tkinom

Implemented my own specialized memory allocator 26+ yrs ago. (Y2K timeframe) Probably older than the most of the CMU students :-(

Use pre-allocated pools with array of indexes, free/allocation idx for alloc and free.

Con: Fixed pool size and fixed amount of memory can be allocated per pool.

Pro: constant cost operations per alloc/free via Atomic inc/dec of idx - no linklist tranversing ; Can be alloc in kernel space and free in user space (linux/QNX) and in multiple user processes when memory pools are in shmem; Run very will in SMP environment without any locks - all memory contentions were handled with atomic +/- alloc/free idx.

Same source code run in QNX, vxworks and linux (kernel and user space) at that time.

Can we design something like virustotal setup? (https://en.wikipedia.org/wiki/VirusTotal)

NPM setup similar dl_files_security_sigs.db .database for all downloaded files from npm in all offline install? List all versions, latest mod date, multiple latest crypto signatures (shar256, etc) and have been reviewed by multiple security org/researchers, auto flag if any contents are not pure clear/clean txt...

If it detects anything (file date, size, crypto sigs) < N days and have not been thru M="enough" security reviews, the npm system will automatically raise a security flag and stop the install and auto trigger security review on those files.

With proper (default secure) setup, any new version of npm downloads (code, config, scripts) will auto trigger stop download and flagged for global security review by multiple folks/orgs.

When/if this setup available as NPM default, would it stop similar compromise from happen to NPM again? Can anyone think of anyway to hack around this?

As Dr. Ian Malcolm said it: “Your scientists were so preoccupied with whether they could, they didn’t stop to think if they should.”

About right, did it two years ago with 2 Sockets, 128Cores (64 core per socket), 256 Threads 2 Epyc Motherboard with 1TB DDR4. Build Kernel < 90 seconds. Should be faster nowadays....

Another idea for them: Walkatron for NFTs token for "....." causes....

RPi+ Yolo can do real time object recognition of cluster Tank, Trucks, BMP from orbit.

A service with real time streams of those objects + GPS data info directly from starlink for a select sets locations should worth a lot for DOD, NATO, Ukraine. DOD and NATO would likely flip the bill for everything need to build such system.

Love to see a container environment that can monitor Monitor and log all outgoing network connection requests.... Monitor and log all critical file/directory access such as /etc/*

With such container, we can catch the compromised supply-chain attach easily, right?

Does anyone know such container exist?

There should be some post post-processing algorithms that can remove/clean hex elements, right?

NV21?

https://www.phoronix.com/scan.php?page=news_item&px=Radeon-R...

Got Honda Clarity PHEV since 2018. Loving it so far. It is 48 miles E range. I need ~36 for round trip daily commute. Charging at work is free. I remember only fuel up only 3 times in 2019 with the 7 gallon gas tank. Normal fuel up is 5-6 gallon only as it has a very small tank. But the Hybrid range is supposed to be 350 miles.

I also just installed solar at home. I expect the next family car would also be PHEV suv to replace the 16 years old minivan. Other than long trip, I don't expect to use gas much, maybe just once a week to oil up the engine for a few minutes.

Fog of war.

I have written time series logging db with sqlite believe that approach has following advantages:

   System performance scales well with latest SSD HW.
      As compare to cloud base approach that is limited by network/cloud speed.

   One can store logs per day / week / year in separate db files as needed.  

   Backup of small db files for last few days/weeks are trivial with rsync.

Love to hear other pro/con arguments from folks who use Timescale type approach.

One can easily cut the zip-tie, search and re-zip it again, right?

Start by tracing exist open source Intel/AMD driver in linux:

   Can be for old laptop (T420, etc with Intel GPU/Driver.) 
   Use FTRACE in kernel. 
   Setup ebpf trace for GPU acitivies.
   Write some doc/blog/medium pages on the process and show off your works.
   Understand, document and improve some opensource GPU API related utilities
   Understand and document interaction between GPU/GUI App and OpenSource driver.

In term of jobs: AMD has 289 opening for intern positions: https://jobs.amd.com/go/Internships-&-Co-op-Opportunities/25... A lot of them are graphic related.

Love to see compiler benchmark (compile firefox, chrome) on this vs system with EPYC 64C/128T or 128C/256T.

Name the project "SETI@PI"?

Religion can help? - I have a Mormon co-worker. They have 8 kids. Move whole family to Japan. Told me that every time they came home to US they took a row in the wide body Jet.

I love the fact they can convince VC to spend $80mil to try this.

20 year ago, most of space experts probably laugh at SpaceX for even trying to reuse the rocket by landing it back on earth vertically.

Old Programming Languages never die, they just fade away.

For anyone who like to hack legally and ethically, check out https://www.hackerone.com/. If you're very good at hacking devices, software, networks, etc, companies will pay bounties for the vulnerabilities you find thru HackerOne.

Looks like they paid out millions in bounty in 2020:

    https://www.zdnet.com/article/hackerones-2020-top-10-public-bug-bounty-programs/

Commander BGP (aka DATA) entered the "sleep" command. The faceborgs found they can't enter building, connect to the collectives or take over the Galaxy.

Instead develop a system to auto upgrade users to latest release with security patches like iOS, G is focusing on the tweaking icon/layout with a new "(im)material design".

For the few folks that doesn't live in SF, maybe?

In 2-5 years, US/Japan/UK can/will block every single silicon build with "ARM China" IP for < 28nm, similar to how it block Huawei last year. Just look at Huawei's current, next couple years revenues, you can predict what will happen to "ARM China".

"ARM China" without any IP license / Interop tests for USB4, PCIe gen4,5,6, LPDDR5,6 etc, will be completely useless in 3 years.

CCP is following the path of North Korean/Iran/Mao.....

Another way to learn how the kernel module work is by tracing the kernel code..

    Learn about FTRACE - https://jvns.ca/blog/2017/03/19/getting-started-with-ftrace/

    Use ftrace to trace your favor .ko
       - simple one such as serial port driver. 
       - usb driver
       - usb to serial port driver, 
       - usb camera driver
       - gpu driver (opensource intel/amd)

This works for me:

"Google Search Page" -> Setting (icon, upper right) -> "Dark Theme: Off/On" (Last Entry in the drop down menu)

Would one use the youtube as training date?

Especially for the videos with Close Caption....

As simple as extracting the Audio and CC text?

Big Money can buy.

Any benchmarks comparison data?

   For example:   .... benchmarks with this python is XXX % higher than ... (std python, AMD, ARM)

Probably something like the following:

1) Add sqlite_log.[ch] files to bash source repo. 2.a) Add sqlite_init_db(...) to init a database per bash_sqldb_{date}_{pid}.db per bash pid on ~user/.bash_db/ dir. 2.b) Add sqlite_log_cmd(...) to log the cmd, evn, pid, to the opened db. 2.c) have the bash command exec routine to call the sqlite_log_cmd(...) on each cmd execution. 3) Query, report of the commands execution will be handled outside with bash scripts/sub commands/web intf.

* Should be very low overhead (micro-seconds) for each command.

Now I think this out a bit more, maybe it is better to write ebpf script and pipe all the cmds exec to one centralized sqlitedb (instead of per user/pid and only for bash). Likely more useful from system security auditing POV, easier to extend by adding network connetions, file open, privilege escalation type events to the DB.