eeZah7Ux

10 ms·

61.
by eeZah7Ux 6y ago
no thanks. It's pretty orthogonal to the conversation about sandboxing.
62.
by eeZah7Ux 6y ago
You described what firejail is already doing.
63.
by eeZah7Ux 6y ago
Spot on.
64.
by eeZah7Ux 6y ago
Because distributions don't need flatpak. There are already methods to do sandboxing like systemd and firejail.
65.
by eeZah7Ux 6y ago
> If you manually install a rpm, deb or add a new repo, your system is completely owned by the person who built that package or repo True, and the same is true for flatpak given that the author of the package controls the sandboxing. The
66.
by eeZah7Ux 6y ago
> Soon they'll reinvent the classical Linux distro Spot on. Distros exists for good reasons: you need someone to configure things to work well together and manage security for you. Including sandboxing: it's being already done
67.
by eeZah7Ux 6y ago
Unsurprisingly Free/Libre Software developers tend to be based in Europe (as percentage over population of developers).
68.
by eeZah7Ux 6y ago
> That’s the actual safety from using something like MIT, BSD, or Apache ... it’s no strings attached This is very misleading. For example, [L]GPLv3 explicitly introduced clauses to protect developers from patent trolling and to grant tr
69.
by eeZah7Ux 6y ago
Amazon is well known for having a very restrictive policy for contributing to FOSS
70.
by eeZah7Ux 6y ago
This is plain false: tivoization is the best example.
71.
by eeZah7Ux 6y ago
Unfortunately a lot of people don't give fucks about others. Publishing a weekend fun project on github and taking contributors away from from other projects is not always nice. If it's just a "fun project" put a clear w
72.
by eeZah7Ux 6y ago
Absurd comparison.
73.
by eeZah7Ux 6y ago
Survivor bias much?
74.
by eeZah7Ux 6y ago
It's pretty crazy that we don't have something similar now. And possibly with better security.
75.
by eeZah7Ux 6y ago
Unfortunately fragmenting the opensource ecosystem with too many implementations harms it.
76.
by eeZah7Ux 6y ago
> absolutely ground breaking, unlike anything else Containers existed for decades as a concept and for years on Linux (using lxc or VirtSquare and later nspawn)
77.
by eeZah7Ux 6y ago
Spot on. Firewall are becoming less and less useful in the time of cloud. We need holistic solutions where we can control traffic by entity, domain, role, application, not IP address and port. > There will come a point where the attacker
78.
by eeZah7Ux 6y ago
Thanks!
79.
by eeZah7Ux 6y ago
systemd-nspawn does the same things as docker, but with much smaller attack surface and can be sandboxed very effectively by the unit files. The isolation provided by unit files is orthogonal with running containers. nspawn is not even runn
80.
by eeZah7Ux 6y ago
This is excellent advice. Together with systemd-nspawn it's all one needs to run a container in a strong sandbox.
81.
by eeZah7Ux 6y ago
Yes. Stay away from Docker or anything so complex. systemd-nspawn does the same things and can be sandboxed very effectively by the unit files.
82.
by eeZah7Ux 6y ago
Give me some good reasons for believing that a "slightly bad opinion" and "hate speech" can be easily confused and I'll be ready to rethink my position. Questioning our own positions is the opposite of bigotry, afte
83.
by eeZah7Ux 6y ago
> Do you think the reaction you are receiving should cause you to question your own position? If there was a clear accusation of hate speech on my behalf I would certainly do. Would you?
84.
by eeZah7Ux 6y ago
On an android device you don't need 10k coroutines. And on severs - people implemented webservers like apache 25 years ago without coroutines and it ran with with very limited RAM.
85.
by eeZah7Ux 6y ago
No, the article correctly points out: > A thread is only 3 times as large as a goroutine. Absolute numbers are also significant: 10k threads require only 100 megabytes of overhead. If the application does 10k concurrent things, 100mb mig
86.
by eeZah7Ux 6y ago
It has 0 issues that you know of. Yet, the kernel it just the same...
87.
by eeZah7Ux 6y ago
> I would rather have more people with less extreme views than fewer people with more extreme views, because it's much more likely the more extreme people are a greater danger to society than the less extreme people. History proves
88.
by eeZah7Ux 6y ago
> some slightly bad opinion suddenly finds themselves shut out of the main platforms because of hate speech rules A "slightly bad opinion" has to be more than "slightly bad" to break hate speech rules. If you feel a p
89.
by eeZah7Ux 6y ago
> Rust-only: it doesn't sacrifice simplicity and performance for cross-language compatibility A serialization format for one language only? That's pretty rich.
90.
by eeZah7Ux 6y ago
Complaining of the downsides of having too much money is pretty rich.

More ›