Blu-ray, or any non-rewritable optical media, guarantees that it hasn't been tampered with. If I were attacked by malware, I like the confidence that the Blu-ray backup is absolutely guaranteed to be the same as on the date it was written. A hard disk used for backup might have been reattached to the network at some point after the initial backup and gotten infected/corrupted/altered.
> Blu-ray, or any non-rewritable optical media, guarantees that it hasn't been tampered with.
In terms of external tampering, I think that need is better-served by encrypting everything, which you probably want to do anyway. Or at least using some sort of checksum signed by a key.
However if the focus is "what if the backup process is compromised", then yes, having some date which is beyond its writing-reach may be useful. Another aspect of this might be a remote-backup system where one set of credential is enough for daily backups and restore, while another is needed in order to access a set of older duplicates that are remotely maintained as ransomware-protection.
That depends on your threat model. If the attacker can swap the Blu-ray disc to a similar looking one, but with content they control, that absolute guarantee becomes moot.
Not a bad idea, and I used to save lots of web pages as PDFs in the distant past, but I've noticed that a large percentage of sites will not print out correctly as a PDF these days. I see myriad problems these days: the page is truncated on the right (no matter how much you zoom out), or all pages come out blank after the first page, or the PDF gets rendered as an image (taking many megabytes per page) rather than as text, or the outer frame prints but inner frames with the actual content are missing.
The more "modern" the site, the worse it is. Surprisingly, government websites often print correctly since they've done the least amount of work to make the site modern looking.
I'd like to use it, but I'm hesitant to use anything that isn't a reviewed and approved package in my Linux distribution. Even if the chance is 1% that a program I download has malware or security problems that even the author doesn't know about (eg., due to libraries used), odds are that my system's going to be compromised if I run 50 such programs. This extends to browser add-ons, bookmarklets, and extensions too.
How do other people handle this dilemma?
Even solution I can think of involves are a great amount of extra work.
Apart from high-overhead solutions like VMs and containers, there are seamless and maintenance-free solutions (after the initial setup):
- systemd service hardening [0] [1]
pretty powerful, but it's a blacklist approach - whack-a-mole
- AppArmor [2]
Whitelist, proactive approach. Contrary to SElinux, it's not a programming language, and could be grasped pretty quickly. I made a tool to easily convert AA logs into usable rules. [3]
Building from source is nowadays writing one sentence in a chat box. Your idea of extra work is either unbelievably lazy or perhaps outdated by a few years.
I think the best answer lies somewhere in compartmentalization and fine-grained permissions. In this case: run it in some kind of secure container which has access to read browser history, and write to its database, but definitely does not have network access.
Unfortunately there's no one-size-fits-all solution for this yet, but there are a lot of groups attacking it from different angles: Qubes, GrapheneOS, Firejail, Bubblewrap, Android/iOS app permissions, Landlock, App Sandbox, etc.
> ...run it in some kind of secure container which has access to read browser history, and write to its database, but definitely does not have network access.
We should be doing this with all software, regardless of provenance, anyway. Least privilege applies to servers just as much as it does to users. Even if the software isn't untrustworthy you can be it has vulnerabilities.
My first go-to is network segmentation because I spend most of my time doing networking work. For every vendor who has shit-talked me to Customers ("Wah, wah! Your networking vendor is making this so much harder because they want us to enumerate our traffic!") I have concrete examples I can cite when attacks were stopped by network segmentation (preventing shellcode from downloading a payload, preventing C2 communication, firing off alerts when unexpected network traffic starts coming out of a host, etc).
Beyond network segmentation, I am very suspicious of software that needs to run as a privileged user. So many attacks get easier when privilege escalation in the host OS is already done for you.
For me: consider this a form of paranoia and ignore it, while worrying more about cleanup costs of non-vetted packages.
Like, even if there is 5% chance that a program I download will start downloading global python or node packages, odds are within a year I'll deal with couple that have mutually incompatible requirements and are impossible to run without more VM surgery than I have patience for, and that I'll discover this only after a botched installation bricks software that used to work before.
But that's solvable with less extra work. Just throwaway containers. With no hand-wringing about read-only access or isolating it from network, because my threat modeling doesn't consider loss of privacy or any data leak from my personal local side to be realistic or impactful threat event (I mean, everything that matters is in someone else's cloud and by design not trivial to access) - OTOH, it assigns great magnitudes to loss of personal time.
Distro maintainers aren’t infallible either. At the end of the day it’s up to you to decide where and how much trust you place and do your due diligence from there.
One thing that can be helpful when reasoning about things like this is figuring out what your actual threat model is. What does system compromise look like to you? Data exfiltration, arbitrary code execution, something else?
