Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Submission + - Serious Android Bluetooth vulnerability will go unpatched for many (engadget.com)

gaiageek writes: Engadget reports about a new, serious vulnerability in Android:

Security researchers at ERNW have detailed a vulnerability, BlueFrag, that lets attackers silently deliver malware to and steal data from nearby phones running Android 8 Oreo or Android 9 Pie.

The problem, as you might imagine, is that many of the affected devices have either lost software updates or don't receive them consistently.

As the owner of two Android devices purchased in late 2017, one Sony and one Motorola, both of which have stopped receiving security updates, it is beyond shameful that a product which is still covered under the manufacturer's warranty (24 months in Europe) will remain unpatched, leaving users with only one true safeguard of not using Bluetooth — an advertised feature which consumers paid for.

Comment Re:No (Score 1) 98

Link? I don't see any 64G UDIMMs on NewEgg. This is the only one that says UDIMM in the title, but then in the description it say LRDIMM, which I'm apt to believe over the title.

Certainly larger DIMMs are broadly available, but only in RDIMM and LRDIMM formats, and those don't work with Threadripper.

Comment Re:Economics at work (Score 1) 128

I suspect a lot of it is a result of the chronic sickness in technology of chasing taillights. It's especially common in frontend JS right now, just look at the bazillion frameworks that are the new hotness for about 3 minutes each before everyone collectively forgets about them and moves on to the next new hotness. A lot of frontend development is done by younger developers and a lot of it is "throwaway" work, in that nobody is ever going to maintain it and they'll simply start from scratch in a year or two when they decide they want a new design. It kinda sorta "works" there, sometimes, and that just reinforces the cycle.

More along the lines of cloud though... it makes perfect sense for the cloud vendors to be pushing it hard. What could be better than recurring revenue from your customers who volunteered to be held hostage within your proprietary services? I still can't figure out why so many people that aren't cloud vendors are moving in that direction though.

Comment Re: Cinematic Only? (Score 1) 152

So basically every single film maker is actively choosing to shoot in 24 fps after carefully considering other framerates? Yeah, right. Obviously it can't be the immense (unjustified) inertia behind 24 fps that's driving it as the defacto standard where any deviation from that is cause for a media frenzy.

Comment Re:Move the taskbar from the bottom to one side (Score 1) 216

Taskbar? That's what auto-hide is for. I might use the taskbar once a month. Every window (or at least enough of it to easily bring it to the top) I'm using at any particular time is visible all at the same time. Note that if you're one of the many many many users afflicted by the "every window must be maximized all the time" disease, you'll have to cure that first.

Comment Re:Born out of impatience with distros.. (Score 1) 44

Basically, this. Npm and friends are all raging dumpster fires when it comes to security. Install one package from npm and you're likely pulling in hundreds or thousands of other packages as deps, and due to the fact that there's no review of any of them, you may as well be going to 1000 random websites and running random executables from them. Most people wouldn't do the latter (I hope...) because you'd have to be outrageously stupid to do so, but the former is now the industry norm and nobody seems to care.

The Linux distro model of distributing software is infinitely better, but has failed to catch on outside of that realm. The software development industry is generally extremely myopic and this is no exception.

Comment Re:AMD is back to what they were 20 years ago (Score 1) 162

Actually, no, AMD invented x86_64, which is the vendor neutral name for AMD64. Intel originally came up with ia64 (the aforementioned Itanic) and had to adopt x86_64 years after AMD came out with it, dumping ia64 into the wastebin in the process.

Perhaps you're thinking about 32-bit x86?

Comment Re:they can bump SIMD width again (AVX512) (Score 1) 162

Good grief, no SSE2 support in 2019? The newest AMD CPU to not support SSE2 was the Athlon XP, released in 2003! You could probably dumpster dive something 10 years newer than that for free. The power efficiency gains alone would make it a highly worthwhile upgrade. Surely you jest.

Comment Re:yawn (Score 1) 167

You're talking about double NVMe performance, as if that were currently bus limited.

Current NVMe SSDs are already posting sequential performance numbers of 3.5G/s on their spec sheets. The maximum theoretical speed with 4x lanes of PCIe 3.0 is 3.94G/s. Considering overhead that's either already bottlenecked by the bus or very close to it (recall that SATA 3 runs at 600M/s, but practically speaking you can only get ~540M/s of data out of it).

