Was that the thing where Gary predicted js in the kernel?

How about hardware accelerators to interpret JS? At least it wouldn't break, cause modern JS all transpiles to the old one.

bpf isn't a far stretch from that

yes, although more directly relevant here, chrome-compiled-to-wasm-nested-in-chrome

Firefox's font rendering is sandboxed by being C/C++-compiled-to-wasm-then-aot-compiled-to-native-code. Yavascript is dead, all hail WASM.

https://hacks.mozilla.org/2020/02/securing-firefox-with-weba...

How is it monetized? I read something about open core and paying for additional services I think. What are those and where can I find them?

I would love if you made such lectures into a series of YouTube videos as I sadly didn't have the pleasure in university. We only Java 6/7 as an indicator how long ago that was

I did the switch in 2013 and haven't missed it. For games I ran vga_passthrough and later VFIO and others until pretty recently (I think right after covid I switched to steam directly on linux)

Ah Bill Gates, the epitome of good software

> Ah Bill Gates, the epitome of good software

While developing Altair BASIC, his choice of data structures and algorithms enabled him to fit the code into just 4 kilobytes.

Yes, actually. Gates wrote great software.

Microsoft is another story.

And Paul Allen wrote a whole Altair emulator so that they could use an (academic) Harvard computer for their little (commercial) project and test/run Bill Gates' BASIC interpreter on it.

If have a different opinion on this, as I think it's 100x better to learn sql and just write it directly instead of using the dozens of leaky abstraction of some framework.

Which server today doesnt have Raid? Just pull one hdd out, extract what you need or change the image.

Then you turn off the server, and just start a vm with the captured init and capture the key.

Now you can decrypt the server offline with all the time in the world.

> Just pull one hdd out,

That only works with RAID 1. If the server uses RAID 5 or RAID 6, this won’t work.

> extract what you need

Well, yes. This is addressed in the FAQ.

> or change the image.

> Then you turn off the server, and just start a vm with the captured init and capture the key.

Well, as explained in the FAQ, an attacker will have to do so quickly, before the Mandos server decides that the Mandos client has been offline for too long, and disables that client. The default value is five minutes, but is configurable per client.

Why wouldn't this work with Raid5? One of my raid5 hdds cought fire and the server was still running. Talking about mdadm in this case.

5 minutes is plenty to boot initrd from a vm... what's that gonna take? 10 seconds?

I assume they're saying it won't work because the suggestion is to "pull one" HDD out.

With RAID 5, pulling 1/3 gives you only partial data, and pulling 2/3 removes too much so the system can't run.

Ok, that is assuming /boot is ON the raid which I wouldn't want to rate for probability

But even if it is, you could just pull one after the other and wait for the resilver before pulling the next one (you will hear if it resilvers automatically)

This doesn't work with secure boot and UKIs, since the entire "pre-rootfs switch" is signed in a single binary. If your threat model is what you have that is the least you should have.

Can't I just extract the key from uefi/tmp in this case? Not that it's easy, but with the right tools you can so it offline with all the time in the world

Shouldn't AI be able to take this one step further and just analyze the binary (of the samba server in this case) and create all kinds of interface specs from it?

Make the LLM operate the hypervisor VM so it can observe a binary as it executes to write specs for it?

I'm working on this. It's wild.

But then what, become a part of China? I don't think Russia could defend themselves from an attack of a lesser nation right now, and I truly wish one of them would take opportunity

China doesn't need to attach Russia. Just close the borders for all trade and Russia will implode within a year.

China doesn't want Russia to implode. That would only create problems for no real gain. But they'll take advantage of Russia's weakness to get cheap raw materials and perhaps some territorial concessions.

Why would China do that?

They know they are next on the chopping block.

They need Russia to guard their back, the last thing they need is a USA-friendly regime in Russia.

You are all talking about 'just a bit longer and Russia will implode'. Look at the state of Ukraine, who is going to implode sooner, Russia or Ukraine?

Heck, look at the state of Europe and USA! USA is a political nutcase, and Europe has deep divisions and is overflowing with incompetence and impotence. Plus enormous debts, both in USA and in Europe.

They still have nukes.