booly

@booly@sh.itjust.works
0 Post – 34 Comments
Joined 11 months ago

Self deprecation comes off wrong when it seems like the thing you're criticizing is actually important, and that you actually believe it.

So it's funny when the audience knows you don't believe it's important, either because everyone agrees it's not important ("I can't sing on tune to save my life") or if it's a particular example that doesn't matter ("I'm such a bad mom because [something inconsequential])," or if it's a topic that people can see isn't important to you (jokes about being socially awkward, bad at your job, etc.).

If you're in one of those lanes, you can go pretty hard on yourself before it seems to go too far.

This meme format works best to absurdly overstate the uselessness of something you find mildly annoying. That's when it's funniest, because the criticisms are grounded in something real, and the low-stakes controversy makes the aggressive tone funny in context.

you could go to your local library and carry a USB stick.

I don't remember it this way. Nothing else came close to the portable storage capacity of CD (and thus CD-R and CD-RW). The iomega zip drive was still a popular medium, allowing rewritable 100mb or 250mb cartridge. That was the preferred way to get big files to and from a computer lab when I was an engineering student in 2000.

USB flash drives had just been released in 2000, and their capacity was measured in like 8/16/32mb, nowhere near enough to meaningfully move CD images.

Then again, as a college student with on-campus broadband on the completely unregulated internet (back when HTTP and the WWW weren't necessarily considered the most important protocols on the internet), it was all about shared FTP logins PMed over IRC to download illegal shit. The good stuff never touched an actual website.

2 more...

They did, eventually. The first PlayStation was relatively easy to pirate for (with a mod chip), but it took a while for that stuff to become available. Someone had to go and manufacture the chips, or reverse engineer the check.

By the time that scene matured, Sega released the Dreamcast right into a more sophisticated piracy scene that could apply lessons learned to the Dreamcast right away.

On paper, Sega had more sophisticated copy protection than the first PlayStation did. But it also released 4 years later.

In comparison, the Geneva Convention literally forbids doing this to enemy POWs.

Oh don't worry, malicious .exe files were all over the forums back then.

Things might be different by now, but when I was researching this I decided on the Yale x Nest.

It's more secure than a keyed lock in the following ways:

  • Can't be picked (no physical keyhole).
  • Codes can be revoked or time-gated (for example, you can set the dog walker's code to work only at the time of day they're expected to come by).
  • Guest codes can be set to provide real-time notifications when used.
  • The lock keeps a detailed log of every time it's used.
  • The lock can be set to automatically lock the door after a certain amount of time.

It's less secure than a physical traditional lock in the following ways:

  • Compromise of a keycode isn't as obvious as losing a key, so you might not change a compromised keycode the same way you might change a lost key.
  • People can theoretically see a code being punched in, or intercept compromised communications to use it.
  • Compromised app or login could be used to assign new codes or remotely unlock

It's basically the same level of security in the following ways:

  • The deadbolt can still be defeated with the same physical weaknesses that a typical deadbolt has: blunt force, cutting with a saw, etc.
  • The windows and doors are probably just generally weak around your house, to where a determined burglar can get in no matter what lock you use.
  • Works like normal without power or network connection (just can't be remotely unlocked or reprogrammed to add/revoke codes if not online)

Overall, I'd say it's more secure against real-world risk, where the weakest link tends to be the people you share your keys with.

4 more...

This particular class of vulnerabilities, where modern processors try to predict what operations might come next and perform them before they're actually needed, has been found in basically all modern CPUs/GPUs. Spectre/Meldown, Downfall, Retbleed, etc., are all a class of hardware vulnerabilities that can leak crypographic secrets. Patching them generally slows down performance considerably, because the actual hardware vulnerability can't be fixed directly.

It's not even the first one for the Apple M-series chips. PACMAN was a vulnerability in M1 chips.

Researchers will almost certainly continue to find these, in all major vendors' CPUs.

2 more...

At least 50, but I'd make it larger. Maybe increase from 50 to about 8 billion and make sure all the villagers' needs are met.

2 more...

Virtually all marine vessels are certified by organizations such as the American Bureau of Shipping, DNV, or Lloyd’s Register, which ensure that they are built using approved materials and methods and carry appropriate safety gear. It has been widely reported that Rush was dismissive of such certification, but what has not been made public until now is that OceanGate pursued certification with DNV (then known as DNV GL) in 2017—until Rush saw the price. “[DNV] informed me that this was not an easy few thousand dollar project as [it] had presented, but would cost around $50,000,” he later wrote in an email to Rob McCallum, a deep-sea explorer who had also signed Kohnen’s letter.

