Slashdot Mirror

If you want to look at the Fuschia source code, it's available here. To me, it looks more like a college-level project, rather than a kernel that has come into contact with the messy realities of the real world.

Their goal is to make things secure, and they want to do things 'right' by making it a micro-kernel.

Again, to me it looks like the authors have good knowledge on the theory side of things, but lack understanding of a lot of real-world use cases. For example, they removed a lot of the syscalls that the Linux kernel has, it's not Posix compliant, and you really should think long and hard before removing things in a decades-old, well-tested standard.

But who knows, maybe they'll get lucky and hit all the use cases Android needs. Maybe someone with experience will help them make the kernel solid. But most likely, the code will get uglier and uglier as it needs to accomodate more use cases, until it's so ugly that someone at Google starts a side project to replace it.

Why bother with Estonia? Just go to Belgium. At least the code of the ID reader and the whole security is out in the open. Somebody even put it on Github and anybody can see if an ID is valid.

So much easier to hack if you know the source, No need to try to figure it out.

You can definitely plug something that declares itself a keyboard then turns itself into something else.
There are many applications, for instance my Nitrokey Storage declares itself a simple USB read-only key when plugged, and then turns itself into many other things (simultaneously) when I ask the right questions.

You can check that, and also how you can protect you, hardware side : https://github.com/robertfisk/...
(disclaimer : I am not related to the device or its designer, but I own two, and they have worked fluently for two years on. I decided to buy them when, in the same week, US customers looked at me like a witch when I offered them my data on a company USB stick, and russian ones handed me a nice russian-decorated stick for doing the same...)
R. Fisk is preparing an USB2 version in parallel to this original USB1.

H.

The device wasn't faked because he posted blueprints and code for the whole setup. Unless he just didn't build the device, that would be quite of lot of work wasted to make those blueprints and code. All of it right here: https://github.com/IdleHandsPr...

Please, nobody tell them about libass!

I fully agree with Microsoft that UEFI has a forking problem. But that is caused by the fact that BIOS vendors take tianocore as a baseline and extend it. The root of the issue is that tianocore itself does not provide a complete UEFI firmware implementation, it gets about 40% of the way there and expects the Silicon vendors (Intel, AMD, NVidia, Qualcomm, etc.) and BIOS vendors (AMI, Phoenix, Insyde, Biosoft, etc.) to fill in the rest with proprietary code. This problem is actually almost identical to the Android fragmentation problem. But really what Microsoft has done here is create another fork for their Surface products.

The good thing is that Microsoft has open sourced a lot of that fork and have pushed the percentage forward from 40% to maybe 50 or 60%. If you look at what they have released though it is very customized for Surface... they have come up with their own answers for a lot of stuff that the UEFI specification already has answers for; the BIOS setup menu/HII database being the most notable. The percentage gained could be much higher if they didn't insist on duplicating code already in tianocore just because they think they know better. Separately, the tianocore guys are also trying to solve the fragmentation problem. A complete open source UEFI firmware implementation is under development right now: https://github.com/tianocore/edk2-platforms/tree/devel-MinPlatform I am one of the active contributors to tianocore. It is my hope that if Microsoft is truly interested in trying to solve the fragmentation problem that they are willing to work with tianocore and contribute to it instead of building their own competing open source community.

The one thing that all of us should keep an eye on is the potential for a Microsoft attempt to use the Windows Hardware Compatibility Program to force every PC on the planet to use MU. Creating a firmware mono-culture would give Microsoft much more control over the PC industry than Windows itself already affords them. They could turn every PC into nothing more than a Surface with a different OEM logo on the lid. It's certainly one way of solving UEFI's forking issue, but it would significantly strengthen the walled garden they are trying to build with Windows 10 at the same time.

Browsing is generally fairly bad at achieving anything close to line speed because there are so many round trips and connections to different domains.

I think you've misidentified the cause of the problem you're seeing, not to mention the benefit you'll get from 5G.

As things stand now, your mobile browser will establish concurrent connections to each domain as soon as it becomes aware that it needs a resource from them. Those connections operate in parallel with each other, so instead of waiting on a series of "many round trips" to different domains (as was the case up until the late-90s), these days you're simply waiting on the single, slowest round trip from that entire set of connections. With the sequential round trips of yesteryear, lowering the latency had a significant impact, since you'd benefit by performance improvement * number of connections, but with parallel connections, lowering the latency only nets you a benefit of performance improvement. As such, 5G won't actually provide you with much benefit at all.