Not a technical talk but he gave testimony a month ago: "OpenAI co-founder and former chief scientist Ilya Sutskever said his stake in the ChatGPT maker is worth roughly $7 billion, making him one of the largest individual shareholders. Sutskever confirmed the size of his stake in response to a question from Elon Musk’s attorney on Monday [May 11, 2026] during his testimony in a closely watched trial between the world’s richest man and OpenAI." [1]
This trend story about wired headphones is possibly a "submarine" story as Paul Graham calls it[1], like a headline that "Suits make a corporate comeback":
"The suit is back," it begins. Trend articles like this are almost always the work of PR firms. Once you know how to read them, it's straightforward to figure out who the client is. With trend stories, PR firms usually line up one or more "experts" to talk about the industry generally. In this case we get three: the NPD Group, the creative director of GQ, and a research director at Smith Barney. When you get to the end of the experts, look for the client. And bingo, there it is: The Men's Wearhouse.
Possibly it's a paid for ad. But the trend is real, at least among Gen Z/Alphas. I recently modded an iPod Mini 2nd gen for my daughter and put Rockbox on it. The thing is amazing, and I am thinking about buying an iPod classic myself. The touch wheel interface is one of my favourite interfaces ever.
Cool! I wrote a significant part of the graphical UI for rockbox about 20 years ago. It was text based before that. Needed it for my back then very fancy harddisk based mp3 player.
The project was great to work with, Daniel Stenberg (also the curl maintainer) was really good at helping newcomers like me participate. That may be a big part of why the project is still around 20 years later.
First off, you're a kickass parent, that's an awesome thing to do for your daughter. How easy is it to sync with music she wants to listen to? I haven't touched Rockbox in quite a while, but I imagine it's still expecting DRM-free audio files of some sort right? Other than bandcamp I can't think of any good source for finding some beyond ripping audio streams and organizing it yourself.
A lot of my drm-free mp3s come from friends. I probably have 2000+ cds that I’ve ripped, or downloads from buying vinyl. I’ll make a copy for friends to load onto devices and it’s the equivalent of loaning a disc to a friend.
I suppose there’s probably music torrent sites out there, but haven’t heard of anyone pirating music in many years as I’m too old now.
Apple’s music has mostly been DRM-free since 2009!
I love this about Apple and give them as much of my business I can to show that there is still a healthy market outside streaming. (7digital is another good source, although more expensive than Apple. They offer FLAC and 320kbps.)
You can buy good quality replacement batteries. I got Cameron Sino "CS-EC003XL". It lasts at least a week before needing a charge, depending how much you use it.
I agree. At the very least it's vastly overstating a real trend.
> Sales are through the roof in recent months.
OK, I'll follow the link here. It goes to an article titled "Wired Headphones Growth Is a Throwback to 2016"[1], already a far cry from "through the roof".
From that article we have this:
> After 5 years of sales declines, which culminated in a $42M drop in 2024, wired headphones rebounded in 2025, growing 3% (about $15M).
OK, great. So wired headphones are a little bit trendy after years of decline. And of course they have some real advantages as many people here are testifying.
But c'mon, "sales are exploding", "sales are through the roof". They're not through the roof, they did a little bounce when they hit the floor. OK, to be fair it also says "the trend really gained momentum in the second half of 2025, with sales surging 10% between July and December", so maybe it's getting some momentum, but let's not get so far ahead of ourselves.
So who is the client? In all of the article’s photos of celebrities, they’re wearing Apple EarPods. Is Apple trying to convince people to buy their $19 EarPods instead of their $250 AirPods?
This assumes that people are switching from wireless to wired headphones organically, and the main assertion of the article (wired headphones are popular again) isn’t actually manufactured.
Although it’s possible Apple influenced the article, it makes no sense for them to push the “wired over wireless” narrative. AirPods are a $25B/year business with very high profit margins. EarPods are a tiny fraction of that, and it’s not worth manufacturing a narrative that undermines their successful AirPods business even for the chance of upselling.
Although I liked the video of the artist working, I didn't appreciate that they took away the controls to pause, play, seek. Is there a workaround to get back the playback controls on websites that disable it?
I have a weird long-shot idea for GPT to make a new discovery in physics: Ask it to find a mathematical relationship between some combination of the fundamental physical constants[1]. If it finds (for example) a formula that relates electron mass, Bohr radius, and speed of light to a high degree of precision, that might indicate an area of physics to explore further if those constants were thought to be independent.
They literally cannot do this, they are not that much different than autocomplete that was in your email 10 years ago, with some transformer NN magic. Stop believing the hype.
The Bohr radius is the result of a simple classical physics calculation (a common exercise for undergraduates in their first year). It depends only on the electron mass and the fine structure constant which is the strength of the electromagnetic interaction. In the SI system, the speed of light has a fixed value which defines the unit of length.
There are known mathematical relationships between almost all fundamental physical constants? In particular, in your example, Bohr radius is calculated from electron mass and the speed of light in vacuum... I don't think this path is as promising as it sounds.
