Sauron

As far as I can tell, yes.
 
Although to be honest the "safety" aspect in a random hotspot scenario is pretty minimal. HTTPS traffic is already encrypted and protected from man in the middle attacks - at worst a malicious actor would be able to log which websites your IP connected to. And if you're using your personal device at, say, a random bar, they wouldn't necessarily be able to trace it back to you.
 
As for this making VPNs "useless" as OP claims... I've always maintained that most of the marketing claims VPNs make are bullshit to begin with since, as mentioned, https itself already protects you in many ways and VPNs only "hide" your traffic from your ISP, if that. One legitimately useful (where legally permissible) application of VPNs however has always been accessing region locked or otherwise regionally unavailable content, which isn't affected by this vulnerability.

As far as I can tell, yes.
 
Although to be honest the "safety" aspect in a random hotspot scenario is pretty minimal. HTTPS traffic is already encrypted and protected from man in the middle attacks - at worst a malicious actor would be able to log which websites your IP connected to. And if you're using your personal device at, say, a random bar, they wouldn't necessarily be able to trace it back to you.
 
As for this making VPNs "useless" as OP claims... I've always maintained that most of the marketing claims VPNs make are bullshit to begin with since, as mentioned, https itself already protects you in many ways and VPNs only "hide" your traffic from your ISP, if that. One legitimately useful (where legally permissible) application of VPNs however has always been accessing region locked or otherwise regionally unavailable content, which isn't affected by this vulnerability.

Best as I can tell, you need to be on the network in order for this to work. So in your own home, you'd be pretty safe, unless someone in your house is trying to snoop on you, someone gets your WiFi password, or someone breaks into your house and connects to an Ethernet port. Basically, this attack won't work without some degree of access to the router.
 
I suppose that, in theory, your ISP could use this against you if you are using their provided router, as they could maliciously update the firmware to make such an attack possible from their end. However, this could be easily circumvented by simply having your own router.
 
The one place where this seems to be a real concern is unsecured WiFi networks, as anyone can connect to them. So in theory, someone at an airport or restaurant could be using this method. Which means that, if you are using a VPN to stay safer at random WiFi locations, you're out of luck.
 
Is my understanding here correct?

Clickbait title. Should have said "VPNs are basically useless for anonymity..."
 
VPNs are quite useful, just because you leak DNS doesnt mean you leak the entire traffic. Just because as example my home DNS leaked, doesnt mean my entire network is open to internet. I would still be suspect of MITM sure but you would need to try harder to leak data from my VPN.

Well, nothing stops i.e. the kde devs from integrating it into their DE with a suite of premade scripts and feeding the text straight to the LLM.
 
But yeah, I agree speech controls are mostly a pointless gimmick - except for accessibility, I can see it being useful for movement impaired users.
The "problem" is that LLMs are just not the right tool for creative writing; it's not what they are designed to do and the way they work kind of inherently prevents it. What you get out of an LLM is what it deems to be the most likely next word, which inevitably brings it down to a sort of "average human writing an essay" level of quality, even at its best. "The average book" is probably not something I'd be terribly interested in reading, even if the model was expanded to be able to output hundreds of coherent pages.

Pretty cool, but do note that if you want it to actually do things on your computer it seems you'll need to write your own scripts for it to reference.

This is fundamentally incorrect.
 
What is happening here is a feature that is used by iGPU+dGPU laptops that have a mux to switch between iGPU alone or dGPU+iGPU mode. When you use it on a desktop, there is a large RAM use penalty in the Desktop Window Manager. How do I know this? Because that's how I operate my desktop. iGPU on one screen, dGPU on the other. If something is launched on the dGPU and dragged to the iGPU, it's usually fine, but the DWM cranks up use. If you launch something on the iGPU and then move it to the dGPU the same thing happens.
 
Performance wise, there's always around a 10% performance nerf to whatever application when it's moved from one GPU to the other. It's also not a unnoticeable nerf either, because you will also notice the 2 FPS lag from the GPU to GPU transfer.
 
Do not run your computer this way unless you have a good reason to. If you are doing video editing work, this is basically the optimal way to be able to use all GPU power and video decoders/encoders. Outside of that, the iGPU 3D performance is weak, and the only way to get a dGPU's framerate on the iGPU connected monitor is by starting the dGPU game/app on the dGPU and dragging it over to the iGPU.
 
Some games allow you to specify the render GPU independently of the connected monitor. This will work, usually, but you're still going to get a noticeable latency and performance nerf.
 
dGPU Render, iGPU display:
 

 
dGPU on dGPU:

 
Also note, the UHD 770 does not support DX12 Ultimate so this benchmark can not be run from the iGPU.

...because that's just how the AUR works...
 
and yay explicitly asks you whether it should keep the source files and build dependencies.
Then use another distribution, or don't install anything from the aur. What's next, running gentoo and then complaining you have to compile things?
Pacman wrappers are the most powerful form of aur helper because they abstract away all the work of searching, downloading, building and installing AUR packages.

because. it's. building. from. source.
 
and if you look at the dependencies for the pkgbuild, it requires some aur python modules which themselves have dependencies and need to be built from source. if that makes you mad, get a binary only distribution - but then maybe stop chasing the "most hardcore haxxor diy distro" if you're not willing to even understand how they work. the advantage of the AUR, compared to other distributions that don't have something like it, is that you have access to a much wider variety of packages that you would otherwise have to manually build and find the dependencies for; if that's not something you care about then just use something else.

