Search found 5546 matches

by Mudpuppy
Mon Jan 15, 2018 4:36 am
Forum: Personal Consumer Issues
Topic: What is the best home exercise equipment?
Replies: 85
Views: 7018

Re: What is the best home exercise equipment?

This thread is old so the OP probably made a decision by now. Regarding treadmills being a waste of money - mine certainly hasn't been for me. It's not the 10 degree weather that prevents running in the winter but the lack of a surface to run on (hard to run on ice and snow and snowshowing, cross c...
by Mudpuppy
Fri Jan 12, 2018 1:40 am
Forum: Personal Consumer Issues
Topic: Someone spoofing my phone number?
Replies: 65
Views: 4991

Re: Someone spoofing my phone number?

My cell # was spoofed too and I had about 10 calls a day from people calling me back because they missed my call. Ugh.. who knew people had so much time on their hands. Some of those people may have had work cell phones. Many companies that give out a cell phone as part of a job require all missed ...
by Mudpuppy
Wed Jan 10, 2018 3:08 am
Forum: Investing - Theory, News & General
Topic: 2018 Hedge Fund contest
Replies: 114
Views: 6387

Re: 2018 Hedge Fund contest

Lastly, I'm disappointed that none of our esteemed fund managers had the foresight to see how Kodak (KODK) was going to move into blockchain photo technology , as they announced today they would be offering their own Kodak Coin ICO (ala an IPO). Frankly, this seems unlikely to accomplish much but c...
by Mudpuppy
Wed Jan 10, 2018 3:02 am
Forum: Personal Consumer Issues
Topic: Alliant 3/2.5% card - any experience?
Replies: 26
Views: 3206

Re: Alliant 3/2.5% card - any experience?

I just joined Allian without pay any donation. There is a option for `freelance` in the dropdown that you can choice. That option is supposed to be for members of the Freelancers Union, https://www.freelancersunion.org/, not for any general freelancer. It doesn't sound like Alliant actually checks ...
by Mudpuppy
Wed Jan 10, 2018 2:56 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Let us agree to disagree. You believe AMD does not allow user mode program to access the kernel memory. I believe the Listing 1 clearly implies otherwise. I do not care whether something is called Meltdown or Spectre. All I know is when term "exception" is being used in this context, ring violation...
by Mudpuppy
Tue Jan 09, 2018 1:22 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Do you agree that the entire explanation is valid for AMD also? Exception happens because the unauthorized data access was tried and as it turns out was the data was actually retrieved but just not returned to the user mode caller when processor completed the exception. The side effect of not clean...
by Mudpuppy
Tue Jan 09, 2018 4:37 am
Forum: Personal Finance (Not Investing)
Topic: ID theft and check cashing fraud
Replies: 87
Views: 4460

Re: ID theft and check cashing fraud

Agree that the scammer has info they shouldn't have. Not exactly sure where they got it from, but I would guess they acquired the rest of the information online, maybe with the Equifax leak, or some other leak. Not all the leaks are disclosed. With his name, address, and DL number from the driver's...
by Mudpuppy
Tue Jan 09, 2018 3:59 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

I will continue if you agree that this is straight from the paper. I am suspecting you think I am making this up. I made no such claim that you are making things up. Please do not ascribe motives to me that do not exist. However, I do believe that you are not completely comprehending the paper. The...
by Mudpuppy
Mon Jan 08, 2018 2:20 am
Forum: Personal Consumer Issues
Topic: How to browse specifically for homes with "mother-in-law suite"?
Replies: 29
Views: 1813

Re: How to browse specifically for homes with "mother-in-law suite"?

