• 0 Posts
  • 43 Comments
Joined 1 year ago
cake
Cake day: July 27th, 2023

help-circle


  • There are a lot of answers here but I feel they mostly miss OP’s point so I’ll try my own:

    What stops a scammer from HTTPS certifying foobar.reputable.com is the trust system.

    Anybody can create a certificate on their machine for anything within seconds, even you could create a certificate for www.google.com. The problem is that you, as an issuer, are not trusted by anybody.

    Browsers and operating systems are released with a list of issuers that are considered trustworthy, so if you want your certificate to be recognised it has to come from one of these, not from you.

    All of these issuers are in the list because they have been individually vetted, and are known to do their due diligence before issuing certificates, so they would not give you that cert unless they know that the bank domain or subdomain belongs to you, and the technical means to achieve this have been explained in other answers.

    But if one of these issuers went rogue, or if you hypothetically hacked into their certification authority, then indeed nothing would stop you from obtaining a valid and recognised certificate for foobar.bank.com.

    This is why for example Trustcor was removed from this list in 2022: from that position it would be trivial for a certificate authority to allow third parties to spy on people.















  • IDK man, I’ve had rather poor experience with extensions. At least in gnome they pretty much filled in for some feature that should have been there but it wasn’t hip enough for GNOME (ie systray).

    Ever since gnome 3 came out I found myself time and time again in the loop where something is missing, I build myself some smorgasbord of extensions to make the experience the way I want it, then a new gnome minor is released and some of those extensions are now abandoned / incompatible with others / suddenly buggy / behaving differently so I have to start over. It’s not very different in kde, extensions get abandoned and break in there too, but I never had to have more than two at a time.

    When it comes to DEs I’ve learned over the years to stick to the core as much as possible because extensions are just not reliable, which is also the reason why I don’t use gnome anymore.

    I don’t think the analogy with IDEs really holds: language extensions in major IDEs are usually maintained with some degree of professionalism, for example the Ansible extension for vscode is maintained by Red Hat. It’s a very different ecosystem from the one made of pet projects started by people who one time felt something was amiss in their DE, and pray the gods they still have that opinion and care enough.

    Edit: just to be clear I’m not dunking on this extension or extensions in general, I’m just explaining why somebody would want to avoid relying on them too much


  • That’s not what is surprising.

    Gaming under emulation is not exactly easy stuff even under optimal conditions, when your drivers and userland are not experimental/hacks and you are running on the same architecture - try doing AAA gaming on Linux using a windows VM and you will see.

    Setting aside gaming for a moment, cross-architectural emulation is stupidly slow because it cannot use any hardware features, it’s all software work on the cpu. Do you have a Linux machine? Try downloading a Firefox binary for another architecture (aarch64 for example) and run it, try watching a youtube video, if you haven’t died of old age in the meantime. Now Apple has this rosetta magic thing to emulate x86, but it was never meant to run (and it was never used before) on bare metal Linux.

    Now what happens here is that there is a vm that runs a vm of a different architecture (arm 64k vs arm 4k) that runs another vm of different architecture (x86), and somehow you can game on it with competitive performance. All of it with a dnf install.

    Simply put, this is unheard of.