Posts
4609
Following
317
Followers
481
Linux kernel hacker and maintainer etc.

OpenPGP: 3AB05486C7752FE1
@oherrala Näinhän se on tottakai myös :-) Ei sijoittamista silti pidä ottaa ainoana prioriteettina, vaan NATO-termein on hyvä kehittää kaikkia kyvykkyyksiä, kun elämässä voi sattua muutakin kuin henkilökohtainen konkurssi...

Esim. jos olisi pakko valita lapsen kohdalla järkevän harrastuksen ja sijoittamisen kohdalla, niin kyllä mun mielestä järkevää harrastusta kannattaa painottaa taloudellisen turvaverkon. Taitava persaukinenkin tyyppi löytää aina paikkansa.
1
0
1

Jarkko Sakkinen

Edited 1 year ago
Ihmettelen välillä näitä sijoittamisesta kiihkoilevia, joiden mielestä jo 5-vuotiaan lapsen pitäis avata osakerahasto, jotta pääsee alle 40-vuotiaana eläkkeelle.

Itse yli nelikymppisenä en kyllä mistään hinnasta lakkaisi tekemästä mitään, koska ihminen on luotu tekemään asioita. Kuulostaa aikaistetulta kuolemalta.

Parempi ajatus omasta mielestä maksaa lainat pois kokonaan, ja keskittyä sen minimoimiseen kuinka paljon rahaa on pakko tulla sisään. Itsellä kuukausittaisiset eksistentiaaliset menot on n. 300 euroa asumiseen , ja 400 euroa tyttären opiskelujen tukemiseen. Esim. autoa en tarvitse keskusta-asunnon takia. Kallis keskusta-asunto säästää yllättävän paljon kaikissa muissa kuluissa, vaikka hankintahinta ja tarvittavan lainan koko onkin suuri. Lisäksi se on helposti likvidoitavaa omaisuutta.

Ostelen kyllä krpyptoa ja osakkeita silloin tällöin, mutta tavallaan tavoitteettomasti. Se on vaan mukava harrastus siinä missä shakki tai nettipokeri... Ei sijoittamisessa oikein varmaan pärjääkään pidemmän päälle, jos siitä odottaa liikoja, ja ei tykkää itse tekemisestä.

#raha #sijoittaminen #osakkeet
1
0
1

Jarkko Sakkinen

Edited 1 year ago
looking into using relatively new #accel subsystem of the #kernel to accomplish some work tasks...

i was afraid i would have to invent something like this by reusing some of the gpu code but this is great.

CONFIG_DRM_ACCEL for the win i hope :-)

https://docs.kernel.org/accel/introduction.html

#linux
0
0
0

Jarkko Sakkinen

Edited 1 year ago
I use #Lucidchart for these because UML style used by #drawio is the crappy and convoluted UML version, and with #yEd you have to go too great lengths for a trivial task: https://yed.yworks.com/support/qa/2054/is-a-data-flow-diagram-palette-available

It is sad how weak the support is for this diagram type among the tools, given that it is the most useful of them all...

Edit: actually draw.io also has old school versions in the palette so I was wrong. I might use that in the future :-)
0
0
0

Jarkko Sakkinen

Edited 1 year ago
the only diagram type actually like is old school data flow diagrams (DFD) :-) sequence diagrams and state machines are IMHO redundant and made only to please managers that "we are doing something". DFD's are not sensitive to code changes and provide actually useful map how data moves within a system.
1
0
0

Jarkko Sakkinen

Edited 1 year ago

#apache #tvm is somewhat involved to install #macOS laptop. At least compared to pipx install apache-tvm in my #Linux desktop.

I followed these randomly found instructions but rolled it backed immediately because I don’t want to re-spend my time on this.

Also makes me wonder how big mess compiler toolchains are in macOS really:

  1. I have Xcode command-line tools installed, which I expect to readily include llvm in some form.
  2. Instructions imply that I also need to install llvm, which logically makes no sense to me.
  3. Instructions also imply that I need to have GCC.

Might be just that the instructions are the broken portion but feels somewhat primitive and unorganized…I’m glad I develop iOS or Mac applications because then I would actually would have to use this as a real development machine I guess :-)

PS. The official instructions for macOS do not work in macOS at all :-)

1
0
0
@vitaut trolling fingers try to make me write something sarcastic but i bravely fight against my temptation :-)
1
0
1

Jarkko Sakkinen

When I have had to use Windows I've WSL2 totally inconvenient environment to work in with a number of things breaking up badly. A regular VM works much better and shell access goes by SSH.

That said I think as a technology it is a great piece still. I'd see for it more use if there was way to make Windows applications that would embed Linux kernel as a run-time.