> if your ISP-side modem directly outputs digital audio, the downstream channel capacity is significantly higher
But why is it higher? It's still an analog channel (the last mile from the ISP to your house), right? Doesn't it get filtered? So isn't it still subject to the Shannon-Nyquist limit?
Here's an ASCII drawing of which parts are digital vs analog as I understood your explanation:
Rest of world<--- digital--->Telco<---digital--->ISPmodem<---analog--->HomeModem
Suppose you're saying that the link between the ISPmodem and the HomeModem is a bare unfiltered copper wire. In that case, I have a different question: Couldn't you send data at megabits per seconds over a mile long copper wire without using modems at all (using just UARTs?).
> Couldn't you send data at megabits per seconds over a mile long copper wire
Yes, but you need the bare copper wire without signaling. We operated a local ISP in the 90's and did exactly that by ordering so-called "alarm circuits" from the telco (with no dial tone) and placed a copper T1 CSU on each end. We marketed it as "metro T1" and undercut traditional T1 pricing by a huge margin with great success to the surrounding downtown area.
Yes, the actual bandwidth of the last-mile analog line was much, much higher. Hence why we eventually got 8mbit ADSL or 24mbit ADSL 2.0+ running across it. Or even 50-300mbit with VDSL in really ideal conditions.
Though the actual available bandwidth was very dependent on distance. People would lease dedicated pairs for high bandwidth across town (or according to a random guy I talked to at a cafe: just pirate an unused pair that happened to run between their two buildings). But once we start talking between towns, the 32kbit you could get from the digital trunk lines was almost always higher than what you could get on a raw analog line over the same distance.
Traditionally both the ISP and you pay for analog phone lines from the telco. The telco uses digital internally (remember you and your ISP probably aren't at the same exchange), which puts a hard limit on data rate - there is no trick you can do to get more bits through than the bits used in the digital part of the call.
If you (as the ISP) buy enough lines you can get them delivered in digital format. A T1 is designed to carry 24 simultaneous phone calls, acting virtually as a bundle of 24 analog phone cables. So the obvious next stage was to have a modem that can handle 24 simultaneous connections on one cable.
Now you have ISP\_modem←Ax24→ISP\_muxer←Dx24→Telco←→Telco←A→User
The ISP's modem generates analog signals for up to 24 simultaneous incoming calls, and they pass into a multiplexer that connects 24 analog lines to a T1 line and they go through the telco digitally to users. The maximum bandwidth is still as before - the modem has to generate an analog signal that will still be receivable at the other end after A2D and D2A conversion. Even though the digital bandwidth for the digital part is 56kbps, the maximum achievable bandwidth through this digital-bottlenecked analog call was found to be 33.6kbps.
But the industry had an idea: by convincing the telco to install the modems into the user's exchange, the analog portion would only be between the telco and the user, without a digital segment in the middle of it, and therefore wouldn't be bottlenecked the same way. The same digital backhaul from the ISP through the telco was used, but instead of transmitting a digitised analog modem signal and therefore causing degradation of quality, it transmitted your actual internet traffic bits, up to 56kbps. The analog signal was made at the user's side of the telco and didn't have to fit within 56kbps when digitised.
Pedantically, the digital circuits are 64kbps but one bit in some bytes is used for call status signaling, which is okay for voice, but the ISP equipment can't predict which bytes have a bit overwritten (and it could be multiple if there are several hops) so it just used 7 bits in each byte.
No, it’s more like HomeModem ←A→ Exchange1 ←D→ Exchange2 ←A→ ISPModem. The digital parts were all inside the telco’s networks that connect the exchanges to each other.
> Couldn't you send data at megabits per seconds over a mile long copper wire without using modems at all (using just UARTs?).
No. The exchange is sampling the analog signal coming in over your phone line at 8kHz and 8 bits per sample. They just designed modems that sent digital data over that analog link, in a way that would line up exactly with the way the exchange will sample it.
The Costco one uses household current (as can be seen in one of the photos that shows a cord and a plug) and the AliExpress uses USB. I doubt that USB can supply enough power to do more than a trivial amount of heating. USB 3.1 has a max of 15W, and I can't imagine that a $25 blanket is going to use the more sophisticated USB Power Delivery connections where even the cable & charger can cost more than $25.
While trying to find the actual power consumption of the Costco model, I found this very useful comment on the Costco site: "The power consumption is not listed anywhere - product packaging, website, or included manual. I went ahead and made the purchase and hooked it up to my battery unit once I got home. I can confirm, the blanket uses an average 99W regardless of which mode it's in. I left it in each mode for about 5 minutes. There's no difference to the touch of the blanket and there's no difference with the power consumption. In other words this blanket has one heat setting and it's not very warm."
