Giver of skulls

Verified icon

  • 0 Posts
  • 171 Comments
Joined 102 years ago
cake
Cake day: June 6th, 1923

help-circle









  • It kind of depends on how much of your body is densely packed fat or muscle, but in a still pool I’ve never managed to float in a way that didn’t at least let me float with my mouth above the water.

    I wouldn’t recommend anyone to go into the deep end of a pool without at least basic swimming skills, but if you can manage to remain calm, you can keep yourself from drowning pretty well, at least until help arrives.

    If you can swim and want to try this out, please try not to look like a drowning person, or you’ll end up being dragged out of the water by a lifeguard (or at least get called out). The human body has an instinctive drowning response that doesn’t look at all like drowning people in the movies, and keeping your head just above the water can easily make you look like a drowning victim if you’ve got your arms side to side.




  • Using modern technology, you can write a C Windows application that runs on Wine that runs on Linux that runs on QEMU running on WASM inside a web browser running on macOS that runs on a virtual machine controlled by a Linux hypervisor. Even the individual instructions sent to the CPU are decoded by a layer of software that rewrites and reorders them inside the CPU. The CPU that may very well contain a smaller Pentium CPU running Minix to maintain operation of the rest of the CPU.

    Software lunacy has made low/high-level programming languages obsolete. Everything can be distilled into Javascript runtimes, nothing is a real programming language anymore.


  • The Windows ordeal was definitely a fuck-up of their testing pipeline, and no doubt has something to do with the mass layoffs earlier this year. I’m sure they’ll be sued into oblivion (though I wonder what making this company go bankrupt or extracting the money out of it through lawsuits will do to all the businesses that currently have it deployed).

    The channel file wasn’t entirely zeroes, not for every customer at least. The code pages that were mapped as callbacks were empty or garbled, but not the entire file (see this thread, for instance).

    However, society shouldn’t crumble because of something like this. It shows how fragile our critical infrastructure really is. I don’t care about airlines and such, but 911 shouldn’t go down because of CrowdStrike or even because of Windows. Even airlines should’ve been able to fly some planes, it’s not like Boeings run Windows.


  • The automatic update part was akin to virus definitions and triggered a bug in code released long before that. Not auto-updating your antivirus software would put a pretty high tax on the IT team as those updates can get released multiple times a day (and during weekends). I agree on not auto updating text editors and such, but there are types of software that need updates quickly and often.

    Supply chain attacks can always work, but this shows how ill-prepared companies are for their systems failing on a scale like this. The fix itself is maybe a minute or two per device if you use Microsoft’s dedicated repair tool, maybe even less if you use that thing with PXE boot, but we’re still weeks away from fixing the damage everywhere.


  • Tbh the RHEL/Debian bug only occurred because of bugs in Debian and RHEL, they couldn’t really do much about those. Especially the Debian one, which only took place in Linux kernels several versions above the normal Debian kernel.

    CrowdStrike releasing a buggy release can just happen sometimes. I just hope the entire industry may condider that relying on three or four vendors for auto-updating software installed all corporate computers in the world may not be a good idea.

    This whole thing could’ve been malicious. We got lucky now that it only crashed these systems, just imagine the damage you can do if you hack CrowdStrike themselves and push out a cryptolocker.