Posts by Tomato42

It's the final countdown: Windows 10 hits end of support in less than 30 days

Re: This will, for many users still running Windows 10, require a hardware purchase.

TPM requirement can be sidestepped

Microsoft admits it 'cannot guarantee' data sovereignty

what this article is about is that data sovereignty is not available from Microsoft hosted solution, so them having holes is a moot point if you are after data sovereignty

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Re: Yeah except no: Obvious bs.

the issue is the stereotype of "pretty == dumb" and "pretty in position of power == sleeps around", that stuff is damaging, not the fact that there are booth babes at shows

but being outraged at booth babes is the easy pat yourself on the back for the white knights, so that's what's being done, not addressing the real problem

Re: Yeah except no: Obvious bs.

I'm all for women's rights. If they are forced to do stuff like this, without prior consent, then it's bad. But if they are able to hire women to do it, and those women have no problem with doing it, where exactly is the problem?

That sexy women can't be people that think and make choices for themselves? That they need to be protected from making "bad" choices? How's that empowering, exactly?

Amazon, you will do a total recall of bad stuff sold through your site, watchdog barks

when reached for comment Amazon replied with "bUt sHerEhOlDeR vAlUe!!!11111!!!oneoneone!!!!"

European Commission may be about to put the squeeze on Apple for its App Store rules

Re: Fines on US companies? Pointless

well, do I have news for you... that's actually how fines in EU work: it's a percentage of global revenue

Stable Diffusion 3 to debut on June 12

HW reqs?

1. if it needs 92 GB of VRAM to run, then realistically you can't run it locally: I'm not interested

2. no, the fact it can run on the CPU AI accelerators is not good enough: 7900XTX runs circles around M2 and M3 macs that have more than double the memory, and the Ryzen 300 CPUs won't have memory that's even half as fast as the stuff in Apple's SoCs

Rust developers at Google are twice as productive as C++ teams

Re: I wonder...

I'm not so sure... There's like 4 different ways to do string substitution (I mean snprintf() from C) in Python, and the language just continues to work, even if you use the oldest and most clunky one: the % operator, not the f-strings.

Re: How much of the improvement in the conversion to Rust is because it's a re-implementation

They are already talking about migrating from Go, so if anything, it's a re-re-implementation.

Your PC can probably run inferencing just fine – so it's already an AI PC

1. Not all of us have, or even want to run Apple hardware.

2. If you have only an Intel integrated GPU (as most pure-programming, or office PC really only need), then you need to run it on regular CPU, and then LLAMA answer takes 2 to 3 minutes. Which makes it next to worthless.

Euro-cloud consortium issues ultimatum to Microsoft: Fix your licensing or else

Re: Irrelevant

More often that not, it's "because that's what we already know", and "that's already what users know", those are the reasons why they go for Windows. All while the users end up running just a web browser to access a web application.

EU users can't update 3rd party iOS apps if abroad too long

Re: Why does anyone buy Apple?

> functional

Didn't know that needed 5 dongles to connect basic peripherals and is "functional", I guess I simply don't have the VisionPro to see it.

Hands up if you want to volunteer for layoffs, IBM tells staff

Re: Have you caught the bug?

Also surprising... did they forget that labour laws in Europe are vastly different than the ones in the States?

Musk 'texts' Nadella about Windows 11's demands for a Microsoft account

Re: First time for everything

You know what they say about broken clocks...

IBM pitches bite-sized $135k LinuxONE box for smaller biz types

Banks do AI inferencing for fraud protection, and they want the AI models to run fast...

Still no love for JPEG XL: Browser maker love-in snubs next-gen image format

As a casual graphic user and photographer, I can say that it's the first time I hear about JPEG XL. I did hear about WebP (seen it used "in the wild"). So, what is the benefit of JPEG XL over WebP?

On the other hand, I see the JPEG 2000 in the graveyard, what makes JPEG XL not another format that will simply not join it there?

eBay tells 1,000 employees their days at company are numbered

Re: Late stage capitalism

Reagan and Thatcher were in office in the 80's

Apple has botched 3D for decades. So good luck with the Vision Pro, Tim

Re: Not convinced

There is market for games, but given it's Apple, they want the walled garden. So market fragmentation of an absolutely tiny market (compared to smartphones).

