• 0 Posts
  • 41 Comments
Joined 1 year ago
cake
Cake day: August 6th, 2023

help-circle


  • What I’m trying to push back on is your assertion that everyone can do it.

    Security auditing is an extremely complex and specialized field within the already complex and specialized field of software development. Everyone cannot do it.

    Even if it were as straightforward as you imply, just the prevalence of major security flaws in thousands of open source packages implies that everyone doesnt do it.

    If I were to leave piles of aggregate and cement, barrels of water, hand tools and materials for forms, a grader and a compactor out and tell the neighborhood “now you can all pave your driveways” I’d be looked at like a crazy person because presented with the materials, tools and equipment to perform a job most people still lack the training and experience to perform it.


  • Idk what the person you’re arguing with is trying to say, but as a prolific user of open source software, there are thousands of serious vulnerabilities discovered every time some auditing company passes its eye over github.

    Malicious commits are a whole nother thing and with the new spaghetti code nightmare that is python nowadays it’s extremely hard to figure out which commits are malicious.

    Open source software is not more secure by default and the possibility of audit by anyone does not mean that it’s actually getting done. The idea that anyone who can write software can audit software is also absurd. Security auditing is a specialized subset of programming that requires significant training, skill and experience.




  • gayhitler420@lemm.eetolinuxmemes@lemmy.worldi find it's a great tool.
    link
    fedilink
    arrow-up
    6
    arrow-down
    2
    ·
    edit-2
    1 year ago

    When systemd first showed up there wasn’t much parallelized init systems. People managing complex systems with many services may find the tools of systemd make their lives easier. Of course, nowadays all that complex multi service machine stuff is containerized and none of those containers run systemd 🤔

    If I were gonna psychologize it, poettering and kay typify what the Linux user of the 0s felt when they actually looked at what windows of the time had going on under the hood. “Look at you, tla username, pathetic creature of twenty text files under a trench coat!”

    The problem with that sentiment is that there’s an honesty to recognizing and accepting that you’re not too far removed from the z80 and it keeps you from believing all this computer stuff is more than it’s cracked up to be.

    No one who’s happy with python also keeps a loaded gun next to the server for when it acts up and that’s the problem.







  • gayhitler420@lemm.eetolinuxmemes@lemmy.worldi find it's a great tool.
    link
    fedilink
    arrow-up
    93
    arrow-down
    14
    ·
    edit-2
    1 year ago

    If you really want the short version:

    Systemd was half baked literally when it came out and figuratively as an idea, so much so that there’s already a replacement for it in the works.

    A longer version:

    Systemd replaced the init script style of boot and process management, which had been in place for decades. init scripts were so simple they could be understood just by looking at the name: the computer is Initialized by Scripts. Systemd was much more complex and allowed many more tools to interact with the different parts of the computer, but people had to learn these tools. Previously all a person had to understand to deal with the computer was how to edit a text file and what various commands and programs did. After systemd a person has to understand how to use the dozens of invocations of systemctl and it’s variants and if they are dealing with a problem, —you know, the only reason a person would ever be dealing with initializing services— they gotta know what’s going on with the text files that systemd uses to run different commands and programs.

    So a person who already understood what was going on might rightly say “hey, this systemd thing is just the same shit with different file locations and more to learn”.

    People complain about the creator and maintainer of systemd, lennart poettering . Poettering is also the person behind pulseaudio, an powerful but complex audio management daemon in Linux whose name you only recognize because it’s caused you no end of trouble. Pulseaudio was also replaced relatively quickly by pipewire.

    The argument could be made (and probably has) that poetterings work is indicative of the problems with foss developers working as employees of major companies with their job responsibilities inclusive of their foss projects. The developer in that situation has an incentive to make big sweeping changes, they’re being paid for it after all, instead of being more careful and measured.

    When every big foss maintainer is trying to find a way to justify being paid for it, their projects are never done.

    At least poettering is working for Microsoft, ruining windows now…

    E: oh my god I forgot about the binary log files! So before (and now), the universal format for log files was plain text. You know, because it’s a log that’s text. Systemd uses binary log files that need a special tool to open and parse. So if you want to look through them on a computer without that tool you’re kinda screwed. Now systemd isn’t the only software package with binary log files, but many people have made the very persuasive argument that it’s not a trait to copy.

    E2: actually spelled the man’s name right. Thanks @floofloof@lemmy.ca !



  • Ladies and gentlemen, the CIA!

    give it up for our brave intelligence assets risking their time to implement all of the ideas presented in the Simple Field Sabotage Manual!

    They’ll be here all week, so make sure to come on back for the floor show tonight, i hear they have a real ripper planned ba-dum-tiss!

    Seriously folks, enjoy your meals, tip your servers and stick around for the rest of the night.

    Take it away boys!



  • gayhitler420@lemm.eetoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    4
    ·
    edit-2
    1 year ago

    Lemmy has limited space for unique comments on posts, so make sure it’s a good one before you click “reply”!

    If you feel the need to post but don’t wanna blow up the spot, just copy another users comment verbatim and post that. Copies of comments don’t take up space.

    All that doesn’t apply to posts, make all the posts you want just don’t comment on em!


  • gayhitler420@lemm.eetoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    9
    ·
    1 year ago

    It’s a serious problem, but users like you can help!

    When you delete your posts the space is freed up because the backend just serves up the same “deleted by user” content.

    So when you think one’s been up long enough, go ahead and delete that post!

    Along with posting less, deleting your posts can save lemmy!



  • gayhitler420@lemm.eetoMeta (lemm.ee)@lemm.eeWelcome to lemm.ee!
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    1 year ago

    I think the two users you replied to in that shit thread were actual hexbear accounts. It looks like they were able to interact with people they were federated with in that thread.

    Even if a hexbear user made an account on another server and interacted on a server hexbear wasn’t federated with that’s not really ban evasion.

    Even if a hexbear user made an account on another server and interacted with a server that banned them it’s still possibly not ban evasion since just removing the boy from the country is sometimes enough to change behaviors.

    Even if a hexbear user made an account on another server and interacted with a server that banned them In the same way that got them banned in the first place, plenty of servers don’t have ban evasion as against the rules.

    Even if a hexbear user made an account on another server and interacted with a server that banned them and it was both on a server which had rules against ban evasion and from a server with rules against ban evasion, it’s on the server that did the banning to enforce the ban evasion.

    So even if it were so, you need to be complaining to shit not .ee.

    Maybe worry less about the commies rolling you in the comments sections.