HNHacker News
TopNewBestAskShowJobs

lotharcable

305 karma · joined July 22, 2022

submissionscomments
lotharcable··on Disabling Intel Graphics Security Mitigation Boosts GPU Compute Performance 20%
Not a security expert here...

But Discretionary Access Controls is a standard part of OS design for a very long time.

It is certainly possible to go back to DOS-days and run all your programs without controls as terminate and stay resident programs. But that would be awfully inconvenient.

The concept of "users" isn't just for human users. It is used to do things like prevent your web server from being able to read and edit your password files and such things.

lotharcable··on Wayland is growing up. and now we don't have a choice
XWayland can be run in 'rootless' and 'rootful' modes.

Rootless is what it is typically ran as and allows you to integrate X11 apps into your Wayland desktop environment.

Rootful would allow you to run X11 desktop with X11 Window manager and the whole ten yards.

I don't know how well rootful mode is working because it is rarely used. I imagine it would take some work to make it fully functional. But it something that exists and I would expect that the Xorg/Wayland devs would like to see it fully fleshed out.

But that essentially gets you most of the way there.

lotharcable··on Wayland is growing up. and now we don't have a choice
DRM is literally the 3D acceleration driver framework for Linux. It has been around for decades and is same set of drivers that are used for any sort of accelerated graphics in X.

If you want to get rid of DRM you have to start over and rewrite all graphical drivers for Linux from scratch.

DMA is part of the basic architecture of modern computers. It is how you can do things like have fast USB devices or network devices because it allows device hardware to by-pass the CPU and write things directly to memory.

lotharcable··on Wayland is growing up. and now we don't have a choice
Nvidia under Linux has had a long and hard history.

For most purposes, including gaming, it is best to avoid Nvidia hardware. Using Intel for laptops and AMD for dedicated GPUs is kinda the best general approach if you are planning on using Linux.

Of course if you have a need for CUDA then Nvidia is the only game in town, but that is a different issue then Wayland support.

For a while Nvidia was fighting the Xorg/Wayland devs over GBM vs EGLStreams which has delayed Wayland support. This has to do with the API extensions that allowed Wayland to manage application output buffers.

Gnome was the only Wayland environment to try to support EGLStreams for Nvidia, but it really didn't do them any good.

A while ago Nvidia eventually switched over to GBM and EGLStreams is dead, which helped out a lot of people running non-Gnome Wayland desktops. But there are lots of problems with Nvidia drivers besides that right now.

The reality is that Nvidia doesn't care about consumer Linux desktop. Their primary focus is on Enterprise users in terms of people needing graphically accelerated desktops.

So right now if you are running Linux on your personal workstations/desktops/laptops you are essentially beta testers for whenever Enterprise Linux distros make the switch to Wayland.

lotharcable··on Wayland is growing up. and now we don't have a choice
XLibre is a fork of Xorg X11's codebase started by a developer who got kicked out of the Xorg project because he was making lots of changes that broke everything and had a hard time getting along with the other devs.

Another dev blindly applied his MRs assuming he had tested stuff before submitting the request and they had to go back and revert a bunch of stuff.

Broke nvidia compatibility, broke xrandr extension, and a bunch of other stuff.

lotharcable··on It's true, “we” don't care about accessibility on Linux
It is ok to be ignorant, but it is odd to take the time to actively point it out.

Because he wasn't talking about any of those people.

lotharcable··on Iran asks its people to delete WhatsApp from their devices
Meta works by identifying users, modelling their behavior, and then combining that data with third party sources (typically your financial activities) and then selling access to that data to third parties. Mostly for advertising.

When you use credit or debit cards your transactions and data related to it is collected and sold. When you apply for mortgages and close on a house all that information you put in there is collected and sold.

When you put your address in for the post office, when you apply for a drivers or fishing license... Your local governments collect that information and sell access to it.

Meta tries to then tie in your online and app/phone activity with your legal/financial identity it can obtain through partner data brokers.

This is Facebook's businesses model.

So, yes, this data is available to pretty much anybody that is willing to pay for it. Which includes governments.

None of this should be surprising to anybody at this point. Apple, Google, Microsoft, etc.. all of these companies will do this to greater or lesser extents nowadays since has worked out so well for Meta's bottom line.

lotharcable··on KiCad and Wayland Support
Wayland devs and Xorg X11 devs are by and large the same group of people. So nothing you said really makes a lot of sense.

There are lots of display technologies out there for Linux besides X11 and Wayland.

There was Mir from Canoncial, which is now dead. The project moved to using Wayland.

There was Freon from Google's ChromeOS that was announced in 2015 to replace X11 for ChromeOS, but it is dead. They are moving to using Wayland.

There was DirectFB, which has been supplanted by DirectFB2. They have been plugging away doing their own thing since time immemorial. Directfb2 even has Vulkan support now. Good luck getting KiCAD working on that.