Not optimistic about its success.

Stripe commuters swap traffic jams for hydrofoil glam

Re: all with no carbon emissions

Even if it was a tram (best option for metropolitan mass transit), it would still have plenty of glass fibre and microplastics.

The perfect doesn't have to be the enemy of the good.

Why Google is waiving egress fees for disgruntled customers ditching GCP

Re: "their preferred cloud provider"

stupid ways accounting is done it may be beneficial to the C-level bonuses to pay more for less when you don't have to put expensive assets to depreciate

it's back asswards, but then, we live in late stage capitalism, so...

Microsoft offers rollback for those affected by Windows wireless futility

Re: Design over usability

That's the whole issue. Stuff like SD card readers, Ethernet ports, both USB-A and USB-C ports, HDMI ports will fit just fine on a modern thin (not really, it just has thinned bezels to _look_ thin, not to _be_ thin) laptop.

Somehow, in the 90's we could have RJ45 jacks in PCMCIA cards and pocket computers (at this point, computers that were smaller than the mini-tables posing for phones today). It was just "lost" by Apple in their pursuit of form over function. So we need dongles for absolutely everything.

Ethernet.

Good thing laptops have Ethernet jacks as a fallback, for exactly the situation that the wifi doesn't work... Oh, right, OEMs decided they want some "courage" and "innovashun" that Apple is having and they're following it off the bridge in the effort to remove all ports.

Dump C++ and in Rust you should trust, Five Eyes agencies urge

Because you can't write a Javascript of Python interpreter in those languages (not without going turtles all the way down)

UEFI flaws allow bootkits to pwn potentially hundreds of devices using images

Oh, that can't be blamed on markedroids only, the engineerds also like to work on the new shiny, and not just maintain the old tried and true.

Re: Blimey....

Well, how else they will protect the users from making the "mistake" of uninstalling Windows and installing a real operating system on the machine?

Japan's digital minister flamed and shamed for using his smartphone in Parliament

Yeah, in some cases playing the part is half of getting the job done.

Hoomans are stupid like that...

Firefox slow to load YouTube? Just another front in Google's war on ad blockers

I've been using yt-dlp to download them, and it a). works fast (20MiB/s) and b). has no problems even after the ad-block-pocalypse

Is America's chip blockade working against China? So far, our survey says: No

which is about as relevant to the discussion as insisting that North Korea is democratic because it has Democratic in the name

AI shows rather clearly that access to the newest, shiniest, and most expensive stuff gives you qualitative, not just quantitative advantage.

If you think that China alone will be able to duplicate, let alone surpass, what the whole of North America, Europe, Japan, Korea, and Taiwan are able to achieve in chip manufacture, then I have a bridge to sell.

> There is absolutely nothing except first-to-market advantage that leads to American computer technology being "superior" at all.

what TSMC and Samsung do is not just being first, they also can do that stuff at scale. So, just because a lab in china is able to make a 6 or even 4 nm chip doesn't mean they are able to make millions of wafers of the things every year, with reject rates in single digit percentages.

And "The West" is not standing still

What's really going on with Chrome's June crackdown on extensions – and why your ad blocker may or may not work

Re: This, coupled with YouTube's recent blitz

well, then you've been lucky, in corporate world it's much more common now. Even sites like imgur sometimes break on FF.

We're back to the "best viewed on IE 6 at 1024x768" days, the resolution didn't even triple, but the browser at least doesn't support Flash

Passive SSH server private key compromise is real ... for some vulnerable gear

Re: "end-of-life firmware"

Remember, the "S" in IoT stands for security!

FCC throws an $18B bone to rural broadband

More Billions for the ISP to do stock buybacks and bonuses to the execs? I'm sure they'll take that money gladly when C-staff jail time for mismanagement of them is an impossibility.

Privacy advocate challenges YouTube's ad blocking detection scripts under EU law

Re: I've always been curious...

I'm pretty sure Twitch is serving the same ad to everybody...

The problem with Jon Stewart is that Apple appears to have cancelled his show

Re: Who’s Jon Stewart

Well, first of all, congratulations on waking up from the coma.

Second of all, the last 20 years have been a bit of a doozy at the best of times. so I'd suggest going back to a coma.

