Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "instruction not clear"
-
https://git.kernel.org/…/ke…/... sure some of you are working on the patches already, if you are then lets connect cause, I am an ardent researcher for the same as of now.
So here it goes:
As soon as kernel page table isolation(KPTI) bug will be out of embargo, Whatsapp and FB will be flooded with over-night kernel "shikhuritee" experts who will share shitty advices non-stop.
1. The bug under embargo is a side channel attack, which exploits the fact that Intel chips come with speculative execution without proper isolation between user pages and kernel pages. Therefore, with careful scheduling and timing attack will reveal some information from kernel pages, while the code is running in user mode.
In easy terms, if you have a VPS, another person with VPS on same physical server may read memory being used by your VPS, which will result in unwanted data leakage. To make the matter worse, a malicious JS from innocent looking webpage might be (might be, because JS does not provide language constructs for such fine grained control; atleast none that I know as of now) able to read kernel pages, and pawn you real hard, real bad.
2. The bug comes from too much reliance on Tomasulo's algorithm for out-of-order instruction scheduling. It is not yet clear whether the bug can be fixed with a microcode update (and if not, Intel has to fix this in silicon itself). As far as I can dig, there is nothing that hints that this bug is fixable in microcode, which makes the matter much worse. Also according to my understanding a microcode update will be too trivial to fix this kind of a hardware bug.
3. A software-only remedy is possible, and that is being implemented by all major OSs (including our lovely Linux) in kernel space. The patch forces Translation Lookaside Buffer to flush if a context switch happens during a syscall (this is what I understand as of now). The benchmarks are suggesting that slowdown will be somewhere between 5%(best case)-30%(worst case).
4. Regarding point 3, syscalls don't matter much. Only thing that matters is how many times syscalls are called. For example, if you are using read() or write() on 8MB buffers, you won't have too much slowdown; but if you are calling same syscalls once per byte, a heavy performance penalty is guaranteed. All processes are which are I/O heavy are going to suffer (hostings and databases are two common examples).
5. The patch can be disabled in Linux by passing argument to kernel during boot; however it is not advised for pretty much obvious reasons.
6. For gamers: this is not going to affect games (because those are not I/O heavy)
Meltdown: "Meltdown" targeted on desktop chips can read kernel memory from L1D cache, Intel is only affected with this variant. Works on only Intel.
Spectre: Spectre is a hardware vulnerability with implementations of branch prediction that affects modern microprocessors with speculative execution, by allowing malicious processes access to the contents of other programs mapped memory. Works on all chips including Intel/ARM/AMD.
For updates refer the kernel tree: https://git.kernel.org/…/ke…/...
For further details and more chit-chats refer: https://lwn.net/SubscriberLink/...
~Cheers~
(Originally written by Adhokshaj Mishra, edited by me. )
22 -
I wonder why banks are always so terribly insecure, given how much money there's for grabs in there for hackers.
Just a while ago I got a new prepaid credit card from bpost, our local postal service that for some reason also does banking. The reason for that being that - thank you 'Murica! - a lot of websites out there don't accept anything but credit cards and PayPal. Because who in their right mind wouldn't use credit cards, right?! As it turns out, it's pretty much every European I've spoken to so far.
That aside, I got that card, all fine and dandy, it's part of the Mastercard network so at least I can get my purchases from those shitty American sites that don't accept anything else now. Looked into the manual of it because bpost's FAQ isn't very clear about what my login data for their online customer area now actually is. Not that their instruction manual was either.
I noticed in that manual that apparently the PIN code can't be changed (for "security reasons", totally not the alternative that probably they didn't want to implement it), and that requesting a forgotten PIN code can be done with as little as calling them up, and they'll then send the password - not a reset form, the password itself! IN THE FUCKING MAIL.
Because that's apparently how financial institutions manage their passwords. The fact that they know your password means that they're storing it in plain text, probably in a database with all the card numbers and CVC's next to it. Wouldn't that be a treasure trove for cybercriminals, I wonder? But YOU the customer can't change your password, because obviously YOU wouldn't be able to maintain a secure password, yet THEY are obviously the ones with all the security and should be the ones to take out of YOUR hands the responsibility to maintain YOUR OWN password.
Banking logic. I fucking love it.
As for their database.. I reckon that that's probably written in COBOL too. Because why wouldn't you.23 -
For fucks sake if I send you a clearly described 5 step install instructions do not start on step 3! Yes you fucking moron instructions labeled 1,2,3,4,5 should be carried out one after the other! Not in random order.
Seriously, how deranged are you that you have never ever encountered a step-by-step instruction before?!
Don't give me that "oh, should I have started with step 1 first? You weren't very clear about that. I think it is a bit too complicated."
