_hyn3
Joined 14 years ago
Karma
1,857
Submissions
1,112
Member since
Mar 15
Recent submissions
Comment · 1 month ago
Comment · 3 months ago
$27B across 30 large, highly valued companies? Is it a "principle of the thing" or does Mr. Paul believe that this actually moves the needle? All of these seem nat'l security adjacent.
Comment · 3 months ago
"Meanwhile Datadog keeps billing, and morale tanks halfway through" bottish/llmish (?), but truer words never spoken.
Comment · 5 months ago
I said movies. As in, the movie theater. I cancelled Netflix years ago.
Comment · 5 months ago
Check out FUTO keyboard with the larger 250 MB model
Comment · 5 months ago
> someone invited a whole mailing list
IIRC, LinkedIn would email everyone in your "address book" (or anything else it could find) back in the day.
Comment · 5 months ago
You're right - the article says 'CPU: Intel Xeon E5-2620 v4 @ 2.10 GHz' but also says DDR3. And the specs page for that CPU (https://www.intel.com/content/www/us/en/products/sku/92986/i...) clearly says the 2620 v4 is DDR4.
E5 CPUs have their supported RAM right on the Intel ARK pages, but short version:
E5-xxxxx v1 and v2 are all DDR3
E5-xxxxx v3 and v4 are all DDR4
Not sure why Intel didn't just cut new model numbers instead of keeping them all as "e5"
More concrete example for E5-2660 (great processor) showing v1 and v2 support DDR3, while v3 and v4, DDR4 (again, different motherboards)
DDR3 v1: https://www.intel.com/content/www/us/en/products/sku/64584/i...
DDR3 v2: https://www.intel.com/content/www/us/en/products/sku/75272/i...
DDR4 v3: https://www.intel.com/content/www/us/en/products/sku/81706/i...
DDR4 v4: https://www.intel.com/content/www/us/en/products/sku/91772/i...
This also means that you need to know the processor your motherboard supports (or, easier, probably RAM) before putting in an order to upgrade the processor. (These processors are incredibly cheap, less than $10 for something that might have cost literally thousands ten years ago, so worthwhile to spend a few minutes and pick out your favorite based on cores, watts, Ghz, etc.)
(Another commenter says that there are some motherboards that accept v3/v4 but also can run slower DDR3 RAM. That's new to me and quite cool - DDR3 is extremely cheap, even now. I did find these motherboards on aliexpress, too: https://www.aliexpress.us/w/wholesale-XD3-motherboard.html?s... and one clearly says v3/v4 cpu's with DDR3 RAM. That could be very useful although memory speeds are slower since CPU performance can be boosted with v3/v4.)
v1: https://www.intel.com/content/www/us/en/ark/products/series/...
v2: https://www.intel.com/content/www/us/en/ark/products/series/...
v3: https://www.intel.com/content/www/us/en/ark/products/series/...
v4: https://www.intel.com/content/www/us/en/ark/products/series/...
Comment · 5 months ago
Yeah, or a Macbook Neo! No need to disparage other people's use cases.
Comment · 5 months ago
Only if you are solely an Apple user, because it's literally not a problem anywhere else. I've taken tons of photos of movies with my Pixels.
Comment · 5 months ago
If SOC2 relies on competent auditors (and you're right, it does), than it is an ineffective standard (and it mostly is).
Comment · 7 months ago
Touche.. actually a good point, but actually those are two different situations.
With one, I'm accessing a website and trusting that the certificate is signed by someone I trust; so the trust in my browser certificates (which include certificates from hundreds of certificate authorities all over the world, any one of which could be compromised, robbed, or controlled by an adversarial person or even government) is extended to the site that I'm visiting. To say this is weak sauce rather understates how bad this actually is. (To paraphrase Churchill, this is the worst possible design, except for all the rest.)
With the other, I'm logging into a server for the first time (and I could simply deploy the same trusted host key to all my ssh servers via an autoscaling configuration or whatever). I think it's debatable if TOFU is worse or better than your (granted clever) metaphor.
(to those who'd recommend userify, yes - great for the client login issue and definitely increases security, but to parent's point, TOFU is still needed unless you want to distribute host pubkeys)
Comment · 1 year ago
Excellent evaluation. From reading the code, it appears that the units for the numbers column is usually milliseconds (ms)
It also looks like squinn is the clear leader for most but not all of the benchmarks.
Even though it's "not scientific", is still very useful as a baseline - thanks for taking this effort and publishing your results!
Also taking a look at monibot.io , looks cool
Comment · 1 year ago
How is this different from any other self hosted solution; you've still got to manage spam yourself. Might as well go self hosted.
Comment · 1 year ago
What would TSMC do if they couldn't sell chips to the USA? It cuts both ways, like most trade negotiations.
Comment · 1 year ago
"We now have another confirmation on Twitter that remote code is executed and a glimpse into what the script is... it appears to be benign."
https://github.com/acmesh-official/acme.sh/issues/4659
It was not. Don't use acme.sh.
This was not "a free attack". The goal was and is preventing the world's leading terror organization from acquiring nuclear weapons, especially when they already have the missiles to carry them. It's just a bad situation and the decisions are difficult. Even now, the IRGC continues attacking their erstwhile allies. Those would likely be nukes if they'd had them.