I think the detailed description of this vulnerability described it as non-persistent in UEFI, but that you could install something that runs before secure boot that would be persistent. I think that’s splitting hairs, though - if you’ve been compromised by someone that has the skills to pull this exploit off, then they can probably chain something else into it now that they’ve got basically bare-metal access.
You also need to have sufficiently infiltrated the target’s local network to masquerade as a PXE server, and be in a position to force a server to reboot / just wait for one to reboot. Yes, a few places have large, fairly open networks with a lot of devices configure to PXE boot and they should apply the update before the next reboot, but vast majority of people, no issue at all.
I like to throw a few fucks and a couple of speling misteaks into my PRs, just so anyone reading them knows that all my stuff is done by hand. Fuck AI.
An NVidia GB300 fills a whole rack on a server, doesn’t have display outputs, draws 1.4 kW of electrical power, and requires mandatory liquid cooling capable of dissipating 1.4 kW of heat. Not a good match for a standard desktop system. I understand that they’re also optimised for churning through huge amounts of low-precision floating point, aka. an AI workload, rather than being truly general-purpose cards.
If you have any use for eye-watering amounts of CUDA calculations, then they might come in handy. I remember back in the day, if you had two graphics cards in SLI, that the Batman: Arkham Asylum game gave you the option of either using both cards for rendering, or one card for rendering and one card dedicated to PhysX calculations. You could use one of these GPUs for amazingly good-looking fog effects, assuming you had another GPU capable of rendering the graphics and outputting it? Not very sensible, tho.
I suspect that unless you work in a very compute-heavy industry (AI research, but maybe aerospace?) then you won’t have a use for these cards that would justify how expensive they are to run.
With my ‘security hat’ on, I’d have to say you shouldn’t use anything that’s no longer receiving updates. But that would create a lot of e-waste for no reason.
To see if your phone’s browser is still receiving updates, you can browse to:
https://emudhra.we-have-a-problem.com/
That has a grid showing whether your browser was willing to connect to sites using the compromised keys. If your browser is using its own cert style and still receiving updates, should be all green ticks. If so, then you can still use the phone for browsing internet. Be aware that using other apps on your phone (like eg. your email app) could be read easily by third parties, especially if you’re connected to unfamiliar wifi.
If it’s all red, maybe try another browser? Or relegate that device to being a dumb phone - switch off its data connection, phone calls only.
Is this a good place to link Shamus Young (RIP)'s masterwork, his novel-length discussion of the Mass Effect trilogy? tl:dr; first one was awesome, second one fouled up the lore but got away with it because of character and gameplay; third one had nowhere to go but down.
Obviously, set aside a few hours to read this, and probably a day if you’re wanting to read the comments, too.
Assuming that the device hasn’t been updated yet, yeah, this is what it allows you to do.
If you connect your device to a ‘fake’ router that’s completely under your control, then when the device attempts to connect to its remote server, you pretend to be it, and provide a certificate signed by this ‘trusted’ authority. Device will accept it. Make another connection to the real remote server. Decrypt what the device sends you, and send it on to the remote server; it’ll believe that you’re the android device, and respond with a message that you can decrypt, store, reencrypt with your fake key, and send it to the device. Repeat.
You’ll only be able to impersonate the API until the keys are revoked by an update. That’s maybe not so useful. However, any other connection that can be MITM’d and include other personal information - your bank card details, say - can be read, too.
As regards the data centre equipment; the SSDs and hard drives used for storage would be reusable by regular people. Those will be nice to have.
The memory is the high-bandwidth kind that is not be usable on consumer motherboards. The ‘graphics cards’ are the size of filling cabinets, require external power supplies and cooling, don’t have video outputs, don’t have drivers for graphics output. If you don’t have a requirement for serious parallel computation with a very high uptime, then it’s not worth the cost of powering them up. If/when the bubble bursts, all that shit is going to landfill.
Latest version of Unreal engine plus a fully slop game on top? Reckon you might get 13 fps to go with those 13 fingers.
Free games all subsidised by the Fortnite cash cow, which as far as I can tell is from children spending pocket money so their parents can get some peace. Devs being given a bigger cut of earnings I don’t believe is being done in good faith and would be reverted if they’d managed to challenge Steam. Besides which, what does it matter if you get 20% more of $0 in sales?
Game dev more accessible = Unreal engine has a good ide? Or are you suggesting that slop coding makes game dev more accessible? Am not with you there.
Gabe Newell and Tim Sweeney are both wealthy men. Gabe keeps on making decisions that challenge monopolies and are pro consumer choice; you may argue that that’s ultimately in his selfish best-interest but for now Steam is the best store front for gamers. Tim is like a weathervane for spouting the tech-bro fascist quote of the day, props up monopolies and doesn’t see any value in people that create games for the love of it. There is quite a difference between them.
It’s correct if they’re talking about multiple different kinds of psychological harm - depression and psychosis, say. Much like if I go and buy both full-fat and semi-skimmed, then I’m buying milks; or if I’m checking the hardness of river and tap samples, then I’m testing waters.
Moon is the same size as ever. Genetically engineered tiny girl, less mass to get into space. It’s the future.
Brit here. Starmer spent two years doing absolutely fuck all. That’s an absolute gift to far right parties; why bother voting for Labour OR the Tories if they don’t make any difference to your life at all? Vote for us, and we’ll make life hard for poor brown people and trannies, that’ll fix decades of underinvestment in your communities. I can’t blame people with hard lives who have been betrayed by politicians for so long, for grasping at any straw available, but it should be so easy to shut down the lies of the far right.
Burnham isn’t as left-wing as I would like. However, as mayor of Manchester he did some good work in bringing public transport under public control, and housing the homeless. He’s come in and started making the right noises about making change - reforming social care, ending the pension triple-lock, bringing the water supply back under public control. He seems committed to electoral reform; it’s long overdue in this country. He’s making moves towards rejoining the EU. He’s given Ukraine the schematics for building their own Storm Shadows; expensive tech, but hopefully they’ll be able to make good use of it.
On the other hand; he’s chickened out of reforming campaign donations, and using the G word to describe Israel’s genocide in Palestine. He has not corrected the dreadful decision of our high court from a few years ago giving free reign to discriminate against trans people - that’s set back LGBT rights in this country a decade or more, and is a disgrace. He also failed to tell Trump to go suck a dick in favour of ‘diplomacy’.
He’s been (mostly) using the right words so far, and he has previously shown he’s turned the right words into action. I’m hopeful - been a long time since I’ve been able to say that about our government. But we need more action.
Which messed-up Scrabble board has two Z’s in it so that you can spell ‘quizzed’ or ‘jazzily’? You don’t get the points if you use a blank…
That’s especially valuable information. 3600 rubes who you know are an easy target for scams, and 15 journalists who wanted to see how bad it was and should be easy to filter out.
It doesn’t even weigh a kilogram. It masses one kilogram. It’s weight will be something like 9.8 Newtons.
Got two letter 'e’s in it, and they’re both pronounced differently. To be fair, it’s far from the most divergent spelling-to-saying word in English. Some wrong-looking abomination like ‘meetir’ would be even better.
It’s how I installed Arch btw on my desktop, tiny boot image basically downloads the installer into RAM - NetBoot.
But yeah, if you’ve got a computer that’s old enough to be fully supported yet new enough to have the UEFI for hardware, an ethernet network which is robust enough to download full system images on every restart yet simple enough for the firmware to understand, and tonnes of memory free to hold the whole OS at all times, and you can tolerate the fact that restarts take ages, then it works great.