And there is Surfaceflinger from Android. Which is actively developed and widely used.

None of these things would allow to do what people are complaining about what they are not allowed to do in Wayland .

> There's too many things people want to do that Wayland designed out of their system.

eye rolls

lotharcable··on KiCad and Wayland Support
That is a odd statement since the people that designed Wayland are, by and large, the same people that maintained Xorg.

In fact the Wayland devs are the primary group of people maintaining what is left of X11.

The reality is that a lot of X11 design is simply a bad idea. Which is what one would naturally expect given its pioneering nature. By the mid 1990s it was already obsolete and didn't match up with how hardware worked nor how people were using computers.

What has allowed it to persist to this day in Linux is more along the lines of:

* we just that we had a really good open source implementation with a very dedicated developer base and some commercial support from companies like Redhat.

* compatibility with X Servers other then XFree86/Xorg was no longer relevant since the rest of the world has long abandoned X11. So aside from a few nitch cases were people wanted X11 apps on their Windows desktops using properietary X Servers it no longer really mattered.

* X11 allowed extensions (most of which didn't work with network transparency, btw)

* Widget authors, mostly QT and GTK, went through great efforts to avoid using X11 and working around limitations.

KiCAD is just a unfortunate case. They use a kinda odd toolkit, wxWidgets, and happen to depend on a lot of X11 specific behavior for some of their application's features.

So it is less of a situation of Wayland devs not understanding X (they probably are some of the few people that actually understand it deeply).

Wayland actually has really good X11 comptatibility through XWayland and for most applications it doesn't cause issues. But for KiCAD it does. And they are just being honest about it.

Accomidations are being made for KiCAD type behavior and probably KiCAD will update and change things to meet them somewhere in the middle and in not too long it'll become a forgotten issue.

lotharcable··on Linux kernel WireGuard can go 'fast' on decent hardware
Used 10GbE ethernet components are cheap on ebay.

I built a 10GbE 'switch' by buying 2 4 port SPI+ PCIE cards off of Ebay and then joining them together with a conventional Linux Br0 bridge on a old Intel gaming machine. Had no problem keeping up with line speed.

I didn't test wireguard with it, but it should work pretty effectively for testing what speed it can get up to.

lotharcable··on AOSP isn't dead, but Google just landed a blow to custom ROM developers
I don't know a whole lot about it, but GSI is "Generic System Image".

If a phone has proper "Treble" support and the bootloader is unlocked then it is theoretically possible to install a GSI image on it.

Treble is a design approach for Android that separates "Vendor implementation" from the "OS framework". The Vendor implementation being the kernel components and low-level hardware specific stuff.

This is primarily intended to be used by application developers who want to test out new OS interfaces without going out a buying a new phone or waiting for a updated Pixel to come or or something like that.

LineageOS and some other third party roms produce "Generic Images" that are intended to be used in this fashion.

Based on what I read it is very hit or miss in practice. Vendor specific hardware features might not work. So you might be without some bluetooth support or VoLTE support. This isn't really needed to test application OS features, so for people using GSI for development it doesn't really matter a whole lot.

This isn't really useful for projects like Graphene OS who want to be able to make kernel level changes and updates to their systems. You end up stuck with whatever the vendor provided and it isn't really a useful way to extend the usefulness of devices.

lotharcable··on Why are rice prices still high?
Japan in a variety of ways is approaching crisis mode for it's currency and economy.

https://www.reuters.com/business/japans-super-long-bond-yiel...

Japanese monetary policy has been limping along for quite some time now. Decades. Maybe now it is reaching a inflection point were the state is no long able to manipulate things enough to hide the cost of sovereign debt.

Food is one of those things were people just can't defer buying because they are worried about current state of the economy. So maybe food prices are where the symptoms of a flagging economy and falling money value are most apparent.

lotharcable··on Asus router backdoors affect 9K devices, persist after firmware updates
My point was that if the attackers cared enough to put (not much) effort into keeping control of these routers then neither of those approaches is likely to be sufficient.

This sort of thing is why there is such a emphasis on TPM and trusted boot on modern PCs.

lotharcable··on Asus router backdoors affect 9K devices, persist after firmware updates
Banana Pi BPI-R3 with OpenWRT is how learned to deal with crappy consumer "wifi router" devices without breaking the bank.

Very effective.

lotharcable··on Asus router backdoors affect 9K devices, persist after firmware updates
The attackers are using features built into the firmware. They don't have to install any of their own software.
lotharcable··on Asus router backdoors affect 9K devices, persist after firmware updates
> Disabling the 'backdoor' seems to just involve disabling SSH.

Maybe. My guess these are essentially Linux systems, so if attackers know that their exploits are widely known then they will likely try to figure out ways to install kernel mod rootkits.

