• 0 Posts
  • 292 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle










  • I agree, once you factor in a power supply (or PoE hat), case and storage a Raspberry Pi really isn’t all that cheap anymore nowadays. Unless you have a project that specifically benefits from the GPIO pins or the form factor, just get a cheap barebones mini PC or a used one with RAM and SSD already included.

    This will get you a system that’s way more powerful even if it’s a couple of years old (the Pi’s SoC is fairly weak) and I/O throughput is no contest, normally with at least a dozen PCIe lanes to use for NVMe storage or 10 gigabit network cards, if you so desire.









  • What I mean by that is that they will take a huge disservice to their customers over a slight financial inconvenience (packaging and validating an existing fix for different CPU series with the same architecture).

    I don’t classify fixing critical vulnerabilities from products as recent as the last decade as “goodwill”, that’s just what I’d expect to receive as a customer: a working product with no known vulnerabilities left open. I could’ve bought a Ryzen 3000 CPU (maybe as part of cheap office PCs or whatever) a few days ago, only to now know they have this severe vulnerability with the label WONTFIX on it. And even if I bought it 5 years ago: a fix exists, port it over!

    I know some people say it’s not that critical of a bug because an attacker needs kernel access, but it’s a convenient part of a vulnerability chain for an attacker that once exploited is almost impossible to detect and remove.