Foxboron

43 ms·

241.
by Foxboron 5y ago
I think it's a strong disconnect along with the staff selling lies wholesale. It's weird. I do wonder when Andrew is going to realize that the 68K users he has is mostly idle connections or small private irc channels.
242.
by Foxboron 5y ago
The network operators are calling project owners "brainwashed" in the #freenode-services channel. I think they are at the moment following titanic all the way to the bottom. Edit with full quote: > 14:44:44 lionman@ : LeSh
243.
by Foxboron 5y ago
Ah, I was waiting for just that.
244.
by Foxboron 5y ago
Andrew, the link clearly states you can't just take over channels. Why are you deferring to clearly void "policies"? How does this address any criticism?
245.
by Foxboron 5y ago
I said the same thing then. The pre-print was public at that point and I had been following it since December, sharing thesis adviser doesn't make you associated with research conducted months prior. Yes, they are bad patches and the r
246.
by Foxboron 5y ago
Please google me. You'll quickly learn I'm a 26 year old Norwegian FOSS maintainer named "Morten Linderud". Or, y'know. Click on the profile.
247.
by Foxboron 5y ago
https://lore.kernel.org/linux-nfs/YH5%2Fi7OvsjSmqADv@kroah.c... And the resulting conversations between Aditya Pakki and Greg. Aditya was never part of the hypocrite commit research, accusing them for this is just bad.
248.
by Foxboron 5y ago
There are a few issues with blaming someone for sending known malicious patches which just causes confusion and is outright wrong. Brad Spengler is a... character, but I do agree with him that greg started out on this wrong. (He also goes a
249.
by Foxboron 5y ago
The entire incident has been disappointing. The researchers conducting the research thinking this was a good idea, the IRB review process at the UMN, IEEE accepting the IRB exception after ethical concerns where raised, and the overreaction
250.
by Foxboron 5y ago
These are not independent malicious actors. These are researchers and students at a University. FUD does not serve any purpose here. And for full disclosure, I'm one of the four authors of the original complaint to IEEE back in Decembe
251.
by Foxboron 5y ago
>The thing is there is no way you can actually know that. We do know since the researchers have told the linux community, the university and IEEE what those patches where. Please do not spread further misinformation about the case. P
252.
by Foxboron 5y ago
There are code which takes the Python AST and attempts to produce the correct Python code. It has a few issues if i recall correctly but it should mostly^tm work. https://github.com/berkerpeksag/astor
253.
by Foxboron 5y ago
Karen Rustad Tölva drew the Hy logo, Cuddles the cuttlefish, and later the Rust mascot too, Ferris the Rustacean. You can probably see they are in the same style :) Paul Tagliamonte and the Hy contributors is what got me into F/OSS ma
254.
Show HN: Kernel.org Transparency Log Monitor(tlog.linderud.dev)
4 points by Foxboron 5y ago|0 comments
255.
“Hypocrite commit” paper withdrawal from IEEE Security and Privacy 2021 [pdf](www-users.cs.umn.edu)
7 points by Foxboron 5y ago|0 comments
256.
by Foxboron 5y ago
It's important to note that they used temporary emails for the patches in this research. It's detailed in the paper. The main problem is that they have (so far) refused to explain in detail how the patches where reviewed and how
257.
by Foxboron 6y ago
There isn't, but people are working on getting us there. The first project that comes to mind is "System Transparency". https://system-transparency.org/
258.
Remove RMS from the GCC Steering Committee(gcc.gnu.org)
10 points by Foxboron 6y ago|5 comments
259.
by Foxboron 6y ago
There are two listed, both former. But there is a difference contributing to GNOME projects and being part of the GNOME foundation.
260.
by Foxboron 6y ago
>Was nice to get my own Nitrokey free of charge from a similar deal with Gentoo Linux 2 years ago :) Yep, Gentoo was the reason we wanted to seek out a similar deal :)
261.
Arch Linux partners with Nitrokey to equip its staff with USB keys(lists.archlinux.org)
26 points by Foxboron 6y ago|8 comments
262.
by Foxboron 6y ago
The finished talk with a (short) Q&A can be also be found. https://media.ccc.de/v/arch-conf-online-2020-6390-linux-memo... Q&A Questions: https://gitlab.archlinux.org/archlinux/conf-files&#
263.
by Foxboron 6y ago
Linux these days actually. You can make ext4 case insesitive. https://www.collabora.com/news-and-blog/blog/2020/08/27/usin... Note: I also learned this today. Had no clue.
264.
by Foxboron 6y ago
And that is what Secure Boot does for you. Not the TPM.
265.
by Foxboron 6y ago
TPM usage assumes Secure Boot though. It's fairly useless if you are booting malicious files.
266.
by Foxboron 6y ago
Qubes OS is actively working on Secure Boot though. There is also a discussion about pros/cons. https://github.com/QubesOS/qubes-issues/issues/4371
267.
by Foxboron 6y ago
A physical keylogger is more complicated then messing with the EFI boot partition and adding some persistent code to the initramfs or kernel. Some people might say they have a detached bootloader (secondary USB which contains the LUKS heade
268.
by Foxboron 6y ago
>That is nonsense and you seem to spread this misinformation in a lot of places. You should also add a disclaimer that you are part of the Arch team. The AUR comment is unfair, uncalled for and adds nothing to the conversation. I apologi
269.
by Foxboron 6y ago
Traditionally package maintainers has kept dependencies up to date. This has changed with vendored dependencies where upstreams have to do the work. They are not always up for that work. This isn't strange, nor weird and the comparison
270.
by Foxboron 6y ago
This assumes an ideal upstream: This is not always the case. If someone publishes a CVE for a Go or Rust library it's not always the case the project is well maintained or the dev cares to update the dependency. Even if they did, there

More ›