Foxboron

29 ms·

301.
Bootstrappable Builds(lwn.net)
13 points by Foxboron 6y ago|2 comments
302.
by Foxboron 6y ago
I think this ignores the reality of the libressl support in nixpkgs? I did a quick search and a few packages seems to depend on libressl, there are patches going into one or two python modules, qt4 and I see some patches are fetched from Vo
303.
by Foxboron 6y ago
flash predates systemd by around 5-6 years. Flash has 1000+ CVEs. Systemd has less then 20. I don't think pointing at flash proves anything.
304.
by Foxboron 6y ago
I don't think flash proves anything. It's an extreme example after all.
305.
by Foxboron 6y ago
systemd has a strong track record of finding and fixing security issues and getting the CVE published. This is important if you want to consider "secure software" and getting things resolved in a timely manner. People focus on the
306.
by Foxboron 6y ago
>Is it really an established idea in the security community that systemd is a security nightmare? It's not. The presence of CVEs in software is a sign of maturity, not insecurity. It's frustrating to see people use CVE numbers
307.
by Foxboron 6y ago
If you missed a talk there is relive where you can rewatch content. https://streaming.media.ccc.de/rc3/relive
308.
by Foxboron 6y ago
Click on the stream. Click on "Chat" and you will see a direct link to the IRC channel for that room. There are also multiple IRC rooms for assemblies, workshops, discussion topics and more. Did you actually try look into this eve
309.
by Foxboron 6y ago
There is an entire pixel world created where participants can walk around and share video and audio. There are also sessions, music and other stuff happening that attempts to recreate the experience of being at CCC. Here is me in an assembl
310.
by Foxboron 6y ago
>Can you elaborate on this further? I do not know what this means. I was not part of any local assemblies as I am not German, nor do I speak German, and many of the assemblies at 35c3 seemed to be treating me very coldly as they are just
311.
by Foxboron 6y ago
>Soo hard to get a ticket. I was there for 35c3. Worst part is that since you don't know if you will get a ticket or not and you book hotels/flights only after you nab a ticket, you are paying increased prices vs booking far in
312.
by Foxboron 6y ago
I really enjoyed the talk on Linux kernel memory management from Chris Down that was held during this years Arch Conf. It's well structured, funny, and gives nice insight into how you scale when you can't throw more hardware on th
313.
by Foxboron 6y ago
And somehow it pulls together 14000 people for a 4 day experience I can only describe as defcon and burningman having an illicit child they dropped off somewhere in germany. Been going there since 2014 and it's a great experience.
314.
by Foxboron 6y ago
Which makes the problem harder to solve. But this isn't an argument against the functionality though? It's still something we need if the community wants to move away from GnuPG. What are the alternatives? PKCS7? I don't see
315.
by Foxboron 6y ago
Which is why most distributions and other projects has moved to WKDs for key discovery. I don't think this is a good argument though as there are alternatives, even though they don't work super well at the moment.
316.
by Foxboron 6y ago
Sadly age is only tackling one of the easier parts of gnupg, encrypting files. Implying age replaces gnupg is overselling it. We don't have any good alternatives for a web-of-trust (or something akin) where we can sign files or attest
317.
by Foxboron 6y ago
Need server on windows and client on linux so this won't work properly yet for me.
318.
by Foxboron 6y ago
I have been using synergy for 6 or 7 years. Barrier the past year. It works reliably, more so then synergy, and I'm typing this reply through barrier right now :) It also fixes a few quirks I had like xorg screen changes wasn't re
319.
by Foxboron 6y ago
It greatly annoys me that wayland still doesn't have any solutions for synergy/barrier type software. I depend on it daily for using my desktop and laptop and it's tedious to make the switch as it currently is.
320.
by Foxboron 6y ago
The text is copied from when the Antergos distro told their users they would still get updates. https://web.archive.org/web/20190808223051/https://antergos....
321.
by Foxboron 6y ago
Correct me if I'm wrong, but I believe Kees Cook has been livestreaming some of the patch reviews of this work on Twitch. https://www.twitch.tv/keescook Past recordings can be found on youtube: https://www.y
322.
Pam Bypass: when null(is not)ok(linderud.dev)
2 points by Foxboron 6y ago|0 comments
323.
by Foxboron 6y ago
Nothing about this CVE was related to the language though. It's a configuration issue along with nullok.
324.
by Foxboron 6y ago
Debian is only 9 years older then Arch though. Debian was 7 years 20 years ago, Arch is 18 years this year.
325.
by Foxboron 6y ago
There are duplicate PKGBUILD files in the repository, so depending on the PKGBUILD and where it is, there might be 3 results for every 1 patch. In many cases there are two hits pr 1 patch.
326.
by Foxboron 6y ago
I'll start off with a hyperbole: We don't have any of that. But that isn't really true. Arch historically has always been a DIY distribution with an equally DIY contribution structure. Our leaders has been BDFLs for close to
327.
by Foxboron 6y ago
This probably got posted because he reworked the blog theme and fixed the post. This rebumped the post in the RSS feeds. AFAIK nothing new has been added?
328.
by Foxboron 6y ago
My guess is that they think DNS resolution failures are consorship. There where some insane numbers like 95% unavailability of pcgamer.com and worldofwarcraft.com in the article as well. It makes no sense.
329.
by Foxboron 6y ago
Well no. I don't need multiple versions of the same library to do this, neither do i need the cache engine of some v8 browser either.
330.
by Foxboron 6y ago
Implement the `git identity` portion listed earlier with a `identity-list` utilizing `git config --get-regexp`. If you need interactivity you can tie it together with fzf and some awk.

More ›