• 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

  • You’re missing a TON of history here. Like udev being a dependency to all those projects AND systemd, which led to systemd adding it to their project. Really it could be said that udev is the critical component here.

    As you mentioned networkmanager, you clearly know that many popular distros use that rather than systemd-networkd.

    Grub2 is by far the most popular boot loader, so far ahead that it’s not even worth considering others. Grub has had several major issues, every distro uses it, why not pick on grub as the risk?

    Did you have these same concerns about sysvinit? About the various distro network scripts? What about libc? Good god if there’s a problem with libc we’re all in deep trouble.

    Yes, code has bugs. But New code has new bugs (ironically an argument previously used against systemd). Whatever you replace these components with will be just as likely to have a critical vulnerability, but far fewer maintainers and resources to fix it. Systemd has simplified and improved features of so many parts of Linux that it’s funny to see how vehemently people argued against it. Feel free to disable any parts you don’t need, but I think you’re missing 20 years of painful history that led us here.


  • The video is bunk, the original “analysis” was wrong, they didn’t look up what the function actually does, the function is showing up in other browsers. It’s pretty clear this is an A/B test rolling out that’s fetching something behind the scenes that’s broken for a bunch of people.

    Jumped to a conclusion without even understanding the subject at hand.


  • Flat out, I will never buy another item from QNAP. Ever. Their “support” is a joke, and their only fix for hardware that doesn’t work on “supported” OS due to old firmware is to return it and hope to get a new one with a new firmware that actually works. Like, WTF? And “supported” here means they have some old, janky, partially functional Linux app that ran on an Ubuntu desktop once upon a time. No headless system support for a server attached product. And really, they want you running it on a Windows desktop.

    Beyond that, the physical hardware itself was super generic gear. I was unimpressed with paying a premium after friends all recommended QNAP, and I got what was basically a child’s toy that they didn’t expect a professional to be using.

    As for multi-gig router, if you’re doing dynamic, addressing and masquerading then I can recommend the unified dream machine pro. The second edition is more capable, and has a faster backplane between the 10 gig land and land ports and the one gig ports. The original dream machine pro that I have does not have that feature, and it’s sorely missed.

    If you need to do any complex routing, or static addressing then things get a little more wonky. Wonky. Very obviously does not expect this device to be a real router, but rather than that and masquerade gateway for a small business office. It totally works, and I’ve had mine for a few years now, but it’s just something to be aware of.

    Mikrotik also makes a 10g router device, as do a couple other companies. They’ll expect you to be a bit more experienced, though. I’m not sure what your skill level is, but they are options at least.

    Edit: you want an sfp+, btw. An sfp only does 1gbit, an sfp+ does 10gbit, and qsfp does 25+ gbit. https://www.black-box.eu/en-int/page/45646/Resources/technical/Black-Box-Explains/lan/SFP-vs-QSFP-What-s-the-difference



  • Odysey isn’t Starbuck’s loyalty program, it’s invite only unless you want to join the wait list, and it’s openly called an experiment at its launch in December 2022.

    NTFs are different to blockchain, so you’re just muddying the waters for yourself with the Walmart thing. Lots of companies do chain of custody things with what you’d call blockchain. It’s been that way for over a decade now. Because it’s low transaction volume, no moronic “proof of…” nonsense, etc. Just hashes signing hashes at different points throughout the supply chain.

    This isn’t the “win” the NFT hype weirdos are desperately hoping for.








  • IMO, requiring a TPM for any kind of attestation wouldn’t do much because they can be procured in the tens of thousands for not much money at all. Then they use an SPI bus to communicate, so you could basically build a cheap device that only multiplexes dozens, hundreds, or thousands of TPM on a single physical host.

    The real sham of this, to me, is that Google’s talking nonsense about ensuring the client device is “trustworthy” for whatever their criteria means. But in reality the client needs a real assurance that the site it’s visiting isn’t malicious, serving malicious content, or otherwise collecting data that could be used for malicious purposes. Google has directly failed two of those three for many years, and one of them is their entire business model. Where is our protection from Google?

    Maybe Google should use their clout to work against DRM online, and push back on the insatiable corporate greed of most of the content creation corporations? Especially those busy cutting down trees to prevent striking workers from getting shade?

    Adding on to this, what of people in sanctioned nations? Google, as a US entity, is compelled to adhere to US law and to sanction nations that the US deems should be sanctioned. What about activists in those nations? What about targeted populations in those countries? What happens when a minority group is targeted by a hostile government and that government demands logs of device tokens accessing information the government doesn’t like? This idea is nonsense on so many levels, and such a 180 degree turn from how the internet has developed over its existence.