Can open source be saved from the EU's Cyber Resilience Act?

> Name an official notification system anywhere in the world that relies on email.

cve-assign @ mitre.org

Re: The usual quality of EU news reporting....

You do know that dark patterns for cookie dialogues have been illegal, are illegal, and will remain illegal?

Just one example of work happening in EU to squash them: https://edpb.europa.eu/system/files/2023-01/edpb_20230118_report_cookie_banner_taskforce_en.pdf

> And I can't see how this could be ever implemented without a lengthy transition period.

The CRA already calls for 24 month transition period. And that's on top of the usual delay that the governments take in implementing the EU regulation.

Not that it will stop the megacorps from doing absolutely nothing about it till the eve of when the regulation goes into force and then trying to litigate. Exactly what they did for GDPR. And exactly what El Reg is still not compliant with (the button to deny and accept all cookies has to be presented with equal prominence, but dark pattens are like heroin for markedroids).

Re: “… that program you wrote in 2019”

If you haven't charged money for the software or for support and you don't use it to collect personally identifiable data (except stuff like interoperability and bug reporting), then you're exempt.

Re: Unpopular opinion: The act isn't that bad.

He's probably one of those people that are like house cats: fiercely independent while in reality oblivious of the systems that they depend on and don't appreciate. You know: libertarians.

He's completely unaware that without regulation his bread would be full of sawdust or chalk as that would make it cheaper to produce. Or maybe he's one of the crazy people that likes using gas chromatograph to see if the food he's eating includes arsenic or heavy metals.

Re: Unpopular opinion: The act isn't that bad.

The act asks for actively exploited vulnerabilities to be reported to gov offices. If the situation gets this bad, then the cat is clearly out of the bag already and giving even less than stellar governments info about them won't change much (not to mention that the act actively encourages ENISA to filter that information before disseminating it further).

The act also asks for the information to be provided to the users of said components and devices, including possible mitigations.

So, even if you're a small software shop, I really don't think those requirements are too onerous. If you're serious about security, you'll need to get a CVE number and submit a description of the vulnerability anyway, it just asks for the submission to also be provided to ENISA, not just MITRE, and gives you 24h when the manure already hit the air circulation device.

You're unable to write a single email for 24 hours after learning that your software has a currently exploited security vulnerability? Yeah... maybe you shouldn't be in the software business.

The draft states "The manufacturer shall, without undue delay and in any event within 24 hours of becoming aware of it, notify to ENISA any actively exploited vulnerability contained in the product with digital elements." becoming aware. So, no, you don't have to check your bug tracker every day when out on holidays.

ROBOT crypto attack on RSA is back as Marvin arrives

See the original CVE description for the OpenSSL bug, it affects all padding modes as the leak is happening before any padding operations.

Salesforce flipflops from 'you're fired' to 'you're hired' in six short months

Executive staff?

What?! You mean just the excellence exuding from the executive staff doesn't cause the work to be done? Preposterous!

Red Hat redeploys one of its main desktop developers

Re: X.org

X.org doesn't support HDR and given the almost-abandoned state of it, likely never will.

Now, you may not place high value to it, but there are people that do.

X.org

To be fair, the days of X are numbered, so them focusing work on Wayland is entirely rational.

OpenAI's ChatGPT has a left wing bias – at times

"normal family values" by the fascists is "killing LGBTQ+ people on sight": that is a far right view

Re: Conflict

ah, you're one of those people that think Nazis were left wing because it was the National Socialist German Workers' Party?

big business was always right-wing aligned in actions, they are only left wing aligned in PR

RAM-ramming Rowhammer is back – to uniquely fingerprint devices

Re: Fingerprinting....NO.....Destruction.....Maybe.....

those obvious things is not something you can do from the web browser, machine fingerprinting that doesn't use serial numbers is used for malvertising, not asset control

China to Meta: Flattery needed to get you into our VR market

Re: Threaten

They're talking about consumer stuff, not enterprise gear

HSBC banks on quantum to lock down comms network

Penny wise pund foolish?

> Uses QKD that had implementations broken multiple times

> Doesn't use Kerberos that is just as secure against quantum computers and has survived the test of time (literally decades)

I guess yet another proof that just because you have the money doesn't mean you have the brains.