tkinom
Joined 12 years ago
Joined 12 years ago
I then asked it to do complete cve reviews on the host server (U 26.04 was installed a few weeks back) and docker images on that server and update the security review and added a task to do daily check on ubuntu website on kernel security update.
EDIT: Just asked claude if it can write a patch and build a image on top and fixed the issue on my server. It said it can. And point out that it can apply the 2 lines patches https://github.com/torvalds/linux/commit/e3f33b0.patch and build a kernel image on this issue for me. FYI....
Use pre-allocated pools with array of indexes, free/allocation idx for alloc and free.
Con: Fixed pool size and fixed amount of memory can be allocated per pool.
Pro: constant cost operations per alloc/free via Atomic inc/dec of idx - no linklist tranversing ; Can be alloc in kernel space and free in user space (linux/QNX) and in multiple user processes when memory pools are in shmem; Run very will in SMP environment without any locks - all memory contentions were handled with atomic +/- alloc/free idx.
Same source code run in QNX, vxworks and linux (kernel and user space) at that time.
NPM setup similar dl_files_security_sigs.db .database for all downloaded files from npm in all offline install? List all versions, latest mod date, multiple latest crypto signatures (shar256, etc) and have been reviewed by multiple security org/researchers, auto flag if any contents are not pure clear/clean txt...
If it detects anything (file date, size, crypto sigs) < N days and have not been thru M="enough" security reviews, the npm system will automatically raise a security flag and stop the install and auto trigger security review on those files.
With proper (default secure) setup, any new version of npm downloads (code, config, scripts) will auto trigger stop download and flagged for global security review by multiple folks/orgs.
When/if this setup available as NPM default, would it stop similar compromise from happen to NPM again? Can anyone think of anyway to hack around this?
A service with real time streams of those objects + GPS data info directly from starlink for a select sets locations should worth a lot for DOD, NATO, Ukraine. DOD and NATO would likely flip the bill for everything need to build such system.
With such container, we can catch the compromised supply-chain attach easily, right?
Does anyone know such container exist?
I also just installed solar at home. I expect the next family car would also be PHEV suv to replace the 16 years old minivan. Other than long trip, I don't expect to use gas much, maybe just once a week to oil up the engine for a few minutes.
System performance scales well with latest SSD HW.
As compare to cloud base approach that is limited by network/cloud speed.
One can store logs per day / week / year in separate db files as needed.
Backup of small db files for last few days/weeks are trivial with rsync.
Love to hear other pro/con arguments from folks who use Timescale type approach. Can be for old laptop (T420, etc with Intel GPU/Driver.)
Use FTRACE in kernel.
Setup ebpf trace for GPU acitivies.
Write some doc/blog/medium pages on the process and show off your works.
Understand, document and improve some opensource GPU API related utilities
Understand and document interaction between GPU/GUI App and OpenSource driver.
In term of jobs:
AMD has 289 opening for intern positions: https://jobs.amd.com/go/Internships-&-Co-op-Opportunities/25... A lot of them are graphic related.