𝕽𝖚𝖆𝖎𝖉𝖍𝖗𝖎𝖌𝖍

       🅸 🅰🅼 🆃🅷🅴 🅻🅰🆆. 
 𝕽𝖚𝖆𝖎𝖉𝖍𝖗𝖎𝖌𝖍 𝖋𝖊𝖆𝖙𝖍𝖊𝖗𝖘𝖙𝖔𝖓𝖊𝖍𝖆𝖚𝖌𝖍 

Ceterum Lemmi necessitates reactiones

  • 23 Posts
  • 1.23K Comments
Joined 3 years ago
cake
Cake day: August 26th, 2022

help-circle








  • Is it possible to configure the kernel to allow access to decrypted contend only through the user session?

    Theoretically, kernel keys can be set to be readable only by the user session, and in an uncompromised root is not able to read those keys. I can imagine a filesystem encryption design that uses a user session key to en/decrypt data on the fly using a user session key, such that not even root or a process in another user session could read the mounted filesystem.

    Does such a system exist? As I understand, this is not the way dm-crypt or LUKS work. FDE and TPM are still vulnerable to hacking while everything is running, unlocked, and mounted.


  • Isn’t that what kernel optimized distributions do, though? Compile out all of those code paths, making for more efficient kernel execution? Sure, you can build a kernel with every option enabled, and you have a kernel that will run on any hardware with that architecture, but it’s bloated, big, takes longer to load, and is slower. Back in the day, when we had no other choice, we went through that awful kernel configuration menu and hand selected options based on exactly what our hardware supported; it was expected, if you wanted decent execution times, and for your kernel image to not take up all of your limited HD.

    My suspicion is that these sort of CPU-level RISC-V feature sets are so low level they’d be in in the micro-kernel core, so the modularity wouldn’t help. However, microkernels being much smaller, recompiling for a given feature set and producing a smaller binary with more efficient code paths (and the kernel subsequently not having to repeatedly check for the existence of vector support - the cost for that must be at least a branch) would be fast and improve efficiency at the cost of a much smaller core compile.




  • This.

    It’s a choice.

    I almost never use web apps; I do only when what I’m doing is fundamentally a web interaction: banking, for instance. Everything’s on their servers anyway.

    For everything else, I (too) use shell applications. Even if I didn’t, there are tons of native GUI applications to choose from, and they are often far better experiences than SPAs or Electron apps: just look at the memory and CPU use, if you want a baseline metric.

    Why do people do this? Because they fancy that they’re providing a good enough interface that works on every OS. Which is often not the case, and by the time you invest enough effort to get your SPA working well on every possible platform you could have written native apps that look and function better; and most organizations still throw in the towel and add a caveat “works best in X”, giving lie to the “web apps work everywhere.” So: laziness, or being cheap, and not really carrying about the user experience: those are the reasons people write web apps.


  • I think the laptop really does matter, and it’s because chipsets are not all equal in how well their sleep modes are supported in the OS.

    I’ve been buying XPS13s for over a decade; I’ve had four (three personal, and one requisitioned for me by my job), and sleep and suspend have worked almost flawlessly on them under Linux. In the office, most everyone else would move between meetings or to their desks with the lids almost closed, to prevent sleep and the problems it caused, but I’d just fearlessly close my lid; it was ironic to me that running Linux on the XPS I had more reliable sleep behavior than the Windows people on their laptops.

    For OP: low power, initialization, and restoring state has to be implemented by each chip, and there are a lot of shitty, poorly implemented chips. Then the OS also has to store and restore state for each chipset, and even if the chip implements it well, the OS has to do a good job restoring power in the correct order and restoring the state for each chip. If anything goes wrong in either the chip or driver implementation, you get a broken state.

    This is aggravated by the fact that Linux is a monolithic kernel, and if any device drivers get borked it usually borks the whole kernel. This wouldn’t be as bad a problem if Linux were a microkernel architecture and drivers could just be killed and restarted.


  • The package archnews2 also provides an arch news reader. This issue was also announced in Arch forums before it was rolled out - I saw it in Lemmy.

    But, yeah, you really do have to read archnews release notes. Frankly, it annoys me a bit - pacman should have the concept of breaking changes and show related news before upgrades. I think one of the news packages (maybe archnews2?) has a config setting that always displays news before upgrades, but it’s only annoying because it is ignorant of whether the news item affects any given system, so it’s often just noise; I think I turned it off because it kept showing me the same news every time.

    It’s the worst part of Arch, and it’s poorly handled. I don’t know of a rolling release that handles informing the user of, breaking changes better, though.


  • Do any of you know another solution to stream audio from my phone to my server

    I use snapcast throughout my house and devices, but there’s no snap_server_ for Android.

    I’ve been meaning to try roc, for which there is an Android client that will both play and serve.

    Sonobus also claims to be many:many; I haven’t tried it either and it doesn’t look particularly active.

    I don’t use UPnP or DLNA because of the security issues, so I can’t offer a suggestion about that. I thought DLNA was a pull oriented protocol - like, to send music from your phone you’d have to select and play on your computer with a DLNA client. Can you push media with DLNA?




  • Calibre is one of the great pieces of FOSS software, and demonstrates everything good about FOSS: it has regular updates; it’s been around for simply ages; it works really, really well; it gets updates and new features and yet has never in my memory had a breaking, non-backwards-compatible release… it’s stable; and it resists - in its way - the attempt by publishers to steal our rights and ownerships of our media.

    I contribute donate to Calibre. I hope that Goyal has a successor lined up to take the helm who can continue such an outstanding contribution when he finally retires from the project.

    Edit: clarification