• 0 Posts
  • 33 Comments
Joined 2 years ago
cake
Cake day: August 6th, 2023

help-circle
  • What I’m trying to push back on is your assertion that everyone can do it.

    Security auditing is an extremely complex and specialized field within the already complex and specialized field of software development. Everyone cannot do it.

    Even if it were as straightforward as you imply, just the prevalence of major security flaws in thousands of open source packages implies that everyone doesnt do it.

    If I were to leave piles of aggregate and cement, barrels of water, hand tools and materials for forms, a grader and a compactor out and tell the neighborhood “now you can all pave your driveways” I’d be looked at like a crazy person because presented with the materials, tools and equipment to perform a job most people still lack the training and experience to perform it.


  • Idk what the person you’re arguing with is trying to say, but as a prolific user of open source software, there are thousands of serious vulnerabilities discovered every time some auditing company passes its eye over github.

    Malicious commits are a whole nother thing and with the new spaghetti code nightmare that is python nowadays it’s extremely hard to figure out which commits are malicious.

    Open source software is not more secure by default and the possibility of audit by anyone does not mean that it’s actually getting done. The idea that anyone who can write software can audit software is also absurd. Security auditing is a specialized subset of programming that requires significant training, skill and experience.




  • When systemd first showed up there wasn’t much parallelized init systems. People managing complex systems with many services may find the tools of systemd make their lives easier. Of course, nowadays all that complex multi service machine stuff is containerized and none of those containers run systemd 🤔

    If I were gonna psychologize it, poettering and kay typify what the Linux user of the 0s felt when they actually looked at what windows of the time had going on under the hood. “Look at you, tla username, pathetic creature of twenty text files under a trench coat!”

    The problem with that sentiment is that there’s an honesty to recognizing and accepting that you’re not too far removed from the z80 and it keeps you from believing all this computer stuff is more than it’s cracked up to be.

    No one who’s happy with python also keeps a loaded gun next to the server for when it acts up and that’s the problem.





  • gayhitler420@lemm.eetolinuxmemes@lemmy.worldi find it's a great tool.
    link
    fedilink
    arrow-up
    93
    arrow-down
    14
    ·
    edit-2
    1 year ago

    If you really want the short version:

    Systemd was half baked literally when it came out and figuratively as an idea, so much so that there’s already a replacement for it in the works.

    A longer version:

    Systemd replaced the init script style of boot and process management, which had been in place for decades. init scripts were so simple they could be understood just by looking at the name: the computer is Initialized by Scripts. Systemd was much more complex and allowed many more tools to interact with the different parts of the computer, but people had to learn these tools. Previously all a person had to understand to deal with the computer was how to edit a text file and what various commands and programs did. After systemd a person has to understand how to use the dozens of invocations of systemctl and it’s variants and if they are dealing with a problem, —you know, the only reason a person would ever be dealing with initializing services— they gotta know what’s going on with the text files that systemd uses to run different commands and programs.

    So a person who already understood what was going on might rightly say “hey, this systemd thing is just the same shit with different file locations and more to learn”.

    People complain about the creator and maintainer of systemd, lennart poettering . Poettering is also the person behind pulseaudio, an powerful but complex audio management daemon in Linux whose name you only recognize because it’s caused you no end of trouble. Pulseaudio was also replaced relatively quickly by pipewire.

    The argument could be made (and probably has) that poetterings work is indicative of the problems with foss developers working as employees of major companies with their job responsibilities inclusive of their foss projects. The developer in that situation has an incentive to make big sweeping changes, they’re being paid for it after all, instead of being more careful and measured.

    When every big foss maintainer is trying to find a way to justify being paid for it, their projects are never done.

    At least poettering is working for Microsoft, ruining windows now…

    E: oh my god I forgot about the binary log files! So before (and now), the universal format for log files was plain text. You know, because it’s a log that’s text. Systemd uses binary log files that need a special tool to open and parse. So if you want to look through them on a computer without that tool you’re kinda screwed. Now systemd isn’t the only software package with binary log files, but many people have made the very persuasive argument that it’s not a trait to copy.

    E2: actually spelled the man’s name right. Thanks @[email protected] !



  • Ladies and gentlemen, the CIA!

    give it up for our brave intelligence assets risking their time to implement all of the ideas presented in the Simple Field Sabotage Manual!

    They’ll be here all week, so make sure to come on back for the floor show tonight, i hear they have a real ripper planned ba-dum-tiss!

    Seriously folks, enjoy your meals, tip your servers and stick around for the rest of the night.

    Take it away boys!



  • Hey I got a temp ban for my post and username (typical lemmy homophobia) but I wanted to come back and seriously recommend with nothing but civility that you engage with some of the ideas of people who’ve pushed back against you in this comment thread.

    When everyone from conservatives to communists are frothing at the mouth it doesn’t mean you’re doing something right, it doesn’t mean the answer is somewhere in the middle and you found it, it means you overlooked a lot of ideas.

    For my part, your claim that tech workers aren’t proletarian is absurd on the face of it because that claim denies the nature of tech work and proletarianization. An alarmingly small number of tech workers hail from the places they’re working in, almost all have moved there for the work. Unless everyone moved away from their families and homes because they just love the idea, they were pushed to move by the lack of work. And while you’re happy to put senior engineers in the tech worker category, call center tech support is notably absent in your analysis. Heck, entry level programmers are absent!

    Your claims can only be put together as some form of gatekeeping based on aesthetics: they don’t look poor to you so they can’t be proletarian.

    If I’m off base I look forward to your response!


  • gayhitler420@lemm.eetoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    4
    ·
    edit-2
    1 year ago

    Lemmy has limited space for unique comments on posts, so make sure it’s a good one before you click “reply”!

    If you feel the need to post but don’t wanna blow up the spot, just copy another users comment verbatim and post that. Copies of comments don’t take up space.

    All that doesn’t apply to posts, make all the posts you want just don’t comment on em!


  • gayhitler420@lemm.eetoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    9
    ·
    1 year ago

    It’s a serious problem, but users like you can help!

    When you delete your posts the space is freed up because the backend just serves up the same “deleted by user” content.

    So when you think one’s been up long enough, go ahead and delete that post!

    Along with posting less, deleting your posts can save lemmy!






  • You’re right, it doesn’t matter.

    A sanctioning country can get good results from doing its thing to a sanctioned country when the stuff being sanctioned is important to their development. That’s why the us wants to keep 5g chips out of chinas hands.

    E: touching finger to ear I’m receiving reports this did not work at all.

    A set of sanctions doesn’t matter when the thing that’s being kept out of the sanctioned country’s hands isn’t important. So naturally when in a war no one cares about specific brands of soda or fast food. Pepsi executives saw what happened to McDonald’s and stayed in.

    People will say things like “it hurts their economy” and “it makes the people unhappy”. The American experience of war is so completely different than almost every other nationality that they think that makes sense, and the American experience of a war economy is so far beyond the cultural memory that it only reenforces the idea that specific brands of soda matter in wartime.

    So basically you’re right, what Pepsi does doesn’t matter. But if we as consumers of Pepsi outside the conflict wished it had a better policy, one that put its weight on the scale to end the fighting, we should wish for it to stop supplying both nations and perhaps even any nation directly supporting either one.