The Battlefront Miscellaneous Thread

Status
You're currently viewing only Ecmaster76's posts. Click here to go back to viewing the entire thread.

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Are there even native full-screen apps for MacOS? :devious:

? Every macOS app has "full screen mode."
I was mostly stirring shit up because there aren't any good games on MacOS being facetious but also meaning apps without window chrome

Full screen presentations and the like would qualify but I'm not sure how many people use the built in monitor for those situations
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Right, but the last few pixels and everything with an -a designation have been anything but a halo device for the last few years. They've been middle-of-the-road devices or 'flagship killers' but never anything to compete with the top tier of handsets. Pixels and Nexus products before them were *good* (for the most part) but seldom a pinnacle product. They won niches, like the early Pixels' camera features being far ahead of most other Android OEMs at the time.

Google's going for that mainstream market this time around.
I thinking they are going for consistent competence. Maybe not actually achieving it consistently but doing far better than most manufacturers (and most other Google ventures lately)

A simplified lineup with decent quality and decent support is what the Android ecosystem needs *badly*, not yet another expensive phone with everything turned up to 11
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
you need to be careful to see the small differences in the products or whether or not you're looking at a last year's model vs. this year's model.

This is a major issue for them
Moto has a minimal product support window on most of their products. Quite a few of them listed for sale will be out of support practically (or literally) the day you buy them
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
2. Excess cash should be returned to investors (by one particular, controversial theory of corporate responsibility)
Controversial? :unsure:
Investors want to get paid and they have voting stock.
3. Should a company have a sudden need for cash for an acquisition or other purpose, they can raise it in the debt markets instead, something Apple in particular would have no trouble doing.
Presumably the lenders would want to get paid too.
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Contention: MS Paint is a supremely valuable application and Apple and Linux distro maintainers should feel embarrassed that they don't offer something similar out of the box after all this time (Preview and Gimp are not functionally similar enough).
* cough *
https://paint.js.org/
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
I have a question. I saw some tweets that seemed to say that, by using 16K pages instead of 4K pages, that one company is able to put in larger L1 caches.
You'd get more memory per addressable unit. That would also keep the read/write lines in the cache a bit more simple. Tradeoff is the ineffeciency of reading/writing more than you might need

In looking at some diagrams of the device, I see that its caches use PA tags at all levels, not VA tags, so, what am I missing? Were these people using "cache" when they meant "TLB"? How would page size restrict cache size?
IIRC, TLB doesn't come into play into you start accessing main memory (system RAM). Everything on the processor is physical, everything off of it is virtual and it has no freaking clue what fixed storage is. That's the kernel guys' job
:eng101:
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
None of this makes sense to me. Tiny L1 caches load entire pages? When did they start doing that? I could see it at L2, but not L1.
No, larger pages means fewer addresses. The cache can hold more data with the same number of entries
And of course you use the TLB for the caches. Every generated address has to be translated to a PA that the caches can test. You go to memory on TLB misses, to look up the block/page.
I'm a bit rusty on all this but that depends on your cache hierarchy
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
The minority argued that all the data was delivered to the computer in, essentially, plain text, and reading the article was fine - the company chose not to protect the data with any actual security. On the other hand, an unlocked bike isn’t ok to steal, so maybe the security isn’t the governing factor (you wouldn’t download a bike, would you??).
Copyright isn't bikes

The news agency or whoever has configured their server to perform a copy of the article and send it to you. The copy is authorized.

That you choose to modify how your browser displays that data afterwards is no business of theirs.



Plenty of sites have figured out how to only show the first paragraph or two to anonymous users; its not rocket science
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
I'm not sure why they call them GPUs. By design, they cant drives a monitor. Also by design, they suck at playing a game (it's always been good design that direct3d really early was able to recognize a separate GPU for display and 3d processing). Now for AI and datacenter uses, they are great and do a great job at it
They are still GPUs even if optimized for other use cases. They dont need an onboard video port; streaming works just fine for their intended use case. The H100 Hopper architecture isn't optimized for gaming (your frames/watt and frames/$ would be awful) but it almost certainly would work; I'd be very surprised if it didn't support the full instruction sets from previous generations. A100 is based on Ampere, the same GPU as the RTX 4000 series. Its literally a datacenter version of the 4090 with no functionality restrictions.

