PreInternet01

"If only they used DC from the wall socket, all those H100s would be green" is, not, I think, the hill you want to die on.

But, yeah, my three 18MW/y racks agree that more power efficiency would be nice, it's just that Rewrite It In (Safe) Rust is unlikely to help with that...

> In the line of sight of victim

Yeah, you can actually check out the details in https://www.emvco.com/specifications/contactless-specificati... -- relevant parameter is "Device Estimated Transmission Time For Relay Resistance R-APDU", which is specified as "typically 1.5ms".

That's already hard to achieve reliably (in-store WiFi is right out, but possibly Bluetooth?) but would definitely make the required on-device malware even more complicated...

> is that enforced by some certification process

Yes, pretty much any NFC payment solution has to be EMVCo (Eurocard/Mastercard/Visa) licensed, and relay resistance is an explicit part of that.

> seems to be happening in the wild

Nah, NFC is so ubiquitous that would have been a lot more noisy.

Sorry, but as someone who is involved with the development of contactless payment terminals, this just isn't a practical attack.

The phase where the relaying is supposed to happen (between the terminal sending its actual challenge and receiving the response) already employs a very short timeout (a millisecond or less, definitely not anywhere near a network round-trip to, well, anywhere).

There is a 'card selection' phase that may take (much) longer, as well as various retries, but the key bits (pun intended) of the exchange are only valid in that very short window.

Also, upwards of 80% of all point-of-sale transactions in some northern-European countries are NFC these days, and if any of this had truly any large-scale applicability, people would definitely have noticed...

Oh, nothing gets dropped silently, but bounced right back with `550 5.7.1 Message rejected due to content (Attachment refused: MATCH-code)`.

And for anything oversized, funny or otherwise non-standard, we offer a very convenient file transfer service.

> To defend against concatenated ZIP files, Perception Point suggests that users and organizations use security solutions that support recursive unpacking

Yeah, or, you know, just outright reject any ZIP file that doesn't start with a file entry, where a forward-scan of the file entries doesn't match the result of the central-directory-based walk.

There is just so much malicious crud coming in via email that you just want to instantly reject anything that doesn't look 'normal', and you definitely don't want to descend into the madness of recursive unpacking, 'cuz that enables another class of well-known attacks.

And no, "but my precious use-case" simply doesn't apply, as you're practically limited to a whole 50MB per attachment anyway. Sure, "this ZIP file is also a PDF is also a PNG is also a NES cartridge which displays its own MD5" (viz https://github.com/angea/pocorgtfo/tree/master/writeups/19) has a place (and should definitely be required study material for anyone writing mail filters!), but business email ain't it.

"People just submitted it. I don't know why. They 'trust me'. Dumb fucks"

"after years of working in DevOps, MLOps, and now GenAI"

You truly know how to align yourself with hype cycles?

When using implicit typing, definitely `var foo = (int Foo)12`. Less sure what the explicit variant should look like, since parsing may be trickier, but `(int Foo) foo = 12` might work?

You can do this in C# as well, so that the final line in the snippet below causes a compile-time error, which is quite nice for many purposes:

    private enum Derp { }
    private enum Foo { }
    var derp = (Derp)12;
    var foo = (Foo)99;
    foo = derp;
    

However, this is definitely a hack, and I sort-of feel the same about the Zig solution from the article. Would be nice if languages had 'cleaner' support for this?

"Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting"

Also, your back button isn't truly broken, you just need to hold it for a bit and select the last-known-good URL...

Counterpoint: no, it's just more hype.

Doing real-time OCR on 1280x1024 bitmaps has been possible for... the last decade or so? Sure, you can now do it on 4K or 8K bitmaps, but that's just an incremental improvement.

Fact is, full-screen OCR coupled with innovations like "Google" has not lead to "ultimate" productivity improvements, and as impressive as OpenAI et al may appear right now, the impact of these technologies will end up roughly similar.

(Which is to say: the landscape will change, but not in a truly fundamental way. What you're seeing demonstrated right now is, roughly speaking, the next Clippy, which, believe it or not, was hyped to a similar extent around the time it was introduced...)

Depends on your definition of "free", but, yeah. For non-commercial, non-paid use, both VS and Rider are good options, but this submission still breaks site guidelines and is a dupe...

That's... not the title of the linked article?

And, whereas it's nice that Rider is now free for non-commercial use, and it's definitely a capable IDE, Visual Studio remains an equally capable-and-frequently-updated competitor, not doomed by any single "problem" that I can see?

(Source: have been using both Visual Studio and Rider for C# development for over a decade now, and they complement each other quite nicely, while also offering a perfectly acceptable solution on platforms or within organizations that only support one and not the other.)

Also: dupe, earlier submission with some more discussion: https://news.ycombinator.com/item?id=41935128

Pravda has been out of print since 1991. So, while I get your sentiment, it's probably good to acknowledge that propaganda has gotten a bit more... subtle in the meantime?

