• 0 Posts
  • 97 Comments
Joined 1 year ago
cake
Cake day: September 27th, 2023

help-circle



  • “Storage management is expensive”

    It’s really not, though.

    //////

    ETA: I stick by my premise and my conclusion (storage management isn’t expensive, and it’s probably a Nitro thing), but my math may be wrong and my usage is apparently not normative. The costs are probably not so negligible, but I would still assume they aren’t as low as they want us to think.

    /////

    Discord has 200,000,000 MAU. If every single one of them uploaded a file every month (of pretty much any size) and Discord tossed it into an AWS S3 IA bucket, it would cost them $500 to store that data. Their total S3 bill for storage would be five hundred US dollars. Storage is dirt cheap. AWS doesn’t even charge per gigabyte on that storage type, it’s so cheap; they charge for downloads.

    So, ok. Let’s talk downloads. If each of those files were 25GB and downloaded twice (probably an underestimate, but not everyone is uploading files, so I’m going to make the completely unfounded assumption that it’ll all shake out), it would cost them a couple hundred thousand dollars. Which, ok, that’s much more significant than $500. But Discord made $575 million last year—so the S3 download costs would be 0.03% of their total revenue. They probably spend 2-3 times more on coffee.

    Storage management is emphatically not expensive.

    My guess? They just saw that the higher upload limit was eating into their Nitro subscriptions.








  • I just installed Linux Mint on a 15-year-old desktop that has never been upgraded and was middle-of-the-road when I got it. It shipped with Windows 7, and I tried a couple of times to upgrade to 10 (it failed every time, either losing core hardware functionality, running so slowly as to be unusable, or just refusing to boot altogether). But it runs Linux like a dream. Seriously—it’s easily running the latest version of Mint better than it ran an 11-year-old service pack of Windows 7.

    What’s even crazier is that I installed VirtualBox on it, and put Windows 10 on that, to use some work programs. And that runs Windows 10 a bit slowly, but otherwise more or less flawlessly!

    That’s right: I’m having a better Windows experience in Linux than I’ve ever had on baremetal Windows on this box.

    I can’t believe I didn’t do this…well, 15 years ago.





  • Ok, so I am not an expert, and I am not the OP. But my understanding is that Secure Boot is checking with a relatively small list of trustworthy signing certificates to make sure that the OS and hardware are what they claim to be on boot. One of those certificates belongs to a Microsoft application called Shim, which can be updated regularly as new stuff comes out. And technically you can whitelist other certificates, too, but I have no idea how you might do that.

    The problem is, there’s no real way to get around the reality that you’re trusting Microsoft to not be compromised, to not go evil, to not misuse their ubiquity and position of trust as a way to depress competition, etc. It’s a single point of failure that’s presents a massive and very attractive target to attackers, since it could be used to intentionally do what CrowdStrike did accidentally last week.

    And it’s not necessarily proven that it can do what it claims to do, either. In fact, it might be a quixotic and ultimately impossible task to try and prevent boot attacks from UEFI.

    But OP might have other reasons in mind, I dunno.