88 karma · joined January 25, 2022
Is your "security" provider making love with gogol and its whatwg cartel friends or do I have active parasites on my internet lines?
Well, HN comments are kind of dead: too many AI bots and a abused "karma" system. Not allowed to disagree or provide alternatives.
Sorta no point in argumenting.
Still, we can use news and comments as a channel of communication and publishing.
And support email addresses with IP literals: mailbox@[x.x.x.x] mailbox@[ipv6:...] for those who are self-hosted and not paying the DNS mob, like myself. You can filter hard incoming emails with IP matching from the TCP connection to the content of the 'from' related headers, this is way stronger than SPF, thx.
The scammers are now doing open source vendor/dev lock-in via massive size and complexity... while there are small and stable in time alternatives able to do a good enough job. Those guys are not all malicious, many are just brain washed and some suffer from a mental disorder: accute Rube Goldberg Machine syndrome.
Email addresses with IPv[46] literals are intrinsincly stronger than SPF. If in the envelope or any of the 'from' headers (if my memory does not fail me, there are few more headers to scan), the IPv[46] literal does not match the actual and real IP of the SMTP server, the email is dropped, not even going into any spam folder.
Conspiracy mode: they know and are careful not to support that, in order to create a walled garden of internet messaging for them and their friends.
I download RSS from gogol: youtube channel information. Why, because the real evil of gogol and its friends: the whatwg cartel. Their web engines are technical abominations they pushed down the throat of the whole planet, because they actually control all (including the SDK then the computer language). How? They break on purpose interop with small tech web engines, aka noscript/basic HTML.
What's really annoying are major authorities unable to regulate that, namely force interop with small tech (network protocols/file formats)... like they know but are careful not to do anything with a significant impact. Well, In my EU country, this is decided at the top level: prime minister and president and that's it: this is a sorta proof that matter is actually really important. Everything started to go wrong from my EU country gov of 2015/2016 since they 'forgot'(ooopsie!) small tech web engines in the 'master document'.
There is still hope, once small tech is added again to this 'master document' (web engines, currated subset of network protocols and file formats), interop with small tech web engines (most are EU) will have to be added, in 3 years.
Unsupported unicode code points are just rendered using a place holder.
For instance, with a C pre-processor, I have a very lean C pre-processor dialect which allows me to assemble simple x86_64 code with... fasmg[12] or nasm(probably yasm) or gas(intel syntax).
A big project which was bitten by specific pre-processor abuse: ffmpeg with nasm (but it is still much less toxic than to start to be hard dependent on advanced and specific C compiler extensions... look a the failure from linux on that matter).
I am doing all that with a basic C pre-processor in my assembly source code. But the more I think about this, the more I think I should write my own pre-processor, which "should" be much simpler than a C pre-processor in the end and would do a cleaner job since taylored for those usages (the "annoying" thing is the arithmetics expression evaluation).
I would write this pre-processor in assembly, namely design a binary specification (that to be ready for other ISA implementations).
Then, they are the really important things: for all micro-architectures, how to be friendly to conditional branch predicition, how to handle BTB entries layout in a cache line, show how important the "cache line" is ubiquitous, etc.
I remember clearly one of the TheHeavyThing developers telling me than with a basic and naive hand compilation of gzip, he was beating the best compilers, at that time, by a consistent 10/15%. Let me remind people here of something: nobody is supposed to be able to beat a compiler on deep and hairy compilation units. If it is the case, something is wrong in that compiler.
Small Tech Discrimination.
I have written so much software for one... I cannot recall everything. I use some of it daily:
- I have my custom elf(glibc)/linux distro
- I use my own ffmpeg based x11 media player (will have an update for wayland).
- Since the "geniuses" at gogol blocked all accounts not using whatwg cartel web engines and blocked all self-hosted SMTP servers (I do not pay the DNS mob, then IP literals, which is stronger than SPF) to exchange with gmail.com users (now prisoners), I have my very own simple noscript/basic HTML servers (messaging, file transfer, openstreetmap browsing, etc). Unfortunately, most are C written from linux instead of assembly (at least, I removed most of the time the libc dependency with direct syscall programming). IPv6 is making everything internet software muuuuuuch easier to implement: I am lurking at an IPv6 only, super idiotic and real time voice/video/text/file transfer protocol, probably based on SIP (the main issue are randomly generated IPv6 addresses from mobile internet, which may require a mini-server for IPv6 address exchange, BAAAAAAAD!).
- Ofc, I still have my own minimal SMTP server (and a SMTP client to send emails), because there are still honnest people on internet. mutt forever.
- I am trying to build a RCS for linux, aka a Reduced Command Set with near direct hardwiring to linux syscalls. I lose comfort, but knowing that I removed giga tons of bloat feels so much satisfying it is worth it by light years. I will have to code my own command shell one day.
I still have C code since I currently need portability on IP-LOCKED ISAs (arm and x86-64). But I wish for RISC-V to be a success, namely as a modern, very often hitting the 'sweet spot' in technical design compromises, NON-IP-LOCKED ISA. I am writting much software in RISC-V assembly now... which I run on x86-64 with a small interpreter (written in x86-64 assembly)... trying to fix the bloat and kludge from corpo-like open source software (including the SDK).