@Nayr438 @Sauron
 
Ok, right now I am actually really mad. I had this question that even if I am downloading just the binary, there is still a lot of stuff going on like fakeroot environment, and compressing image and what not. Just installing the binary from the original source takes way less time and generates literally no bloat.
 
Even if I am just downloading the Kernel using yay, it still doing a lot of stuff instead of just installing the Kernel, whereas Pacman does nothing of that crap.
 
I am so mad right now, because I just tried installing the otf-fira-code package which is the Fira Code font, and OH MY GOD. I do not know what in god's name it was doing but It needed a LOT of dependencies, just to install a FONT for some reason, and then took a lot of minutes to who knows what compiling stuff (probably the dependencies itself). What the hell do you need to just grab the fonts and put it in the fonts folder? Is it pixel by pixel generating the font? And why the hell do I need these many dependencies, like some python and ttf stuff, and to make it worse, compile them. That ended by taking gigabytes of space. I am never using the AUR. F**k this shit.
 
EDIT - So apparently I was installing the package when I was writing this. At the end, some repos failed to download from the servers and the package did not install. I quit. This AUR disappointment keeps getting worse.

Overclocking has always been at the user's risk. The problem we have is that mobo manufacturers haven't made it clear what settings would count as overclocking and/or setting it as default. Even on an AM5 build I recently got I might have the opposite problem. Asus description for a setting in bios was "overclock CPU and ram for more performance" so I disabled it. The CPU wouldn't turbo. Put that setting back to Auto, I get turbo.

I would say Calculate Linux, Devuan and Clear Linux have the fastest system startup times of all the Linux systems. (on modern hardware)
 
CPU performance will depend on the specific app or game, and many other factors.

it all depends on what the rules and goals of the competition are... if it's a bunch of conceptual problems where performance is irrelevant and you have limited time to come up with a solution, C is a terrible choice. It will only slow you down. On the other hand if code performance matters and the questions are related to optimization and efficiency, then C is an ok choice. Many programming competitions will require a specific language or at least ask you to pick from 2 or 3 at most

I would pick the language you're most familiar with. The less you have to think about the language and can focus on the implementation instead, the better.
 
~edit: Of course higher level languages like Java have the big advantage that they bring a ton of tools along and that errors are way easier to debug.

No. Everything in the AUR is intended to be built from source, there is no package repo.
 
Then don't use the AUR.
 

Might as well stop beating around the bush then
 
https://www.linuxfromscratch.org/

You're probably counting cached memory then. Or running a load of services.

I don't think it's that easy, you'd have to design said phone (and its camera sensor) with those lenses in mind. Almost every iphone generation uses a different lens, too, which makes this even harder. And I doubt Apple is eager to share their designs and specs with a third party.
 
Again, you'd have to rethink the whole production process with a greater focus on durability, repairability and reusability for these changes to work.

If I had to guess, disable the desktop environment.
 
The amount of resources you save by compiling your own kernel is next to zero.
 
A modern kernel will typically contain drivers as modules, so it only loads stuff into memory you actually use.
 
Other than a bit of disk space, you won't save anything by removing them. (and you lose more disk space to kernel sources, unless you delete them once compiled)
 
Compiling drivers into the kennel will net you a very tiny performance improvement, but you'll only want to include what you need.
 
And chances are you missed something critical and suddenly some hardware no longer works as expected. So it'll be a fair amount of trial and error.

Might as well stop beating around the bush then
 
https://www.linuxfromscratch.org/

The reason why you get replies like "just use it as-is" is because you ask questions like "is it worth it?"
 
No, in 99.99% of circumstances, it is not worth it. You will spend more time than you save.
 
Do you want to do it anyway just for fun, on a system that is not important? Go for it!

The problem is that there isn't really a 1:1 equivalent, despite the terrible management it still scratches an itch no other platform does (at least so I'm told, not being on twitter myself).
 
However things like this are what's driving away twitter's main advertisers, meaning the platform's finances are going to be worse and worse the longer this goes on.

Summary
 X, formally known as Twitter forces url substitution to X.com, making users potentially vulnerable to phishing.  Twitter rolls back feature after community pushback.
 
Quotes
 
My thoughts
 This article is a few weeks old, but it would be a really interesting WAN Show discussion.  This is another example of Twitter/X making sudden decisions without much thought to how it would impact the platform.  At what point do users decide to leave the platform, in search of one with more stability?  I love how the user base has become unpaid employees of the platform, since they have reduced their workforce so much that no one seems to see issues with these features until they make it to production.
 
Sources
 https://www.bitdefender.com/blog/hotforsecurity/xs-enforced-url-substitution-to-x-com-domains-an-invitation-to-phishing-attacks/

I don't think it's that easy, you'd have to design said phone (and its camera sensor) with those lenses in mind. Almost every iphone generation uses a different lens, too, which makes this even harder. And I doubt Apple is eager to share their designs and specs with a third party.
 
Again, you'd have to rethink the whole production process with a greater focus on durability, repairability and reusability for these changes to work.

Apple is far from being alone in doing this. To some extent, demanding all iphones turned in to Apple be refurbished and resold no matter how outdated they are is probably unreasonable - however proper and environmentally friendly (when possible) disposal should be legally mandated.
 
There's also the fact that these devices (not just from Apple) are designed to be hard to repair and to be obsolete within a few years, which worsens the ewaste problem at the root. A lot of people should probably be more mindful of their devices and try to make them last, but there's only so much you can do when, by design, they aren't built to last.