158 karma · joined January 6, 2023
https://github.com/xcp-ng/xcp/issues/105
Proxmox / KVM is the only alternative to ESXi that can support all of Windows security mitigations such as Core Isolation, which requires nested virtualization.
There is a PR out for this: https://github.com/openzfs/zfs/pull/15588
https://9to5google.com/2023/01/31/google-fi-customer-hack-st...
T-Mobile is still the weakest link here. Google Fi appears to be just as vulnerable to a SIM swap attack as seen in that article.
What's worse is that the bug has been in production for 18 months (since 2.1.4) so if you've ever put a file on a ZFS filesystem in the last year or so, you may be affected.
The only true way of knowing whether you are are victim of this is to look at every single file and compare it against the known good that has never been on a ZFS filesystem.
It's unfortunately a false sense of security because you don't get security updates for any proprietary blobs that are needed for your phone. This includes baseband and SoC updates. In security, the chain is only as strong as it's weakest link.
I really wish the enterprise stuff was available to the single user case like mine. Everything past v4.3.1 is hot garbage, as you guys really nerfed it for non-enterprise users ever since you removed "showEnterpriseHomePanels" among a few other things. I regrettably can't upgrade to anything newer because of that.
I would LOVE to have the ability to pay you guys say, $100 a year or something reasonable for just a private onsite enterprise license for one person -- myself. I continue to advocate for your products in all the enterprise contracts I work as that's what I'm most familiar with and tinker with when I work on my own personal stuff on my own free time.
I think it would be great to just have all those features for one user, and for a reasonable yearly fee for a single developer to be able to afford.
If you guys are concerned about being ripped off -- For example, some company buying this "single user enterprise license", I don't think they would if you limit it to one admin user. No company is going to risk sharing creds for a superuser account / keys to the kingdom, and if they do, they are some fly-by-night company with no sense of security that was never going to give you guys money anyway.
That's my two cents.
tl;dr: I can care less if it's open source or not. I just care that enterprise is affordable to the home user and that I can still run it on premise and in a semi-airgapped network environment.
I'm not from Minnesota, but he impressed me by what it seemed he tried to do as a senator. I think if more of our politicians showed his intelligence and level of care for their constituents, we'd all be better off.
Finally, I think he got screwed over when he was pressured to resign over his hover-hands picture. If we cancel everyone who has done something in poor taste, we'd all be on the outs, and no one would go into comedy, or last long if they did.
I don't disagree with you there, however, things like pointers and string literals (and what they actually represent) in my experience are a source of confusion to junior systems engineers. I'd imagine that the intended reader is someone who wants to be a systems engineer, not someone who is already a systems engineer. I expect the reader to be motivated to understand (after all, they are reading the article) but not understand and get confused because of the imprecise language, especially in the case in programming where precision matters (or the code doesn't work).
Not true, just tried it in MSVC and it compiled fine but with a warning on conflicting types.
"HTTP" is of type const char* and sizeof(size_t) == sizeof(const char *). Doesn't matter if its 32 or 64, I'm not aware of a platform where that isn't the case.
> but this story is about an instance where malloc was accidentally being called with the first bits of a string instead
If that's the case, then it should have been something along the lines of *"HTTP" instead.
No it's not / that's not how C works. malloc("HTTP") is malloc of the address of a string literal in memory. If "HTTP" is at address 0x11223344 then it's malloc(0x11223344).
So it's the address of where ever the "HTTP" string is in the binary not the characters themselves.
It's kind of a weird way to say that you can convert decimal to hexadecimal in your head. I also wouldn't use malloc as the example to demonstrate that talent, it makes no sense that way.
Perhaps becoming a systems engineer should involve learning C first... Don't always trust what you read.
HP OfficeJet Pro 9025e vs HP OfficeJet Pro 9025
OR
HP LaserJet Pro M234sdwe vs HP LaserJet Pro M234sdw
The "e" printers support subscription based ink and require an internet connection otherwise they won't print.
- It says it all over the outside of the box
- It says it in the box on multiple sheets of paper in big text
- It says it when you are installing the driver
- It says it when you are purchasing the subscription
The cost of the printer is subsidized to some extent (similar to carrier locked phones) and they are subscription based printers.
I don't understand how HP is at fault here. Subscriptions are a shitty business model, but nobody forced you to buy a subscription based printer. If you didn't want that, then you should not have bought the "e" model, you made that decision yourself, ignoring all the warnings outside and inside the box, regretted it later, then blamed HP.