Forgot your password?
typodupeerror

Comment Curl ism’t myths “target" (Score 1) 54

As I understand it Mythos’ “big leap” is not in finding specific flaws it is in chaining them together into a “bigger” flaw. So finding a minor issue in curl that lets you put a file where you shouldn’t, plus a flaw in something that assumes some file location is “safe” and it doesn’t have to parse things with an advassery in mind, plus a flaw in something that relies on that thing, and so on.

When doing that kind of security work you don’t need to find a bunch of significant flaws in each tool, just a minor flaw in places that turn out to be useful when combined with say up to 9 other minor flaws. So from the viewpoint of cUrl which doesn’t rely on a lot of other tools to provide its services nothing has changed. The pain is experienced on a wider scale like over a whole OS where there are a lot of tools any of which might contribute a minor flaw so Mythos can find way to gain “the prize” (maybe remote execution, or a privilege escalation, or both).

Maybe a better way to think about Mythos is it doesn’t have to hyper focus on one tool like “can I break into the system using cUrl?” (and is not actually any better at that question then prior AI), but it does a far far better job at answering the question “can I break into the system using up to a dozen or so flaws together out of this pool of 1000+ tools?”. I assume it may be a bit better at finding flaws in single tool if the flaws require putting more bugs together or more steps to reach the state where an existing flaw shows up, but again that isn’t the big deal. The big deal is at a system level it puts multiple sub-critical flaws together to combine into a critical flaw. (queue transformers joke here)

Comment So I guess the real question is is... (Score 1) 41

Is Cuda a lock in because there is a critical mass of solutions written in Cuda and people that think about problems in terms of Cuda already so nothing is really going to unseat it that isn’t a close clone of Cuda and making one of this is for some reason impossible, or is the problem that you can make something else that lets you be expressive in the imprint ways Cuda is while giving the backend the same kind of flexibility to schedule operations, but nobody else has made one that isn’t “too buggy” to use on real world problems?

In the distant past very few C/C++ complies existed, they were “too complex” for small companies to make, and now we have very few commercial compilers and a billion open source projects that are all forks of gcc or llvm (or a fork of a fork of the llvm derived clang). We don’t have a billion non-C derived programming environments though (we have a few, JavaScript is popular, and I’ll argue Java is C-derived, although removing pointers form C doesn’t leave a lot, so I’ll also accept it as a distinct environment, but if so, so is Swift, and Rust also counts as distinct...still that is only handful). It doesn’t prove a lot, but I would say even the moat of a programming language and environment only lasts so long.

Comment Re:But the real cost is increased service prices (Score 1) 58

there's no long term impact. it's just for construction.

Do you actually believe that? I mean, yeah sure “we asked them what was up and they gave a flimsy excuse” doesn’t mean you have to believe it!

The only thing that points towards them maybe telling the truth is it might be obvious if the data center were operating and you don’t want to get caught in a provable lie. However it is also possible the data center is partly operating while construction continues and they figure “hey there aren’t people coming and going, who will know if the data center is operating as opposed to testing equipment if we get caught!”.

Comment Re:When life is a game... (Score 1) 38

"can't tell the difference between a game and reality"

Uh, while I would argue that you should probably care because that person should be focusing on an investor meeting, it tickles me that you're suggesting somebody playing a videogame during a meeting supports the assertion that "they can't tell the difference between a game and reality".

That would probably amount to a whole lot of people who can't tell the difference between a game and reality (which I don't agree with) rather than a whole lot of people are not focusing on what they should be focusing on (which I do agree with.)

Comment Going to wreck some customers (Score 2) 89

This will wreck some customers. Expats overseas without vpn access. Anyone working or living in a remote location without internet access. Military around the world, both on land and on sea. Maritime workers on ships.

Basically take a bunch of people who rely on gaming devices for their entertainment because of the remote nature of their job or home, and cut off access to stuff they already paid for. Well thought out plan, if the plan is to get people to switch to a different company's products.

Comment Re:I'm embarrassed for my party (Score 1) 96

"Having worked in public school education"

Lol. Means shit all for caring about better education.

"as it helps teachers and their healthcare/pension benefits"

Yes, you dipshit, it must be crazy of me to think that paying teachers well leads to better teachers.

Why would teachers want longer school days? School day lengths are fine. Longer school years? Is school a job? The length of the school year is for kids. There's a reason why schools have breaks, its for students. Additional money for after school activities? I mean, at this point I conclude you're a moron (actually I knew you were already moron) - that's a major ask of every teacher strike I've ever seen. (I dunno, maybe you've been surrounded by fellow idiots? Maybe this is what drives your pessimistic view on the profession .. )

Dollars to donuts, your "Having worked in public education" claim is as IT or computer something something, which doesn't make you an expert on public education. More of a useful idiot, every time I read your words.

