about its removal. I guess it was just the ability to see the dislikes of others that changed.

Dislike was removed?

There's a guy with some Bitcoin that knows about a model, I'd trust that one.

Not long ago it would have been an em dash.

If you don't already know and need to be sure, you have to start over with new hardware in a new network with new secrets. Firmware may be compromised and traces covered up, so reinstalling the operating system is not guaranteed to get the attacker out, nor can you trust the system to tell you if it was compromised or not. Your best bet would have been to record all incoming network traffic to a system only accessible offline and use it to verify no one tried to get it. Otherwise you can just hope, which is what mostly everyone will do, and will mostly be alright, because they're not important enough.

It makes me want to login in, to share the history and recommendations between screens. I think a neat way to do that would be to authenticate with some other service that can just store and sync an encrypted blob that is the Local Storage of the site. That could be fairly private and doesn't put any load on the first site, it wouldn't need accounts. This could be a browser feature but then it doesn't work between browsers.

For a month?

How are Ubuntu and RHEL not fixed? Few operating systems market themselves more as suitable for servers. What are they doing over there?

It's not correct. A notable example is the water effects.

He says he likes the look, that's subjective and doesn't need arguments. You wanted to read another, technical article.

Next let's review their RAM usage while idle, shall we?

It would make the tampering more expensive, but not too expensive given the 100 million dollar reward, while also making inspection of the device practically impossible for users.

If you can't get to the insides without breaking it, the only devices verified to likely be safe would be unusable too, so the product would in practice be even more unsafe.

If the user first inspects it and then glue it on their own, that would work, but it wouldn't solve this problem. Evil maid attack is something else and obviously harder at scale.

Absolutely. Turn the warnings into errors too, build and test with sanitizers (ASAN, UBSAN, TSAN) when not measuring performance, and use static analysis beyond compiler warnings (Clang Tidy, Clang Static Analyzer).

Though the author doesn't look to be trying to write a great tutorial, rather prioritizing sharing what and how they learned something from their perspective.

I didn't expect there would be a Christmas party in hell.

How is the keyboard broken? Maybe I'm so used to whatever it is that I'm blind to it.

Much like the website, it's unavailable.

Have they stopped sponsoring terrorism?

No, it doesn't. You're arguing against a straw man. The primary motivation was in second paragraph.

Wire transfer is better?

If it takes seconds to compile it then the browser wins. The PoW only runs for seconds already.

"Sorry, this item's currently unavailable in your location."

Can you not design a PoW that is most efficient in a browser? Don't brute force hashes like Hashcash/Bitcoin, do something similar to RandomX instead but in JS. Browsers ought to run the fastest JS interpreters already so if interpreting JS becomes the bulk of the work, that attack might not work. Maybe even involve the DOM or whatever else makes sense.

It was more interesting when there were real tangible improvements. Game graphics has been like smartphones for a good long time now. Performance and feel (low latency and high consistency) still matters though, that is not solved, but it's also never marketed. Quality is not included with a UE license.

Windows does memory compression too.