Later in article:

Reality was more prosaic. Like most startups, OceanGate was in constant need of funds. Rush was trying to save money wherever he could. Interns, who made up around a third of the engineering team, were paid as little as $13 an hour. (When a manager pointed out in 2016 that Washington’s minimum wage was just $9.47 an hour, Rush responded, “I agree we are high. $10 seems fair.”) Rush also downgraded the sub’s titanium components from aerospace grade 5 quality to weaker and cheaper grade 3, says one former employee.

I knew they were being cavalier about safety, but didn't realize they were penny pinching to this degree.

2 more...

Can we talk about how the graphic didn't sort the results in any kind of chronological order? Today, then October 2023, then May 2024 is an insane way to present this data. Go either oldest first or newest first sort order.

A private equity firm bought them to naked short the stock

You just like throwing around words regardless of meaning?

They owned equity, so they were long, not short. They owned a stake so they weren't naked.

What they did was a simple extraction of value from something they owned, destroying it. It has nothing to do with short selling, and has nothing to do with manipulation of stock trading (after all, they took it private so that it wouldn't be publicly traded, so there were no public traders to manipulate).

Can't fix the vulnerability, but can mitigate by preventing other code from exploiting the vulnerability in a useful way.

Motorola Solutions is a dominant radio manufacturer in the government/first responder space, as well as major infrastructure providers. Yes, that means cops, but it also means firefighters, ambulances, trains, buses, airports, and any fleet of mobile service for mission critical stuff like electric utilities, telecom, and some aviation uses. Back in the day of trunk radio, it used to be common for taxis, too.

Motorola sold its consumer mobile businesses (cell phones) in 2011 in a spinoff as "Motorola Mobility," around the time it was shutting down and selling off pieces of its space/satellite businesses, but kept most of its other businesses. Today's Motorola Solutions is the legal successor to the Motorola that invented the cell phone.

I think technical-minded people tend to gravitate towards libertarian ideologies because they tend to underestimate the importance of human relationships to large scale systems. You can see it in the stereotype of the lone programmer who dislikes commenting or documentation, collaboration with other programmers, and strongly negative views towards their own project managers or their company's executives. They also tend to have a negative view of customers/users, and don't really believe in spending too much time in user interfaces/experiences. They have a natural skepticism of interdependence, because that brings on extra social overhead they don't particularly believe they need. So they tend to view the legal, political, and social world through that same lens, as well.

I think the modern world of software engineering has moved in a direction away from that, as code complexity has grown to the point where maintainability/documentation and collaborative processes have obvious benefit, visible up front, but you still see streaks of that in some personalities. And, as many age, they have some firsthand experience with projects that were technically brilliant but doomed due to financial/business reasons, or even social/regulatory reasons. The maturation of technical academic disciplines relating to design, user experience, architecture, maintainability, and security puts that "overhead" in a place that's more immediate, so that they're more likely to understand that the interdependence is part of the environment they must operate in.

A lot of these technical minded people then see the two-party system as a struggle between MBAs and Ph.Ds, neither of whom they actually like, and prefer that problems be addressed organically at the lowest possible level with the simplest, most elegant rules. I have some disagreements with the typical libertarians on what weight should be assigned to social consensus, political/economic feasibility, and elegant simplicity in policymaking, but I think I get where most of them are coming from.

2 more...

Dual purpose breeds for both egg laying and meat production are poorly optimized at either. So the industry has moved onto specialized breeds that are best at doing one of them.

Plus raising roosters together is much more logistically challenging than raising hens. So they'd need much more space and much more oversight/labor. So rather than devote some resources to raising males of breeds that are good for laying eggs, they'd rather devote those same resources to raising much more meat from females of meat breeds.

Yup. The backup for battery failure on this model is that the bottom of the plate can accept power from the pins of a 9V battery, held there just long enough to punch in the code.

Well it's obvious that Musk wants X to be a bank, so this isn't unexpected.

Well yeah the key is to acquire that passive income before you're born, through your parents, so that you can pursue your dreams as soon as you're old enough to form them.

I've seen it for keypads that have to send a signal to an actuator located elsewhere, but I think the typical in-door deadbolt (where the keypad is mere millimeters from the motor itself) wouldn't have the form factor leaving the connection as exposed to a magnet inducing a current that would actually actuate the motor.

Most of LPL's videos on smart locks just defeat the mechanical backup cylinder, anyway. I'd love to see him take on the specific Yale x Nest model I have, though.

The dude in charge wasn't even a billionaire. He was just some founder whose company wasn't doing all that well, financially. I think his peak net worth was something like $25 million, and that was mostly in stock in his doomed company. $25 million is nothing to sneeze at, but it's also not quite enough money to explain the dude's arrogance.

Ah I see you've seen me watch professional sports

Wasteful of what, though?

If a particular farm can produce 1000 kg of meat and 500kg of bones/other waste in a year by raising female meat chickens, would it be a waste to devote that farm to raising 500 kg of meat and 400 kg of bones from male egg chickens? In a sense, that's a waste of the farm to produce half as much meat as it can produce through killing chicks.