As evidenced by this thread, part of the problem with trying to search for houses with this feature is that there is no common nomenclature for the feature. Is it a guest suite, in-law suite, granny flat, casista, guest house, garage apartment, accessory dwelling unit, or so on? That's a whole lot o...
by Mudpuppy
Mon Jan 08, 2018 1:33 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

However, for both ARM and AMD, the toy example as described in Section 3 works reliably, indicating that out-of-order execution generally occurs and instructions past illegal memory accesses are also performed. Emphasis added; At least this makes it clear that the fundamental problem exist in ARM a...
by Mudpuppy
Mon Jan 08, 2018 1:29 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

But, as noted quite clearly in Section 6.4, a process running by a user cannot use Meltdown to leak kernel memory on AMD and ARM processors: We also tried to reproduce the Meltdown bug on several ARM and AMD CPUs. However, we did not manage to successfully leak kernel memory with the attack describ...
by Mudpuppy
Mon Jan 08, 2018 1:24 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

The "toy example" they refer to in Section 6.4 of the Meltdown paper is basically a variant of Spectre, which allows one to access other memory locations within one's current ring. That AMD and ARM are susceptible to Spectre is not in dispute. But, as noted quite clearly in Section 6.4, a process r...
by Mudpuppy
Sun Jan 07, 2018 3:41 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

xkcd has a new comic up about Spectre and Meltdown: https://xkcd.com/1938/
by Mudpuppy
Sun Jan 07, 2018 3:26 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Section 6.4 also makes it clear that the toy version successfully leaks the data on ARM and AMD. If the AMD has the ring protection as some of you are claiming, then the toy program would have failed. The "toy example" they refer to in Section 6.4 of the Meltdown paper is basically a variant of Spe...
by Mudpuppy
Sun Jan 07, 2018 3:08 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Isn't this vulnerability sort of like Van Eck Phreaking in the sense that it would difficult to exploit outside of a laboratory? I don't have a complete understanding of it but the timing issues in particular seem like they would present a challenge in real world applications. The reason so many br...
by Mudpuppy
Sat Jan 06, 2018 10:04 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

The Pale Moon team claims their browser is safe. They're not resting on their laurels, however. Pale Moon is a fork of Firefox. What do we know about other browsers? It looks like Pale Moon artificially "slows down" timers in JavaScript so that an attacker won't be able to execute a timing-based at...
by Mudpuppy
Sat Jan 06, 2018 9:42 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Question to MudPuppy:- Given that the exploit uses repeated exceptions to infer the protected data, why not have a patch which clamps down and kills the offending thread when it does "too many" exceptions "too quickly"? Come to think of it, generally one strike and out rule is applied to the except...
by Mudpuppy
Sat Jan 06, 2018 9:31 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Intel says, "Dont worry, be happy!" "The statistical analysis of these behaviors can in some cases be used to potentially expose sensitive data on computer systems that are operating as designed. These exploits do not have the potential to corrupt, modify or delete data." Notice the words "operatin...
by Mudpuppy
Sat Jan 06, 2018 9:26 pm
Forum: Investing - Theory, News & General
Topic: 2018 Hedge Fund contest
Replies: 114
Views: 6387

Re: 2018 Hedge Fund contest

I almost forgot to post my actual hedge fund. Pseudorandom Walk Down Wall Street Fund Longs: PSDO (PRESIDIO INC) RNWK (REALNETWORKS INC) Shorts: DOW (DOW CHEMICAL CO) NWL (NEWELL BRANDS INC) LSTR (LANDSTAR SYSTEMS INC) Special Note: You have to be looking at the 2017 Russel 3000 membership file to f...
by Mudpuppy
Sat Jan 06, 2018 3:59 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Businesses want to fail fast. Teams develop using agile methodologies. The business forces pushing out minimum viable content and letting the consumer beta test while getting paid for it. Iterate your way to success. The problem is that most of these teams each developer or engineer only understand...
by Mudpuppy
Sat Jan 06, 2018 2:11 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

How do we know that these vulnerabilities have NOT been exploited already????? If some hacker has used this before I am pretty sure he/she is not telling anyone...... There has been no malware discovered in the wild that takes advantage of these vulnerabilities, which means if any malware does exis...
by Mudpuppy
Sat Jan 06, 2018 2:04 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Look, I don't disagree with you completely but I stand on the point that there will always be exploits. No amount of human engineering has yet been capable of making a system that is impossible to exploit. If you review my post history, you'll see that I quite frequently have said it is impossible ...
by Mudpuppy
Sat Jan 06, 2018 1:37 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