If you're seeing slow page load times, the likely culprit is that the page is using an ad network that's running on-the-fly auctions for the banner/tower ad you'll be seeing. The winners of those auctions will then sometimes run a secondary auction for that spot, and so on and so on. Those interactions happen in sequence, rather than parallel, but they're happening between entities outside of your control, with your browser simply having to wait on them to figure out whose resource you should view. At the risk of summoning APK, the proper fix for your situation is almost certainly to use a resource blocker, that way you don't even ask for that resource in the first place. I'm a big fan of uMatrix (or uBlock Origin) in my browsers, as well as pi-hole on my home network.

Browsing is generally fairly bad at achieving anything close to line speed because there are so many round trips and connections to different domains.

I think you've misidentified the cause of the problem you're seeing, not to mention the benefit you'll get from 5G.

As things stand now, your mobile browser will establish concurrent connections to each domain as soon as it becomes aware that it needs a resource from them. Those connections operate in parallel with each other, so instead of waiting on a series of "many round trips" to different domains (as was the case up until the late-90s), these days you're simply waiting on the single, slowest round trip from that entire set of connections. With the sequential round trips of yesteryear, lowering the latency had a significant impact, since you'd benefit by performance improvement * number of connections, but with parallel connections, lowering the latency only nets you a benefit of performance improvement. As such, 5G won't actually provide you with much benefit at all.

If you're seeing slow page load times, the likely culprit is that the page is using an ad network that's running on-the-fly auctions for the banner/tower ad you'll be seeing. The winners of those auctions will then sometimes run a secondary auction for that spot, and so on and so on. Those interactions happen in sequence, rather than parallel, but they're happening between entities outside of your control, with your browser simply having to wait on them to figure out whose resource you should view. At the risk of summoning APK, the proper fix for your situation is almost certainly to use a resource blocker, that way you don't even ask for that resource in the first place. I'm a big fan of uMatrix (or uBlock Origin) in my browsers, as well as pi-hole on my home network.

Steven Black wrote a great hosts file manager in Python. Unlike your software, we can see the source and trust that it's free of malware. Your software cannot be trusted. Also, Steven Black's work runs on MacOS. Yours does not, despite months of empty promises from you.

Lets not forget their getting triggered over master/slave -- https://github.com/python/cpyt...

No, I'm not kidding.

To save anyone else the effort, the parent is totally mischaracterizing the change linked. "Pliant children" (referring to functions, not processes or hardware) was changed to "helpers", which I think most people would say is clearer. It formerly said "pliant slaves", which is not a descriptive thing to call a function, like calling my fork a pliant slave.

Lets not forget their getting triggered over master/slave -- https://github.com/python/cpyt...

The parallel computing community was never that happy about calling the paradigm master/slave. Most references use the terminology master/worker these days. We can find references to manager/worker which sound a lot more neutral that date back decades. ( A PACT 2001 paper as a proof https://link.springer.com/chap... )

Lots of term in parallel computing ended up being renamed to make the term more accurate or more neutral. Famously, we no longer talk about "embarrassingly parallel" applications, but about "pleasingly parallel" applications because there is nothing embarrassing about the application being very parallel.

You may find youtube videos [google.com] about their tech quite fascinating and scary.

That's cool. I guess. YT Link

Also, they can soon figure out who you are AND what you're stealing. Notice that last one is free code (One, Two) and even runs on a PHONE. (7:00)

And LOOK -- it's written in C, so it'll even be halfway understandable!

If anyone wants me, I'll be hiding under the covers.

It's based on the very latest 7.9 release. If you want to see what they've done then view the git repo:

https://github.com/PowerShell/...

Found solution :) This guy seems to have fixed FireTray to work with Thunderbird 60 - don't ask me how, perhaps TB hasn't yet disabled classic extensions... https://github.com/Ximi1970/Fi...

but has anyone actually gotten a root shell prompt to the MINIX layer in their i7?
(No, I'm not asking because I'm concerned about security breaches, I just want to be able to play with it, I'm a nerd not a security expert.)

