pabs3

36 ms·

751.
by pabs3 1y ago
This with the "Lynx-like motion" panel option and the "Quick view" enabled is the best way to review a source tree. So much so that the Debian ftp-masters use it and a plugin for doing license review of newly introduced
752.
by pabs3 1y ago
These are all running proprietary software that you can't upgrade. As an example, Yubikey had a bug a while ago where they were generating weak keys, which could be recreated from a bunch of signatures.
753.
by pabs3 1y ago
Decentralised auditing is what is needed. https://github.com/crev-dev/
754.
by pabs3 1y ago
I wish cargo went with crev instead, that has a much better model for distributed code audits. https://github.com/crev-dev/
755.
by pabs3 1y ago
To be clear, Debian does not audit code like you might be suggesting they do. There are checks for licensing, source code being missing, build reproducibility, tests and other things. There is some static analysis with lintian, but not sy
756.
by pabs3 1y ago
This is where distributed code audits come in, you audit what you can, others audit what they can, and the overlaps of many audits gives you some level of confidence in the audited code. https://github.com/crev-dev/
757.
by pabs3 1y ago
GNU would never promote Flatpak, because Flathub isn't FOSS-only, and bringing proprietary software vendors into the Linux ecosystem seems like it was one of the goals of Flatpak into the first place.
758.
by pabs3 1y ago
Not too much support out there, but at least some important things do: https://codesearch.debian.net/search?q=x-kde-passwordManager...
759.
The Move from Blue Systems to TechPaladin(akselmo.dev)
3 points by pabs3 1y ago|0 comments
760.
by pabs3 1y ago
I get the impression they shut it down, but Sony had/have the Xperia Open Devices program. They were close to having their devices running purely on the mainline Linux kernel: https://developer.sony.com/open-source
761.
by pabs3 1y ago
> The device should ideally have some kind of secret material derived per device Thats the wrong way to do it, just require the user create a secret on first boot, and have factory reset functionality for when you forget it.
762.
by pabs3 1y ago
A lot of them violate the GPL and BSD licenses too.
763.
by pabs3 1y ago
Those apps usually require Google's version of Android (or Apple iOS), and block alternative Android builds using attestation: https://grapheneos.org/articles/attestation-compatibility-gu...
764.
by pabs3 1y ago
It doesn't have to be, the PinePhone's modem runs a proprietary Linux distro, which you can replace with an open source Linux distro. That is only the ARM processor of it though, the Hexagon one is all proprietary. https:/&#
765.
by pabs3 1y ago
Some documentation about that on the Debian wiki: https://wiki.debian.org/AutomatedUpgrade It's relatively deterministic too, I've used that combined with apt-offline to upgrade offline servers successfully.
766.
by pabs3 1y ago
How does it detect passwords? Usually those are just plain-text when copied. https://hluk.github.io/CopyQ/ Either way, I think it is better to not copy passwords to the clipboard or the selection, but store and transfe
767.
by pabs3 1y ago
KDE doesn't have infinite clipboard history yet, like the GPaste extension for GNOME Shell has.
768.
by pabs3 1y ago
The NSA's IMEI location logs will show you were at Best Buy at the time too.
769.
by pabs3 1y ago
Encrypted Client Hello is the mitigation to that, IIRC it hasn't rolled out yet, and if it does then the GFW would probably just block connections that use it.
770.
by pabs3 1y ago
... and did you get the cash from an ATM? or other source that tracks serial numbers?
771.
by pabs3 1y ago
> I thought we (FOSS) were anti copyright? For Free Software, copyright creates the ability to use licenses (like the GPL) to ensure source code availability.
772.
Exposing the Dark Side of America's AI Data Center Explosion [video](youtube.com)
1 points by pabs3 1y ago|0 comments
773.
OpenClimbing – mapping climbing areas and creating interactive climbing guides(openclimbing.org)
4 points by pabs3 1y ago|0 comments
774.
by pabs3 1y ago
Seems it moved here: https://greggkellogg.net/cv
775.
by pabs3 1y ago
I recommend always using LVM so you can grow/shrink filesystems easily.
776.
by pabs3 1y ago
Wonder if any linters know about this convention.
777.
by pabs3 1y ago
Almost all firmware is proprietary, so you aren't going to be able to trust it at all. Try to use hardware that has at least open boot firmware like u-boot or coreboot. https://wiki.debian.org/Firmware/Open
778.
by pabs3 1y ago
Reproducible builds aren't enough, you need projects that are reproducibly bootstrappable solely from source without any binaries. Usually the starting point is a small amount (an MBR) of manually entered documented machine code. http
779.
by pabs3 1y ago
If the judge has read the GPL preamble, they would understand the intent of the license, and I would guess that would make it a 90/10 chance of requiring a working install method.
780.
by pabs3 1y ago
It doesn't have to be that way though, companies and folks with money can give back and help projects they depend on to become sustainable. Start an Open Source Program Office, audit all the software you run, including dependencies, an

More ›