So yes, technically they are a Graphical processing unit and run tasks by faking 3d scenes to use the computing power of the GPU but under the general understanding of the term it's just not used to draw graphics on the screen
CUDA isn't "faking 3d screens", I promise
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
It can;t be the same GPU without the same performance. sans some driver optimization. It's way worse, like multiple GPU generation old level of bad. It's not made to do the wide range of things a traditional GPU does, hence why i said it should be called something else.
The "A" in A100 stands for Ampere. I was wrong in my previous post. Ampere is the RTX 3000 series and not the 4000, but the point remains. Its literally the same architecture as the cheaper desktop parts.

Hopper is specialized but it can run games (badly). Its even been benchmarked apparently
https://www.techspot.com/news/99148...-gaming-performance-surpassed-integrated.html
How do you think the GPU works? It's not a general purpose processor. It only understands very specific instructions and all of them are related to drawing a 3d scene in some fashion or on the case of the phsyx parts of a modern nvidia cpu it's related to how the polygons interact with each other. The higher level API to access it may be simplified so you don't have to draw the polygons yourself but it's still happening behind the scenes
They are not general purpose processors, true. They usually require a host CPU to dispatch instructions and collect results.

But your description of how they process instructions is completely and utterly wrong. The GPU doesn't need to read/write from a framebuffer (neither for PhysX nor for CUDA) and it can directly exchange data from its memory to that of the host CPU (and vice versa)

GPUs are just specialized coprocessors
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Among the debris recovered from the Alaska 737 Max 9 jet which had an emergency hatch blown out was an iPhone that still works after being sucked out of the plane and dropping 16k feet. A boy had his clothes ripped off as the pressure escaped the cabin.

Did it have a case? Otherwise, great Apple build quality?;)

Probably luck, landed on some plush vegetation or soil.

I‘ve never cracked an iPhone screen or nicked a corner. Case all the time. I did crack an iPad screen which was in a case but it landed screen first onto a tile floor from a height of about a foot and a half — coffee table.

Randall, if you are reading this, there's a new XKCD to be made about the likelihood of a phone breaking being inversely proportional to how ridiculous the circumstances are.
 
  • Haha
Reactions: VirtualWolf

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
That's right but it would be great for automation tasks. "Start word"., Enter the time in notepad", "Move all files from this folder to d:\more"

Most of that stuff you can do now via various automation tools

They do that now. Tag someone's face and the software is smart enough to be bale to sort by that face. Extend that to a general image attributes. Some android launchers have been able to sort icons by major color (i.e sort by blue icons and it shows everything that mostly blue)) and have been for quite some time
I wouldn't call any of that AI and certainly none of it requires new hardware

Google's Picassa, before the jerks canceled it, could identify unique individuals in images 15 years ago
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Anyone see the news about Gemini and how it will not produce white people in AI generated pictures? Apparently the backlash was so bad over this that google shut down image creation.
It definitely still generated white people but it seems like it was programmed to never make an image of a group of people with only white members.

This got awkward fast when people started generating examples of minorities in WWII Nazi uniforms and appearing at the drafting of the Declaration of Independence, IIRC.
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Yeah, I would never trust screenshots from X, especially paid bluecheck X users. They tend to be, shall we say, not good faith actors.

Well, unfortunately you can't trust LLM's to be consistent either especially if you dont ask the exact same question. I phrased two questions (Houthi, cannibalism) just like from the X screen shots and got reasonable answers similar to what papadage had for the former and a good argument against for the latter

I also tried asking the foie gras recipe exactly like papadage did yet I got a similar denial to what Curry's X post showed:

1709093537146.png

LLM responses can vary based on context. At the least questions you have previously asked in you current session are known to influence it but there are definitely other factors.