Pretty close.

https://www.win-raid.com/t596f39-Intel-Management-Engine-Drivers-Firmware-amp-System-Tools.html

An i7 will already come with the management engine (ME) and a partial ATM, enough to gain console bios setup menu access and control the power state.
You can access that by hitting control-P at system post, usually the same time or before you see the message to hit a key for bios setup.

The above link has the BIOS modules to add a full ATM, so you can use VNC to access the computers video buffer and redirect block-devices to boot a remote system.

From that point you can access the web-management app in the ME and access the trusted execution engine.
You can also take control of the secure boot system here, although you don't want to erase the built in microsoft keys if this is a system you ever want to run Windows 8/10 on again.

https://software.intel.com/en-us/articles/getting-started-with-intel-active-management-technology-amt

The above link has the ATM client software you can use after changing the ME keys so you can remotely manage it.

There is also a SDK to write your own ME and ATM modules.
The build of Minix in the ME doesn't include any console or shell support to itself (AKA there is no root shell there to get) however you can make one and install it with the SDK.

You might also find this open source tool helpful:
https://github.com/platomav/MEAnalyzer

It will tell you what ME components you have, what are active, and what you can add in.
Normally the "enterprise" feature modules to ME need purchasing and are installed at the factory before your bulk order of PCs is shipped, but many are "out there" having been extracted and shared.
This will point you at the names to Google for.

This version kills Live Bookmarks. Some of us FF old-timers are hopelessly reliant on these things, and it's, as far as I have found, the fastest way to quickly scan lists of headlines from all your favorite sites at once. Seriously, one click and you can quickly mouse over the sites on your bookmarks toolbar to consume hundreds of headlines.

I really, REALLY hate that they're killing this feature, but this addon promises to restore it: https://www.ghacks.net/2018/07...

Here's the official GitHub: https://github.com/nt1m/livema...

Electron: Desktop application development experience that essentially is Chromium, your own JavaScript running in Chromium, Node and your own JS running in Node, all bundled into one executable.

Because it's JS and HTML DOM, it's reasonably cross-platform (as Chromium and Node are) - so as long as the electron framework is ported to your target (probably is) then porting your application is not much effort.

Notable uses:
* Visual Studio Code
* Microsoft Teams
* Atom text editor

As you can imagine, as it's all JS and HTML DOM, there has been efforts to rebuild and use different HTML and JS environments or blend .Net code in or whatever. For example, something like this. Or this request (looks like someone's pessimism was warrented there..) Or is interesting. Or Electro, which really is/was an effort to use native HTML DOM (i.e., edge) and JavaScript intepreter to run Electron apps.

Electron: Desktop application development experience that essentially is Chromium, your own JavaScript running in Chromium, Node and your own JS running in Node, all bundled into one executable.

Because it's JS and HTML DOM, it's reasonably cross-platform (as Chromium and Node are) - so as long as the electron framework is ported to your target (probably is) then porting your application is not much effort.

Notable uses:
* Visual Studio Code
* Microsoft Teams
* Atom text editor

As you can imagine, as it's all JS and HTML DOM, there has been efforts to rebuild and use different HTML and JS environments or blend .Net code in or whatever. For example, something like this. Or this request (looks like someone's pessimism was warrented there..) Or is interesting. Or Electro, which really is/was an effort to use native HTML DOM (i.e., edge) and JavaScript intepreter to run Electron apps.

Electron: Desktop application development experience that essentially is Chromium, your own JavaScript running in Chromium, Node and your own JS running in Node, all bundled into one executable.

Because it's JS and HTML DOM, it's reasonably cross-platform (as Chromium and Node are) - so as long as the electron framework is ported to your target (probably is) then porting your application is not much effort.

Notable uses:
* Visual Studio Code
* Microsoft Teams
* Atom text editor

As you can imagine, as it's all JS and HTML DOM, there has been efforts to rebuild and use different HTML and JS environments or blend .Net code in or whatever. For example, something like this. Or this request (looks like someone's pessimism was warrented there..) Or is interesting. Or Electro, which really is/was an effort to use native HTML DOM (i.e., edge) and JavaScript intepreter to run Electron apps.

Too late. ;)

https://octoverse.github.com/2...