You're talking about 100Gbe cards, but let's talk about those. I'm an active DPDK/VPP developer in a service provider network environment. I work with 10/40/100Gbe cards on NUMA machines. PCIe throughput hasn't yet been a problem I encountered. It's just not an issue on the kind of machines you process 100Gbe traffic on. Machines with *hundreds* of PCIe lanes across many sockets.

If that were true then you would know that network cards are specced with PCIe lanes such that they can max out their interfaces. 100G ethernet needs 16x PCIe 3 right now, but only 8x PCIe 4. 10G ethernet can be had in 1x PCIe 4 instead of 2x PCIe 3 or 4x PCIe 2, and so on.Only a foolish vendor would do otherwise. So of course you haven't seen PCIe lane bandwidth issues from them, they are designed to not have them. That doesn't mean PCIe 4 is useless, far from it.

Since you're talking about machines with hundreds of PCIe lanes, in the x86 space that means 8+ socket Intel, or lots and lots of PCIe switches (all of which are expensive now, and will be a compromise on bandwidth if you're actually saturating your network interfaces), but perhaps you're not running x86 at all. Regardless, with PCIe 4, you could run double the NICs in the same system with PCIe 4 instead of PCIe 3, or you could use a system half the size (and significantly less than half the cost - 8+ socket systems are super rare and correspondingly expensive). In fact, you could probably run the same workload on a 1P Rome EPYC system, with 128 lanes of PCIe 4 for less than 1/10 the cost.

But you know, totally uninteresting. Oh, and feel free to send me 90% of your paycheck since that would also apparently be not noteworthy to you.

Comment Re:yawn (Score 1) 167

definitely. AMD is winning on absolute single threaded performance, multithreaded performance

In the past 3 processor generations AMD has not once outperformed Intel on single threaded performance.

True only up to 2nd gen Ryzen. 3rd gen Ryzen is beating Intel here, at least based on what we've seen so far. Third party benchmarks are coming in under a month, when the CPUs launch.

AMD has not once outperformed Intel on multithreaded performance.

Hilariously untrue. Have you forgotten how long Intel was pushing quad cores (and later, 6 cores) as their top consumer level CPU vs 8 core Ryzens? Intel was getting absolutely destroyed on multithreaded performance until they launched the 9900k late last year.

Also, if you want to talk about "ever", let's talk about the Athlon 64 (and Athlon X2) era, where Intel had nothing competitive at all for many many years.

PCIe 4.0 is completely uninteresting...

Maybe to you. I'll take doubled throughput NVMe SSDs and doubled throughput Infinity Fabric every day of the week. Doubled throughput for PCIe also means you can effectively run twice as many expansion cards (once they catch up) without loss of speed. Four GPUs at PCIe 4.0 with four lanes each is unlikely to bottleneck on the bus if that's your thing, or you can throw in a 100G ethernet card using only eight lanes!

...and ignores something that AMD IS good at: They provide far more PCIe interfaces to their CPUs than comparable intels and for threadripper provide free CPU RAID support (something that needs to be activated by dongle on Intel, and something that requires giving up the 16x slot from your GPU on Intel).

Only with Threadripper (60) vs Intel HEDT (44) and EPYC (128) vs Xeon (48 per CPU) does AMD offer more PCIe lanes than Intel. Both regular consumer level platforms have essentially 20 (16 + 4 connected to the chipset) PCIe lanes available. Of course, at PCIe 4 speeds, AMD will have double the bandwidth despite having the same number of lanes.

Even with a 15% increase in IPC Intel will still take the crown on ultimate performance in the high end.

Not true unless you're cherry picking benchmarks that heavily favour Intel. Of course, if you want to play that game, I can cherry pick benchmarks where the 2700x soundly beats the 9900k. But back in the real world, the performance delta is only in the 10-15% range, and gets much much closer after fully patching for all of the currently known Meltdown/Spectre/MDS/L1TF/etc vulnerabilities.

That aside, when you add in the clock speed increases to the 15% IPC uplift, we're looking at more like a 25% increase in single threaded performance for the 3800x vs the 2700x, and that is huge.

Slashdot Top Deals

There are two ways to write error-free programs; only the third one works.

Working...