Right now, I am writting my own wayland compositor using that framework. I was not expecting window management to be a bazillion of little things to do everywhere. And even if a wayland compositor is several orders of magnitude smaller and leaner than a x11 server, it ain't that a small project (ofc, I implemented myself the wayland wire protocol, no external libs here).
In my 'trying to fix the bloat and kludge' from corpo-like open source, I force myself to use my own exe/dynamic lib format for modern hardware (so lean, a simple RFC will be enough, and no more loader bloat/kludge). But I am scared at the abominations which are all the requirements of classic computer languages to run: I would like a mesa vulkan driver, but there is still c++ (super BAD) in there which makes porting to an alternative dynamic lib format a living hell, non trivial C won't be that easy neither (for instance the abomination of the ISO __thread keyword, amazing bright minds there). Taking perspective from that, I wonder why anybody sane would add on top of that a big runtime requirement??
And what people doing that have to keep in mind: IRL can put a violent stop to all of this.
Priorities...
In this context, grapheneos looks like more just 'And Another Time...'.
In the end, it does not matter: we all know here that "information system security" is a fantasy, it does not exist. When somebody does pretend the opposite: this person wants to scam you or sell you something.
The part which in missed all the time is the control of the glibc ABI version. Either you link with an "old" glibc, or you go 'Right Way(TM)', documentation is on binutils web site (noscript/basic HTML) : https://sourceware.org/binutils/docs/ld/VERSION.html
Must include glibc internal symbols.
I would use the "readelf" command to audit the binaries for broad elf(glibc)/linux distro support (like stock unity has been). Namely DT_NEED entries, symbol/shared lib version requirement (at the end of readelf output), etc.
An additional note: in the case of a complex set of ELF64 binaries, don't forget that ELF DT_RPATH is deprecated in favor of ELF DT_RUNPATH (see man page of ld.so). To force DT_RPATH into DT_RUNPATH, you must use the follower binutils ld option: '--enable-new-dtags' (using the compiler driver, that would be '-Wl,--enable-new-dtags'. Carefull, you'll see that in ld.so man page, DT_RPATH and DT_RUNPATH do not behave the same way. You should use dynamic loading for your private shared libs using the $ORIGIN keyword anyway.
Ofc, dynamic loading (libdl/dlopen/dlsym/dlclose) is mandatory for system interface shared libs, and for core video games: libX11 set or xcb set of client X11 libs, libasound (wayland code is statically linked with its libxkbcommon for xkb keymap handling). Basically, The DT_NEED entries of your set of ELF64 binaries must reference only common glibc libs (and if you don't dynamically load them, your private ones with proper DT_RUNPATH).
Me, I would be in the second population: currently, access to performant inference hardware in datacenter is gated with whatwg cartel web engines (a shame).
That said, if AI does become ubiquitous, hardcore regulation on its access will happen, but when I look at the web from my administration in my EU country... slaves of Big Tech (the bad americans who the good americans fail to regulate... and I don't blame them, it is so hard).
At least those build options should be default.
If so, "normal" police would not have the "keys". This would be "the compromise".
For instance, do we have similar benchmarks on the latest frontier open weight KIMI model at several tera-weights (I would be interested at coding prompts)?
Here, Big Tech must interop with Small Tech. A common malicious behavior from Big Tech is to inflate by tons the required complexity and size of their 'tech' in order to make it out of reach by small competitors. This is one of the roles of market regulation. It seems they are now using 'security' (something which is only best-effort, it actually does not exist) to scare people to go to alternatives (how deep the rabbit hole goes here... mmmmh...)
In my EU country, we have a very good internet, thanks to _HARDCORE_ regulation which allowed small alternatives to be bootstrapped and to exist and grow. It is a bit different for gogol which is trying to create a 'very walled garden' like the "rotten fruit" company with this 101 malicious behavior on the long run: strong interop with 'Small Tech' at the beginning, slowly (~decade+) but surely this interop is broken to favor the 'Big Tech' from their cartel.
It is really complex: devil hides in the 'technical' details, it is case by case over some kind of continous spectrum. Here, it boiles down to the complexity/size of protocols, file formats with their stability in time: if you regulate here, "Small Tech" becomes a real-life alternative.
And don't be a fool at believing they are not talking to each other and play fair...
Let alone those models be 'stable'.
1 - restore interop with noscript/basic HTML browsers, stop favoring your 'whatwg cartel' web engine.
2 - gmail: restore interop with self-hosted SMTP servers without DNS (filtering on the IPv[46] literal from email address, this is stronger than SPF).
And there is probably more to add.
If "AI" becomes ubiquitous, it may end up pushed out of the 'standard economy' and made sorta an 'utility' (to speak using US words). Because, you will have those able to pay for performant AI... and the other ones. To mitigate that, running locally at decent (but still slow) speed, frontier models, may become critical.
I say that: I have never fooled around with AI since they are gated with 'whatwg cartel' web engines.
The trick is with current tension between the US and Spain: hopefully intel won't "be told" to pull out from this project, because I don't thingk TSMC has the production capacity to accomodate such project decently (and RISC-V is a US initiative!!). (I am talking latest silicon process, because without it, even an amazing micro-architecture will be dragged down).