22c

Yeah I remember reading about it's relation to LLVM issues etc. I also think there was another (languishing) fork of the entire zig repo which had some support for Xtensa which I couldn't find at the time, but I found it.

https://github.com/ominitay/zig/tree/xtensa

Edit: I see you are the same kassane from the GitHub thread. Thank you for your efforts on Xtensa support! Would be great to have it out-of-the-box at some point.

ESP32 and STM32 support is very welcome!

I have been following https://github.com/ziglang/zig/issues/5467 for a while and progress seemed to have slowed significantly

Most likely https://github.com/finos/perspective

I use an alias to oathtool to generate OTPs.

It seems like this method at least keeps the secret key inside 2FAS backups, so it's probably slightly better opsec.

> This is just unfortunate if it has been implemented like Telegram and it seems it has.

Yes, agreed. This doesn't stop an adversary who knows your phone number and identity (such as a surveillance state) from linking communications under your username with your real identity.

It just means that people don't need to give their phone number to someone just so they can communicate via Signal.

I think this can lead to people having a false sense of security.

There was also a time where ng postfix was used to denote "next generation", so they could go with nginxng :)

Nit: It's not protected by DRM, it's protected by copyrights. It's still against the law in most places to violate copyrights, even if there's no DRM involved.

Thanks for your (companies) work on both this and graphtage!

Out there question:

Do you guys have any plans on releasing a tool which could be used for diffing filesystems?

eg. Run the tool, run an arbitrary program which modifies the filesystem, run the tool again and it reports on what has changed?

Using existing diff tools for this right now is clunky. I'm surprised there's not a go-to tool used by security researchers (or perhaps there is and I don't know about it).

That's right. If you login to to GitHub even days after the spam is removed, you will see the bell icon with a notification about a since cleaned up thread in your feed.

Yes it's a game of cat and mouse, but starting out with a defeatist attitude, the cat makes things way too easy and the mice will simply roam free. Making life hard for the spammers can and will get rid of all but the most persistent.

The other issue I have with this particular GitHub spam is the notifications persist even after the spam has been removed. You get notified and subscribed to some random thread because you were previously tagged in it.

After GH removes the spam (which is currently too slow) they should also retract any notifications or subscriptions that were made as a result of the spam comment.

While the specific names escape me, there have been a few projects over the years that have replaced DirectDraw or Direct X DLL files with re-implemented counterparts that tend to work much better on modern hardware.

I believe in one such case, the original StarCraft would run with really buggy colors using the official Windows DLL files and a drop-in DLL replacement would fix the issue (these days I think Blizzard has shipped their own fix for this issue).

This appears to be filesystem agnostic and could be quite useful in scenarios where switching to ZFS is not an easy option.

Thank you for the great, free resource. Do you have any advice for people who are not in a supported jurisdiction? eg. Have you heard of anyone having success for using GDPR as an excuse to be removed despite not living in the EU?

In some circumstances there absolutely is a difference in the amount of money you will be entitled to in the case of being fired vs. being made redundant. It can be on the order of several months of pay. You will also see employers simply make the working conditions incredibly miserable for their employees on the hope that they'll quit instead of the business needing to make them redundant.

I consider the lack of effective anticheat as essentially making the game unplayable/abandoned, regardless of whether or not they fix minor bugs or localization issues.

Appreciate the insight, very disappointing! Sadly, TF2 is in a practically unmaintained and unplayable state right now and it's a game that is still beloved by its fans all these years later. Any efforts to inject life back into the fanbase seem to be met with indifference from Valve at best and outright callous opposition at worst.

TF2: Source 2 takedown was particularly surprising to me. I speculated in another thread that it could be related to it being made in s&box which Facepunch are likely to eventually profit from.

If you could make comprehensive clone of a game that depends on a paid engine from another studio, I can see how that could be seen as a threat to Valve IP.

Man, this is disappointing. It's particularly surprising that Valve has sent a DMCA here, given their history of pretty much all their popular games originating from the modding community or prior art and the history of fan projects like Black Mesa getting somewhat favourable coverage in the Steam store.

I wonder if they took issue with s&box coming from Facepunch, which might be something that is eventually profited from, thereby a TF2 remake in s&box could drive sales for s&box.

The thread mentions it, it's basically a MediaTek MT7981B with some extra components. It would be interesting if they can get all the things they mention in the < $100 price range that they're aiming for.

No, you are confusing file retrieval with file recovery. The reconstruction only needs to happen if some form corruption is detected (typically in the case of a bad/dead disk).