Without a fundamental redesign from the bottom-up with security as the primary motivation, it's just going to keep happening. The problem is that many of these exploits only seem obvious in hindsight. You could have a whole team of engineers building something with security in mind and they'd still...
by Mudpuppy
Sat Jan 06, 2018 12:05 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

The patch will have a bigger impact on memory-intensive programs that switch frequently between different privilege levels. Unfortunately, switching between privilege levels is very common, particularly through something called a "system call" or "syscall" for short. Many common tasks like reading ...
by Mudpuppy
Fri Jan 05, 2018 11:57 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

No it's not a software issue. The problem is that software (malware) can read data that is not in the processes memory map. Is there a URL that describes that in detail? If the hardware is allowing a process to access memory outside of the address space of the process, then the problem does not dep...
by Mudpuppy
Fri Jan 05, 2018 11:52 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

One of the principle behind "good" guys finding this type of issues and reporting this privately to the "powers to be" is that the vulnerability is publicly disclosed only after the patch has been in place for a while. From reading the current news, it seems as if the patches have not been yet wide...
by Mudpuppy
Fri Jan 05, 2018 11:43 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

If javascript is disabled, what next could the attackers use to access the cache? This is primarily a rhetorical question because those of use who routinely turn off javascript, must turn it back on to access most financial sites. But it's good to understand how this all works. From what has been p...
by Mudpuppy
Fri Jan 05, 2018 10:56 pm
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

As for the performance hit after applying patches, that has to do with the caches. The primary software fix to keep information from leaking between instructions running with different permissions is to flush the caches before running instructions with a different set of permissions. But you are fi...
by Mudpuppy
Fri Jan 05, 2018 11:43 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

That’s why I suggested a chromebook with a limited attack surface (vs a full PC OS) using a PC VM hosted in the cloud without the chip-based vulnerability. https://www.google.com/amp/s/www.cnbc.com/amp/2018/01/03/microsoft-google-respond-to-intel-chip-vulnerability.html Cloud VMs hosted on Linux-ba...
by Mudpuppy
Fri Jan 05, 2018 3:29 am
Forum: Personal Consumer Issues
Topic: Chip architecture vulnerability in pretty much everthing
Replies: 106
Views: 6555

Re: Chip architecture vulnerability in pretty much everthing

That’s why I suggested a chromebook with a limited attack surface (vs a full PC OS) using a PC VM hosted in the cloud without the chip-based vulnerability. https://www.google.com/amp/s/www.cnbc.com/amp/2018/01/03/microsoft-google-respond-to-intel-chip-vulnerability.html Cloud VMs hosted on Linux-ba...
by Mudpuppy
Thu Jan 04, 2018 2:47 am
Forum: Personal Consumer Issues
Topic: The Economics of a new Puppy
Replies: 113
Views: 7040

Re: The Economics of a new Puppy

Sockpuppet wrote:
Thu Jan 04, 2018 12:13 am
Source: Bought a puppy a year ago. He’s amazing but has cost about $10,000 so far.
That's a pricey pupper... I hope his health is okay and he just has a habit of destroying very expensive things.
by Mudpuppy
Wed Jan 03, 2018 10:27 pm
Forum: Investing - Theory, News & General
Topic: 2018 Hedge Fund contest
Replies: 114
Views: 6387

Re: 2018 Hedge Fund contest

... 6. The universe from which to choose is the Russell 3000 http://www.ftserussell.com/files/support-documents/membership-russell-3000 . If you pick shares not on this list and it's not caught and corrected before the deadline, your portfolio will be disqualified. Please double-check. The file I d...
by Mudpuppy
Wed Jan 03, 2018 1:43 am
Forum: Investing - Theory, News & General
Topic: 2018 Hedge Fund contest
Replies: 114
Views: 6387

Re: 2018 Hedge Fund contest

Is the Vanguard russell 3000 index VTHR a valid source of stocks? Vanguard's fund seeks to match the composition and returns of Russell 3000, but does not guarantee an exact match. The link given in the rules is directly to FTSE Russell, which maintains the official Russell 3000 index. However, the...
by Mudpuppy
Wed Jan 03, 2018 12:21 am
Forum: Personal Finance (Not Investing)
Topic: Capital 1.35% savings with $200 bonus (10k deposit)
Replies: 18
Views: 2501

