@mjg59@nondeterministic.computer
@mjg59@nondeterministic.computer avatar

mjg59

@mjg59@nondeterministic.computer

Former biologist. Actual PhD in genetics. Security at https://aurora.tech, OS security teaching at https://www.ischool.berkeley.edu. Blog: https://mjg59.dreamwidth.org. He/him.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

mjg59, to random
@mjg59@nondeterministic.computer avatar

Why does sha256sum on my phone handle an 8GB file in 11 seconds and sha256sum on my laptop takes 17 seconds to do the same file? Hot cache in both cases, Pixel 7 (8GB of RAM) vs a i7-10510U with a Samsung 980 NVMe and 32GB of RAM on the laptop. Is Toybox's implementation better, or is Tensor just genuinely fast? Is UFS somehow faster than NVMe?

mjg59, to random
@mjg59@nondeterministic.computer avatar

Going to say that if your hotel website has photographs of a shitload of Routemasters in front of the hotel I'm going to be sceptical that the rest of the pictures are recent

mjg59, to random
@mjg59@nondeterministic.computer avatar

My phone has an intensely bright white stripe running vertically through the mode of the screen and (a) this is doing terrible things to my eyes and (b) the nearest authorised repair agent for Pixels is over an hour away from San Francisco by public transport

mjg59,
@mjg59@nondeterministic.computer avatar

@ross out of warranty but I'd prefer some reason to believe I'll get original parts

mjg59, to random
@mjg59@nondeterministic.computer avatar

The thing the UEFI IRC client is missing is a CTCP SetVariable command

azonenberg, to random
@azonenberg@ioc.exchange avatar

@mjg59 Recently came across a proposal by you to create a standard mechanism for signing ELF executables.

What ever came of that, is it dead?

It seemed like exactly what I was planning to do myself for embedded secure updates (statically linked binaries only, signature over metadata + content of all PT_LOAD sections stored in a new ELF section, I was even going to call mine .signature too).

I was planning to use curve25519 as that's what I have hardware acceleration for in my target platform.

mjg59,
@mjg59@nondeterministic.computer avatar

@azonenberg For ELF? I've no recollection of that - all the signing work I remember working on was just using EVM metadata and then trying to figure out how to distribute that.

mjg59,
@mjg59@nondeterministic.computer avatar

@azonenberg Ah! That was Vivek, not me.

mjg59, to random
@mjg59@nondeterministic.computer avatar

Me: (reports security issue to security@)
Them: Can you submit this via HackerOne
Me: (reads disclosure terms and conditions) No

mjg59,
@mjg59@nondeterministic.computer avatar

As far as I can tell the HackerOne disclosure "guidelines" (which appear to be incorporated into the terms and conditions so I don't think that's what guidelines means) require the submitter to agree that disclosure can take up to 180 days which is ludicrous am I missing something here

mjg59, to random
@mjg59@nondeterministic.computer avatar

The puppy is now tall enough to simply pick things up off the dining room table and what could possibly go wrong

mjg59, (edited )
@mjg59@nondeterministic.computer avatar

To be clear I mean that their head is now further above the ground than the top of the table is and so they do not even need to reach this dog is not even 6 months old

mjg59,
@mjg59@nondeterministic.computer avatar

@cdamian or money

mjg59, (edited ) to random
@mjg59@nondeterministic.computer avatar

Realised I never gave people closure about my kettle, so rest assured that it was successfully repaired

mjg59,
@mjg59@nondeterministic.computer avatar

Hidden behind the handle is a transparent fill level indicator, a small plastic tube that has a single horizontal connection into the interior of the kettle at the bottom of the indicator. As you fill the kettle, water flows through that connection and rises to indicate how much water is inside. Unfortunately if there's any water in there and it freezes, it'll crack that connection, and water will then leak out. It's easy enough to extract and re-seal the crack, and then it all works again.

mjg59,
@mjg59@nondeterministic.computer avatar

@ljrk One with an extremely effective pressure chamber, I assume

mjg59,
@mjg59@nondeterministic.computer avatar

@plambrechtsen hey at least I'm repairing it instead of just buying a new one

mjg59, to random
@mjg59@nondeterministic.computer avatar
  1. Mail security@somewhere
  2. See who at somewhere looks you up on Linkedin
mjg59, to random
@mjg59@nondeterministic.computer avatar

I'm planning on being at @emf next month, arriving early Thursday afternoon. Looking forward to seeing people in the English countryside once again!

mjg59, (edited ) to random
@mjg59@nondeterministic.computer avatar

Does the phrase "Broadcom sex dungeon guy" mean something to you

mjg59,
@mjg59@nondeterministic.computer avatar

I am surprised it is so few of you! https://www.vanityfair.com/news/2008/11/nicholas200811

mjg59, to random
@mjg59@nondeterministic.computer avatar

Well, the puppy found some cash, so does anyone know if there's anywhere in SF that will replace mutilated money or do I just send it to the Bureau of Engraving and Printing and wait 3 years?

mjg59,
@mjg59@nondeterministic.computer avatar

Fortunately this happened in the window where the vacuum was recharging itself, so I don't also have to deal with that logistical constraint

GossiTheDog, to random
@GossiTheDog@cyberplace.social avatar

My Mastodon server, cyberplace.social, has received a legal threat in an attempt to have a user's thread deleted. It is styled as a cease and desist.

I have published the email here:
https://github.com/GossiTheDog/Cyberplace/blob/main/LegalThreats/Cease%20and%20Desist%20Order%20-%20Felix%20Juhl

mjg59,
@mjg59@nondeterministic.computer avatar

@GossiTheDog Fortunately, https://www.legislation.gov.uk/ukpga/2013/26/section/5/enacted

mjg59, to random
@mjg59@nondeterministic.computer avatar

Does AT&T's status as carrier of last resort in California actually oblige them to serve all addresses, and if so what's the process to follow if they refuse?

mjg59, to random
@mjg59@nondeterministic.computer avatar

Debian has traditionally followed a model of it being possible to upgrade systems between releases in-place while they're running. This makes upgrade logic much more difficult - at various stages you're replacing the components that are currently running in order to perform the upgrade! And at the end of all of this you're going to reboot anyway because you've got a new kernel.

mjg59,
@mjg59@nondeterministic.computer avatar

@ahornby @ben It's not guaranteed to work between releases

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • everett
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • osvaldo12
  • Youngstown
  • Durango
  • tacticalgear
  • slotface
  • rosin
  • thenastyranch
  • kavyap
  • khanakhh
  • JUstTest
  • InstantRegret
  • cubers
  • ethstaker
  • GTA5RPClips
  • cisconetworking
  • ngwrru68w68
  • modclub
  • normalnudes
  • anitta
  • tester
  • Leos
  • provamag3
  • lostlight
  • All magazines
    •