demindiro

I've wondered for a while whether it would make sense to split the CPU into a "IOPU" and a "SPU"

- The IOPU would be responsible for directing other hardware on the system. It doesn't need to be very performant.

- The SPU would be optimized for scalar and branch-heavy code that needs to run fast.

The SPU could have minimal security, just enough so it can't read arbitrary memory when fetching from RAM. It would only run one program at a time, so speculation shouldn't be an issue.

At least on my system few programs need a lot of processing power (and even then only intermittently), so little task switching should occur on an SPU.

This precedent definitely won't be abused. Or at least most people here seem to think that?

I wish the article would go into detail what exactly the "transgressive behaviour" is, because now it is unclear to me how far I can take criticism that is either directly or indirectly linked to an individual.

For example, what if I have an extremely poor experience with a seller? Does it matter if this seller is a business or some random individual getting rid of 2nd hand items? What if the user being criticized is also anonymous?

In any case, I shall be using throwaway accounts more frequently just to be safe.

In my opinion, excess greed is far more harmful.

I am very glad I get to use open-source software at no cost. There are profiteers, sure, but I believe in the end open-source software will be more beneficial for society as a whole as it is much easier to reuse code.

I haven't seen this take here yet, so here goes:

My suspicion is that Prigozhin got recruited by a Western agency (CIA?) with the intent to destabilize Russia from the inside.

Key here is to discredit the Kremlin, by e.g. exposing or at least making them seem incompetent. Later a coup/revolution is staged to cause internal conflict and make Russia unable to continue the war in Ukraine.

Given how short this "coup" was and how easy Wagner seemed to get off with this stunt I suspect Prigozhin instead informed the Kremlin (or Putin directly) and played along. He would likely get supported during the coup by whoever recruited him. If this is the case those assets are probably arrested by now.

We have a hot war right now on the border of the EU that likely will escalate further.

I'm sure China has plans too.

This is why, I think, the future is either putting your money (or at least provable identity) where your mouth is

That will become less effective as companies become increasingly centralized, with just a few having many, many brands.

I find it fascinating that people defend censoring "misinformation" because people (supposedly) cannot discern it from "real" information. If we cannot trust the judgement of the common folk, why have a democracy at all?

If message 1 is properly encrypted then I can put whatever I want in message 2 without the government knowing the contents of message 1.

Also, assuming message 1 and 2 contents are identical, if anyone steals the governments' private key the encryption of message 1 is moot.

Or cut the cable.

From a cursory read the options for 2FA are:

- SMS

- Mobile app

What if someone doesn't have a phone?

It is not. Even long/"complicated" passwords usually do not have much bits of entropy, which is why you need an expensive hash to make bruteforce attacks difficult.

You're thinking of single address space OSes.

I do not believe such OSes can ever be secure given how often vulnerabilities are found in web browsers's JS engines alone. Besides, AFAIK the only effective mitigation against all Spectre variants is using separate address spaces.

For an I/O heavy application (not in C++) I avoid threads for the main "loop" as there is a central cache that is accessed often. Synchronizing access to it is likely more expensive and error-prone than using just a single thread. It is also possible a few hundred or thousand tasks are running concurrently, which becomes very expensive very quickly with threads.

There are a few CPU-intensive tasks but those are easy to isolate and send to a threadpool.

Ever since then I have not understood why most distros don't switch to this setup

I still use GRUB because IIRC my Gigabyte motherboard kept forgetting entries and/or associated settings.

Meanwhile I've never encountered these "netiquettes" whoever I'm talking to. Perhaps every generation isn't a monoculture.

https://github.com/Norost/nrfs

Project description: I'm designing a custom filesystem with compression, error correction (with mirroring) & encryption.

The aim of the project is to have a filesystem with these features while remaining considerably simpler & easier to use than ZFS, btrfs etc. In particular, I aim to make it easy to use with removable media as I got a bunch of old drives that I don't want to have powered on 24/7.

I'm looking for people willing to test the filesystem. While the filesystem appears stable I believe more issues may pop up when used for long-term storage (e.g. backups). With more people using it I hope to find these issues quicker.

There are currently only (FUSE & tool/"mkfs") binaries for Linux[1]. If you want to test it but don't have a Linux installation, please let me know and I'll see if I can create a build for your OS.