Re: Capital 1.35% savings with $200 bonus (10k deposit)

Jeep512 wrote:
Sat Dec 30, 2017 9:58 am
Mudpuppy wrote:
Sat Dec 30, 2017 12:37 am

So it looks like I've squeaked in just under the wire. We'll see how soon "within 60 days" ends up being for the bonus.
Mine was paid very quickly - in a week or less IIRC
You were right on this one. The $200 bonus posted to my account today.
by Mudpuppy
Tue Jan 02, 2018 3:33 pm
Forum: Forum Issues and Administration
Topic: Slow loading of pages.
Replies: 22
Views: 2012

Re: Slow loading of pages.

Traceroute shows the most delay while transiting through Level3 in Las Vegas. I would assume that is the backbone provider that the hosting company is using. I don't see anything posted yet about issues on Level3 today, but it wouldn't be the first time it has had issues. I think it was just last mo...
by Mudpuppy
Tue Jan 02, 2018 2:34 am
Forum: Investing - Theory, News & General
Topic: REGISTRATION FOR 2018 BOGLEHEAD CONTEST
Replies: 140
Views: 7796

Re: REGISTRATION FOR 2018 BOGLEHEAD CONTEST

I hope everyone who is guessing in this thread is also filling out the entry form, as stated in the instructions at the top of the thread.
by Mudpuppy
Tue Jan 02, 2018 2:32 am
Forum: Investing - Theory, News & General
Topic: 2017 hedge fund contest
Replies: 247
Views: 36033

Re: 2017 hedge fund contest

December has ended and my musically inspired picks ended up above the index. If we do have a 2018 contest, I'll need to find another musical inspiration.
by Mudpuppy
Tue Jan 02, 2018 2:07 am
Forum: Personal Finance (Not Investing)
Topic: PenFed messed up my mortgage payment - again
Replies: 8
Views: 1054

Re: PenFed messed up my mortgage payment - again

I have never opted for escrow account for my primary residence, for this reason so that I can have full control over payment of property-tax, insurance etc. Also, I don't want the bank to use my money interest-free for a year. California finance code requires 2% interest on an escrow account, so my...
by Mudpuppy
Mon Jan 01, 2018 11:31 pm
Forum: Personal Consumer Issues
Topic: Car headlights or Daytime Running Lights - what do you do?
Replies: 62
Views: 3698

Re: Car headlights or Daytime Running Lights - what do you do?

I turn my lights on all the time, both to improve visibility and to make it part of my driving habit. My driving habit is get in the car, fasten seat belt, lock door, put in the keys, start car, turn on lights, and clean the windshield if needed. That way, day or night, turning on the lights is part...
by Mudpuppy
Mon Jan 01, 2018 11:20 pm
Forum: Personal Consumer Issues
Topic: Oil filled space heaters
Replies: 39
Views: 3964

Re: Oil filled space heaters

I used an oil filled space heater about a decade ago to keep the fish room warm enough when the HVAC went belly-up mid-winter. The room needed to be kept in the low-to-mid 60F for best functionality of the fish tank heaters, which typically can only raise the tank 10-15F above room temperature. Much...
by Mudpuppy
Mon Jan 01, 2018 11:07 pm
Forum: Investing - Theory, News & General
Topic: REGISTRATION FOR 2018 BOGLEHEAD CONTEST
Replies: 140
Views: 7796

Re: REGISTRATION FOR 2018 BOGLEHEAD CONTEST

entries can be made by anyone I thought about that also and it's a valid concern. The Google Form helps several issues and I was hoping valid-users would not be a problem, but if it looks like it's a problem, then I can write something that validates each user back to the Boglehead Forum... not sur...
by Mudpuppy
Mon Jan 01, 2018 9:25 pm
Forum: Personal Consumer Issues
Topic: Long Term House—Any Regrets on things you didn’t do?
Replies: 48
Views: 5780

Re: Long Term House—Any Regrets on things you didn’t do?

