Yaztromo

joined 1 year ago
[–] Yaztromo@lemmy.world 1 points 1 week ago

The Fediverse by design prevents this, while the internet of the old age had little if any guardrails against this specially since the platforms never really federated with another.

I see someone is too young to remember USENET.

[–] Yaztromo@lemmy.world 7 points 1 week ago (6 children)

The Fediverse is a bit more like the old USENET days in some regards, but ultimately if it ever becomes more popular the same assholes that ruin other online experiences will also wind up here.

What made the Internet more exciting 30 years ago was that it was mostly comprised of the well educated and dedicated hobbyists, who had it in their best interest to generally keep things decent. We didn’t have the uber-lock-in of a handful of massive companies running everything.

It’s all Eternal September. There’s no going back at this point — any new medium that becomes popular will attract the same forces making the current Internet worse.

[–] Yaztromo@lemmy.world 4 points 1 week ago

Depends on what you mean by “back in the day”. So far as I know you could be ~30, and “back in the day” for you is the 2005 era.

For some of us “back in the day” is more like the early 90’s (and even earlier than that if we want to include other online services, like BBS’s) — and the difference since Eternal September is pretty stark (in both good and bad ways).

[–] Yaztromo@lemmy.world 18 points 2 weeks ago (1 children)

It's horrible she was denied when there was a liver already available.

Any full cadaver liver that could have gone to this woman didn’t get thrown into the garbage — it went to someone else who would have died without it.

As for the living donor liver her boyfriend offered, even though he was a match her level of liver failure likely meant that the partial liver her boyfriend could have donated wouldn’t have been successful. Living donors still need a liver for themselves, and we each only have one full liver — so the best they could have done is given her half a liver. Her condition was too poor for this to have a likely positive outcome, which was why this was also denied.

It sucks, but there aren’t enough donor livers for everyone who needs one. The cadaver liver she was denied however would have gone on to save the life of someone else you’re not hearing about in the press — someone else who may have died without it.

If the unfairness of it all upsets you that much, then make sure you’ve signed your organ donor card, and make sure your family members know and understand your desire to be an organ donor. And encourage the people you know to do the same. This is only a problem because there aren’t enough donor livers for everyone — when you have n livers, at best you can save n lives — and thus having a larger number of donor livers allows for more lives to be saved, with fewer qualifications.

[–] Yaztromo@lemmy.world 4 points 1 month ago

There are a lot of manufacturer-agnostic smart home devices out there, and with just a tiny bit of research online it’s not difficult to avoid anything that is overly tied to a cloud service. Z-wave, ZigBee, Thread/Matter devices are all locally controlled and don’t require a specific companies app or environment — it’s only really the cheapest, bottom-of-the-barrel WiFi based devices that rely on cloud services that you have to be careful of. As with anything, you get what you pay for.

Even if the Internet were destroyed tomorrow, my smart door locks would continue to function — not only are they Z-wave based (so local control using a documented protocol which has Open Source drivers available), but they work even if not “connected”. I can even add new door codes via the touchscreen interface if I wanted to.

The garage door scenario can be a bit more tricky, as there aren’t a lot of good “open” options out there. However, AFAIK all of them continue to work as a traditional garage door opener if the online service becomes unavailable. I have a smart Liftmaster garage door opener (which came with the house when we bought it), and while it’s manufacturer has done some shenanigans in regards to their API to force everyone to use their app (which doesn’t integrate with anything), it still works as a traditional non-smart garage door opener. The button in the garage still works, as does the remote on the outside of the garage, the remotes it came with, and the Homelink integration in both of our vehicles.

With my IONIQ 5, the online features while nice are mostly just a bonus. The car still drives without them, the climate control still works without being online — most of what I lose are “nice-to-have” features like remote door lock/unlock, live weather forecasts, calendar integration, and remote climate control. But it isn’t as if the car stops being drivable if the online service goes down. And besides which, so long as CarPlay and Android Auto are supported, I can always rely on them instead for many of the same functions.

Some cars have much more integration than mine — and the loss of those services may be more annoying.

[–] Yaztromo@lemmy.world 1 points 1 month ago (1 children)

You don’t have to run in Ring 0 to detect events occurring in Ring 0.

Besides which, as kexts are being obsoleted by Apple getting code to run inside Ring 0 in macOS that isn’t from Apple itself is going to be extremely difficult.

[–] Yaztromo@lemmy.world -1 points 1 month ago (3 children)

Yes. But what if the world was 1/3rd Linux, 1/3rd windows, 1/3rd OSX?

The 1/3 running macOS (they haven’t called in OS X in many years now) wouldn’t have to worry, because Apple provides kernel event access for security tools running in user space. The CrowdStrike Falcon Sensor driver on macOS runs as a System Extension, and runs 100% in user space (“Ring 3” in Intel parlance) only — so if it misbehaves, the kernel can just shut it down and continue on its merry way.

The problem with Windows (and to a certain extend Linux) is that Falcon Sensor needs to run in kernel mode (Ring 0) on those OS’s, and if it fucks up you lose all guarantees that the kernel and all of the apps running on the system haven’t been fucked with, hence the need for a full system crash/shutdown. The driver can (and did) put these systems in an indeterministic state. But that can’t happen on modern macOS with modern System Extensions.