I agree that it's a strange example to give. This would also be like saying imagine you had a single Reed-Solomon code for your entire hard drive. That would indeed be very painful to recover data, but we don't have a single Reed-Solomon code for hard drives. You'd pick a block size that is suitable for your application.

My first thought was that this could have some "co-processor" style applications in quantum computers, but I think the "real" answer is that if datacenter workloads could 2x to 10x in efficiency using chips made with liquid nitrogen cooled transistors vs. traditional silicon, it becomes economical to move in this direction.

This result would be a lot more believable to me if I could take my own 20-30 question quiz and see how "good" I am at picking the "more X like" images. It seems like a missed opportunity for gathering more data, even if that data would be gathered in a less controlled setting.

Appreciated, thank you!

Several years ago I was part of team managing one of the busiest recursive DNS resolvers in the country. Around the time, DNS reflection attacks were becoming all the rage (I think there might have been a vulnerability in PowerDNS to blame, I don't specifically recall the details).

The solution we employed was a "dumb" fail2ban like script to ban any abusive IP address. It worked wonders and practically completely neutralized the attacks. We received zero complaints from any legitimate users of the service.

If I recall correctly, even after the attacks subsided (CVEs was patched etc.), we still kept a toned down version of the script in place.

> at best, fail2ban: does nothing

This is just plain wrong. Even if you're only using key based auth and there's no way an attacker could have your keys, fail2ban will still block the abusive traffic.

I have no issues with blocking abusive traffic instead of letting the attackers beat their fists against my armored doors.

> at worst, fail2ban: causes you massive inconvinience or total lockout

The authors main criticism seem to be that you might lock yourself out of your own server one day. This hardly seems fair because the author is saying "just setup SSH correctly and you won't have any issues" while also saying "if you don't setup fail2ban correctly, you'll have a whole bunch of issues!" OK, so shouldn't we just setup fail2ban correctly as well?

Having said all that, my recommendation for people who are going to use an indiscriminate fail2ban setup on SSH access would be to have some out-of-band access in case you do happen to ban yourself, even if it's less convenient to use than SSH.

I would normally not particularly care enough to mention a lack of license, but permissively licensed open source tools in the DB stress testing space are few and far between.

Are you planning to add a proper license at some point?

Even reading that document, I think the answer is "it depends".

For example, this[1] work is entirely derivative, created only using cuts from another piece of media and yet the resulting work is a complete departure and loses practically all meaning from the original. If Disney had done something like this years later using Steamboat Willie, I don't think there'd be any question that it should be considered a copyrightable piece of work and exceeds the threshold of originality.

According to the Copyright Alliance[2]:

> There is no requirement that the work be novel (as in patent law), unique, imaginative or inventive. A work need only demonstrate a very small amount of creativity in order to meet the originality requirement.

If J.K. Rowling replaces the word "wand" with "wang"[3] in the Harry Potter series and publishes a new revision, has she created a new work? According to your link, yes, she has. If you upload Harry Potter "wang" edition to the internet after the original edition enters the public domain, have you violated the copyright on the "wang" edition? Well, I think it could be argued that you have!

[1]: https://www.youtube.com/watch?v=694_jtbvJuY

[2]: https://copyrightalliance.org/education/copyright-law-explai... basics/requirements-for-copyright-protection/

[3]: https://web.archive.org/web/20080618113626/http://www.bash.o...

I think it entirely depends on if those cuts constitute the creation of something that could be considered a new piece of original work.

Sometimes the removal of certain scenes from a movie could completely change the way you think about that movie, or completely change the overall tone.

> this version has the tugging on tails, but not the picking up and accordioning of the mother, so it's a falsified version

I wondered if that puts the Corridor version in jeopardy in any way, given that the version they have posted was produced many years later. In my few minutes of research, it seems like the answer could be quite complicated and it would depend on whether or not the censorship process exceeds the threshold of originality.

For example, I imagine if Disney had engaged in a significant colorization process of the original footage in the 50s that the resultant colorized footage would still be under copyright today.

I do think that the process of removing footage could be considered a sufficiently creative endeavour. For example, if Kubrick released a re-cut version of Odyssey 5 years after the original, I would not expect the re-cut to enter public domain until 5 years after the original (even if the only difference was removal of certain scenes). If anyone could argue that censoring a film constitutes as an editorial creative process and thereby should be granted copyright protections, it's Disney.

moreutils parallel can also come in handy for quick command parallelization (not to be confused with GNU parallel which serves a similar purpose but can be more complicated)