I think the detailed description of this vulnerability described it as non-persistent in UEFI, but that you could install something that runs before secure boot that would be persistent. I think that’s splitting hairs, though - if you’ve been compromised by someone that has the skills to pull this exploit off, then they can probably chain something else into it now that they’ve got basically bare-metal access.
You also need to have sufficiently infiltrated the target’s local network to masquerade as a PXE server, and be in a position to force a server to reboot / just wait for one to reboot. Yes, a few places have large, fairly open networks with a lot of devices configure to PXE boot and they should apply the update before the next reboot, but vast majority of people, no issue at all.
An NVidia GB300 fills a whole rack on a server, doesn’t have display outputs, draws 1.4 kW of electrical power, and requires mandatory liquid cooling capable of dissipating 1.4 kW of heat. Not a good match for a standard desktop system. I understand that they’re also optimised for churning through huge amounts of low-precision floating point, aka. an AI workload, rather than being truly general-purpose cards.
If you have any use for eye-watering amounts of CUDA calculations, then they might come in handy. I remember back in the day, if you had two graphics cards in SLI, that the Batman: Arkham Asylum game gave you the option of either using both cards for rendering, or one card for rendering and one card dedicated to PhysX calculations. You could use one of these GPUs for amazingly good-looking fog effects, assuming you had another GPU capable of rendering the graphics and outputting it? Not very sensible, tho.
I suspect that unless you work in a very compute-heavy industry (AI research, but maybe aerospace?) then you won’t have a use for these cards that would justify how expensive they are to run.
With my ‘security hat’ on, I’d have to say you shouldn’t use anything that’s no longer receiving updates. But that would create a lot of e-waste for no reason.
To see if your phone’s browser is still receiving updates, you can browse to:
https://emudhra.we-have-a-problem.com/
That has a grid showing whether your browser was willing to connect to sites using the compromised keys. If your browser is using its own cert style and still receiving updates, should be all green ticks. If so, then you can still use the phone for browsing internet. Be aware that using other apps on your phone (like eg. your email app) could be read easily by third parties, especially if you’re connected to unfamiliar wifi.
If it’s all red, maybe try another browser? Or relegate that device to being a dumb phone - switch off its data connection, phone calls only.
Assuming that the device hasn’t been updated yet, yeah, this is what it allows you to do.
If you connect your device to a ‘fake’ router that’s completely under your control, then when the device attempts to connect to its remote server, you pretend to be it, and provide a certificate signed by this ‘trusted’ authority. Device will accept it. Make another connection to the real remote server. Decrypt what the device sends you, and send it on to the remote server; it’ll believe that you’re the android device, and respond with a message that you can decrypt, store, reencrypt with your fake key, and send it to the device. Repeat.
You’ll only be able to impersonate the API until the keys are revoked by an update. That’s maybe not so useful. However, any other connection that can be MITM’d and include other personal information - your bank card details, say - can be read, too.
As regards the data centre equipment; the SSDs and hard drives used for storage would be reusable by regular people. Those will be nice to have.
The memory is the high-bandwidth kind that is not be usable on consumer motherboards. The ‘graphics cards’ are the size of filling cabinets, require external power supplies and cooling, don’t have video outputs, don’t have drivers for graphics output. If you don’t have a requirement for serious parallel computation with a very high uptime, then it’s not worth the cost of powering them up. If/when the bubble bursts, all that shit is going to landfill.
Latest version of Unreal engine plus a fully slop game on top? Reckon you might get 13 fps to go with those 13 fingers.
It’s correct if they’re talking about multiple different kinds of psychological harm - depression and psychosis, say. Much like if I go and buy both full-fat and semi-skimmed, then I’m buying milks; or if I’m checking the hardness of river and tap samples, then I’m testing waters.
If you’ve eg. a system service that allocated a whole pile of memory on startup, but hasn’t read or wrote it since, then copying it to swap during idle disk time is a good thing. If it does get used, then it’s still in RAM, and if memory pressure increases, then you can reuse it immediately because it’s already on disk, don’t have to wait to swap it out. You could give this functionality a catchy name like ‘swappiness’ so you could fine-tune how aggressively it’s done by setting the value in a file, too.
Doesn’t stop Windows being a trash OS, of course, but if I’ve allocated swap then I want it to be used for best system performance.
Might be a controversial take, but Raspberry Pi’s are pure ass as media servers. They’re profoundly i/o limited, which extends to access to external USB devices as well as ethernet, and lack the oomph required to decode hi-res video streams locally. 1080p can be choppy, forget about 4K.
Pi5 occupies the unhappy spot where it’s too expensive for enthusiast and hobby applications, but inadequate as a desktop PC which benefit from a bit more power.
A mini-PC is a much better fit. An N100 might even be overkill - mine has a Skylake from a decade ago in it, and it crushes ‘media’ activities while gently sipping at electricity.
