Every news website is covering it. I think I’ve spotted most of 10 articles around the place.

The law of well-marketed unreleased goods dictates that this vehicle is not going to meet any of the promises mentioned in the articles. I hope to be proven wrong, but just like video games: don’t pre-order, wait for it to come out and be reviewed.

Welcome to security news theatre :(

I don’t think espressif would bother suing, these kind of misshapen claims get constantly made against popular projects all of the time. It’s just unusual to see so much coverage about this particular one.

Not so say that externally attackable vulnerabilities in an ESP32 don’t exist, they might. Bluetooth devices have an awful track record. But making them up doesn’t help the world.

Bleepingcomputer’s title and article are very misleading, the presentation did NOT reveal a backdoor into an ESP32. It looks like Bleepingcomputer completely misunderstood what was presented (EDIT: and tarlogic isn’t helping with the first sentence on their site).

Instead the presentation was about using an ESP32 as a tool to attack other devices. Additionally they discovered some undocumented commands that you can send from the ESP32 processor to the ESP32 radio peripheral that let you take control of it and potentially send some extra forms of traffic that could be useful. They did NOT present anything about the ESP32 bluetooth radio being externally attackable.

Another perspective that might help: imagine you have a cheap bluetooth chipset that is open source and well documented. That would give you more than what the presentation just found. Would Bleepingcomputer then be reporting it’s a backdoor threatening millions of devices?

It looks identical to me. Same size before clicking, same size after right clicking -> Open image in new tab.

GNOME 2 was fun and easy. It felt like they were trying to learn from the mistakes of Windows and Mac UIs.

All of the the surface normals are backwards. This means your shoe is inside-out; instead of being a solid shoe in a vacuum it’s a shoe-shaped-hole inside a solid universe.

By default blender renders all polys as double-sided so you mostly don’t notice (other than some lighting oddities near corners). Turn on backface culling if you want to check if your normals are the right way around or not.

I often end up with some of my polys backwards because of the way I extrude and join parts of my models. I distinctly remember a bug in Gmax (old free version of 3DSmax) where the mirror tool would create polygons with some special, broken property where their normals would be correct in the editor, but completely wrong when exported :( much time and hassle was lost to that.

*mooshrooms

We rented our technology and could not read nor write.

Windows update fetches all sorts of things now. If the hardware advertises X device then Windows update will check if it has anything for it. Approved vendors can provide all sorts of guff. Historically that has included drivers that intentionally brick your devices. HP probably packaged up some software that updates the BIOS and got it into the Windows Update DBs.

This is something HP should have handled.

If a bad update is rolled out then it’s the responsibility of the software maker partner (HP) and the distributor (Microsoft), not just one or the other.

Those laptops are THEIR products, not Microsoft’s.

Both Microsoft and HP have branding on their laptops and a responsibility post-sale for the reliability of their systems. Hardware, firmware and OS responsibilities are all party to this chain of failure.

Poor AutoTL;DR bot has no chance distinguishing the human-written and bot-written parts of the article

Magazine CDs and DVDs were my bacon.

10 sec

Filthy casual.

My family has a Chiq U58G7P. Warm boots take about 30 sec and cold boots a few minutes.

Don’t try and press any buttons on the remote during this time or for a minute or two afterwards. They might work, 15 seconds later, or they might get ignored. Sometimes your button press inputs get re-ordered too.

Factory resets do work, but then all it can do is broadcast TV. If you let it update and install streaming apps then you will be back to the same problems.

I suspect that it might be running out of RAM and thrashing some poor innocent MMC as swap, but I can’t find a USB ADB port to properly find out (maybe it has one internally?).

25/10 for 65AUD/m (43USD/m). Australia, NBN (monopoly across entire country, technically government owned but run like a private corp because of politics). It’s the lowest speed now available, but it’s already overpriced. $780/year is far more than all of my wifi capable equipment is worth together, including laptops.

“The uploader has not made this video available in your country”

(Australia)

Any other way to see this? Or is this show not freely available (ie you have to pay for it)?

Nice, ty. I’ve only revenged PC firmware, not embedded, so I wouldn’t think of several of those tools.

I know a model of HP inkjet from my childhood that had a service/factory mode where ink checks were disabled. After years of claiming that its carts were empty I was suddenly able to print perfect full-colour pages. RIP HP Photosmart 3110

Congrats :) The idea that a few software bits are between you and getting a pile of junk working is infuriating. Did you extract and modify an image from flash or find a way in live?

Ditto with my printer. Print over LAN: sure. Printer connect to internet: hell no, that’s the first-party version of printer malware.

USB/2.0 (4.0; Gen 2; rv:1.1) USB4.1 Gen 3x3 (FIREWIRE, like RS232)

I am not so sure that it will end up faster or better.

**In theory: **A CPU scheduler should give programs as much CPU time as they want until you start nearing CPU resource saturation. Discord doesn’t need very large amounts of CPU (admittedly it’s a lot more than it should for a text chap app, but it’s still not diabolically bad). It will only start getting starved when you are highly utilising all cores. That can happen on my 2-core laptop, but I don’t have any games on my 6 core desktop that will eat everything. Nonetheless on my laptop I’d probably prefer my games take the resources (not Discord) and I’d happily suffer any reasonable drop in responsiveness of Discord as a result.

I don’t think that a new process (a new dedicated browser-client) instead of a new thread (tab in existing browser) is intrinsically faster or better. CPU schedulers are varied and complex, I wouldn’t be surprised if any differences in performance measurements would end up down in the noise. If anything the extra memory usage might cause more IO contention and memory starvation, making everything slower rather than faster. But this is all conjecture, so don’t give it much credit.

Basically, it’s faster to focus on painting a single canvas than it is to painting 3 at the same time.

I don’t think that’s much of a problem in practice, at least for Firefox: one tab can crash and stop rendering completely (or lock up 100% of 1 CPU core) but the others will keep going in other threads. For the most part they shouldn’t be able to affect each other’s performance.

In practice: What’s the actual metric that you think will be better or worse? I assume responsiveness to typing and clicks in the discord UI?

I’ve never seen discord lag or stutter from causes other than IO limitations (startup speed, network traffic, heavy IO on my machine) or silly design (having to refresh the page after leaving it open all day, I suspect it’s intentionally auto-disabling but I’m not sure). That’s not something that running a separate discord client in a separate dedicated/embedded browser will fix.