demindiro (u/demindiro)

demindiro commented on Downfall Attacks downfall.page/... · Posted by u/WalterSobchak

Once again it seems clear that running code from two security domains on the same physical processor cores is just not possible to get right, and we should probably just stop doing it.

There are really only two common cases for this anyway. VMs and JavaScript.

For VMs we just need to give up on it. Dedicate specific cores to specific VMs or at least customers.

For JavaScript it’s a bit harder.

Either way, we need to not be giving up performance for the the normal case.

demindiro · 3 years ago

I've wondered for a while whether it would make sense to split the CPU into a "IOPU" and a "SPU"

- The IOPU would be responsible for directing other hardware on the system. It doesn't need to be very performant.

- The SPU would be optimized for scalar and branch-heavy code that needs to run fast.

The SPU could have minimal security, just enough so it can't read arbitrary memory when fetching from RAM. It would only run one program at a time, so speculation shouldn't be an issue.

At least on my system few programs need a lot of processing power (and even then only intermittently), so little task switching should occur on an SPU.

demindiro commented on Meta forced to reveal anonymous Facebook user's identity stackdiary.com/meta-force... · Posted by u/skilled

demindiro · 3 years ago

This precedent definitely won't be abused. Or at least most people here seem to think that?

I wish the article would go into detail what exactly the "transgressive behaviour" is, because now it is unclear to me how far I can take criticism that is either directly or indirectly linked to an individual.

For example, what if I have an extremely poor experience with a seller? Does it matter if this seller is a business or some random individual getting rid of 2nd hand items? What if the user being criticized is also anonymous?

In any case, I shall be using throwaway accounts more frequently just to be safe.

demindiro commented on libjpeg-turbo 3.0 has been released, and why there may never be a 3.1 groups.google.com/g/libjp... · Posted by u/rettichschnidi

Traubenfuchs · 3 years ago

Open source is EXTREMELY HARMFUL to the non-owning/entrepreneuring class: Big business can built their billion dollar companies on open source, while the developers lose out: Without open source, companies would have to hire more devs to implement solutions, or they would have to pay external devs money for their solutions. This would also foster competition between different solution offerings.

It's very unfortunate that software engineers, especially the good ones able to create libraries used by pretty much everyone, seem to lack the drive to monetize their work and instead accept payment through GitHub stars, likes and prayers.

demindiro · 3 years ago

In my opinion, excess greed is far more harmful.

I am very glad I get to use open-source software at no cost. There are profiteers, sure, but I believe in the end open-source software will be more beneficial for society as a whole as it is much easier to reuse code.

demindiro commented on Russian paramilitary chief says his forces will turn around nytimes.com/live/2023/06/... · Posted by u/veer

demindiro · 3 years ago

I haven't seen this take here yet, so here goes:

My suspicion is that Prigozhin got recruited by a Western agency (CIA?) with the intent to destabilize Russia from the inside.

Key here is to discredit the Kremlin, by e.g. exposing or at least making them seem incompetent. Later a coup/revolution is staged to cause internal conflict and make Russia unable to continue the war in Ukraine.

Given how short this "coup" was and how easy Wagner seemed to get off with this stunt I suspect Prigozhin instead informed the Kremlin (or Putin directly) and played along. He would likely get supported during the coup by whoever recruited him. If this is the case those assets are probably arrested by now.

demindiro commented on Social media can be a ‘profound risk’ to youth, surgeon general warns nytimes.com/2023/05/23/we... · Posted by u/2OEH8eoCRo0

somethingreen · 3 years ago

The idea that any of these would normally worry an average young teen is hilarious to me. I grew up during cold war, USSR collapse, multiple wars in the region. At no point was I (or any of my peers to my knowledge) gravely concerned for our future. Because none of us yet had any idea what our normal future is supposed to look like.

The only way these mild horrors get into children heads is, again, through social media.

demindiro · 3 years ago

We have a hot war right now on the border of the EU that likely will escalate further.

I'm sure China has plans too.

demindiro commented on Three Companies Impersonated Millions to Influence Internet Policy ag.ny.gov/press-release/2... · Posted by u/RecycledEle

nine_k · 3 years ago

This is why, I think, the future is either putting your money (or at least provable identity) where your mouth is, or not being heard (e.g. because everyone will assume a petition without hard proofs of identity fake).

Yes, this is disenfranchising. But not being heard while some company pretends to speak for you is even more disenfranchising.

demindiro · 3 years ago

>This is why, I think, the future is either putting your money (or at least provable identity) where your mouth is

That will become less effective as companies become increasingly centralized, with just a few having many, many brands.

demindiro commented on Indian government empowers itself to “fact check,” delete social media posts restofworld.org/2023/indi... · Posted by u/Amorymeltzer

autoexec · 3 years ago

I'm not even opposed to flagging posts as “fake, false or misleading” because abusing those flags will cause them to be ignored, but removing content is a problem. State censorship is a much bigger threat to Democracy than false or misleading tweets and facebook posts.

demindiro · 3 years ago

I find it fascinating that people defend censoring "misinformation" because people (supposedly) cannot discern it from "real" information. If we cannot trust the judgement of the common folk, why have a democracy at all?

demindiro commented on EU Commission doesn't understand what's written in its own chat control bill mullvad.net/en/blog/2023/... · Posted by u/rc00

randyrand · 3 years ago

> Above all, she continues to claim that it’s possible to scan end-to-end encrypted communication without breaking the encryption.

This is trivially possible.

1. send an end to end encrypted message to the recipient

2. also send an end to end encrypted copy of the message to the government.

I’m not agreeing with it. But you can clearly send end to end encrypted messages to multiple parties without fundamentally breaking the encryption…

demindiro · 3 years ago

If message 1 is properly encrypted then I can put whatever I want in message 2 without the government knowing the contents of message 1.

Also, assuming message 1 and 2 contents are identical, if anyone steals the governments' private key the encryption of message 1 is moot.

demindiro commented on $22B project to provide 8% of UK energy via undersea cable from North Africa e360.yale.edu/features/af... · Posted by u/consumer451

CTDOCodebases · 3 years ago

Not so great when the foreign powers decide to bomb the nuclear reactors though.

demindiro · 3 years ago

Or cut the cable.