Contact info: hn+nrfs@demindiro.com or on Github.

P.S.: Using a block size other than 12 is currently broken, so don't adjust that parameter when creating a filesystem.

[1] https://github.com/Norost/nrfs/releases/tag/v0.2.1-alpha0

It was[1] but for some reason it got pushed off from the front page very quickly.

[1] https://news.ycombinator.com/item?id=34608330

Tangential, but it appears this submission has been pushed off the front page despite being only 2 hours old with 184 points, which seems unusual?

Probably relevant: https://github.com/streaak/pastebin-scraper

Maybe it's unfair of me, the retort is always "it's open source, contribute back!" but alas that is how I felt as a USER before I considered being a CONTRIBUTOR.

Even as a contributor I've found it very frustrating to contribute to Godot.

I've found lots and lots of bugs while working on my own projects using Godot. I spent a lot of time digging in the engine code to figure out the cause, make an issue and a patch if I could.

However, even small changes take a lot of time and effort. While I used Godot 3 for my own projects most of the PRs had to be based against 4. At the time Godot 4 was in a very sorry state and I ran in many, many issues that made it hard to test if the same fix for Godot 3 also works in Godot 4.

I wrote some libraries to work around issues that I (or others) could not get fixed or reverted (e.g. I replaced the physics engine with Rapier3D because I really needed more stable and working joints) but I eventually threw in the towel and decided to focus on other hobbies.

have always found the compiler to be unacceptably slow in these cases

How slow is "unacceptably" slow?

Personally I do not find this to be an issue the vast majority of the time. Especially in combination with cargo watch which can automatically run a check/build/tests/... whenever a change is made.

Three of these things are pretty normal in big cities --- having your car broken into (it was unbelievably bad back in the days where car stereos were valuable), having the soap locked up at the Walgreens, and feeling unsafe after dark.

At least here in Antwerp this is not normal at all, even though there is apparently a pretty big mafia who like making grenades explode.

In fact, I can't recall visiting any city, even in other countries, where this is considered "normal".

Why is it important to initialize memory to 0's before we use it?

Because reading from unitialized memory yields an indeterminate value. Operating on such a value can lead to UB. This applies to languages other than Rust too (e.g. C).

Ralf explains it better than me[1].

[1] https://www.ralfj.de/blog/2019/07/14/uninit.html

A lot of the times, the blue highlighting seems to indicate I've matched all the necessary parts of the input, which should mean the puzzle is solved, but it's Game Over instead.

You need to include punctuation for some regexes.

e.g.

   The brown fox.
             ^^^^

  /fox./

I browse without JS by default (using uMatrix), not to resist fingerprinting but because it is:

- More secure, especially if the website doesn't use TLS.

- Faster. Many websites work well enough even without JS or only some of it.

Disabling JS to resist fingerprinting may be counterproductive as only a minority of people disable it. My current approach is to use LibRedirect[1] et al to avoid using big websites such as YouTube directly.

In Firefox I also disable network.http.sendRefererHeader. It breaks some websites which rely on it for "security" though.

[1] https://github.com/libredirect/LibRedirect

EDIT: I just found out on the amiunique website that over 12% of browsers disable it. Does this include bots?

I scp them to some folder on my VPS and point nginx to it.

I also have ffmpeg installed on the VPS if some images are too big for my taste.

Performance is pretty good: CPU usage has so far not been higher than 2.5% and is usually <1% on a single core of a 3900X. Currently 192MiB of RAM is used (162MiB by systemd-journald, 4x 37MiB + 22MiB for the workers according to htop).

I'm renting a VPS in New York which costs ~€20 a month (€15 for VPS with 1 dedi 3900X core, 4GB RAM and 80GB NVMe, €3 for DDoS protection and €1.5 for up to 7 daily backups), which in hindsight is overkill.

Currently not at all. All comments in a thread are loaded.

I do intend to add pagination but I'm not sure what a clean implementation would look like.

There are currently two mechanisms:

- A weak CAPTCHA that will be replaced with something stronger (probably image-based)

- Disabling registrations

There is currently only one theme. I do intend to add support for custom themes though.