Matt3o12_

So when I ride the bus or train, I'm allowed to use my phone? What about when I use an uber (or lift or any of the many many other local alternatives)?

Not everyone that moves at driving speeds is driving, especially in places outside of America.

Have you tried different throttles? Did you get any whatsapp account(s) banned at higher speed?

Yea there are many examples of high level corruption in the german government (and most western governments actually, including the US). A recent example is the mask scandal with CDU/CSU (same party) https://www.dw.com/en/german-mask-scandal-unforgivable-viola...

You will not find much local corruption though, which is what most people think of when they hear corrupt countries. Local corruption is paying of a cop, judge, that kind of stuff. I’m sure it also happens in Germany, but that is very very rare.

I haven’t seen any errors and macOS seems to handle it greacefully. You can also disable it on macOS clients for network servers individually but that seems to be a loosing battle (even if you control all clients). They are finder settings after all

https://serverfault.com/a/5567

Thumbs.db files are created on my windows 11 pc at least. They’re only created for files that have metadata that requires reading those files. Explorer likes to display the metadata (sometimes) for some folders that have a lot of media in it (pictures, music, videos, etc). If the thumbs.db file is missing, windows will partially read every media file on the server to show thumbnails, that obviously creates unnecessary load but it’s really a trade off that might not make sense for most.

Assuming you’re running a smb server, you could just veto the files. Windows isn’t much better since it likes to create thumbs.db almost everywhere too (which I also veto, but vetoing them can increase the load and bandwidth requirements and your server and clients)

Getting it to work the first time was a pain. Basically, you want to disable cloudflare (just untick the box so that it goes directly to your server, you can keep using cloudflare's dns server), then obtain the normal way, and reactivate Cloudflare. But I would highly recommend using cerbot's cloduflare dns plugin[1] instead so that you can (re)create the certificate w/o disabling cloudflare.

1: https://certbot-dns-cloudflare.readthedocs.io/en/latest/

I believe OP is referring to the fact that a sophisticated attack has access to the hardware and you continue using it afterwards. They could, for example, change the unencrypted /boot partition to log the password you use to decrypt your partition. Or, if you sign the boot partition, they could install a hardware key logger, or do any other kind of hardware modification that defeats the security. Preventing this kind of attack is incredible difficult. They are many means to prevent those kind of attacks but, for the most part, it just making it harder for the attacker so that the attacker needs to become even more sophisticated.

Full disk encryption only helps if you are worried that your hardware gets stolen

The heatsink doesn't really work, though, and is marketing for the most part [1].

I have a crucial P1 NVME SSD and I can make it overheat pretty reliably. Pretty much any synthetic workload makes it overload if the SSD is empty (it reaches 70° pretty quickly and even starts throttling until it reaches 80° and the whole system starts shuttering because of extreme throttling do it doesn't damage itself. Although I have not properly tested it, it seems that not using any heatsinks from my motherboard makes the temps actually better but it still overheats.

The main reason it can overheat quickly is probably because its sitting in a really bad position where it gets close to zero airflow despite being in an airflow focused case. Most motherboards place the nvme slot directly under the GPU. The main problem seems to be that the controller is overheating when it's writing at close to 2000 MB/s. It's also important to note that only the controller (an actual relatively powerful ARM processor), not the flash memory, seems to overheat.

Fortunately, this is mostly not an issue because it's a QLC drive and the workload is unrealistic in the real world. When writing to an empty drive at 2000MB/s (Queue depth 4, 128k sequential writes), it takes 2 minutes until the cache is full. The way its currently used, it takes 30 secs for the cache to become full and for write speeds to drop to 150MB/s. The only way it has every overheated in the real world was during the loading screen of a gameplay when it reached 78C quickly (and I only noticed it in the hardware monitor). If the GPU hadn't heated up the nvme drive before (it was sitting at 65C mostly idle), and starved it for air, I doubt it would have hit 60C.

So until motherboards start placing nvme where it can get some actual cooling, or they make actual functioning heatsinks, their power usage can make a difference.

[1]: https://www.gamersnexus.net/guides/2781-msi-m2-heat-shield-i... but there are many more articles/forum posts with similar issues.