Comment Like every box truck (Score 1) 139

I've driven one of those box U-hauls before. It takes some getting used to. You have to be attentive. BE ATTENTIVE to what's behind you. And one time, I actually had to turn around because of a low railroad trestle. It was a bit embarrassing to have not planned my route properly and get forced to turn around in a small parking lot; but nowhere near as embarrassing as peeling the top off the truck.

Comment Re:I'm not buying it (Score 1) 103

Fortunately, and overwhelmingly provably, the physical and legal world doesn't work in the way you wish it did.

Protip: as soon as you're talking about "never" or "always" or "happened before" or "still happens" .. basically anything in terms of any absolutes, you're not operating in the real world.

People survived car crashes before seatbelts were mandated. People still die in car crashes even when using seatbelts. You'd be a moron to argue seatbelts are useless or car manufactures should not be legally required to put them in cars.

The things that influence law and society is the actual data (how it changes over time) and nuance, and that's what the law deals in. Things you seem quite resistant to engage in.

Comment Re:Chatbot Lies (Score 1) 103

Multiple people can share responsibility, as their actions combine together. A person who drives somebody to a bank for the known purpose of robbing the bank is determined to share *some* responsibility for the robbery of the bank. Just because they're not the person who took the money out of the bank vault does not mean the law does not consider them partly responsible.

I know I know, life is so much easier if you just try and make everything stupidly simple.

Comment Re:Neo is basically for educational ecosystem (Score 1) 68

e benchmarks I saw had it about the same. The 2020 M1 Air slightly faster in single threaded, slightly slower in multithreaded, or do I have those two swapped. Either way, it's abouth the same overall.

Geekbench puts them at Neo 3535/8920 (s/m) & MBA 2347/8342 (s/m). So the Neo is significantly ahead on single core performance, and ahead (but just barely) in muti threaded even with the reduced core count! Which is decent for half the price! (well if you get the EDU discount on the Neo, the M1 MBA doesn’t have a EDU discount that I know of).

To be clear at the price point not too much slower would be Ok, but the benchmarks have it at way faster for single thread, and faster but basely a tie for MT.

To be honest a used M1 Air or M3 Air would seem a better deal

A used M1 Air at under the Neo's price would be a good deal. The M3 at the Neo’s price would be a great deal. I mean the Neo is pretty damn good at its price point. It is fast, it works surprisingly well for its RAM configuration. The +$100 model has touchID and slightly less pathetic local storage. The Neo’s display is physically smaller, but the whole device is quite small, some people prefer smaller devices for carrying about and use in cramped areas. I mean from my view point (16” MBP with large external displays) both the Neo and MBA have tiny cramped displays! However both are shockingly fast for their price.

Comment Re:Repairability? (Score 3, Interesting) 68

The MacBook Neo gets a fairly high repairability score. Most people who have disassembled it seem to be of the opinion that since it isn’t going for absolute minimal size and weight they used very few adhesives and lots of screws. So it is pretty simple to take apart and put back together. Apple does also make “self repair” kits for many products amiable to rent with an unreasonable deposit (purchase also available, but not useful to most people), but has apparently decent instructions and such to get things done.

As for upgradability, nope, they are headed away from that as fast as they can. No RAM upgrades on any modern Apple device, the RAM chips are wire bonded to the CPU, which at least means they use lower voltage swings and get somewhat better latency out of the same parts. Not in general a tradeoff I would make (I would rather have DIMMs and be able to do a late-life RAM upgrade to get more useful years out of a device rather then be stuck at my purchase RAM allotment forever -- and/or buy a low RAN model from Apple and do a day 1 3rd party RAM upgrade). To be fair to Apple customer installed RAM, and factory installed RAM that managed to work loose were the number one and number two repair issues for their upgradable devices (or maybe just laptops?) prior to starting to solder down RAM. Which statically means a shit ton of people thought Apple just made crap computers that flaked out at random and never brought them in for someone to tap on each DIMM and “fix it”. So soldering the RAM down decreased warranty repair costs, decreased out of warranty “customer comp” repair costs, and increased perceived reliability amongst people that don’t take flaky laptops into an Apple Store and try to get someone to look at it.

The obvious downside is I pay more when I buy a Mac either because I don’t buy enough RAM for the full useful lifecycle of the CPU, or because I do and Apple charges a lot of money for it (well until recently, due to long term supply contracts Apple’s RAM cost is very low, so the normal 50+% profit margin they take on RAM now seems highly competitatave with spot RAM prices)

Slashdot Top Deals

"Summit meetings tend to be like panda matings. The expectations are always high, and the results usually disappointing." -- Robert Orben

Working...