It'll then end up in a situation with Windows XP/Vista days were IT desktop support staff would run malware removal tools to get rid of porn pop-ups on desktops only to have "reinfections" pop up a day or week or two later.

They'd blame users for this, but really they just never actually removed the command and control botnet features. They just addressed their payloads. The machines were never actually fixed in the first place.

lotharcable··on Rotterdam turned 15,000 EV chargers into a virtual power plant
What a bunch of a-holes.

You know shit is messed up when even engineers can't use words that mean anything anymore.

lotharcable··on Rotterdam turned 15,000 EV chargers into a virtual power plant
So how many of those utilities call "being able to remotely shut off your AC" a "virtual power plant"?
lotharcable··on Rotterdam turned 15,000 EV chargers into a virtual power plant
Calling it 'well worn' is probably a vast overstatement.
lotharcable··on Rotterdam turned 15,000 EV chargers into a virtual power plant
Calling it a "virtual power plant" is probably one the most weirdest spin/intentionally misleading euphemism I've seen in a long time.

A better term would be "managed brownouts" or "rolling brownouts to chargers". They are just reducing services to EV chargers when demand is exceedingly supply to try to avoid impacting other things.

lotharcable··on We Should Let a Lottery Decide Our Government (2019)
Right now most Democratic systems are a contest to find the most perfect high functioning psychopath.

It filters for people who possess the ability to lie very convincingly, tell people what they want to hear, disregard their own failings, and high levels of superficial charm and a overwhelmingly strong desire for social status and access to power.

Also in the last 75 years or so, due to the way party politics dominate election choices and the nature of internal politics there has been a rise in the 'professionalization' of the political class. Decades ago representatives were often people with professional expertise and notority outside of politics who are more or less amateurs. Now the vast majority of politicians are people who have dedicated their entire lives to it.

However it is a profession with no professional standards, no training, no monitoring body, no certification system, and is largely unaccountable.

All of these are very bad things to have in a representational democracy because having a dedicated class of managers it is not representational at all.

Where as a lotto system solves all these problems.

lotharcable··on Microsoft's ICC blockade: digital dependence comes at a cost
I am pretty sure that USA Gov. wouldn't see things that way. Between breaking the law versus keeping ICC happy I think that Microsoft would default on obeying the law.

Hosting a email service isn't rocket science. If ICC can't be bothered to do that for themselves that speaks more to their general incompetence then anything else.

This isn't the first time they have faced US sanctions, after all.

lotharcable··on Car companies are in a billion-dollar software war
There is a 0.0% chance I am going to buy a car that requires a network connection.

All of this is complete nonsense and a huge waste of resources.

Especially for electric cars. These things are so simple that it is not funny. The level of sophistication required is barely much more then what went into a 1990s era Sony Walkman.

What a humiliating fail for modern automakers.

lotharcable··on How much information is in DNA?
Yeah...

We know now that environmental factors change how DNA is expressed as well through epigenetics.

I don't know how any of it works. Something to do with the shape the DNA when it is wound up and how it changes the output when RNA produces proteins.

This is how parents can do things like pass some of the athleticism they earn through training to their children. It is possible for athletic parents to pass genes in such a way that it produces children even more athletic then they were.

All of this means that DNA has the ability to encode information and produce proteins in different ways using the same sequences.

So I am guessing that a lot of the DNA that is considered "junk" may not actually be. They are just missing a piece of the puzzle in how it gets read in.

lotharcable··on eBPF Mystery: When is IPv4 not IPv4? When it's pretending to be IPv6
If you are going to do weird shoot-self-foot things with writing custom EBF scripts to do ill advised network traffic manipulations things then it is probably a good idea to pay attention to RFCs.

I mean I have a small book of notes I built up based on various network RFCs and I am don't even have a CCENT and CCNA certifications.

This sort of thing isn't unreasonable.

Of course this isn't a dunk on the author of the article (except the part about doing weird DNS games, which sounds like a nightmare for whoever needs to figure out what he did months or years from now). Everybody has run into situations were they think they know how something works and it turns out they are wrong and get a nasty surprise from it.

lotharcable··on Zombieverter: Open source VCU for reusing salvage EV components
> Does this "ZombieVerter" have a high chance of being blamed for an incident involving death/injury or very expensive property damage?

No.

lotharcable··on Progress toward fusion energy gain as measured against the Lawson criteria
Yes. The NIF is a weapons research lab, not a power research lab.

The purpose of it is to show that the USA is still capable of producing advanced hydrogen bombs. More advanced then anybody else.

The '2.05 megajoules' is only a estimation of the laser energy actually used to trigger the reaction. It ignores how much power it took to actually run the lasers or reactor. Even if they update the lasers with modern ones there is zero chance of it ever actually breaking even. It is a technological dead end as far as power generation goes.