For me;
the download is absurdly massive. Although it makes sense that you’d need an Android OS image to run Android, it’s bigger than the copy of Arch I used to run it
integration with the host OS is poor - be nice if copy-paste worked, and file transfer was easier
super-sluggish, even on quite powerful computers
never idle, makes my laptop run hot
Okay, it’s emulating ARM64, and emulators need a lot of CPU, but since Android apps are compiled to “Google’s own version of Java” and are JIT compiled to suit the phone CPU, should be possible just to compile them to AMD64 instead and run native.
If there’s an app that only exists on Android and has no desktop / web equivalent, it’s a workable solution, but it does entail compromises.
Java dev in charge of a $100M product here. Can’t actually compile it with less than 32 GB of RAM.
My old job working with a hydraulic analysis firm, needed 256 GB to run the product it in local development mode; to run customer models in production was a mainframe job - typically multi-terabytes. Computational fluid dynamics eats all your memory and asks for more. My work computer would have been pretty shitty as a gaming desktop, but did have every memory slot maxed out.
Yes, you might be working on something more lightweight, and that is fine. That doesn’t mean that your requirements are the be all and end all.
Likewise. Bought a three-month sub so’s that I wouldn’t have to top it up too often, and then they came out with all that shit. Subscription expires in two days - forever. Hello, iVPN.
BTRFs, which has advanced filesystems features like snapshots, data integrity checks, and scrubbing, is a less performant filesystem for databases than filesystems that don’t have these features, like EXT4, F2FS and XFS. No shit, Sherlock. At least compare it to ZFS or something.
If you are storing files that you care about, use a filesystem with integrity checks. If you require high database performance, it’ll probably be happier using a whole partition, if not just a whole pile of disks, and be allowed to get on with it. If you are driving nails into a wall, do not compare the performance of different screwdrivers for the task. And so on.
Outlook is lousy, but what gets me is the fact that basically all “email, calendar, rss and chat (maybe)” apps are pretty bad. You’d think someone would have implemented something better by now.
Excel is perfect, PowerPoint doesn’t need to be any better.
Word is a terrible text editor and its layout algorithm is lousy. You can make better-looking documents by converting markdown to html and then applying some css; modern browsers have much more sophisticated styling options than Word offers as “styles”. You can make much better looking documents with Latex, which is pushing fifty years old now.
Both ways let you edit text files in a superior editor (which should be Vim, of course - the most superior editor). Collaborative working and revision history with Git, which runs none of the risk of Word just randomly deciding to shit itself when those features are enabled.
Fine - Word can retain a “compatible layout” mode for all those ancient documents where people have paginated by pressing enter 17 times exactly, and the line-breaking, hyphenation, text colour etc. algorithms cannot be updated. But for the rest of us, let’s push things forward.
It does just fine for claiming the free games and then otherwise ignoring the Epic store, which is perfection. Think I’ve installed about one out of fifty or so I have available, but the important thing is that Tim doesn’t receive a penny.
Exactly - most game engines now will hide this rather than stutter.
Got an NVMe and a RAID array in my gaming desktop; the RAID does about 1 GB/s sustained read and write, which is good, but its latency is quite bad. Was playing Elden Ring directly from it since I couldn’t be bothered moving it - load times were good, but “fog doors” appear over doorways and cave entrances while they’re being loaded, which never happens on SSD. Never dropped a frame, though.
Some people dual-boot to play games with anti-cheat that doesn’t work on Linux, so a recent “AAA multiplayer” release might skew the numbers for a bit as people boot Windows instead.
Linux installations are slightly higher in the US than in Europe, and much much higher than in China. The “use of Linux online” has a bit of a sinusoidal pattern every day depending on who’s awake. But a big Chinese release - Fallen Feathers, for example - will suppress the Linux percentage for a while as well.
Steam do publish the number of concurrent users as well, it should be possible to multiply through to get roughly the “absolute numbers” you want. I think they publish the numbers of players online for multiplayer games too, and since those are the games that Linux will be locked out of, it might be possible to point fingers at the specific games causing the problems?
I do miss the two-player mode of Lemmings on the Amiga. Amiga could support a mouse in every port, so you could both use a mouse while battling each other. One player needing to use a joystick on ‘every other platform’ (which for Lemmings, was every other platform in existence at the time) was vastly inferior.
Basically every other computer either only supported one mouse, or all mice moved the same pointer.
Not saying that this is a generally useful feature, and networking has improved to the point where split-screen games are rare, and in an era where most games have console ports then mouse-control multiplayer games are unusual, but you know. Niche usages.
It’s how I installed Arch btw on my desktop, tiny boot image basically downloads the installer into RAM - NetBoot.
But yeah, if you’ve got a computer that’s old enough to be fully supported yet new enough to have the UEFI for hardware, an ethernet network which is robust enough to download full system images on every restart yet simple enough for the firmware to understand, and tonnes of memory free to hold the whole OS at all times, and you can tolerate the fact that restarts take ages, then it works great.