144 karma · joined September 30, 2023
There's a line in the sand that you must cross when it comes to understanding the true nature of the componentry that you're using. At the end of the day, your AMD CPUs may be lying to you, to all of us, but we just don't know it yet.
Nonetheless, it is quite interesting what you've built, but as the end user I'm not quote convinced that it matters. Sure you can claim it reduces attack vectors and such but we'll still see Dells and IBMs in the most restricted and highest security postured sites in the world. Think DoD and such. Core/libreboot with RoT will get me through compliance the same.
The software management plane y'all built is the headlining feature IMHO, not so much what happens behind the scenes that the vast majority of the time will not have a fatal catastrophic upstream effect.
>There are plenty of valid criticisms of Oxide -- but that we don't understand our system simply isn't one of them.
That's not what I said. There's a line in the sand that you must cross when it comes to understanding the true nature of the componentry that you're using. At the end of the day, your AMD CPUs may be lying to you, to all of us, but we just don't know it yet.
I've had support tickets open for all kinda of weird firmware, hardware, etc. bugs and they've been well resolved, even if it meant Dell just replaced the part with something comparable (NIC swap).
>Dell doesn't know how to fix things like that because they don't design and engineer the systems they sell.
Of course they do. That's like saying Oxide doesn't know how to fix stuff because they don't design the CPU, NVMe, DIMMs, etc. Oxide is still going to vendors for these things.
Neither am I.
>If you hit a "zero-day" bug that Dell has never seen it's going to take time.
If you hit a "zero-day" bug that Oxide has never seen it's going to take time.
>And somehow every large customer finds bugs that Dell certification didn't.
Yes, happens. And I'm sure the exact same will happen with Oxide, so it's not a differentiator.
Off by a few orders of magnitude. Dell on-site SLA with pre-purchased spares was about 6 hours.
With Oxide, you'd be lucky to get same day service.
Dell is a single vendor that will diagnose and fix all of your hardware issues.
With Oxide you're locked into what looks like a Solaris derivative OS running on the metal and you're only allowed to provision VMs which is a huge disadvantage.
I run a fleet of over 30,000 nodes in three continents and the majority is Flatcar Linux running on bare metal. Also have a decent amount of RHEL running for specific apps. We can pick and choose our bare metal OS which is something you cannot do with Oxide. That's a tough pill to swallow.
Their competition has open source firmware as well:
https://www.dell.com/en-us/blog/enabling-open-embedded-syste...
You're absolutely correct, but I just want to emphasize the scale: trillion. That's over a thousand billions. It's an amount that's so huge it's truly hard to comprehend and visualize.
https://en.m.wikipedia.org/wiki/Financial_cost_of_the_Iraq_W...
No it's not, not at all. Is "blocklist" a list of file system blocks? Bitcoin or other crypro blocks?
As someone who speaks English as a second language, the first time I read "whitelist/blacklist", I simply looked them up in a translation dictionary and immediately understood what they mean. Those are actual words with definitions spanning centuries.
>The software community loves to complain about this stuff like the change from master to main branch but I always get the sense that people just liked to complain rather than any meaningful objection.
Yes we love to complain, but there were many meaningful objections that were ignored. There was a reddit outage that occurred due to the madness around "inclusive language" and removing the word "master": https://www.reddit.com/r/RedditEng/comments/11xx5o0/you_brok...
Not to unlimited growth capitalist, no. Culturally and as a people they're doing fine.
>Meanwhile those nations that embrace newcomers of all kinds are doing significantly better.
No they are not. Japan is perfectly fine without trucks of peace, grenade attacks, and gang assaults on women.
There are limits to everything, but for finservs, there's a reason why they do these things.
Source: I am/was infosec at JPMC and other large finservs.