danieldk

28 ms·

361.
by danieldk 6y ago
Or NixOS/Guix, which treat the system as immutable (ie. in Nix pretty much everything but the Nix store at /nix is built after boot anyway). Or macOS by using a read-only system volume. The grandparent bug is as much a failing of
362.
by danieldk 6y ago
Similar policy: https://www.debian.org/security/faq#contrib However most packages in Debian are in main . AFAIK contrib is for FLOSS packages that somehow depend on packages that are not FLOSS.
363.
by danieldk 6y ago
Why would you? lz4 decompresses at ~5GB/s on a modern CPU [1] with good compression ratios, that's still more than most SSDs can push nowadays. Most applications are small fraction of that size on-disk. The problems arise when you
364.
by danieldk 6y ago
It's an interesting point, but seek times and rotational delays don't apply to SSDs. There is another reason to do compression on SSDs: you have more storage free and thus less write amplification and your SSDs will last longer.
365.
by danieldk 6y ago
Ubuntu security updates do not cover the universe repository, which contains the largest number of packages. The universe repo is 'community-supported', which means that a lot of CVEs are not fixed in practice. https:/&#
366.
by danieldk 6y ago
But then biking is cheap. When I was a student, I would buy a bike at a used bike shop for ~80 euros. They would last me a year and I would bike almost daily to the university, to go to friends, or go out at night. Besides not having incr
367.
by danieldk 6y ago
None of my friends outside tech circles have heard of "The Dash". They all know and most of them bought or want AirPods. An estimated 60 million AirPods were sold in 2019, nobody else in the category comes close.
368.
by danieldk 6y ago
Bragi crowdfunded "The Dash" in early 2014 (to much publicity) and released them in late 2015. To my knowledge this was the first high-profile pair of "disconnected wireless earbuds". And they had so-so reviews. There
369.
by danieldk 6y ago
The separate volume is still required. As far as I understand if you use an encrypted volume, it does not mount early enough in the login process and you have resort to more hacks to make it work. Ideally the Nix store would be in some non-
370.
by danieldk 6y ago
This is a benefit, but other distributions are catching up. For example, Fedora Silverblue has an immutable root filesystem and provides atomic upgrades/rollbacks through OSTree. Ubuntu 20.04 supports making ZFS snapshots as an APT pre
371.
by danieldk 6y ago
You can use NixOS on the desktop -- it has a lot of benefit (including atomic upgrades/rollbacks). But it only really works well if you manage everything through Nix. Other mechanisms such as the ones that you mention tend to break ver
372.
by danieldk 6y ago
having deterministic/reproducible/reverting/history/etc with Ubuntu Looking at the recipes this seems to be non-deterministic/reproducible. E.g. add-apt-repository -y ppa:longsleep/golang-backports &amp
373.
by danieldk 6y ago
In fact, a derivation is not even a type. AFAIK it is only informally defined as an attribute set with an attribute type with the value derivation : https://github.com/NixOS/nixpkgs/blob/2cd8c35c1fdfdb773df
374.
by danieldk 6y ago
I'd argue that Nix is turing-incomplete. What do you mean by this? Nix is a Turing-complete language.
375.
by danieldk 6y ago
I really want to try NixOS but the Nix language is just so damn weird... It's not really weird when you know a functional language like Haskell or OCaml. My experience was actually the opposite: being a functional language, Nix'
376.
by danieldk 6y ago
I guess the reason is that part of the benefits come from being a (largely) pure functional language. The property that an expression must always evaluate to the same value does wonders to reproducibility. I agree that adoption would probab
377.
by danieldk 6y ago
And macOS! Catalina's read-only system volume has made the installation a bit more difficult. But once you have set it up, you get many of the same benefits (per-project virtual environments, home-manager, etc.). We use NixOS on three
378.
by danieldk 6y ago
Thanks for the clarification!
379.
by danieldk 6y ago
Now we have gone from macOS drivers are garbage to macOS has the worst driver support . Which is a completely different statement. Also it's one that is hard to disagree with -- macOS is only made to run on Macs.
380.
by danieldk 6y ago
I can buy a Dell a lot cheaper - of course from the MS store to avoid all of the crapware - and have more options. A while ago I installed a pristine Windows 10 (retail) copy on my NUC, just to see where Windows is at. I'll skip the
381.
by danieldk 6y ago
What really good Linux laptop can you get below the price of a MacBook Air that is not a second-hand Lenovo or a rebranded Clevo? And must have a HiDPI screen. Most likes Linux laptops are in the same pricing ballpark as a MacBook Air or Ma
382.
by danieldk 6y ago
Apple lacks this feedback loop, and their drivers are garbage. There may be exceptions, but I never had anything like the graphics glitching that the Nouveau drivers had or known problems that would lock up Intel GPUs every one 1-2 days o
383.
by danieldk 6y ago
Note that it is an identifier, the number indicates a generation, not a screen size. The answer is MacBook Pro (13-inch, 2017, Two Thunderbolt 3 ports): https://support.apple.com/en-us/HT201300 This is a model without
384.
by danieldk 6y ago
I am not sure how that is relevant, since this is about a current Android vulnerability. But it's less of a problem in iOS anyway, because Apple provides updates for iPhones much longer. They are still releasing security updates for
385.
by danieldk 6y ago
‘It’ refers to this specific functionality. If you recompile the XNU kernel you could disable the part that ‘reserves’ the CPU to cool the system. I am not sure whether is is still possible to replace the kernel, but IIRC some Hackintosh pe
386.
by danieldk 6y ago
Take the risk of bricking my one and only dev machine by disabling the kernel_task process altogether, no thanks It has PID 0 and is part of the kernel. AFAIK you can't disable it (unless you build your own kernel).
387.
by danieldk 6y ago
I can `apt install` pretty much anything I want and it's almost guaranteed to not be malicious/dangerous, as only trusted/well-established developers can get their package into the Apt repos. Maybe not malicious, but packag
388.
by danieldk 6y ago
There is nothing that messages has that it's competitors don't. The combination of: wide acceptance + an owner who is not incentivized to use your chat (meta)data to sell ads. That is something for a platform we use to share ver
389.
by danieldk 6y ago
OmniGraffle then ;) But there are many more: Things, DeckSet, Affinity Designer/Photo/Illustrator (available on Windows, but nothing of the same quality on Linux), Little Snitch, LaunchBar/Alfred. The Mac has traditionally ha
390.
by danieldk 6y ago
Also a nice feature, which unfortunately not a lot of applications use, is the haptic feedback. E.g. when you drag an object in OmniGraffle, you will feel very subtle feedback in the trackpad when two objects align.

More ›