The point of the 'breakthrough' is really more about ensuring continued Congressional approval for funding then anything else. They are being paid to impress and certainly they succeeded in that.

However I suspect this is true of almost all 'fusion breakthroughs'. They publish updates to ensure continued funding from their respective governments.

People will argue that this is a good thing since it helps ensure that scientists continue to be employed and publishing research papers. That sentiment is likely true in that it does help keep people employed, but if your goal is to have a working and economically viable fusion power plant within your lifetime it isn't a good way to go about things.

If the governments actually cared about CO2 and man-made global warming they would be investing in fusion technology and helping to develop ways to recycle nuclear waste usefully. Got to walk before you can run.

lotharcable··on Augustine of Hippo
In terms importance the Nicene Creed is pretty fundamental to Christianity. The creed itself is not on the same level as the Gospel, but the ideas espoused in the creed are a reflection of what defines Christianity as Christianity.

Namely that there is One God that is "The Father, The Son, and The Holy Spirit" and that the Son died for our salvation, etc. The "Holy Trinity".

This is very defining. It is what separates Christianity from things like Rabbinical Judaism, Islam, Church of Jesus Christ of Latter-day Saints, Gnosticism, etc. Despite how similar and overlapping these things are to Christianity they don't believe in the Holy Trinity and many other details mentioned in the Nicene Creed.

So there is no surprise that they took any changes to the creed extremely seriously in the 5th Century and onward.

As far as Theology debates and how it resembles modern fandom... Yes, actually, a lot of it was actually fan service. These people loved the Church, they loved the Bible, and they loved God. It was a central obsession in their lives and they enjoyed debating and arguing over things just like people do today over football, cars, movies, and other things people enjoy/love etc.

The difference is the level of dedication and rigor these people engaged in. Few people could afford to spend their lives engaging in these philosophical pursuits, but the ones that could took it very very seriously. Theology is not only the study of God, but the study of the structure of reality itself.

It is from Theological debates of the medieval eras were we get things like peer reviews and the scientific process/inquiry.

lotharcable··on Why the rich paid less tax in the 1970s – despite 98% tax rates
In the USA since the end of WW2 the % of GDP collected by USA Federal government has been around 17-18%.

Since then we have had a top income tax rate range from 28% to 90%, but the actual amount of taxes collected is really not impacted by this.

Highest tax rate by year:

https://taxpolicycenter.org/statistics/historical-highest-ma...

Tax receipts as percentage of GDP:

https://fred.stlouisfed.org/series/FYFRGDA188S

There are lots of reasons for this. The main one, however, is that people react to different tax rates and change their behavior.

And very rich people have a huge amount of leeway. If you decide to tax a 1% at 99% they might just decide to simply stop earning altogether. They will continue to be rich for the rest of their lives and their children and their grand children.

I think a lot of people think you can just depend on people's blind greed so they keep on maximizing their earnings regardless of how much they actually earn. However this is not even how it works a little bit.

The economy can be seen as little more then essentially random giant feedback mechanism. Everything you do to it has a effect and it is impossible to predict it accurately. People's behavior changes, their choices change, their goals change, etc. etc. based on conditions and incentives forced on them by the government.

This behavior is described in the so-called "Laffer Curve"... which is not a mathmatical formula for maximizing revenue, it is just a way to illustrate the sort of behavior you deal with when raising taxes.

Nowadays most governments are going to have the _effective_ tax rates maxed out. Governments hire plenty of accountants and economists that have clear understanding on how all of this works.

Which means, very generally, that massively raising tax rates will yield short term gains until the economy adjusts... then chances are reasonably high they will actually collect LESS in taxes then otherwise would be.

Which means that if the government really wants to raise money they need to go after people with little flexibility in their behavior... which is going to be poor and middle class people who live mostly paycheck to paycheck.

No matter how much you tax the middle class or poor they have to work. They don't have choice. Which means that you can actually increase taxes collected by targeting those groups.

They can't target these people directly with taxes because we live mostly in at least semi-functioning democracies and any politician voting on doubling or tripling taxes on those people are not gong to be politicians for very long.

So they resort to inflationary policies like deficit spending, manipulating interest rates, and "money printing".

These policies are actually a sort of "shadow tax" or "indirect taxation". They extract wealth out of the economy for the government to use, which then increases the costs for poor and middle class people.

The whole thing is very messy, but since most people don't really understand how inflation works or where it comes from it is a effective way to short circuit any political accountability.

All of this means that if you want to raise government income without massive negative effects your only choice is to grow the economy.

lotharcable··on Sandy Bridge-era motherboard gets M.2 SSD boot support 12 years after launch
Board firmwares are full of copy-paste and code lifted from other devices that is never intended to get used and is supposed to be disabled by default.

I wouldn't be surprised if this was 100% by accident.

← PreviousPage 3 of 5Next →