No, but would you accept an above-the-fold photo of Trump at a McDonald's instead?

We'll miss out on an insightful analysis of how the huge amount of votes for Harris are a big problem for the Harris campaign? Scary...

Big Media thought-pieces on how Big Media is important, and/or over, and/or somehow indifferent are... over?

Oops. Well, since recursive acronyms are widely-accepted in our industry as well, I'll just leave that one up.

Nah, 'RISC-V is slow' is not exactly an uncommon sentiment: see, e.g., https://news.ycombinator.com/item?id=41920766

Not surprising, since the few physical RISC-V implementations that are available under-perform a decade-old Raspi by a significant margin, and that platform is not a rocket-ship to begin with.

Previous discussion, sans El Reg hyperbole: https://news.ycombinator.com/item?id=41512213

Excel: the universal Enterprise Resource Planning tool! Not exactly liked by the developer crowd, I know (and sometimes even for good reasons), but still a mostly-useful force to be reckoned with.

Also a technical achievement for the history books (in the DOS era, Lotus 1-2-3 truly pushed the envelope and was the reason for early 'extended memory' standards, but on both Mac and Windows, Excel truly shined, allowing much larger sheets than were possible before, despite the meager hardware resources available).

Also, a true source of feature innovation. 'Autofill', first seen in 1992, was possibly the first 'AI' (and yeah I know), and even the features that were absolutely useless (like the ability to modify sheet values by manipulating a graph, introduced in Office 95, which I remember demo-ing to great applause during the European intro tour) made a mark, as did the UI.

Of all the current 'Office'-style apps, Excel is the only one that is probably still irreplaceable for me. And yeah, I know, it messes up CSV imports by default, which has reportedly set back DNA research by hundreds of years, but that's just a matter of teaching future scientists to use Data/From Text-or-CSV as intended, and will thus sort itself out within the lifetime of this very useful product...

Meta: the linked post is undated, but available on the Wayback Machine as early as November 2005, so a (2005) in the title is warranted and, in any case, this isn't new advice...

Hey, I'm the guy who is 100% against private car ownership, and I don't want to "confiscate your car" (I mean, what would I do with that?) or encourage anyone to do so (unless, of course, they're the bank and you're a delinquent, don't want to upset the apple cart too much...).

I want you to be able to reliably get transport to where-ever you need to go, an what-ever time you need to go there, without the need to keep a 1000-pound pile of junk in (semi-)public spaces at all times.

Where I live, that's pretty much a possibility already. I want everyone to have that same freedom!

If my imaginary four-year-old has a fever in the middle of the night, I first phone the nurse-on-duty, and if they determine I need to go somewhere, I see if there's a nearby shared e-vehicle (and in the middle of the night, it will sure be), and use that. Or, like, call an Uber, which might be slightly faster, but for a fever, well...

And if the situation is truly urgent, they'll send an ambulance, which should take less than 15 minutes, and will offer the best care available in that time window anyway.

And I'm absolutely sure the situation is entirely different where you live, but isn't that the real problem then?

You're projecting harder than the average IMAX<tm> venue.

Even in many parts of America (which are not that different from many parts of, say, France, which I'm very familiar with, thankyouverymuch), private car ownership is not an absolute requirement.

Can people there get around with Public Transport<tm>? Nope. Do they require their Own Private Sardine Can At All Times<tm>? No, not necessarily either.

And I'm firmly in the "No Sardine Cans Ever!" camp, and I have solutions. If you're somewhere else, that's fine with me, but you're not so convincing as you might feel...

Nah, not destructive, if I say so myself. More like: disruptive. Which should be a pretty popular concept around here?

To elaborate, maybe: I would fully support a robo-taxi scheme to ferry people to and from their job, shopping, or whatever. Where I live, shared e-vehicles are as good as it gets right now, but that's definitely a promising step already.

'cause privately-owned cars are a significant contributor to mortality, and take up, like, 99% more space than is warranted?

I mean, everyone (well mostly everyone) is absolutely mortified by commercial aviation, which, like, commits literally 0.01% of those sins on a global scale?

No, I'm not suggesting any kind of financial pain at all.

Do I support the ability of people to travel to their job, shopping centers, or any destination they like?

Absolutely!

Do I think a privately owned vehicle, which spends 90%+ of its active life being parked in spaces that could be utilized much better otherwise, is the best way to achieve those abilities?

Nope. Sorry.

Why? I'm against private car ownership. Ask me all about it...

Well, the more expensive driving a car is, the better!

That being said, I'm pretty sure that liability insurance for a family is not USD 20K, unless your idea of 'family' is, well, pretty extensive?

Collision insurance? Sure, with EVs becoming more popular, that will only go up. But, yeah, omelettes, eggs, blah...