A Google search turned up this. If I'm reading it right, this is a replacement for FFI as it requires PHP 7.4. Go figure.

No runtime and no dependencies for the target executable

This is because everything is statically linked. For example, last time I built the release build of the driver to load games onto a USB RAM cartridge for the Game Boy, it pulled in enough crates to total 6,787,656 bytes of executable code. How would this integrate with the UNIX philosophy's rule of composition, where a task consists of a half dozen or more different processes? Would all the processes have to be built into one executable that uses the executable's name to determine which sub-program to run? Or would it be better to repeat the libraries in a half dozen or more executables, storing all them on disk or NAND flash and retransmitting them over a possibly metered Internet connection whenever program or its libraries need to be updated?

This just show how poor TIOBE's methodology really is.

Take a look at stats from actual pull request in github The most popular languages are:

1. Javascript 2. Java 3. Python 4. PHP 5. C++ 6. C# 7. Typescript 8. Shell 9. C 10. Ruby

VB.Net is not even in the top 10

Now, you can argue that these are mostly open source projects, and that proprietary code might be different. Fair enough, but I don't see how search results (TIOBE's method) reflect proprietary code any better than this.

The VB.NET I was exposed to filled a roll that was so particular to the environment where it was created, nobody would ever want it on GitHub. It was hard enough to decipher in its native environment, it would be absolutely useless elsewhere. Move a file, query a database, rename the file, convert it to a weird text format, move it back, make a backup, and present a million pop up dialog boxes along the way.

This just show how poor TIOBE's methodology really is.

Take a look at stats from actual pull request in github
The most popular languages are:

1. Javascript
2. Java
3. Python
4. PHP
5. C++
6. C#
7. Typescript
8. Shell
9. C
10. Ruby

VB.Net is not even in the top 10

Now, you can argue that these are mostly open source projects, and that proprietary code might be different. Fair enough, but I don't see how search results (TIOBE's method) reflect proprietary code any better than this.

I'm calling the programming language I'm creating Practical. I trust the name passes your approval?

What add-ons are you missing, by the way?

Keybinder. It was canceled due to deficiencies in WebExtensions that remain unfixed a year later, particularly Bug 1325692.

However, were I to try to run Lode Runner from a Mac Classic onto a modern Macbook Air, it wouldn't work.

You'd be incorrect as you can run that Lode Runner on a modern Macbook Air

...using the Mini vMac emulator. But as I understand the CopyRoms procedure, lawful use of Mini vMac requires buying two old Macintosh computers in addition to the MacBook Air: a Macintosh Plus to write the internal ROM to a file on an 800K floppy disk and another Mac with an Ethernet port and a floppy drive that can read 800K disks.

Another emulator that runs Mac software using a reimplemented ROM is Executor, but I don't know whether it builds or runs on recent macOS.

Fuck that. DirectX should just die. If you want to play "older" DX based games then there is always WINE and the Vulkan implementation of D3D11/D3D10.

Just let him live in the delusion that computer games are the prime mover of PC computer sales, you're never going to convince him of anything else.

Fuck that. DirectX should just die. If you want to play "older" DX based games then there is always WINE and the Vulkan implementation of D3D11/D3D10.

At least part of Edge is already open source:
https://github.com/Microsoft/C...

He's a CS grad without any experience at all? WTF was he doing during summers and in HS?

Taking summer classes and coding.

I suggest he go to Github

He has an account on GitHub. What steps could I take to help him find 1. gaps in his skill set that he needs to address, and 2. a job using his skill set so that he can build up finances with which to relocate?

https://github.com/paul-hamman... - a visualization of ad partners adding ad partners to a page (ad infinitum)

In related news, there's a program called "waifu2x" that uses deep learning and neural networks (and CUDA, if you have an NVIDIA graphics card...highly recommended, there's a ~4x speed boost on my machine) to automatically scale up ("super-resolution") and de-noise anime art: https://github.com/nagadomi/wa...

For Windows users, use this version: https://github.com/lltcggie/wa...

In related news, there's a program called "waifu2x" that uses deep learning and neural networks (and CUDA, if you have an NVIDIA graphics card...highly recommended, there's a ~4x speed boost on my machine) to automatically scale up ("super-resolution") and de-noise anime art: https://github.com/nagadomi/wa...

