Foxboron

22 ms·

271.
by Foxboron 6y ago
I'd be terrified, but that is how NixOS works.
272.
by Foxboron 6y ago
>With systems like Arch that get us closer and closer to upstream, are maintainers the unnecessary middlemen? Of course they’re not entirely redundant, but maybe a new model of distros like Arch will be more commonplace in the future Arc
273.
by Foxboron 6y ago
Then it would be tamper evident, not resistent?
274.
by Foxboron 6y ago
I'm still curious how the key is tamper resistent when filling it with transparent epoxy. I asked when the article was published on lobste.rs but never got an answer. It seems to me it should be fairly easy to remove the epoxy and re
275.
by Foxboron 6y ago
Yes, it's not really easy when people use these ambiguous names and talk about them in ambiguous ways.
276.
by Foxboron 6y ago
>Nix package managers/repositories have a level of scrutiny to get into, and highly dedicated people in charge of. Random github repos (or npm packages) are extremely low effort/risk to set up. That's not really true thoug
277.
Celebrating the 1000th Arch Linux Security Advisory(lists.archlinux.org)
1 points by Foxboron 6y ago|0 comments
278.
Plocate, a Much Faster Locate(plocate.sesse.net)
1 points by Foxboron 6y ago|0 comments
279.
8 Bits Are Enough for a Version Number(kroah.com)
167 points by Foxboron 6y ago|86 comments
280.
by Foxboron 6y ago
plocate is a very fast mlocate alternative that uses indexes over trigrams and io_uring for reading the database. With fzf you can have a pretty fast fuzzy search over your entire indexed disk. FZF_DEFAULT_COMMAND="plocate '
281.
by Foxboron 6y ago
>Any software that combines outside funding with donations has a risk of this right? Unless I'm missing something it may just be a personal falling out. The problem is the intransparency in the way things where handled as well. This
282.
by Foxboron 6y ago
Manjaro is currently owned by "Manjaro GmbH & Co. KG". One or two (maybe three now) constributors are hired by this company to work on the distro. Because of this there is essentially two parts to Manjaro. Manjaro the Communit
283.
by Foxboron 6y ago
Strictly speaking, this is nothing new. Debian has been doing it for 5 years. https://reproducible-builds.org/citests/ All distros there are essentially reproducible fuzzing CI systems that introduces determinism throu
284.
Qutebrowser 2.0(lists.schokokeks.org)
209 points by Foxboron 6y ago|128 comments
285.
What’s the Deal with Chromium on Linux? Google at Odds with Package Maintainers(hackaday.com)
5 points by Foxboron 6y ago|1 comments
286.
by Foxboron 6y ago
I had to look up the guy that actually designed it, and I realized they have pretty much made all the intro cinematics I adore from TV shows. Westworld, American Gods, Man in the High Castle and Halt and Catch Fire. https://www.a
287.
by Foxboron 6y ago
Initramfs I believe. `systemd-cryptenrol` would probably just be a binary like any other and wrap `cryptsetup` which is on your initramfs.
288.
by Foxboron 6y ago
What's the problem though? systemd is included in quite a few initramfs so nothing inherently has changed here.
289.
Jason Donenfeld Business Insider Interview(businessinsider.com)
8 points by Foxboron 6y ago|0 comments
290.
by Foxboron 6y ago
>EDIT: Why is the downvoting? the post was give like 9 upvotes in the first 5 minutes. I frequently go to "new" and this is a highly suspicious behaviour. They are popular people so people submit the link. Once duplicate links
291.
Preventing Supply Chain Attacks Like SolarWinds(linuxfoundation.org)
1 points by Foxboron 6y ago|0 comments
292.
by Foxboron 6y ago
I think this illustrates my point though. Nix doesn't necessarily solve the overarching issue of having vendored dependencies. And it doesn't seem like it's being worked on either. There might be work on this on a pr ecosyste
293.
by Foxboron 6y ago
> Whether the vendoring approach is used depends on the actual tools being used, but that is mostly irrelevant. I don't think it is though? Because... >So to answer your question, you only need to change a single file. For the re
294.
by Foxboron 6y ago
Everyone can provide multiple versions though, Arch does this. It works well to work around stuff in the existing ecosystem (e.g openssl1.0, gtk2/3/4, qt and so on). But I don't quite see how this solves anything for modern l
295.
Arch Linux Manual Pages(man.archlinux.org)
3 points by Foxboron 6y ago|0 comments
296.
by Foxboron 6y ago
Reproducible as in build environments or deterministic binaries? Nix has only reproducible build environments. Package maintainer. For the end-user there is no practical difference between a container and nix, and you see how well the conta
297.
by Foxboron 6y ago
I don't think nix solves this. You are still left with having to deal with security issues, updates and tracking on pr package basis instead of once for the entire ecosystem. Admittedly, this is a hard problem. And the languages that d
298.
by Foxboron 6y ago
If you set the option to load the seed, yes. That is how I understand it at least!
299.
by Foxboron 6y ago
>How OpenBSD solved it? Instead of loading it after boot in userspace, OpenBSD load the file early, really early, via the bootloader! Seeding the entropy pool via a file is part of the boot protocol. I thought systemd-boot implemented th
300.
by Foxboron 6y ago
I don't think sysvinit made use of hashtables, and if they did they would probably hit the same snag.

More ›