Here are some more instructions:
1. Close your PC
2. Donate it to someone with detectable IQ level
3. Go fuck yourself
4. Please die
5. Yes, start with step 15 -
So what's preventing me from launching my startup/service/platform to the public? Not ready to deal with users like Nancy.
2 -
Rubber ducking your ass in a way, I figure things out as I rant and have to explain my reasoning or lack thereof every other sentence.
So lettuce harvest some more: I did not finish the linker as I initially planned, because I found a dumber way to solve the problem. I'm storing programs as bytecode chunks broken up into segment trees, and this is how we get namespaces, as each segment and value is labeled -- you can very well think of it as a file structure.
Each file proper, that is, every path you pass to the compiler, has it's own segment tree that results from breaking down the code within. We call this a clan, because it's a family of data, structures and procedures. It's a bit stupid not to call it "class", but that would imply each file can have only one class, which is generally good style but still technically not the case, hence the deliberate use of another word.
Anyway, because every clan is already represented as a tree, we can easily have two or more coexist by just parenting them as-is to a common root, enabling the fetching of symbols from one clan to another. We then perform a cannonical walk of the unified tree, push instructions to an assembly queue, and flatten the segmented memory into a single pool onto which we write the assembler's output.
I didn't think this would work, but it does. So how?
The assembly queue uses a highly sophisticated crackhead abstraction of the CVYC clan, or said plainly, clairvoyant code of the "fucked if I thought this would be simple" family. Fundamentally, every element in the queue is -- recursively -- either a fixed value or a function pointer plus arguments. So every instruction takes the form (ins (arg[0],arg[N])) where the instruction and the arguments may themselves be either fixed or indirect fetches that must be solved but in the ~ F U T U R E ~
Thusly, the assembler must be made aware of the fact that it's wearing sunglasses indoors and high on cocaine, so that these pointers -- and the accompanying arguments -- can be solved. However, your hemorroids are great, and sitting may be painful for long, hard times to come, because to even try and do this kind of John Connor solving pinky promises that loop on themselves is slowly reducing my sanity.
But minor time travel paradoxes aside, this allows for all existing symbols to be fetched at the time of assembly no matter where exactly in memory they reside; even if the namespace is mutated, and so the symbol duplicated, we can still modify the original symbol at the time of duplication to re-route fetchers to it's new location. And so the madness begins.
Effectively, our code can see the future, and it is not pleased with your test results. But enough about you being a disappointment to an equally misconstructed institution -- we are vermin of science, now stand still while I smack you with this Bible.
But seriously now, what I'm trying to say is that linking is not required as a separate step as a result of all this unintelligible fuckery; all the information required to access a file is the segment tree itself, so linking is appending trees to a new root, and a tree written to disk is essentially a linkable object file.
Mission accomplished... ? Perhaps.
This very much closes the chapter on *virtual* programs, that is, anything running on the VM. We're still lacking translation to native code, and that's an entirely different topic. Luckily, the language is pretty fucking close to assembler, so the translation may actually not be all that complicated.
But that is a story for another day, kids.
And now, a word from our sponsor:
<ad> Whoa, hold on there, crystal ball. It's clear to any tzaddiq that only prophets can prophecise, but if you are but a lowly goblinoid emperor of rectal pleasure, the simple truths can become very hard to grasp. How can one manage non-intertwining affairs in their professional and private lives while ALSO compulsively juggling nuts?
Enter: Testament, the gapp that will take your gonad-swallowing virtue to the next level. Ever felt like sucking on a hairy ballsack during office hours? We got you covered. With our state of the art cognitive implants, tracking devices and macumbeiras, you will be able to RIP your way into ultimate scrotolingual pleasure in no time!
Utilizing a highly elaborated process that combines illegal substances with the most forbidden schools of blood magic, we are able to [EXTREMELY CENSORED HERETICAL CONTENT] inside of your MATER with pinpoint accuracy! You shall be reformed in a parallel plane of existence, void of all that was your very being, just to suck on nads!
Just insert the ritual blade into your own testicles and let the spectral dance begin. Try Testament TODAY and use my promo code FIRSTBORNSFIRSTNUT for 20% OFF in your purchase of eternal damnation. Big ups to Testament for sponsoring DEEZ rant.2 -
A follow-up to a previous rant: https://devrant.com/rants/2296700/...
... and how the senior dev recently took it up a notch.
To recap: Back then the senior dev in our two-man project prepared tasks for me so thoroughly they became typing monkey jobs. He described what to do and how to do it in minute detail in the JIRA tasks.
I talked to him back then how this is too detailed. I also talked to our boss, who agreed to nudge mr. senior in the right direction and to make it clear he expects teamwork.
