Readit News logoReadit News
quesomaster9000 commented on AWS introduces Graviton5–the company's most powerful and efficient CPU   aboutamazon.com/news/aws/... · Posted by u/ksec
rtp4me · 18 days ago
Thanks, so "standard" ARM we can launch VMs with? I wasn't sure if this was some sort of proprietary ARM chip use for specialized work.
quesomaster9000 · 18 days ago
Yup, Amazon supports the 6.11? kernel on aarch64. Most toolchains if you target linux aarch64 static they, they will produce executables that will run on Amazon Linux aarch64 and Android, set-top boxes with 64-bit chips and Linux 3+ it's surprising how many devices a static aarch64 ELF will run on.
quesomaster9000 commented on AWS introduces Graviton5–the company's most powerful and efficient CPU   aboutamazon.com/news/aws/... · Posted by u/ksec
quesomaster9000 · 18 days ago
Graviton with Nitro 4 has been quite pleasant to use, with the rust aarch64 musl static target and rust-lld I can build monolith ELFs that work not just on my android via `adb push` and `adb shell` but also on AWS.

AWS with Nitro v3+ iirc supports TPM, meaning I can attest my VM state via an Amazon CA. I know ARM has been working a lot with Rust, and it shows - binfmt with qemu-user mean I often forget which architecture I'm building/running/testing as the binaries seem to work the same everywhere.

quesomaster9000 commented on Zenobia Pay – A mission to build an alternative to high-fee card networks   zenobiapay.com/blog/open-... · Posted by u/pranay01
lelanthran · 4 months ago
> Tough problem. You need a Jony Ive on your team to help solve it.

I don't think so. A Jony Ive will not be in a position to solve the actual problem - what use is a non-universal payment mechanism to consumers and to retailers?

I read the linked page and don't see answers to the main adoption problem: how is the purchaser supposed to pay?

1. Purchaser has to download the app? Okay, but purchaser already has a few equivalents on their phone (Pix, etc) - added friction!

2. How does the App get money to make payment? Purchaser has to fund a new account? Okay, but that is more friction!

3. How does merchant accept the payment? Do they need a new payment terminal? Must their payment terminal be updated with new software? Even more friction!

I've worked in the EMV space, even quite recently, and merchants do not want to update and will only do so when forced to. Any new payment system (QR codes, etc) needs around 5 years (maybe more) before it is universally accepted.

The best way, where I am, to rollout a new payment terminal is to pitch it to the banks, who then offer it to the merchants who have accounts with them.

Adding new functionality to EMV terminals is a lot easier these days, since most of the new terminals are Android, and the vendors have app stores for third parties to write software for these terminals (Pax has Maxstore, etc).

Now, maybe I missed it, but I did not see this application on Maxstore, or some of the other stores. I could have missed it, because these stores have literally thousands of payment applications.

The long and short of it is, you came up with a non-universal payment method, and predictably it did not take off.

quesomaster9000 · 4 months ago
I'd argue that the problem is that QR codes shouldn't be an 'app' problem, and yes there's a chicken-egg problem with PoS terminals verifying incoming bank payments but that's a separate issue.

If you want to do account-to-account payments you can show the customer the account/routing number, amount & invoice ID - but obviously that's high friction and the customer needs to login to their account and send a payment with lots of manual data entry.

Making yet another app, adding a financial intermediary, requiring you to link your bank account - these aren't solving the friction points.

We already have bank apps, when I scan a QR code in an industry-wide format it should ask me or confirm which bank app to open and pre-fill all the payment information.

So from my perspective, the problem is that FedNow in the US, and Open Banking in the UK - they could have just dictated "Banks must support EPC QR, or EMV QR code scanning and deep-links", and QR code payments would happen very quickly - even with NFC/RFID you can do passive scanning to achieve the same thing.

* Choose Account * Confirm details * Press send

That's about as easy as you can get for push payments, with a real industry-wide standard for communicating payment intents via NFC/QR. But both FedNow and UK OpenBanking are structured in a way which requires friction, and onerous regulation, through their clunky APIs - meaning you can't actually solve that problem on your own.

quesomaster9000 commented on Eccfrog512ck2: An Enhanced 512-Bit Weierstrass Elliptic Curve [pdf]   arxiv.org/abs/2504.09584... · Posted by u/bikenaga
quesomaster9000 · 8 months ago
Well, I've tried manually verifying the curve parameters and I don't trust this.

* The generator isn't selected deterministically

* The BLAKE3(seed) in the OpenFrogget code doesn't match what I get with Python & Javascript implementation of Blake3, the index & seed aren't specified in the paper

* The paper doesn't provide a reference for why `a=-7` was chosen (presumably because of the GLV endomorphism)

* the various parameters differ between the reference implementation and the paper and the spec...

