haukem

14 ms·

31.
by haukem 5y ago
This really depends on the project. Many people just do it in their spare time and have a normal software engineer or similar role working on proprietary software using open source. Some are still at university and studying. Some are contra
32.
by haukem 5y ago
The legal and fiance constructs of many open source projects are pretty badly organized. This makes it hard for accounts at big cooperation to handle them. Many open source projects are also pretty bad at marketing to non developers and do
33.
by haukem 5y ago
Thanks for the document, so the ARM marketing just confused me. ;-) Yes N2 is more likely than V1. N2 has the better PPA ratio. Own CPU core is very unlikely as I am not aware of any rumors which we would have notice before. N2 also suppor
34.
by haukem 5y ago
Does Graviton3 use the Neoverse V1? The Graviton2 used the Neoverse N1. The features listed here match the core: https://developer.arm.com/ip-products/processors/neoverse/ne... The N2 misses the bfloat, but i
35.
by haukem 5y ago
From my experience most commercial software licenses are much harder to understand. Especially if you want to redistribute commercial software and do not want to pay for it, it gets very complicated.
36.
by haukem 5y ago
I think it is the same as the GPL v3, at least these sections do not differ. See section 6. If you do not want to provide the user directly a current copy of your source code to downloaded, you can "accompanied [it] by a written offer,
37.
by haukem 5y ago
I think this answer is wrong or very dangerous, but I am not a lawyer. The AGPL v3 says: >... your modified version must prominently offer all users interacting with it remotely through a computer network .... an opportunity to receive t
38.
by haukem 5y ago
The main difference between the GPL v3 and the AGPL v3 is this addition: > 13. Remote Network Interaction; Use with the GNU General Public License. Notwithstanding any other provision of this License, if you modify the Program, your
39.
by haukem 5y ago
Intel does this all the time, but they want normal Ubuntu, RedHat and so on to support their hardware when their hardware gets into the market. With these phones the hardware and the software is shipped together in a bundle, it is a differe
40.
by haukem 5y ago
I haven't see this as a problem, but I am working for a consumer network equipment semiconductor company. I haven't worked with graphics drivers which could be different. Normally we get the driver code from Cadence and Synopsys u
41.
by haukem 5y ago
Wikipedia already said that Dual EC DRBG is shitty in November 2007: https://en.wikipedia.org/w/index.php?title=Dual_EC_DRBG&oldi... (article from 16. November 2007) Whoever integrated this into their products afte
42.
by haukem 5y ago
Yes I would say this is a case when someone wants to contribute something to an open source project. Often these initial questions are very unspecific and often as a maintainer you only get the question, answer it and then never see this pe
43.
by haukem 5y ago
Why are only very few services supporting WebAuthn? Google and github supprot WebAuthn, but most services only support OATH-TOTP, OATH-HOTP or even worse only their own app.
44.
by haukem 5y ago
More usage of HTTPS helps Google's business. 1.) ISPs can not change the content of websites their users are watching to modify or add additional advertisements. Companies have to buy advertisements at Google. 2.) It is harder for ISP
45.
by haukem 5y ago
They prove that the hash they publish in the NYTimes exists at that time. There are probably some archives which can give you an authorized copy of the NYTimes from a specific date. You can use that to prove that the hash existed at the dat
46.
by haukem 5y ago
You can also set up a git repository and prevent history rewrites on the central server. Some third party could also offer this as a service. Each entity can check this by doing a pull every minute in a cron job, which fails when history re
47.
by haukem 5y ago
What is the advantage of a private blockchain over a hash tree like used in git? A git commit is also irrevocable, except if you do a git rebase. How do you prevent something similar like a git rebase in a private blockchain? A public block
48.
by haukem 5y ago
I think such long embargoes are bad. Embargoes prevent that the average cyber criminal knows about the problems, but the resourceful organizations already get the information before the public knows about them. I think even 90 days are pret
49.
by haukem 5y ago
Often many companies and organizations from many countries are getting informed about such security problems under the embargo. I assume that the intelligence agencies form many countries are also getting these information. Either they are
50.
by haukem 6y ago
Now Huawei is fixing bugs in SELinux: https://git.kernel.org/linus/68dae71b7cde628a082e982c0abbf6e... Or reports them, so the NSA can fix them: https://git.kernel.org/linus/3a2f5a59a695a73e0cde9a61
51.
by haukem 6y ago
Normally the identity of contributors is not really checked when you want to contribute to an open source project. A valid email address and a name is sufficient to contribute to the Linux kernel. All changes to The Linux kernel are getting
52.
by haukem 6y ago
How to mark a CVE as invalid or request an update? I tried the Update Published CVE process, but nothing happened not even a reject, just no answer. Multiple CVEs where reported to OpenWrt which are invalid, but we (OpenWrt team) haven&#x27