These tiresome accusations of lies and bad faith are a bit uncalled for and this makes an excellent demonstration for yet another pitfall of relying on a non-deterministic language interpolator that's being constantly (and opaquely) reprogrammed.
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
The SolarWinds attack was carried out via a compromise of the software vendor of the same name

Possibly SolarWinds, the company, might have been compromised by an ADFS vulnerability. Regardless I'm not sure why fixing an ADFS vulnerability would have endangered a contract negotiation. Its not exactly a secret that software has flaws and MS patches major ones every month

Lets look at the flaw itself which is mainly explained via frustrating slideshow: if you make a copy of the private key from a SAML server you can forge access tokens. Like yeah, duh. That's how SAML works and this isn't unique to MS. The only way to get that key is via obtaining highly privileged access to the authentication service which would be very bad on any platform. Or finding the key laying around if an admin is very sloppy. Neither is directly a flaw of the technology.
This is what makes a SAML attack unique. Typically, hackers leave what cybersecurity specialists call a “noisy” digital trail. Network administrators monitoring the so-called “audit logs” might see unknown or foreign IP addresses attempting to gain access to their cloud services. But SAML attacks are much harder to detect. The forged token is the equivalent of a robber using a copied master key. There was little trail to track, just the activities of what appear to be legitimate users.

Thats, uh, not how the internet works. A forged token can elevate your access but it doesn't hide your IP. There are other ways to do that of course. (and WTH is with the scare quotes?)

Later it goes on to talking about how smartcard SSO was part of the problem but dont explain how that anything to do whatsoever with a compromised SAML key

Further the link to a CyberArk article that's hilariously bad
https://www.cyberark.com/resources/...technique-forges-authentication-to-cloud-apps
Golden ticket is not treated as a vulnerability because an attacker has to have domain admin access in order to perform it. That’s why it’s not being addressed by the appropriate vendors. The fact of the matter is, attackers are still able to gain this type of access (domain admin), and they are still using golden tickets to maintain stealthily persistent for even years in their target’s domain.
No shit. If your root admins get popped and you do a bad job of cleaning up everything they could have compromised, you are still vulnerable. This has been true since the first physical lock and key were invented.


Either the author of the article badly mangled the description of the flaw or they got played. Either way its a bad look for them
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
If it was a simple patch, then why didn't MS do it?
There's nothing to patch. If a credential like a token signing cert is compromised you must replace it. If you dont realize you've already been compromised then you're just boned. There's nothing unique about ADFS in that regard. It would be just the same for literally any other bit of federated infrastructure ever. There will necessarily be a root of trust that can be compromised to affect multiple systems. The "Golden SAML" text above neglects to mention that someone whose gained such access would already be able to trivially intercept user passwords or even create their own accounts with any level of access they wish.

The solution to this is just to limit the extent of trust between systems. That's an architectural call made by the customer. Its not like segmentation was an unknown practice prior to these reports

Why did they shut down the security group?
A security group. They have a lot of them. I'd guess because he seems to be a bit of an obsessive crackpot.

Glancing at the article again it even they state Solar Winds wasn't hacked by this. They were just sloppy on multiple fronts and didn't clean house after the original breach
 

Ecmaster76

Ars Tribunus Angusticlavius
16,049
Subscriptor
Coming soon to Apple News... Scams!
https://www.axios.com/2024/07/16/taboola-apple-news-deal
Seriously, wtf? Taboola is the herpes of the internet. Is that guy that put gambling ads next to gambling addiction apps in the app store back, possibly with a moustache?
Its really tough for internet news agencies to make a dollar these days. You cant really blame a newcomer like Apple News for exploring every option to raise enough money to support their thankless mission of aggregating everyone else's hard work. Its not like they belong to some bottomless source of funding like WaPo
 
Status
You're currently viewing only Ecmaster76's posts. Click here to go back to viewing the entire thread.