• 8 Posts
  • 180 Comments
Joined 10 months ago
cake
Cake day: September 7th, 2024

help-circle



  • Your therapist can’t even have a phone in the room?

    I would prefer my psychological issues to not be turned into marketing campaigns. If you still don’t understand what I am talking about, you should probably check the Privacy Policy of Google and Meta.

    To save you some time: Google and Meta are monitoring the conversations using the device’s microphone, to better understand what products you may be interested in. You have noticed, that ads are often related to the topics that you discuss face to face.










  • jim3692toProgrammer Humor@lemmy.mlJavaScript programming
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    14 days ago

    Sure, in many cases the dev’s computer is powerful enough to handle that.

    However:

    • The more the dependencies, the more likely it is to pull-off a supply chain attack. Any of those thousands modules can be compromised and infect either the user or the developer.
    • Not all computers are optimized for working with so many tiny files. Have you ever worked in a company that uses McAfee Antivirus? Even Defender can be a massive performance hit in some cases.

  • I had read about it on another thread, which was about using old smartphones as servers (they used Termux).

    Those old lithium batteries, although sometimes seemingly healthy, can catch fire any time. Having them connected to the charger 24/7 is only making matters worse.

    I wouldn’t trust the battery of old devices. I would probably buy a used UPS (without battery) and slap a new battery to it. This would cost more, but it would allow me to also connect other important devices to it - like the router and some lights.




  • I feel the importance of user privileges distinction, as I see it from a server perspective and organization managed devices. Some would argue the insignificance of this in the personal desktops.

    However, I believe that the community structure of Linux is benefiting everyone. It is a general purpose kernel, that gets improvements from various different sectors. In the current space, where most servers run Linux and most desktops run Windows, desktops are not benefiting from filesystem or scheduling optimizations implemented for servers.



  • It’s the first time I see the concept of bootstrappability in the context of security.

    Is it really worth the effort?

    There are multiple ways to run a supply chain attack. With bootstrappability, one can be sure that the compiler is trusted, but what about the code that the compiler compiles? There was this recent attack to XZ utils, which shows that more attention is needed on the code being merged and compiled.

    I think that this just creates a false sense of security.

    Contrary to that, I had read about a BSD team (I think FreeBSD) that reviews all the code before each release. This way they have achieved ~5 RCE exploits throughout their entire history.


  • I don’t have any experience with guix, so I will not express any opinions towards that.

    However, regarding NixOS:

    • Yes, as a person with experience in the Nix language, I can confirm it’s awful
    • The documentation of NixOS is a known issue, and there are currently efforts to improve it
    • Talking about the trustability of binaries, by doing a quick search, I read that Guix builds are reproducible. This is true for NixOS as well. All upstreamed packages must have their version and the hash of the code (or artifact), to allow verification
    • The community of NixOS is opting to maintaining flakes, because:
      • Some applications can simply not be built following the Nix guidelines. Examples are some electron apps (like Falkor) and apps that have weird toolchains (like bubblejail)
      • The reviewing process takes way too long, and PRs for upstreaming are often ignored. This forces a lot of people to just PR a flake.nix to the application, or maintain their own overlays (overlays are like overriding the available packages, while flakes are more like distributing Nix code in general)