• 0 Posts
  • 1.03K Comments
Joined 3 months ago
cake
Cake day: February 5th, 2025

help-circle

  • Xanza@lemm.eetolinuxmemes@lemmy.worldVentoy my beloved.
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 hours ago

    Directly from the developer:

    iVentoy and Ventoy are two completely different softwares and have no shared files.

    You seem to be implying that because iVentoy (which is not Ventoy) is vulnerable to this attack then that means that Ventoy is also vulnerable which is not only highly speculative, it remains to be seen.

    Actually, when iVentoy boot Windows through PXE, it will boot the WinPE with test mode, so there is no need for the driver file to be signed. So httpdisk_sig.sys is actually not needed and can be removed later.

    The dev goes on to explain;

    the httpdisk driver will be installed only in the temporary WinPE environment (running in the RAM), not the final Windows system

    The driver is singularly used in the PE environment. That’s it.

    Is this a security issue? Sure. Is it as bad as everyone wants to make it out to be? Not really. From start to finish the Ventoy fever people seem to be getting by unsigned blobs is simply insane. Its a bout of hysteria and it’s not impressive at all.


  • In your experience, what is the best way to go about this?

    RSS feeds are static files with formatted XML list items. When a feed is updated to include a new XML list item, the reader application notifies users who are subscribed that there’s been a change. There are actually no moving parts to RSS feeds, which is what makes them so popular. RSS feed applications simply loads an XML feed and counts the number of XML objects. When the application checks again, if there are new objects, then the feed has been updated and you get your little notification.

    That’s it. It’s a static file (like HTML), and it works like magic. You don’t need any software or libraries to create an RSS feed over and above being able to serve static XML.

    So unless you’re updating your feed several times per day, I would just do it by hand. Maybe write a little helper script to scratch out the formatted XML based on input.

    Do I have to make them myself by hand and put them in an /rss/ directory in the root of my blog?

    You can, but it’s really not necessary. If you check around github you can find a ton of projects that help you create RSS feeds.




  • That Tim Walz’s and AOC’s support for Israel is the single-issue that’s stopping Democrats - or at the very least Walz/AOC - from winning elections?

    I mean, it’s a significant swing factor. It’s clearly not the only factor, but you have entire communities in the US not voting for candidates because of their stances on Israel. You would think this past election would be a glaringly obvious example, but I guess not.

    Gallop polls suggest it’s a significant issue or voters;

    Democrats’ sympathies for the Israelis dipped to 38%, while the reading for Palestinians jumped 11 points to 49% […]

    About 50% of them. To imply that they’re not losing elections because of the support of Israel is supremely ignorant and stupid.


  • Because that download would still be illegal

    Of course its still illegal. I’m not saying it’s using a seedbox makes it legal to download illegal torrents. It’s just legal in the country of your seedbox. So if your seedbox provider gets a DMCA notice, they’re going to throw it directly in the trash.

    Additionally, between my seedbox and me, is encrypted. So how would anyone know what I download from my private seedbox? There’s realistically no way to get “caught.” Copyright holders pay people to monitor torrent traffic for people to prosecute and hassle–but the same isn’t true for private servers which encrypt traffic.







  • For some languages gender-neutral pronouns aren’t possible or aren’t appropriate. It’s really only in English and maybe five other languages that gender-neutral pronouns are a real thing and even in these languages if you’re not used to using neutral pronouns or reading them in common writing sounds like a mistake to begin with. It’s generally just easier to automate the task based on names, and the library itself comes from a time when that wasn’t a controversial thought. Lol







  • I paid $100 to play Forza Horizon on my own device too - should that have been free?

    This is a complete false equivalence and I feel that you know that. The idea of a console is to expand it by buying new games. That’s not unexpected.

    Your entire argument seems to be that software should be free

    I am a software developer. The argument isn’t that software should be free. The argument is that this is an exceptionally poor business model and as a developer I’m disgusted that people are defending it. The VC which owns Plex and other VCs will use this “logic” that you have to move the goal posts further, and further, and further, and further until there’s no such thing as free software anymore. And I think that’s fucked up.

    At the end of the day you’re paying twice to avoid buying IP. Just fucking buy the IP if you’re going to be stupid. Movies are like $12. At $250 you’re paying $2.10/mo in addition to your hosting costs.

    Just go buy 20 movies for the same price. It’s so dumb.


  • Xanza@lemm.eetoProgramming@programming.devdatabase greenhorn
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    1
    ·
    edit-2
    7 days ago

    All the stackoverflow answers lead to - its complex. read a 2000 page book.

    This is an exceptionally good answer and you’re doing everything possible to avoid doing it, when you could have been half way done with the book by now probably. Database administration is a profession, not a job. It requires specialized training to do it well and doing everything possible to avoid that training and knowledge won’t help you one bit.

    my queries are not that complex.

    It doesn’t matter. Your database is very complex.

    they simply go through the whole table to identify any duplicates

    You search 10 million records on every request and you wonder why it’s slow?

    is there a wizard move to bypass any of my restriction or is a change in the setup and algorithm inevitable?

    No. Database administration is very difficult. Reading that 2000 page book is essential for setting up infrastructure to avoid a monolithic setup like this in the first place.

    the other culprit is that our server runs on a HDD which is with 150mb read and write per second probably on its edge.

    lol wtf

    Realistically, this setup is 10 years too old. How large is your database? Is there any reason why it can’t be run in memory? 10 million lines isn’t insurmountable. Full text with a moderate number of tables could be ~10GB–no reason that can’t be run in memory with Redis or other in-memory database or to update to a more modern in-memory database solution like Dice.

    Your biggest problem is the lack of deduplication and normalization in your database design. If it’s not fixed now, it’ll simply get worse YOY until it’s unusable. Either spend the time and money now, or spend even more time and money later to fix it. 🤷‍♂️

    tl;dr: RTFM.