For Windows users, use this version: https://github.com/lltcggie/wa...

Emacs Anywhere?

Cool stoy bro, but in this case:

- Typescript is open source, with an Apache 2.0 license: https://github.com/Microsoft/T...
- JavaScript deserves to die in a fire. And thankfully now we finally have WebAssembly.

Same here, I did not even know the correct rules until my son got interested in chess. Does everyone know what an en-passant capture is ?

I tried to learn alongside my son, but at my age the right structures do not form in the brain. However, it was fascinating to see how one goes about learning chess, and what mental exercises you have to do to help you visualize the board. For example is F6 a light or a dark square ?

What I did learn is how to code up a chess engine, starting out with Sunfish : https://github.com/thomasahle/... and then writing my own. I also learned quite a bit about chess history, and books like "Mortal Games" about Garry Kasparov, "The Inner Game" about Nigel Short, or Kasparov's own "How life immitates chess" hwere really great reads.

At work I keep a browser window of chess24.com open at some live game, and I glance over the computer analysis which indicates possible continuations from the given position.

Overall, a much better pastime than idly watching TV or reading tne (usually gloomy) news.

You might like the VE.A keyboard ( https://www.massdrop.com/buy/v... but at this point you're looking at second hand) or the clone that is readily available (if you're slightly adventurous) on TaoBao ( https://item.taobao.com/item.h... ) -- It was the first mechanical keyboard I moved to after years using MS Natural keyboards. I have since moved on to using a self-made ReDox keyboard https://github.com/mattdibi/re... but that might be a step too far for you at this stage.

That may be true, but it's kind of a niche. I'd point out that Rust is encroaching there too. C and C++ are not dead by any stretch but they are certainly becoming marginalized in a lot of problem domains.

> the top languages according to the number of repositories created

In the web and mobile days you will obviously see more and more stuff in PHP, Python, Java and the likes.
And fewer in C, C++.

IMHO you'd not even just count *all* projects.

Because a project like Linux (99.999% C) cannot count the same as a python-based or java-based toy project.

You'd better count the overall number lines of code. Or, better, the overall number of modified lines of code at any time.

Then you'd discover the real truth.

Rust you say... https://github.com/jwilm/alacr... https://nvd.nist.gov/vuln/deta... off by ones, and where were the unit tests? progress in coding... as for how one regards all the "have you heard the good word of Rust" evangelism and that cod of conduct, well now that's opinion territory

actual working exploits outside of carefully controlled lab experiments, or balls out just prove I can copy some random bits which I can't identify as belonging to something have yet to be seen or developed... a full year later.

Wow, where have you been?

Q: Has Meltdown or Spectre been abused in the wild?
A: We don't know.

It takes a human to create the level of lucrative hype that 'Paris-based art collective Obvious' have managed to come up with. Back in the day, Slashdot would have covered the more interesting story behind the Christie's auction, which you can read here:

https://www.theverge.com/2018/...

'Obvious' just seem to have grabbed source from an Open Source project, generated a few images, cranked the hype up to 11, and made a killing. The community this comes out of, and especially the programmer who implemented the algorithm, aren't terribly impressed:

https://twitter.com/DrBeef_

If you want a go, the code is on github:

https://github.com/robbiebarra...

The hacker community does what Nintendon't.

Nintendont does what NIntendon't. Personally, I consider the Switch a glorified tablet which is why it doesn't interest me for homebrew or piracy. My first handheld was the GBA SP precisely because it had a clamshell design. Any move away from that is absolutely stupid for using it on the go*. That and becoming monsterously big.

* If you're using it docked only or like my 2DS you never take it with you, I'll grant you that it's an acceptable way to have a semi-portable device. The Switch is still a glorified tablet, and I'd rather use a tablet (with a web browser and streaming) or another game system. I can totally see getting it to play BotW if you want to side step the whole WiiU purchase, though. BotW seems too meh to me, though, to justify a whole system purchase.

I'm certainly no expert, but last time I checked, Ethereum was trying to get a viable proof-of-stake algorithm up and running.

See Audio Adversarial Examples: Targeted Attacks on Speech-to-Text. And see the data.

Just imagine. A television commercial says: Alexa, what is the weather?

Now every human in the room heard that, and it sounds harmless.

