Cybersecurity jlh • Now • 100%

Runc vulnerability CVE-2024-21626 allowing container escape in all Docker and Kubernetes environments

www.docker.com

Seems like a really serious vulnerability, any container attack or malicious image could take over a container host if there's no hardening on the containers.

Programming jlh • Now • 86%

Bit of a weird observation: "Seeing a new computing paradigm coming out of Data Science / Observability"

I wanted to share an observation I've seen on the way the latest computer systems work. I swear this isn't an AI hype train post 😅 I'm seeing more and more computer systems these days use usage data or internal metrics to be able to automatically adapt how they run, and I get the feeling that this is a sort of new computing paradigm that has been enabled by the increased modularity of modern computer systems. First off, I would classify us being in a sort of "second-generation" of computing. The first computers in the 80s and 90s were fairly basic, user programs were often written in C/Assembly, and often ran directly in ring 0 of CPUs. Leading up to the year 2000, there were a lot of advancements and technology adoption in creating more modular computers. Stuff like microkernels, MMUs, higher-level languages with memory management runtimes, and the rise of modular programming in languages like Java and Python. This allowed computer systems to become much more advanced, as the new abstractions available allowed computer programs to reuse code and be a lot more ambitious. We are well into this era now, with VMs and Docker containers taking over computer infrastructure, and modern programming depending on software packages, like you see with NPM and Cargo. So we're still in this "modularity" era of computing, where you can reuse code and even have microservices sharing data with each other, but often the amount of data individual computer systems have access to is relatively limited. More recently, I think we're seeing the beginning of "data-driven" computing, which uses observability and control loops to run better and self-manage. I see a lot of recent examples of this: - Service orchestrators like Linux-systemd and Kubernetes that monitor the status and performance of services they own, and use that data for self-healing and to optimize how and where those services run. - Centralized data collection systems for microservices, which often include automated alerts and control loops. You see a lot of new systems like this, including Splunk, OpenTelemetry, and Pyroscope, as well as internal data collection systems in all of the big cloud vendors. These systems are all trying to centralize as much data as possible about how services run, not just including logs and metrics, but also more low-level data like execution-traces and CPU/RAM profiling data. - Hardware metrics in a lot of modern hardware. Before 2010, you were lucky if your hardware reported clock speeds and temperature for hardware components. Nowadays, it seems like hardware components are overflowing with data. Every CPU core now not only reports temperature, but also power usage. You see similar things on GPUs too, and tools like nvitop are critical for modern GPGPU operations. Nowadays, even individual RAM DIMMs report temperature data. The most impressive thing is that now CPUs even use their own internal metrics, like temperature, silicon quality, and power usage, in order to run more efficiently, like you see with AMD's CPPC system. - Of source, I said this wasn't an AI hype post, but I think the use of neural networks to enhance user interfaces is definitely a part of this. The way that social media uses neural networks to change what is shown to the user, the upcoming "AI search" in Windows, and the way that all this usage data is fed back into neural networks makes me think that even user-facing computer systems will start to adapt to changing conditions using data science. I have been kind of thinking about this "trend" for a while, but [this announcement that ACPI is now adding hardware health telemetry](https://www.phoronix.com/news/AMD-New-SoCs-With-ACPI-PHAT) inspired me to finally write up a bit of a description of this idea. What do people think? Have other people seen the trend for self-adapting systems like this? Is this an oversimplification on computer engineering?

League of Legends jlh • Now • 90%

Heads up Linux users: Patch 13.23 is currently crashing in game

The latest patch today, 13.23 makes the game instacrash after champ select, be warned. Don't start a match on Linux until it's fixed. https://leagueoflinux.org/

Europe jlh • Now • 98%

Facebook and Instagram users in the European Union will be charged up to €12.99 a month for ad-free versions of the social networks as a way to comply with the bloc’s data privacy rules

www.theguardian.com

Awful to see our personal privacy and social lives being ransomed like this. €10 seems like a price gouge for a social media site, and I'm even seeing a price tag of 150SEK (~€15) In Sweden.