Hacker Newsnew | past | comments | ask | show | jobs | submit | mldbk's commentslogin

MITM usually will not work in case of pkg managers, since packages are signed. But still, attacker can learn what kind of software is installed on target. So I believe that HTTPS for privacy in case of linux package managers are fair enough.


The attacker can meddle with every step taken before the signature verification. The way you handle the HTTP responses, the way you handle the signature format, all that. Captive portals have already caused corruption issues for Apt, signed packages be damned.

Saying it's "fair" is like saying engine maintenance does not matter because the tires are inflated. There are more components to it.

Ensuring the correctness of your entire stack against an active MITM is significantly more difficult than ensuring the correctness of just a TLS stack against an active MITM.


Either you haven't been when context menus / explorer was blazingly fast or something odd happens there, since I can confirm that on brand new PC (128GB RAM, 9950X3D, 5090) with vanilla Windows 11 it still lags and annoys a lot after some linux distro.


> You know, I'm something of a CPU engineer myself :D

Actually almost everything what you wrote is not true, and commenter above already sent you some links.

7800X3D is the GOAT, very power efficient and cool.


The only reason the 7800x3d is power efficient is because it simply can't use much power, and so it runs at a better spot of the efficiency curve. Most of the CPUs won't use more than ~88w without doing manual overclocking (not pbo). Compare that to e.g. a 7600x that's 2 cores fewer on the same architecture and will happily pull over 130w.

And even if could push it higher, they run very hot compared to other CPUs at the same power usage as a combination of AMD's very thick IHS, the compute chiplets being small/power dense and 7000 series X3D cache being on top of the compute chiplet unlike 9000 series that has it on the bottom.

The 9800x3d limited in the same way will be both mildly more power efficient from faster cores and run cooler because of the cache location. The only reason it's hotter is that it's allowed to use significantly more power, usually up to 150w stock, for which you'd have to remove the IHS on the 7800X3D if you didn't want to see magic smoke


I held the same view as you when I was 22, more than 15 years ago.

With over 15 years of professional experience since then, my perspective has shifted: Java demonstrates its strength when stability, performance, and scalability are required (e.g. bloody enterprise)

A common misconception comes from superficial benchmarking. Many focus solely on memory consumption, which often provides a distorted picture of actual system efficiency.

I can point to EU-scale platforms that have reliably served over 100 million users for more than a decade without significant issues. The bottleneck is rarely the language itself, it is the depth of the team’s experience.


> Many focus solely on memory consumption, which often provides a distorted picture of actual system efficiency.

When other languages can do the same thing with an order of magnitude less RAM, any other efficencies in the system tend to be overshadowed by that and be the sticking point in peoples memories.

You may argue that holding on to this extra memory makes subsequent calls and reads quicker etc, but in my experience generally people are willing to sacrifice milliseconds to gain gigabytes of memory.


node is a notable exception. Compared to java node is a hellhole. the standard library is non-existent, most libraries are a buggy mess, the build system is horrible...in fact there is no reliable build system that solves all your typical problems in 1 app. The list goes on.


You definitely tried Mazda long ago :)


No, I'm aware of both involved technologies the implementations.

I test drove the Mazda3 for my kids and it had some faux-luxury accoutrements but fundamentally it was an inferior car: the technology implementation was worse.

Mazda hasn't invested in drivetrain implementations so they license Toyota's. Mazda hasn't invested in ADAS software so they barely try. Mazda hasn't invested in a decent suspension implementation so their 3 line uses some god-awful torsion beam garbage that feels completely unrefined and consumer.

Bad.


> Mazda hasn't invested in drivetrain implementations so they license Toyota's.

??? Mazda has their own drivetrain development, there is nothing in a Mazda3 that is shared with a Toyota. The only company sharing drivetrain with Toyota is Subaru and BMW via their joint ventures on the BRZ/GR86 and the Z4/Supra.

> Mazda hasn't invested in a decent suspension implementation so their 3 line uses some god-awful torsion beam garbage that feels completely unrefined and consumer.

Mazda uses a torsion beam rear suspension on the Mazda3, that is true. While independent and multi-link suspensions /can/ be superior handling, it relies on having adjustability in the suspension arms to allow you to set your geometry to match your expected conditions and the tires you're using, which is to say that it's basically irrelevant in a commodity road-going vehicle, most of which offer no adjustment in the rear or toe-only adjustment. I say this as someone who raced cars as a hobby, and invested the time/effort/money to learn at least as much about suspension design as someone who did an undergrad in MechE, modeled my racecar's suspension in software, and worked with a shop to develop and produce custom suspension arms with full adjustability to match my ideal geometry.

Despite the technically "worse" torsion beam suspension in the rear of the Mazda3, it handles better than a Corolla XSE on a curvy road.

EDIT: I stand corrected, Mazda licenses the RAV4 Hybrid drivetrain for the CX-50 Hybrid crossover. Which is of course super-relevant to the Mazda3, a totally different vehicle, which almost anyone who cares about the drivetrian buys with the 2.5L turbo motor and PP so they get AWD, but hey who's counting.


I'd have simply deleted the post if the driving force of it were corrected.

Mazda licensed the drivetrain because they're a small company without much development going on. They can't really make anything good.


Their racing pedigree and long standing in the hot hatch category disagrees with you, so do the basic facts of the matter.

You've now written yourself off as an idiot with an axe to grind rather than any form of good faith interaction.


I have installed Fedora back in 2017, since that time I just upgrade it: sudo dnf system-upgrade download --releasever=NN && sudo dnf system-upgrade reboot.

Haven't reinstalled it in 8 years. Everything runs smoothly.


It was a fair point decade ago, today Fedora's pkg mgmt is miles ahead of what it used to be.


Underrated '00s comment :D


It is an outdated claim.

I have both 4090 (workstation) and 7900XT (to play some games) and I would say that 7900XT was rock solid for me for the last year (I purchased it in Dec 2023).


  It is an outdated claim.
You assume that. I wish it was. This is my actual recent experience with AMD and their drivers. It did get better in the past few months, but I still occasionally get total freezes when only a hard reset helps.

Good for you though.


What is that? Even your custom android build will have some binary blobs for your SoC.

We are just doomed.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: