Wednesday, September 01

Geek

Daily News Stuff 1 September 2021

Gnome Ungnomes Edition

Top Story

Tech News

  • A Node.js library that is downloaded 3 million times a week - and is used in Amazon's developer libraries - has a remote execution flaw.  (HTTPToolkit)

    An attacker that can convince you to read a malicious URL can run whatever code they like on your server.

    The problem is it uses the vm module to run untrusted code - when the vm module explicitly says not to use it to run untrusted code.


  • If you're stuck at home in Australia waiting for one of (1) the 70% vaccination target to be met and things at least in NSW open up again, (2) the police kick your door down over a Facebook post that they posted for you, or (3) your package arrives in the mail don't bet too much on option 3.  (ZDNet)

    I understand they have staff out sick, can't easily hire more with this fucking lockdown going on, and are working to shift a much greater than usual volume, but I'm not sure how stopping accepting packages for three days is meant to help.


  • Get your own Amiga!  (Apollo Core)

    In case you're too young to have joined in the fun back in the 80s and 90s, the Vampire V4+ has a Motorola-compatible "68080" chip implemented in an FPGA - not emulated - with 512MB of RAM and a new (but compatible) chipset.

    It's around eight times faster than the most powerful stock Amiga ever sold - the A4000 - and uses just 2W of power.  It has both Amiga-style mouse and joystick ports and USB, plus the usual things like Ethernet, don't-call-it-HDMI-and-we-don't-need-to-pay-royalties, and an internal CF slot and an external SD card slot for extra storage.  (Actually, that should also be a don't-call-it-SD slot.)

    About 600 Euros so it's not exactly a bargain unless you compare it with what those systems cost originally in which case it is absolutely dirt cheap.


  • On the other end of the scale, if you're looking for an AMD motherboard with Thunderbolt 4 the Asus ProArt B550 Creator is one.  (Tom's Hardware)

    One of exactly two such, in fact.

    It has dual Thunderbolt 4 ports, dual 2.5Gb Ethernet ports, dual M.2 slots, HDMI out, DisplayPort in - it's routed to the Thunderbolt ports - and otherwise the usual bits and pieces.  Oh, and a PS/2 combo keyboard and mouse port in case you have a 30 year old keyboard that you just can't bear to part ways with yet.

    I wonder how well it works if you just plug two of these together with a Thunderbolt cable.


Disclaimer: Never mind the quality, can you feel the width when I do this?

Posted by: Pixy Misa at 07:11 PM | Comments (14) | Add Comment | Trackbacks (Suck)
Post contains 569 words, total size 4 kb.

1 Presumably not accepting new packages means that the workers who would be scanning, shifting, and stacking those new packages can instead work on clearing the existing backlog out of the way.

Posted by: David Eastman at Thursday, September 02 2021 02:40 AM (t/97R)

2 While creating a brand new backlog.

Posted by: Pixy Misa at Thursday, September 02 2021 05:45 AM (PiXy!)

3 Ah, but it's someone else's backlog, so it doesn't count against their metrics!

-j

Posted by: J Greely at Thursday, September 02 2021 10:16 AM (ZlYZd)

4 It might cause twice as much grief next statistical week, but since it's not in this statistical week it's actually my future self's problem, not mine.

Posted by: normal at Thursday, September 02 2021 10:40 AM (obo9H)

5 I see Past Ina/Future Ina in action in the Real World(TM) here....

I actually would not mind getting an Amiga, to be honest.  That was one of the systems I would have liked playing with....Then again, I really want a working Commodore 128 with disk drive too, which is another set of issues.

Posted by: cxt217 at Thursday, September 02 2021 11:16 AM (MuaLM)

6 Ted Dziuba was not wrong when he said Node was cancer.

Posted by: Rick C at Thursday, September 02 2021 11:21 AM (eqaFC)

7 "Actually, that should also be a don't-call-it-SD slot."

LOL--TransFlash, as they (still) say on AliExpress.

Posted by: Rick C at Thursday, September 02 2021 11:28 AM (eqaFC)

8 "Oh, and a PS/2 combo keyboard and mouse port in case you have a 30 year old keyboard that you just can't bear to part ways with yet."

Or you're too cheap to buy a USB keyboard with NKRO?

Posted by: Rick C at Thursday, September 02 2021 11:29 AM (eqaFC)

9 Which reminds me - this f*cking Dell Premium keyboard doesn't implement proper NKRO, and it's from 2017 and was not even slightly cheap.

Posted by: Pixy Misa at Thursday, September 02 2021 07:45 PM (PiXy!)

10 Heh.  "Dell premium keyboard" sounds like a synonym for "better than the regular Dell keyboard but still e-waste".

Posted by: Rick C at Thursday, September 02 2021 11:16 PM (eqaFC)

11 The hardware is miles better than the keyboard that shipped with the computer, but the firmware is crap.

Posted by: Pixy Misa at Thursday, September 02 2021 11:23 PM (PiXy!)

12 The Dell KB216, which is the default garbage that ships with their low-end business PCs actually types better than most of the replacements we have 'round here, particularly the logitech k120, which seems to be specifically designed to make you hate your fingers.  I mean, I'm one of those perverts who really likes the old IBM Model M.  Don't listen to me.

Posted by: normal at Thursday, September 02 2021 11:54 PM (LADmw)

13 "Model M"
Ah, you're one of those ones who hates his co-workers. smile   My first mech had Cherry MX Blues, but after that I switched to tactiles.

Posted by: Rick C at Friday, September 03 2021 06:59 AM (eqaFC)

14 I've always believed that loud keyboards are the best way to convince everyone you need an office with a door.

-j

Posted by: J Greely at Friday, September 03 2021 12:33 PM (ZlYZd)

Hide Comments | Add Comment




Apple pies are delicious. But never mind apple pies. What colour is a green orange?




56kb generated in CPU 0.0195, elapsed 0.1547 seconds.
58 queries taking 0.1445 seconds, 353 records returned.
Powered by Minx 1.1.6c-pink.