Fast forward to a couple of days ago. An existing feature will get extended greatly, needing some rework in our backend project. Senior and me had a phone call about what to do and some unclear details in the feature spec. I was already frustrated with the call because he kept saying "No, don't ask that! That actually makes sense, let's just do it as the spec says" and "Don't refactor! We didn't request a budget for that from our customer". Like wtf, really? You don't consider refactoring part of our job? You don't think actually understanding the task improves the implementation? Dude...
We agreed this is a task for one person and I'd do it. It took me the rest of the day to wrap my head around the task and the corresponding existing code. It had some warts, like weird inheritance hierarchies and control flow jumping up and down said hierarchy, but nothing too bad. I made a mental note to still refactor this, just as much as necessary to make my task easier. However... the following day, I got an email from mr. senior. "I refactored the code after all, in preparation for your task". My eyebrows raised.
Firstly, he had made the inheritance hierarchy *worse*. Classic mistake: Misusing inheritance for code reuse. More control flow jumping up and down like rabid bunnies. Pressed on that matter, he replied "it's actually not that bad". Yeah, good work! Your refactoring didn't make things worse! That's an achievement worthy of being engraved on your tombstone. And didn't he say "no refactoring"? Apparently rules are unfortunate things that happen to other people.
But secondly, he prepared classes and methods for me to implement. No kidding. Half-implemented methods with "// TODO: Feature x code goes here" and shit. Like, am I a toddler to you? Do you really think "if you don't let me do things myself I feel terribly frustrated and undervalued" is best answered with giving me LESS things to do myself? And what happened to our boss' instruction to split the task so each of us can work on his parts?
So, this was a couple of days ago. Since then, I've been sitting in my chair doing next to nothing. My brain has just... shut down. I'm reading the spec, thinking "that would require a new REST endpoint", and then nothing happens. I'm looking at the integration test stubs ("// TODO: REST call goes here") and my mind just stays blank, like a fresh unpainted canvas. I've lost all my drive.
I don't even know what to do. Should I assign the task back to him and tell him to go fuck himself? Should I write my boss I'm suddenly retarded? Could I call in sick for a year or so? I dunno... I can barely think straight. What should I do and how?5 -
AGI Driving Academy: Premier Driver's Education in Lake Charles, LA
If you’re looking for top-quality driver's education in Lake Charles, LA, AGI Driving Academy is your trusted local driving school, providing comprehensive and expert instruction for drivers of all ages. Whether you're a teenager taking your first steps toward earning your driver's license or an adult looking to refresh your driving skills, we offer a wide range of courses to suit your needs. Located conveniently at 4019 Common St, Lake Charles, LA 70607, we’re committed to offering exceptional education that prepares you for a lifetime of safe driving.
Why Choose AGI Driving Academy for Driver’s Education in Lake Charles, LA?
At AGI Driving Academy, we believe that learning to drive is not just about passing a test but about gaining the confidence and skills needed to stay safe on the road. Here’s why AGI Driving Academy stands out as the top choice for driver’s education in Lake Charles, LA:
Experienced and Certified Instructors
Our team of certified and experienced driving instructors is passionate about helping you become a skilled and confident driver. They are patient, professional, and committed to teaching you the essential skills to drive safely in various traffic conditions. With AGI Driving Academy, you’ll receive the best possible instruction tailored to your pace and learning style.
Comprehensive Driver’s Education Programs
We offer a full range of driver’s education courses to meet the needs of everyone. Whether you're a first-time learner or an experienced driver looking to brush up on your skills, we provide both classroom and behind-the-wheel training to ensure a complete learning experience. Our program covers important topics such as traffic laws, road signs, defensive driving, and accident avoidance.
Flexible Scheduling Options
We understand that life can get busy, and finding time to attend driving school can be a challenge. That’s why AGI Driving Academy offers flexible scheduling for our students. Whether you need morning, afternoon, or evening classes, we work with your schedule to make sure your driver’s education in Lake Charles, LA fits seamlessly into your life.
State-of-the-Art Vehicles
Our fleet of modern, well-maintained vehicles is equipped with the latest safety features, providing you with a comfortable and secure environment in which to learn. Whether you’re just starting out or need to practice your skills for your road test, our cars are the perfect choice for your driving lessons.
Affordable and Competitive Pricing
We believe that quality driver’s education in Lake Charles, LA should be affordable. At AGI Driving Academy, we offer competitive rates without sacrificing the quality of instruction. We strive to make our programs accessible to all, ensuring that learning to drive is a valuable investment that doesn’t break the bank.
What to Expect from Our Driver’s Education Program
When you sign up for AGI Driving Academy’s driver’s education in Lake Charles, LA, you can expect a structured and thorough learning experience that includes both classroom instruction and practical, behind-the-wheel lessons. Here’s an overview of what’s included in our program:
Classroom Instruction: Learn the rules of the road, traffic laws, signs, and signals. You’ll also gain a solid understanding of defensive driving techniques, how to handle hazardous situations, and how to drive responsibly in all conditions. Our instructors provide clear and thorough lessons that prepare you for the challenges of driving in real-world situations.