I hope you don’t mind me asking but what’s the purpose of having a comment in the top to direct to different pages. There is already a more button on the bottom which makes the top comment kind of redundant.

Also a tip for others when HN is slow or almost down (like when Google was down): you can open a private tab and navigate HN from there. Since you’re not logged in, you’re served a copy from cloud flare. It’s usually out of date by 1min or so but good enough for reading in my opinion.

> The IEC 60320 connectors were specified for exactly that reason. Honestly, I don't get why these were not made mandatory for all kinds of appliances. There are even locking variants available if vibration is of concern.

I'm not sure what you mean by the second sentence but you can't use most appliances made for Europe in America and vice versa. Most electronic appliances depend on the input voltage and supplying 240V can easily cause a fire. That is true for almost all electronic appliances (water heater, fan, washing machine, etc) but not true most "computer related devices" such as a monitor, PSU, charger. Since those devices already operate on a much lower DC Voltage, they often have transformers (not sure if that's the right word), that can scale down the current from either 120 or 240. [0]

That being said, a mandatory IEC connector (and it's variances) would help a lot to cut down unnecessary e-waste. Instead of throwing away a device because the cable is damaged, you can easily order a replacement that is around $2 and high quality, instead of relying third party cords that might have bad wiring from a non reputable brand. The reason they are not mandatory, though, is that most companies like to have their own connectors so that you either overpay for it or just buy a new device.

[0]: You should still always read the specs on the input current for the device though. It is dangerous to rely on the fact that similar devices can operate at 120V/240V because yours might not. You can usually see the specs on the website/packaging or usually near the input plug.

> You can buy games and just play them, 1080p60 on hardware you never have to pay for.

Honestly, this worries me the most. There doesn’t seem to be a way to transfer the licenses out of stadia, which means, even though you “bought the game“, you’re still at googles mercy for your continued enjoyment of the game. What if they decide that the hardware costs are too much for Google, and you now have to pay a monthly fee? What if they decide that stadia is not the success they hoped for and close it down (which Google is not known for doing at all…). Unless there are clear migrations paths away from stadia, I’d stay away from it because Google have shown that they are not afraid to change/EOL any of their products with no regards to their existing customers (just look at their lifetime free photos service, etc)

This is not necessarily true. Apple sells their non Intel macs with Thunderbolt and there are some ryzen motherboards with thunderbolt support [1]. That being said, Thunderbolt is a lot less common on AMD boards probably because it is a lot more expensive then it would be on an Intel board. And Laptops so far have always received the budget treatment for ryzen chips (want a better screen? intel only, etc).

So I think lack of thunderbolt comes down to manufacturers not wanting to pay as much for their AMD R&D and keep costs down with simple, budget motherboards.

Or, if you needed Thunderbolt 3, you could just wait until USB 4 is commonplace, which is basically Thunderbolt 3 + some more.

[1]: https://www.asrock.com/mb/AMD/X570%20Phantom%20Gaming-ITXTB3... (there are more, and even ATX boards, first one I could find).

Can someone explain the purpose of this decoder? As far as I know, decoding H.264 is already pretty solid on Linux and I don't know what benefits of making it stateless there are. I could definitely see why a stateless encoder would be beneficial (i.e. to spread out the load), but isn't decoding h.264 already a solved problem?

Well, the problem is that OSCP is leaking which applications you open (and when you open them) which is the big deal IMO. One solution would be that the OSCP is checking the HTTPs certificate in cleartext once upon startup (and maybe once every day or so thereafter), and is using HTTPs for all subsequent application requests.

I don't really see a problem here how that could cause a loop. This way, an attacker can only see:

- When you boot your Mac because it verifies the HTTPs certificate once.

- When the OSCP daemon makes a clear text request to check that the HTTPs cert is still ok

- That you have just opened an application (but not which application)

IMO that still leaks an unacceptable amount of meta data but it is miles better then using cleartext. Maybe a bloom filter here would be a much better solution + make the daemon regularly fetch bad signature that are not added the the filter yet instead of pulling. Sure the filter may hit false positives sometimes but in that case, the OSCP server could be checked and apple could see if a certificate has a high rate of false positives and adjust the bloom filter accordingly.