[–] Yaztromo@lemmy.world 11 points 2 months ago (1 children)

…until the CrowdStrike agent updated, and you wind up dead in the water again.

The whole point of CrowdStrike is to be able to detect and prevent security vulnerabilities, including zero-days. As such, they can release updates multiple times per day. Rebooting in a known-safe state is great, but unless you follow that up with disabling the agent from redownloading the sensor configuration update again, you’re just going to wing up in a BSOD loop.

A better architectural solution like would have been to have Windows drivers run in Ring 1, giving the kernel the ability to isolate those that are misbehaving. But that risks a small decrease in performance, and Microsoft didn’t want that, so we’re stuck with a Ring 0/Ring 3 only architecture in Windows that can cause issues like this.

[–] Yaztromo@lemmy.world 7 points 2 months ago

That company had the power to destroy our businesses, cripple travel and medicine and our courts, and delay daily work that could include some timely and critical tasks.

Unless you have the ability and capacity to develop your own ISA/CPU architecture, firmware, OS, and every tool you use from the ground up, you will always be, at some point, “relying on others stuff” which can break on you at a moments notice.

That could be Intel, or Microsoft, or OpenSSH, or CrowdStrike^0. Very, very, very few organizations can exist in the modern computing world without relying on others code/hardware (with the main two that could that come to mind outside smaller embedded systems being IBM and Apple).

I do wish that consumers had held Microsoft more to account over the last few decades to properly use the Intel Protection Rings (if the CrowdStrike driver were able to run in Ring 1, then it’s possible the OS could have isolated it and prevented a BSOD, but instead it runs in Ring 0 with the kernel and has access to damage anything and everything) — but that horse appears to be long out of the gate (enough so that X86S proposes only having Ring 0 and Ring 3 for future processors).

But back to my basic thesis: saying “it’s your fault for relying on other peoples code” is unhelpful and overly reductive, as in the modern day it’s virtually impossible to do so. Even fully auditing your stacks is prohibitive. There is a good argument to be made about not living in a compute monoculture^1; and lots of good arguments against ever using Windows^2 (especially in the cloud) — but those aren’t the arguments you’re making. Saying “this is your fault for relying on other peoples stuff” is unhelpful — and I somehow doubt you designed your own ISA, CPU architecture, firmware, OS, network stack, and application code to post your comment.

——- ^0 — Indeed, all four of these organizations/projects have let us down like this; Intel with Spectre/Meltdown, Microsoft with the 28 day 32-bit Windows reboot bug, and OpenSSH just announced regreSSHion.
^1 — My organization was hit by the Falcon Sensor outage — our app tier layers running on Linux and developer machines running on macOS were unaffected, but our DBMS is still a legacy MS SQL box, so the outage hammered our stack pretty badly. We’ve fortunately been well funded to remove our dependency on MS SQL (and Windows in general), but that’s a multi-year effort that won’t pay off for some time yet.
^2 — my Windows hate is well documented elsewhere.

[–] Yaztromo@lemmy.world 2 points 3 months ago

They are, but you still need baseload. Solar and wind are great — when it’s daytime and/or the wind is blowing. Coal (and natural gas, hydro, and nuclear) can provide more scalable power on demand. These fill in the gaps for times when solar and wind production are lower.

But China isn’t likely to convert existing coal plants to natural gas. If they wanted to do that they could do it already — they have an LNG pipeline from Siberia. But instead of replacing existing coal power plants, China keeps approving new ones — it was reported last year they were approving two new coal fired plants per week. So even if they increased their LNG imports (they’re looking to open a second pipeline with Russia on the western side of the country), those coal plants aren’t going anywhere — with the rate they’re building new power plants, they’re not likely to be “upgrading” any coal plants to LNG anytime soon — they’ll just build additional LNG plants (and likely further coal plants) alongside those existing coal plants instead.

[–] Yaztromo@lemmy.world 5 points 3 months ago

Along came Creative Labs with their AWE32, a synthesizer card that used wavetable synthesis instead of FM.

Creative Labs did wavetable synthesis well before the AWE32 — they released the Wave Blaster daughter board for the Sound Blaster 16, two full years before the AWE32 was released.

(FWIW, I’m not familiar with any motherboards that had FM synthesis built-in in the mid 90’s. By this time, computers were getting fast enough to be able to do software-driven wavetable synthesis, so motherboards just came with a DAC).

Where the Sound Blaster really shined was that the early models were effectively three cards in one — an Adlib card, a CMS card, and a DAC/ADC card (with models a year or two later also acting as CD-ROM interface cards). Everyone forgets about CMS because Adlib was more popular at the time, but it was capable of stereo FM synthesis, whereas the Adlib was only ever mono.

(As publisher of The Sound Blaster Digest way back then, I had all of these cards and more. For a few years, Creative sent me virtually everything they made for review. AMA).

[–] Yaztromo@lemmy.world 14 points 3 months ago (8 children)

This is how the LNG argument typically goes: if we build up LNG capacity, we can ship it to China who can use it to replace coal burning power plants which emit significantly more CO2 than LNG fired plants do.

That sounds nice — but do we have any_ commitments from China that this would actually happen? Or is it more likely that they’ll just build more LNG capacity on top of their existing coal capacity?

To me, the latter seems more likely than the former.

view more: next ›