It's a philosophical difference on what weight to assign to the lives of chicks, adult chickens, other resources including human labor, etc. The lazy shortcut is to maximize return on dollar investment with no regard for any of those moral, ethical, and philosophical considerations, and that's what most of the industry does today, but even if you shift to a new moral framework you'll need to decide how to weight those things.

It basically varies from chip to chip, and program to program.

Speculative execution is when a program hits some kind of branch (like an if-then statement) and the CPU just goes ahead and calculates as if it's true, and progresses down that line until it learns "oh wait it was false, just scrub all that work I did so far down this branch." So it really depends on what that specific chip was doing in that moment, for that specific program.

It's a very real performance boost for normal operations, but for cryptographic operations you want every function to perform in exactly the same amount of time, so that something outside that program can't see how long it took and infer secret information.

These timing/side channel attacks generally work like this: imagine you have a program that tests if variable X is a prime number, by testing if every number smaller than X can divide evenly, from 2 on to X. Well, the bigger X is, the longer that particular function will take. So if the function takes a really long time, you've got a pretty good idea of what X is. So if you have a separate program that isn't allowed to read the value of X, but can watch another program operate on X, you might be able to learn bits of information about X.

Patches for these vulnerabilities changes the software to make those programs/function in fixed time, but then you lose all the efficiency gains of being able to finish faster, when you slow the program down to the weakest link, so to speak.

A lot of NIL money during the off-season is booster money, yes. That's money that basically will only go to athletes signed with a particular school.

But there's also a lot of NIL money for actual big budget TV/print advertising from national corporations for ads produced by major ad agencies. That's money that follows the athlete.

Not all of it will follow the athlete to the pros (and not every athlete goes pro), especially since the WNBA seems to have lower viewership than NCAA women's basketball. But if anyone is gonna be making good money on sponsorships in the WNBA, it'll be Caitlin Clark.

Given the fact they knew that fallout TV series was coming out, I do find it a bit baffling that they didn’t just make fallout 5

I'm pretty sure the TV show began development in 2022, four years after Starfield was announced in 2018.

1 more...

The subscription fee was for a gamepass-like access to a catalog of free games, so they didn't refund that. The subscription fee also wasn't required for playing purchased games (although it was required for 4K quality).

especially with a controller

I mostly used keyboard and mouse with the service, since the games I like to play tend to work better with keyboard and mouse. I had a dinky underpowered laptop but was playing AAA PC-oriented games through the browser interface. It was great.

I'm on GeForce Now these days but I find that it doesn't work quite as seamlessly as Stadia did.

not meant to be consistent with the human eye.

Even then, postprocessing is inevitable.

As the white/gold versus blue/black dress debate showed, our perception of color is heavily influenced by context, and is more than just a simple algorithm of which rods and cone cells were activated while viewing an image.

All GPUs perform equally well the same at ray tracing when there are no rays to trace

For what it's worth, that particular format war, the format backed by more porn studios (HD-DVD) actually lost to the one with less porn backing (Blu-ray). Personally I think that the PS3 tipped things over the edge.

It’s just that their common scripts were from ABC, CBS, or NBC

That's not true. The actual local news programming was entirely independent from the affiliated broadcast network. National news programming from the national news networks were carried, including more editorial/long form formats (60 minutes, Dateline, Nightline), but that was still independent from what the local stations were covering in their own newsrooms.

GNU's
Not
Unix

Notice that your comment is framed from the perspective of what Libertarians believe, and analyzing from that context. Mine is different: analyzing a specific type of personality common in tech careers, and analyzing why that type of person tends to be much more receptive to libertarian ideas.

I'm familiar with libertarianism and its various schools/movements within that broader category. And I still think that many in that group tend to underappreciate issues of public choice, group behaviors, and how they differ from individual choice.

Coase's famous paper, the Theory of the Firm, tries to bridge some of that tension, but it's also just not hard to see how human association into groups lays on a spectrum of voluntariness, with many more social situations being more coercive than Libertarians tend to appreciate, and then also layering Coase's observations about the efficiencies of association onto involuntary associations, too.

Then at that point you have a discussion about public choice theory, what the group owes to defectors or minority views or free riders within its group, what a group owes to others outside that group in terms of externalities, how to build a coalition within that framework of group choice, and then your nuanced position might have started as libertarianism but ends up looking a lot like mainstream political, social, and economic views, to the point where the libertarian label isn't that useful.

If you're going to reach back into the time period before they hired the writers/showrunners to actually develop a script in early 2022, or selling the rights to Amazon in 2020, then you're talking about a project that was far from certain it would actually get made. Hard to say that they "knew" a tv show was coming before 2022.