Behind-the-Wheel Training: We believe hands-on experience is essential to becoming a confident and skilled driver. You’ll receive personalized driving lessons with one-on-one instruction, allowing you to practice everything from basic vehicle control to more advanced maneuvers such as merging, lane changes, and parallel parking.
Defensive Driving: One of the most critical components of our program is teaching you defensive driving techniques. Our goal is to ensure that you can anticipate and respond to hazards on the road, keeping you safe in any situation.
Road Test Preparation: We’ll help you prepare for the driving test by making sure you’re fully familiar with the skills and maneuvers required. You’ll get plenty of practice with a professional instructor, making sure you feel confident and ready for your test day.
Convenient Location in Lake Charles, LA
Located at 4019 Common St, Lake Charles, LA 70607, AGI Driving Academy is easily accessible for students throughout Lake Charles and the surrounding areas. Whether you live in the city or nearby communities, our central location ensures that high-quality driver’s education in Lake Charles, LA is just a short drive away.2 -
Professional Driving Lessons with a Female Automatic Driving Instructor in Blackburn
Are you looking for a reliable local driving instructor in Blackburn? Whether you're a beginner, need to improve your skills, or want to refresh your knowledge, our female automatic driving instructor offers expert driving lessons tailored to your needs. From vehicle control lessons to road safety lessons, we ensure you gain the confidence and skills required to drive safely on the road.
Local Driving Instructors in Blackburn
As a trusted local driving instructor in Blackburn, we take pride in offering high-quality, personalized driving lessons to learners of all levels. Our female driving instructor is dedicated to providing clear, patient instruction in a calm and supportive environment. Whether you're just starting your driving journey or need additional support to refine your skills, we are here to help you succeed.
Choosing a local driving instructor ensures that you have easy access to lessons in your area, and we’re committed to providing flexible scheduling to fit your busy lifestyle. We know the local roads well and can ensure you're prepared to drive safely in familiar environments.
Driving Lessons for Women in Blackburn
At our driving school, we offer driving lessons specifically designed for women, providing a relaxed and supportive learning environment. Many women prefer learning with a female instructor, as it often helps them feel more comfortable and less anxious behind the wheel. Our female driving instructor creates a welcoming atmosphere where you can feel at ease as you learn vital driving skills.
Whether you're a first-time learner or returning to the road after a break, our driving lessons for women are tailored to help you build your confidence and become a safe, skilled driver. We provide personalized guidance every step of the way to ensure you achieve your driving goals.
Driving Instructor Services in Blackburn
Our driving instructor services in Blackburn are comprehensive, catering to learners of all levels. From the very first lesson to advanced driving techniques, we cover all aspects of driving instruction. We specialize in automatic driving lessons but also offer manual driving lessons to suit your needs.
Our instructor services are designed to help you become a well-rounded driver. Whether you need help with basic vehicle control or advanced road safety techniques, we are here to ensure you are fully prepared for your driving test and life as a confident, independent driver.
Vehicle Control Lessons in Blackburn
Vehicle control is one of the most important aspects of driving, and our vehicle control lessons in Blackburn are designed to teach you the skills you need to handle your car safely and efficiently. Whether you're learning to drive an automatic or manual car, mastering vehicle control is crucial for safe driving.
Our lessons cover everything from steering and braking to accelerating smoothly and maneuvering in tight spaces. With expert instruction, you'll quickly gain the skills needed to handle your vehicle confidently in any driving situation.
Road Safety Lessons in Blackburn
Road safety is at the heart of what we teach. Our road safety lessons in Blackburn are designed to help you develop the skills needed to stay safe on the road, whether you're driving in busy city traffic or on quieter country lanes. We cover essential road safety practices such as understanding road signs, recognizing hazards, maintaining a safe following distance, and handling adverse weather conditions.
By focusing on road safety, our goal is to ensure that you not only pass your driving test but also become a responsible driver who is aware of the risks and prepared to react to different situations. Safety is our top priority, and we provide the knowledge and skills to keep you safe on the road at all times.
Why Choose Our Driving School in Blackburn?
Experienced Female Instructor: Our instructor has years of experience in teaching learners, offering a supportive and understanding approach tailored to your needs.
Local Driving Instructor Services: We are a local driving school in Blackburn, providing easy access to driving lessons and in-depth local road knowledge.
Driving Lessons for Women: We create a comfortable and encouraging environment for women learners, helping you feel at ease behind the wheel.
Vehicle Control & Road Safety Focus: Our lessons emphasize essential skills like vehicle control and road safety, ensuring you're a well-prepared and responsible driver.
Flexible Scheduling: We offer flexible lesson times that fit around your schedule, making it easier for you to learn at your own pace.2
