smarx007

17 ms·

1. 241.▲
   by smarx007 3y ago

   I assume IBM Message Queue Interface (MQI) is the only supported protocol in this installation. Don't know of any other compatible brokers to support MQI. Edit: "The FedNow Service will initially leverage IBM® MQ MQi Client for th
2. 242.▲
   by smarx007 3y ago

   The PDF linked in the thread [1] specifies T+20s or no settlement. [1]: https://explore.fednow.org/resources/technical-overview-guid...
3. 243.▲
   by smarx007 3y ago

   Sorry, and where do you install k8s exactly?
4. 244.▲
   by smarx007 3y ago

   No, I meant to ask how Oracle is going to ensure that they deliver 10s of thousands RPM packages to be sufficiently compatible with those that RHEL ships (following the rhelgate or whatever we should call it).
5. 245.▲
   by smarx007 3y ago

   Interesting, thank you for the details. This means that in some way, RHEL is ahead of Oracle Linux in terms of kernels? I don't see an UEK version tracking Linux 6.1 at all, AFAIK.
6. 246.▲
   by smarx007 3y ago

   What is Oracle going to do with the userland/RPM compat with RHEL? It's wonderful that they try to ship every fix from the LTS kernel tree and that UEK users already don't have an expectation of a 100% identical kernel. But y
7. 247.▲
   by smarx007 3y ago

   I would expect that tracking the Linux kernel master just 4 weeks behind is going to cause more cases where, combined with enterprise software of typical quality, you'd need vendor support than with the RH way of changing as little as
8. 248.▲
   by smarx007 3y ago

   > The requirement to provide a postal address is pretty bad In Germany/Austria, everyone with a blog must give their address in an Imprint (see the bottom of http://armin.ronacher.eu/#contact , for example). In Swed
9. 249.▲
   by smarx007 3y ago

   Just tried today to switch from Vim to Neovim as my EDITOR when I work over SSH (I use VS Code otherwise, I know about its SSH capabilities but don’t use them to edit just one file). Result: had to add a PPA on my Ubuntu server (not ideal b
10. 250.▲
    by smarx007 3y ago

    Then, Mr. Gregor Samsa, your position is not to be envied.
11. 251.▲
    by smarx007 3y ago

    The goal of the EU is not to "go after any business", but instead to help them stay secure online (I know, people outside EU find it hard to believe that EU makes regulations to actually help people). EU considered various ways (s
12. 252.▲
    by smarx007 3y ago

    I just think our industry is long overdue for some regulation ( https://www.youtube.com/watch?v=Gv2I7qTux7g as an inspiration ) and I also found the CRA requirements on pp. 2 and 3 ( https://eur-lex.europa.eu&#x2
13. 253.▲
    by smarx007 3y ago

    All right, now that someone downvoted you (not me), I feel a mild obligation to respond. Regarding the ad hominem part, I invite you to watch https://www.youtube.com/watch?v=Gv2I7qTux7g to understand why I think our industr
14. 254.▲
    by smarx007 3y ago

    Isn't Tidelift a bit of a joke? https://tidelift.com/lifter/search/npm/d3 offers $25/mo. https://tidelift.com/lifter/search/maven/org.apache.jena:apa... is not covere
15. 255.▲
    by smarx007 3y ago

    I don't see a reason to do this (region blocking whole EU). The legislation has a very similar enforcement to GDPR – did you get a 15M USD fine for Google Analytics on your blog? What's similar is that: 1. There will be authoritie
16. 256.▲
    by smarx007 3y ago

    I’ve heard this reading of CRA and I think it’s overzealous on purpose to rile individual devs (well done). But we will have the courts decide and I think they will draw a much more clear line than “any project that received 1 EUR donation
17. 257.▲
    by smarx007 3y ago

    I've seen many things in my life I'd gladly unsee, including corp IT devs putting programs with "SNAPSHOT" (unstable) dependencies in production. But just merely having a corp use your software would not place the CRA bu
18. 258.▲
    by smarx007 3y ago

    As I wrote elsewhere in the thread, if EU didn't word it the way they did, most OSS projects would simply slap "not fit for commercial purposes" in the README next day after CRA became law with a smug smile. Regarding "c
19. 259.▲
    by smarx007 3y ago

    Thank you for checking carefully! I updated my original message with the extra link for the 18.4.2023 amendment.
20. 260.▲
    by smarx007 3y ago

    The full draft is under https://eur-lex.europa.eu/resource.html?uri=cellar:864f472b-... , the body starts from page 14. Upd: the amendment from 18.4.2023 is available under https://eur-lex.europa.eu/legal-co
21. 261.▲
    by smarx007 3y ago

    The reason is to make sure that all software that a normal run-the-mill business may use in the "in the course of a commercial activity" and receives regular releases, is reasonably free from known significant vulnerabilities (the
22. 262.▲
    by smarx007 3y ago

    Yes, sorry, I didn't make it clear that I was speaking of a purely hypothetical speculation that if RH ever decided to do this yet keep releasing CentOS Stream or Fedora, it would not be legal under CRA.
23. 263.▲
    by smarx007 3y ago

    I was on the Eclipse Foundation call a few days ago regarding this topic and they said there was a well-established 3-part test for this in the EU courts. But I don't think I managed to take a screenshot, sorry. Here is a snippet from
24. 264.▲
    by smarx007 3y ago

    Haha! I dug a bit deeper and the figure seems to be a 2019 projection: https://ai-watch.ec.europa.eu/publications/cybersecurity-our... UPD: here is the original source for the figure https://cybersecurityven
25. 265.▲
    by smarx007 3y ago

    I don't think this legislation will affect hobby projects. The problem is that whether the project is hobby or not is judged from the side of the consumer, i.e. if the software is usable "in the course of a commercial activity&quo
26. 266.▲
    by smarx007 3y ago

    The figure is an estimate of the global cost, not just EU. And I recall seeing a figure of 300B USD per year just on system integration projects (i.e., just plumbing). Compared to that, the figure looks believable.
27. 267.▲
    by smarx007 3y ago

    Now, to some controversial things: do I think it's good if RedHat is legally forced by CRA to close down CentOS Stream if they decide not to deliver all security fixes they apply to RHEL? Yes, I do. This legislation will kill the pract
28. 268.▲
    by smarx007 3y ago

    This is very good that we have so many experts/vendors expressing their opinion (read: fears on how it will affect them). However, I welcome everyone to read https://digital-strategy.ec.europa.eu/en/policies/c
29. 269.▲
    by smarx007 3y ago

    Please take time to understand CRA (not from the vendor point of view) before contacting MEPs: https://digital-strategy.ec.europa.eu/en/policies/cyber-resi...
30. 270.▲
    Postman removes collections for users without an account (a.k.a. Scratch Pad)(blog.postman.com)

    6 points by smarx007 3y ago|4 comments