• 0 Posts
  • 163 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle
  • V2/V3/V4 are the microarchitectures to enable e.g. glibc to search for optimum libraries for the target platform.

    x86-64 was drafted in 2000 and up until like 2020 or something, there was no way to discern microarchitecture differences to optimise compilation. So v2 is basically just anything since 2008.

    Why Red Hat are moving on from “v1” - likely because they’re spending huge amount of resources maintaining binaries for that old microarchitecture and the cost dwarfs the revenue they’re making from continuing to support it.

    With the security vulnerabilities found in older chips that require either a revised architecture or otherwise take huge performance penalties to mitigate (e.g. Meltdown and Spectre), most enterprise customers upgraded their hardware older than 2008 in recent years.

    Thankfully this is Linux so while RHEL is moving on, Debian are still maintaining support for old architectures!

    Whereas Windows 11 23H2 onwards killed x86-64-v1 support entirely.





  • If this is the actual extension by Raymond Hill, it’s pretty trustworthy. They’ve been committed to keeping uBlock Origin open source, won’t sell data, and has stated they’ll never hand the project over, but simply archive the repo and let someone fork.

    Ray got stung years ago when they tried to step away from uBlock (the original project, before uBlock Origin) and uBlock ended up getting taken over by the AdblockPlus lot. Ray doesn’t want to go through that again.

    They’ve previously archived projects like uMatrix too, an example that they’re not looking to hand over projects to anyone again and leave it to the community to fork and maintain if they want to keep it alive without Ray.

    If you’re concerned, fork the repo and maintain your own version so you can be sure it’s trustable.


  • 100%. I’ve got servers running arch for the past 5 years or so and they’re the most stable systems I’ve got. I got so tired of the painful upgrade paths on “stable” distros so decided to switch a server to a rolling release.

    After I found arch got security patches into the repos faster than the stable distros could backport, I decided to switch them all over.

    I’m even a mad man and have them self update with a script that checks informant (or something, can’t actually remember) for installed packages against news. If no installed packages are found in news, it continues with the scheduled update.

    It’s glorious.






  • It’s what happens when someone with underdeveloped empathy gets caught doing something they know is wrong, resulting in emotional overload.

    It’s textbook toddler tantrum.

    With stunted empathy, people seeking an explanation and apology are met with increasingly greater resistance.

    And like textbook, they claim to be the victim. I wouldn’t be surprised if they are lying about receiving death threats.

    What’s crazy is they could have simply:

    • Apologised
    • Explained the intent to reduce toxicity
    • Agreed there was a lack of transparency
    • Refactored their existing “enable toxicity mode” feature into a clearer, toggleable blocklist feature

    But no. They were caught while they were secretly trying to play internet dictator and refused to empathise with others that were hurt and shocked to find out a tool they were using was receiving undisclosed payloads to use to censor communities and individuals.

    I strongly implore everyone to leave this developer alone. Jokingly asking to be added to the list etc empowers them to continue to play the victim. They do not deserve attention.




  • It absolutely is a feature of being a beginner but it is not an issue; it is not a bug.

    How many hours total have you been programming for in your life?

    Any skill takes hundreds if not thousands of hours of practice to become adept, and tens of thousands to reach mastery.

    You’re at the beginning of your journey. It’s completely normal to not have internalised everything you’ve covered so far.

    Keep going. That’s all you need to do. Keep practicing. Keep typing. Keep googling. Keep reading. You. Will. Get. Better.




  • Whoever downvoted you probably doesn’t understand what you’re saying. This package doesn’t stipulate as to what regulations, frameworks, standards etc it is checking compliance against.

    If it doesn’t say what it’s checking it’s compliant against, how can it determine if you’re compliant to it or not?

    ISO 27001? SOC2? CIS Benchmarks? HIPAA? GDPR? NIST CSF? 800-53? PCI DSS? Cyber Essentials? Vendor guidance?

    This seems, at best, some general security checks but not mapped to any framework in particular.

    The Linux Security Audit Project is far more mature in this regard and maps checks to specific frameworks.