It could e.g. be used to deliver accurate software versions of hardware consumer products, which tend to run Linux quite often...
0
0
0

Jarkko Sakkinen

Personally, I think that these new bc replacements make me feel more like Cobol vibes with "1 kilometer - 1 meter" type of expression support than modern vibes...
0
0
0

Jarkko Sakkinen

Edited 1 year ago
SGX/TDX and SEV-SNP are far from useless as hardware products but both fail to deliver to de-facto measure how things are cleared up in the security world: transparency. In both the transparency is not blocked by technologies being closed. It is blocked by not having cheap off-the-shelf hardware to try out the CPU features. One can objectively claim that these are the weaker parts of the arch-code, not because of unskilled developers but because of very small audience who tests these features in the wild.
0
0
0
Why I said commercial Linux vendors relates to a fact that for commercial entity it is most trivial to call yourself a CA... So it is measurable value for also for customers to pick RHEL or SUSE Enterprise Server and thus competitive advantage.
1
0
1
Depending on the product of course, this kind of architecture can be more secure than any of the confidential computing technologies because it does not require syscall shims. Kernel can fully lock-in syscalls however it chooses.

The big issue in "CoC" are these extra layers of software between trusted and untrusted world and complicated kernel stack that goes with them. I never neither fully got why limited set of entry points is such a big deal. You can still take advantage bugs at those entry points and apply attacks like RoP. It's not that different from accessing e.g. a network service with a limited set of requests. AFAIK, they also do get sometimes remotely exploited.
1
0
0

Jarkko Sakkinen

Edited 1 year ago
Commercial Linux distribution vendors could bring a lot of confidential computing benefits by providing rate-limited attestation service (i.e. accountless like AMD SEV-SNP CA works) I.e. CA would provide cryptographic proof of the core software stack.

With TPM2 backed hard drive encryption and HMAC encrypted chip communication you get a piece of confidential computing promise, i.e. the software adversary part and you can maintain that promise with pure software bug fixes, which obviously adds in to the value.

The main threat scenario of confidential computing is an adversary with a physical access to the hardware but it is also debatable scenario, and as we all know, there is a lot of data to backup the "debatable" part.

TCG, being a consortium and not a private company, states its specifications that TPM provides resistance against physical attacks. I think this is how Intel, AMD, ARM and other commercial CPU vendors should also describe their corresponding white papers, and make any improvements on top of clear and obvious to the customer.

PS. "confidential computing" is bad terminology but unfortunately it is also defacto terminology of the industry by now. It is actually "trusted computing" because the goal is try to address both confidentiality and integrity problems.

#linux #kernel #tpm #intel #amd #arm #sev #snp #sgx
1
0
0
@liw OK this is what I guessed, just had to check unfamiliar terminology :-) And you are absolutely right, also privacy issues drive apps and platforms towards this direction. For instance local AI is a hot topic in the industry...
0
0
1

Jarkko Sakkinen

Edited 1 year ago
@rolle Se on kyllä ihan kiistaton pullonkaula varsinkin pitkässä juoksussa Threadsille, että se on naitettu instaan. Se ei voi olla uusi Twitter ilman Instagram-riippuvuuden poistoa, eikä tarvitse olla kynäniska-niche-nörtti todetakseen tämän. Instahan pyörii siinä 40 pinnassa some-käyttäjissä vähän riippuen mitä tilastoa katsotaan, niin siinä on 60% potentiaalin aukko.

Mun mielestä mihin tahansa pilvipalveluun voi pistää sen oman SSO:n, Metan tapauksessa siis FB tai Insta-loginin, mut myös dedikoitu tunnuksen luonti on ihan välttämättömyys pidemmässä juoksussa, ellei halua keinotekoisia pullonkauloja kasvulle...
0
1
2
@liw what the heck is "local-first open source software"?
1
0
0
@kernellogger lol yep, it is my brains off soap opera :-) i have zero idea why i enjoy it...
0
0
1

Jarkko Sakkinen

Otin kuukaudeksi Ruutu plussan ja tyttöystävän kanssa käyty läpi hieman suomirealitya:

1. Lejonan luola. Hyvä ohjelma, ja ulkomainen vastine on lempiohjelmia. On tosin moraalisesti kyseenalaista, että yksi leijonista on istuva kansanedustaja Toiset pistävät omaisuutensa pantiksi kampanjoinnin takia, joten risuja tuotantoyhtiölle.
2. Rikkaat ja rutiköyhät. En sano tätä edes vitsillä, kun totean, että on monesti vaikea arvioida, kumpi jakson perheistä on rikas, ja kumpi rutiköyhä. Tämä siksi, koska en tiedä ihmisten henkilökohtaista tasetta. Kaikkea hienoa saa velkarahalla.

#suomi #reality #tv
0
0
0
@kernellogger great, i will prioritize drinking glögg then for the upcoming week, and watching seasons of "shark tank" that ive missed :-)
1
0
1

Thorsten Leemhuis (acct. 1/4)

Edited 1 year ago

6.7-rc7 is out: https://lore.kernel.org/lkml/CAHk-%3DwjDbR1oNZtqTNE4n8MHbzi028JFKSCvyW88hw%2B0GO%3DP%2BA@mail.gmail.com/

"'"[…] since tomorrow is Xmas Eve,[…] I'm doing rc7 on a Saturday instead.

[…] we *could* release a final 6.7 next weekend as per the usual schedule, I'm not going to do that. It's the holidays,[…]

So next weekend is going to be rc8, and I expect that it will be small as nobody should be around.

And then we might get back to a more normal schedule the week after. Maybe.

Please do give it a whirl if you have the time and the energy[…]"'"

1
1
1
Show older