What Alexa actually heard: Alexa, browse to evil.com

Pretty neato.

Or see this: DolphinAttack: Inaudible Voice Commands, and see this.

Hope that helps!

AV1 beats H.265 on quality. The libaom AV1 encoder is still very slow but it's improving, and there are other encoder efforts like rav1e which are faster but don't yet produce the same image quality.

There are various AV1 demos you can try in Chrome and Firefox. I'm using Firefox 64 beta with "media.av1.enabled" set to true in about:config. Bitmovin has a demo.

You can switch on AV1 for YouTube via their TestTube page and try some high bitrate videos in their AV1 demo playlist. Many YouTube videos have AV1 encodes available up to 720p resolution (try popular music videos to see examples), but YouTube's not optimizing for file size yet. The standard definition AV1 encodes typically have smaller file sizes than the VP9 equivalents, but the 720p AV1 encodes are typically of similar or even larger file sizes than the VP9 versions.

The architecture and protocols, I have listed above.

A range of simulators that could be helpful:

https://github.com/mlab-upenn/...
http://ssfnet.org/homePage.htm...
https://www.nsnam.org/

The National Information Exchange Model (NIEM) is an XML-based information exchange framework used by the US government to grease the sharing of information between departments. It was started in the Bush administration in 2005. I first noticed it around 2008 and it contained fields to define PersonGait at that time (version 2 I think).

They have deleted some of these fields since then. I suspect they did so because it gave out too much information about what they are doing though it is also possible the new administration rolled back the push into some of these areas.

The rules for getting data components added to the model include a requirement that the data components must already be in use by at least 2 different departments. So, in 2008, at least 2 departments of the government were using a person's gait as an identifying characteristic.

I have included a list of the fields in the "PersonAugmentationType" data type for the V2.0 version of the spec from a decade ago below. Many are interesting including: body odor, ear shape, finger geometry, gait, hand geometry, keystroke dynamics, lip movement, urine, vein pattern, etc.

The NIEM is publicly available and published on Github. I highly recommend downloading one of the older versions before they sanitized it, like V2.0 or so, and spending some time looking at the spreadsheets that describe it. The insight to be gained in what the government has reason to store about us is extensive.

• j:PersonAFISIdentification
• j:PersonBirthPlaceCode
• j:PersonBodyOdor
• j:PersonBodyPartsText
• j:PersonCharge
• j:PersonConcealedFirearmPermitHolderIndicator
• j:PersonDentalCharacteristicGeneral
• j:PersonDentalCharacteristicRemovableAppliances
• j:PersonDentalPhotoModelAvailableIndicator
• j:PersonDentalXRayAvailableIndicator
• j:PersonDrivingIncident
• j:PersonDrivingInsuranceCoverageCategoryText
• j:PersonDrivingInsuranceStatusText
• j:PersonEarShape
• j:PersonEmancipationDate
• j:PersonFBIIdentification
• j:PersonFacialFeatures
• j:PersonFingerGeometry
• j:PersonFirearmPermitHolderIndicator
• j:PersonFirearmSalesDisqualifiedCode
• j:PersonFootPrint
• j:PersonFootPrintAvailableIndicator
• j:PersonGait
• j:PersonGeneralLedgerIdentification
• j:PersonHandGeometry
• j:PersonHitResultsCode
• j:PersonIrisFeatures
• j:PersonIssuedPropertyTitleAbstract
• j:PersonJewelryCategoryText
• j:PersonKeystrokeDynamics
• j:PersonLipMovement
• j:PersonNCICIdentification
• j:PersonPalmPrint
• j:PersonPasswordText
• j:PersonPrimaryWorker
• j:PersonReferralWorker
• j:PersonRegisteredOffenderIndicator
• j:PersonRetina
• j:PersonSaliva
• j:PersonSemen
• j:PersonSightedIndicator
• j:PersonSpeechPattern
• j:PersonStateFingerprintIdentification
• j:PersonTemporaryAssignmentUnit
• j:PersonThermalFaceImage
• j:PersonThermalHandImage
• j:PersonThermalImage
• j:PersonUrine
• j:PersonVeinPattern
• j:PersonVendorIdentification
• nc:DriverLicense
• nc:DriverLicensePermit
• nc:PersonWorkPlace