- 12 Posts
- 712 Comments
1·2 days agoIt looks like they ran the test case and triggered the crash. Therefore the issue is not confabulated.
Also, I’m unconvinced that use of ffmpeg inside of Google services is relevant to this. Google services can sandbox executables as much as they like, and given the amount of transcoding they do (say for youtube), it would surprise me if they’re not using gpu or hardware transcoders instead of ffmpeg anyway. Instead, they may care more about ffmpeg as used in browsers, TV boxes, and that sort of thing. That puts them in the same position as the Amazon person who said the ffmpeg devs could kill 3 major [Amazon] product lines by sending an email.
If a zillion cable boxes get pwned because of a 0-day in ffmpeg, well that’s unfortunate but at least they did their due diligence. But if they get pwned because the vendor knew about the vulnerability and decided to deploy anyway, that potentially puts the vendor on the hook for a ton more liability. That’s what “ffmpeg can kill 3 major product lines” means. So “send the email” (i.e. temporarily flag that codec as vulnerable and withdraw it from the default build), seems like a perfectly good response from ffmpeg.
The Big Sleep article is really good, I read it a week or so ago, sometime after this thread had died down.
32·2 days agoAren’t there already tons of these already? Piwik has been around for a quite a while, plus there are others mentioned in the comments.
3·3 days agoWhile all controllers should eventually be disbursed their back pay (Government Employee Fair Treatment Act of 2019)
Does that not constitute a government debt then? I thought the shutdown was due to hitting a debt limit. If there was a relief mechanism to create more debt for special situations like this anyway, why not just pay the ATC’s immediately through that same mechanism?
ORCHARD PARK, N.Y. — Police executed a search warrant at the home of a University at Buffalo student after he allegedly threatened to “shoot up the school,” prompting an investigation.
4·3 days agoRust has exceptions? Is that new?
29·3 days agoSignal apparently maintains a chat log? Sounds like a dumb idea for stuff like this. Better to erase everything once it’s been seen or after a few minutes.
0·3 days ago“What’s the thing that fundamentally moves the needle on what’s out there already today?” he said. “The only thing, in my opinion, is rapid reuse. And once you get it, the economics are so powerful that nothing else matters. That’s the thing I couldn’t get out of my head. That’s the only problem I wanted to work on, and so we started a company in order to work on it.”
Web search shows max CPU power for that unit is 65W. I was thinking of something more power hungry.
This is great. Soon military organizations all over the world will be recruiting poets to compose their cyberattack prompts.
Maybe you could describe what you mean by self-hosted and resilient. If you mean stuff running on a box in your house connected through a home ISP, then the home internet connection is an obvious point of failure that makes your box’s internet connection way less reliable than AWS despite the occasional AWS probs. On the other hand, if you are only trying to use the box from inside your house over a LAN, then it’s ok if the internet goes out.
You do need backup power. You can possibly have backup internet through a mobile phone or the like.
Next thing after that is redundant servers with failover and all that. I think once you’re there and not doing an academic-style exercise, you want to host your stuff in actual data centers, preferably geo separated ones with anycast. And for that you start needing enough infrastructure like routeable IP blocks that you’re not really self hosting any more.
A less hardcore approach would be use something like haproxy, maybe multiple of them on round robin DNS, to shuffle traffic between servers in case of outages of individual ones. This again gets out of self hosting territory though, I would say.
Finally, at the end of the day, you need humans (that probably means yourself) available 24/7 to handle when something inevitably breaks. There have been various products like Heroku that try to encapsulate service applications so they can reliably restart automatically, but stuff still goes wrong.
Every small but growing web site has to face these issues and it’s not that easy for one person. I think the type of person who considers running self-hosted services that way, has already done it at work and gotten woken up by PagerDuty in the middle of the night so they know what it’s about, and are gluttons for punishment.
I don’t attempt anything like this with my own stuff. If it goes down, I sometimes get around to fixing it whenever, but not always. I do try to keep the software stable though. Avoid the latest shiny.
I don’t use Roblox but I looked at a description and it seemed something like Minecraft, in the sense that it should really be self hosted.
12·4 days agoBeing vegan takes a bit of nutritional awareness but it’s not that difficult. You might want some vitamin supplements as people have said. Note that fruit isn’t that much different from candy in terms of the sugar hit. I’m not vegan myself in terms of intentionally sticking to such a diet, but often my eating patterns end up going that way anyway, and it works out ok, at least for a while.
A high-cpu small machine will have noisy fans, there’s no avoiding that. The fans have to be of small diameter so they will spin at high RPM. Maybe you can say what you’re actually trying to run, and make things easier for us.
I gave up on this approach a long time ago and it’s felt liberating. My main personal computer is a laptop and for a while I had a Raspberry Pi 400 running some server-like things. All my bigger computational stuff is remote. So the software is self-hosted but not the hardware. IDK if that counts as self-hosting around here. But it’s much more reliable that way, with the boxes in multiple countries for geo separation.
1·4 days agoI’m not a checkers player but really strong players do win games against each other. Also it was 8x8 checkers that was solved. Human competitive play is sometimes 10x10 which is probably beyond current technology to solve the same way. Tinsley played 8x8 though.
I got my current phone in 2023 and the one before that in 2017. The 2017 one was my first android phone. The previous couple were Maemo, which tbh would be better for servers.
At that time it wasn’t solved and it was unknown whether Chinook was at Tinsley’s level. Now it’s solved in the sense that a humongous computer search has proved it to be a draw, but there is still competition between humans. Chess is generally believed to be a draw too. A mathematical or computer proof of that wouldn’t change things very much though. The best way to beat another human might involve playing into positions that are lost for you, if you can get into a complex enough position to confuse your opponent into a mistake.
Marion Tinsley died at age 68 while still holding the World Checkers Championship. A number of chess players including Ivanchuk and Anand are in their 50s and still might strong, but probably not WC strength.
Email, usually thunderbird or k9 these days. For online chat I have a small nextcloud server but I rarely use it for that.