Our home was built 6 years ago, and we like the layout and fixtures so don’t anticipate needing to do any type of remodeling for many years. My question for the forum is, for those of you who have lived in the same house for many years, what are some improvements or updates you did early in your ho...
by Mudpuppy
Mon Jan 01, 2018 9:19 pm
Forum: Personal Consumer Issues
Topic: Long Term House—Any Regrets on things you didn’t do?
Replies: 48
Views: 5780

Re: Long Term House—Any Regrets on things you didn’t do?

One thing to do whenever your are doing a significant remodel is to do whatever you can to make the house more handicap friendly. In addition to working better if you are still in the house when you are elderly I have known several people that have temporarily ended up in a wheelchair for several m...
by Mudpuppy
Sun Dec 31, 2017 1:59 pm
Forum: Personal Consumer Issues
Topic: Checked bag to HI, worth cost and trouble?
Replies: 33
Views: 2076

Re: Checked bag to HI, worth cost and trouble?

I tend to be a pessimist when I travel so I always worry about the bag getting "temporarily" delayed. I had a coworker who got his luggage the night before he was due to leave after having been sans luggage for 5 days! :shock: I did a trip to the Canadian Rockies in late May years ago and Air Canad...
by Mudpuppy
Sun Dec 31, 2017 2:37 am
Forum: Personal Consumer Issues
Topic: The Economics of a new Puppy
Replies: 113
Views: 7040

Re: The Economics of a new Puppy

Simpler method: we just pick up the dog, walk on the scale in our bathroom, read the weight.. then put the dog down, get back on the scale, and do some subtraction. Yeah, they're 40lbs and 50lbs, but that's not too bad. And it reminds them who's boss when I pick them up. 8-) The OP better hope the ...
by Mudpuppy
Sun Dec 31, 2017 2:15 am
Forum: Personal Consumer Issues
Topic: We bought a house in June, and the ac & furnace system do not work. What should we do?
Replies: 49
Views: 3431

Re: We bought a house in June, and the ac & furnace system do not work. What should we do?

The quality of home inspectors varies wildly, but finding one that is part of a national association or regional association can help. This article has an overall summary of the current state of national home inspector associations: http://structuretech1.com/qa-whats-the-difference-between-home-insp...
by Mudpuppy
Sat Dec 30, 2017 4:18 pm
Forum: Personal Consumer Issues
Topic: We bought a house in June, and the ac & furnace system do not work. What should we do?
Replies: 49
Views: 3431

Re: We bought a house in June, and the ac & furnace system do not work. What should we do?

ResearchMed wrote:
Sat Dec 30, 2017 3:32 pm
Can one even get a home warranty on a very old house?
On a very old house? Maybe not. But the OP's house is only 30 years old. It's very easy to get a warranty on a 30 year old house. Getting the warranty company to actually fix things is another matter entirely.
by Mudpuppy
Sat Dec 30, 2017 4:14 pm
Forum: Personal Consumer Issues
Topic: The Economics of a new Puppy
Replies: 113
Views: 7040

Re: The Economics of a new Puppy

My biggest aggravation is that the Cleveland Clinic actually has volunteers bring huge dogs into the hospitals and medical centers. What justification is there for having these filthy, vicious animals in a human medical facility? Is this sarcasm? If so, my sarcastic reply would be that therapy dogs...
by Mudpuppy
Sat Dec 30, 2017 4:08 pm
Forum: Personal Consumer Issues
Topic: Long-term cost of ownership: 1996 Honda Civic
Replies: 16
Views: 1373

Re: Long-term cost of ownership: 1996 Honda Civic

I am surprised at the very low mileage...144k? It sounds like you take great care of your cars. Any idea why you got such low mileage out of it before scrapping it? That is likely factoring into your cost per mile substantially. A lot of well cared for civics can easily go over 250k. Some people, l...
by Mudpuppy
Sat Dec 30, 2017 3:48 pm
Forum: Personal Consumer Issues
Topic: Checked bag to HI, worth cost and trouble?
Replies: 33
Views: 2076

Re: Checked bag to HI, worth cost and trouble?

I'm planning to check one bag so I can take more than 3oz containers of toiletries. There's no way I could fit enough toiletries into a 3-1-1 carry-on container. But I have to use pretty specific brands of shampoo, conditioner, and sunscreen due to a skin problem, which I can only find at a couple o...