There are enough many holes in this that I wouldn't touch it yet, as a very quick glance into the spec & the code leaves me wondering why their claims of reproducibility & determinism re: the constants aren't true, and the documentation & code don't match what I can reproduce locally.

So uhh yea... No

quesomaster9000 commented on Eccfrog512ck2: An Enhanced 512-Bit Weierstrass Elliptic Curve [pdf]   arxiv.org/abs/2504.09584... · Posted by u/bikenaga
GoblinSlayer · 8 months ago
quesomaster9000 · 8 months ago
And even with the constant `b=BLAKE("ECCFrog512CK2 forever")` there is an open question, while not as problematic as it is with the NIST & SEC curves, it's covered in "How to manipulate curve standards: a white paper for the black hat"[1]

I'm surprised they didn't include the constant in the paper and at least a short justification for this approach, despite stating "This ensures reproducibility and verifiable integrity" in section 3.2, whereas several other curves take the approach of 'smallest valid value that meets all constraints'.

Really they should answer the question of "Why can't `b` be zero... or 1" if they're going for efficiency, given they're already using GLV endomorphisms.

Likewise with the generator, I see no code or mention in the paper about how they selected it.

[1]: https://eprint.iacr.org/2014/571.pdf

quesomaster9000 commented on How Big Is VMS?   vmssoftware.com/resources... · Posted by u/rbanffy
rbanffy · 9 months ago
MCP and MVS (now called z/OS) are all still supported. Not sure whether MCP still receives updates though.
quesomaster9000 · 9 months ago
Right, but z/OS is part of a larger longer-running hardware strategy that, with virtualization, serves the needs of mixed-OS workloads and multi-decade tenures overseeing 24/7 systems.

The corpse of OpenVMS on the other hand is being reanimated and tinkered with, presumably paid for by whatever remaining support contracts exist, and also presumably to keep the core engineers occupied with inevitably fruitless busywork while occasionally performing the contractually required on-call technomancy on the few remaining Alpha systems.

VMS is dead... and buried, deep.

It's a shame it can't be open-sourced, just like Netware won't be open-sourced, and probably has less chance of being used for new projects than RiscOS or AmigaOS.

quesomaster9000 commented on Gemini 2.5 Pro vs. Claude 3.7 Sonnet: Coding Comparison   composio.dev/blog/gemini-... · Posted by u/mraniki
dsincl12 · 9 months ago
Not sure what happened with Claude 3.7, but 3.5 is way better in all things day to day. 3.7 felt like a major step back especially when it comes to coding even though this was highlighted as one aspect they improved upon. 500k window will soon be released for Claude. Not sure much it will improve anything though.
quesomaster9000 · 9 months ago
With Claude 3.7 I keep having to remind it about things, and go back and correct it several times in a row, before cleaning the code up significantly.

For example, yesterday I wanted to make a 'simple' time format, tracking Earths orbits of the Sun, the Moons orbits of Earth and rotations of Earth from a specific given point in time (the most recent 2020 great conjunction) - without directly using any hard-coded constants other than the orbital mechanics and my atomic clock source. Where this would be in the format of `S4.7.... L52... R1293...` for sols, luns & rotations.

I keep having to remind to to go back to first principles, we want actual rotations, real day lengths etc. rather than hard-coded constants that approximate the mean over the year.

quesomaster9000 commented on Ask HN: If you had 100 hours to learn something new, what would you learn?    · Posted by u/erkanerol
zabzonk · 9 months ago
Are we talking something like two weeks continuous, or an hour here and there?
quesomaster9000 · 9 months ago
That's a good question, what if it's 10 hours per year for 10 years?

In that case, I'd probably choose first-aid & the basics of emergency medicine via a couple of half-day or a full-day course per year.

quesomaster9000 commented on Ask HN: If you had 100 hours to learn something new, what would you learn?    · Posted by u/erkanerol
quesomaster9000 · 9 months ago
Fluid dynamics simulation with OpenCL, 100 hours is about 10-15 days of concerted effort. That's plenty time to get a grasp of the algebra behind it, get something simple running, port to OpenCL naively and start optimizing.
quesomaster9000 commented on Towards fearless SIMD, 7 years later   linebender.org/blog/towar... · Posted by u/raphlinus
IshKebab · 9 months ago
A problem for RISC-V is going to be that there's currently no way for user code to detect the presence of RVV. I have no idea how you can do multiversioning with that limitation.
quesomaster9000 · 9 months ago
It's a shame that the `MISA` CSR is in the 'Privileged Architecture' spec, otherwise you could just check bit 21 for 'V', but that appears to only be available in the highest privilege machine-mode.

Presumably your OS could trap attempts to read the CSR and allow it, but if not then it's a fatal error and your program shits the bed, otherwise you rely on some OS-specific way of getting that info at runtime.

u/quesomaster9000

KarmaCake day362August 24, 2021View Original