If you are in the UK, I'd like to beg 5-10 minutes of your time to file comment with the Competition and Markets Authority (CMA) about the proposed (toothless) "Interoperability Commitments" from Apple and Google.
These are dramatically weaker guidelines than even the EU's DMA, and Apple (particularly) has been utterly contemptuous there, ducking compliance for more than a year. Why is the UK rewarding scofflaw behaviour over these predatory practices?
/cc @pluralistic
Decided to try and reproduce the bugs from this talk[0] to try and figure out some spooky undocumented QDSP6 instructions my decompiler was running into. Now either I've got a fundamental misunderstanding, or their PoC as given doesn't work the way they claim it should. 😕
Anyone know of any public Qualcomm PoCs that /do/ work?

An uncomfortable number of my software projects are driven by one very specific phenomenon: I try to help people work with some piece of FOSS software they keep having trouble with, and I increasingly realize that the maintainers have so little interest in improving the reliability of the software, even despite literally offering to do the work for them, that my time is better spent building a replacement for it that does work reliably than to keep throwing time and energy at the same reoccurring problems for a decade without ever having any hope of them getting fixed.
It has escalated to "making a Linux distro" by this point.
MongoDB have a blog out about #MongoBleed
Notably:
- Internal find at MongoDB
- they notified customers of the issue and patch availability on December 23rd
- A security vendor published technical details on December 24th, Christmas Eve
- Somebody at Elastic, a direct competitor, published an exploit with full secret extraction feature on December 25th, Christmas Day
That was an impossible situation for orgs - the security industry poured fire on them and set their own customers on fire.
@nyan_satan @amarioguy It's a complete, fully functional, certified Vulkan 1.4 and OpenGL4.6 conformant driver across 5 different chips and 2 different firmware versions. Which is used by almost 100000 people and has never oopsed in production. And I single handedly wrote all of it myself, which is unheard of for kernel GPU drivers.
But thank you for your comment 🤷♀️
Throwback to my 2014 'centrifuge' that I built at @hswaw .
The brick is a critical part.