Foxboron

7 ms·

31.
by Foxboron 11mo ago
> See for example the many problems of NIST P-224/P-256/P-384 ECC curves What are those problems exactly? The whitepaper from djb only makes vague claims about NSA being a malicious actor, but after ~20 years no known backdoors
32.
by Foxboron 11mo ago
> This is why djb is in the Cypherpunks Hall of Fame! [1] This is a list made by you 2 weeks ago? EDIT: Okay lol. I actually browsed the list and found multiple dubious entries, along with Trump! Hilarious list. 10/10.
33.
by Foxboron 11mo ago
A golang library is cool, but it doesn't give you a working ssh-agent. I started working on one few years ago: https://github.com/Foxboron/ssh-tpm-agent
34.
by Foxboron 11mo ago
> Side note: What is that massive yellow CYBER sticker that seems to be on 80% of them? Feel like I’ve missed some kind of political movement. I'm a little bit unsure about the origins of the sticker. But in the european hacker comm
35.
by Foxboron 1y ago
What about just ignoring package signatures? https://github.com/basecamp/omarchy/blob/master/default/pacm...
36.
by Foxboron 1y ago
> C interop is excellent and has been for years. Only if you primarily work with `cargo` and want to interact with C from Rust. The other way around has far less support and `rustc` does not standardize the object generation. This is act
37.
by Foxboron 1y ago
> That's how "I use Arch btw" became a meme. Not really. The meme is from 4chan and the /g/ board that had some origins around 2011/2012. Gentoo was the main meme before this. After 2012'ish the meme-cu
38.
by Foxboron 1y ago
Just quickly skimming it, it contains several outdated blocks of advice and omits other topics. The most glaring one is the recommendation to use `rng-tools`, which is not needed anymore for the past couple of years. It was written 6 years
39.
by Foxboron 1y ago
The Linux `vmlinuz` binary is an EFI executable that implements a minimal stub loader to load rest of the kernel and initrd. You can use `efibootmgr` to insert the `vmlinuz` binary as a boot entry. But honestly, you are better off using a p
40.
by Foxboron 1y ago
>Thanks to updates to sbctl, you can create keys with `sbctl create-keys` rather than typing out complex openssl commands. sbctl's `enroll-keys` should also make the key enrollment procedure easier. I mean, reading Rod Smiths post i
41.
by Foxboron 1y ago
The main complaint was the market place TOS that gave Microsoft a free-pass on any trademarked assets. The new WSL2 installation way avoids all of this. Along with the glibc hacks needed by WSL1. (I was part of the discussion and also very
42.
by Foxboron 1y ago
>e.g. there's no Arch from Arch or Microsoft, but there's a completely compatible third party package that gives you Arch in WSL2 No longer true since last month. https://lists.archlinux.org/archives/list&#
43.
by Foxboron 1y ago
Just as with the sudo-rs reimplementation, a doas-rs rewrite is not going to solve the inherent issues we get with SUID binaries. We are better off implementing better models (see ssh and run0).
44.
by Foxboron 1y ago
doas is a really bad option on Linux. The Linux port has not been maintained for 3 years. Has unmerged rowhammer fixes and generally a yolo auth system best described as "dangerous". You are better off using a well maintained proj
45.
The Hunt for Darcula(nrk.no)
5 points by Foxboron 1y ago|0 comments
46.
by Foxboron 1y ago
> Debian is pretty old, but it's a 2nd gen distro, borne from dissatisfaction with the very early SLS. Scratches their own itch, check. > So was Slackware, but it took SLS and improved it. Slackware is arguably the oldest survivi
47.
by Foxboron 1y ago
I think all of todays popular Linux distros, Debian, Gentoo, Fedora, Arch, SUSE and so on, are all very much "scratching my itch" projects that somehow managed to outlive the original authors engagement with the project. It's
48.
by Foxboron 1y ago
The messaging is a bit unclear. Someone will probably update `redis` in the AUR, but the intention is to communicate that if you have `redis` installed from `[extra]` you wont see any updates.
49.
Arch Linux now has an official WSL image(antiz.fr)
5 points by Foxboron 1y ago|0 comments
50.
by Foxboron 1y ago
> That's < 15k packages. Nix by comparison has ~100k total packages they are trying to make reproducible and has about 85% of them reproducible. Same goes for Debian - ~37k packages tracked for reproducible builds. One way to lie
51.
by Foxboron 1y ago
They are not. Arch hovers around 87%-90% depending on regressions. https://reproducible.archlinux.org/ Debian reproduces 91%-95% of their packages (architecture dependent) https://reproduce.debian.net/ >
52.
by Foxboron 2y ago
You could use `host match exec` instead of `ProxyCommand`. I believe it will run before you end up checking for files on disk.
53.
by Foxboron 2y ago
Still early but Mickaël Salaün, the author of landlock, is working on this. https://github.com/landlock-lsm/landlockconfig I'm going to write up some Go bindings for this when it becomes relevant.
54.
by Foxboron 2y ago
Read the page again. What are they testing? 99% of what exactly? What does "path" mean, does it inflate the number?
55.
by Foxboron 2y ago
> With content addressed derivations you can guarantee that any party can recreate bit-by-bit identical copies of derivations It wouldn't guarantee anything. It would force you, and anyone else, to do massive rebuilds when some bina
56.
by Foxboron 2y ago
You would think so, but after close to 10 years as a package maintainer it's clear to me that people don't know how make works when you do start doing anything else than `-j1`. The gcc compiler also fails to reproduce binaries wit
57.
by Foxboron 2y ago
> as computers are deterministic I have some bad news.
58.
by Foxboron 2y ago
Calling it a "minor naming ambiguity" when people get surprised every time it gets pointed out is underselling the (albeit small) problem.
59.
A Report from the 2024 Image-Based Linux Summit(lwn.net)
36 points by Foxboron 2y ago|3 comments
60.
by Foxboron 2y ago
> Fingers crossed this means Arch will support the ARM architecture* in the official repositories. There's a related RFC which has been accepted but but I'm not sure where things stand right now. That is the goal with the work

More ›