I’m the administrator of kbin.life, a general purpose/tech orientated kbin instance.

  • 0 Posts
  • 670 Comments
Joined 2 年前
cake
Cake day: 2023年6月29日

help-circle
  • I think baseline Linux is much less CPU and memory intensive (that is before you start running your own user stuff).

    If I just leave normal apps running in the background I rarely hear my fans spin up on Linux. But on Windows, I can just boot it, login and then randomly the fans spin up and CPU usage in double digits. Why?

    I would agree probably if we ran teams on Linux it would be a resource hog. But you know for work I setup MS SQL server on Linux, and you know even though so far as I can tell they’re doing more work on Linux to run it there, it seems to run faster and take less resources on Linux. That is subjective though, since I cannot tell if the usage level on the Linux SQL is comparable to the windows one. But from my limited uses it’s definitely lower.

    If you start with the OS eating your memory and cycles, there’s less for the bloatware you have on a corporate machine to burn.







  • Doesn’t the motorola phone have a settings screen for defining what the button does? For Samsung they like to re-purpose the power button.

    First of all, it brought up bixby. I turned it back to powering off the phone and disabled bixby.

    Then, with the new update they re-assigned the power button to gemini. So, I turned it back to powering off the phone and disabled gemini too.

    However, the problem these days is that I’m never completely sure I’ve turned off all of the AI nonsense on my phone.







  • They send fake (non-existing) actor ids for votes to obfuscate the identity of the real user. It is “compliant”, but completely against the spirit of a public social network.

    There have been discussions about how to implement this before. But it has to be done in a way that is agreed by other threadiverse software. Unless they actually provide profiles for these fake actors there will be problems since some software will look up the profile info to cache it, even for likes…

    Personally I’m of the opinion of a standard header to mark a favourite message as a private one and use a random ID that the originating instance can use to validate the message as genuine. But, this needs to be adopted properly by all.


  • But this is the crucial thing. It wasn’t in the repository. It was in the tarball. It’s a very careful distinction because, people generally reviewed the repository and made the assumption that what’s there, is all that matters.

    The changes to the make process only being present in the tarball was actually quite an ingenius move. Because they knew that the process many distro maintainers use is to pull the tarball and work from that (likely with some automated scripting to make the package for their distro).

    This particular path will probably be harder to reproduce in the future. Larger projects I would expect have some verification process in place to ensure they match (and the backup of people independently doing the same).

    But it’s not to say there won’t in the future be some other method of attack the happens out of sight of the main repository and is missed by the existing processes.




  • Actually how is your ISP giving out IPs to you? Mine uses IPv6 PD to give me a /48. And I then use SLAAC locally on the first /64 prefix on my LAN. Plus another /64 for VPN connections.

    If you mean receiving RA/ND packets from your ISP (which are used to announce IPv6 prefixes) then you need to allow icmpv6 packets (if you don’t want to be able to be pinged, just block echo requests, ICMP in v4 and v6 carry important messages otherwise).

    If your ISP uses DHCPv6 Prefix delegation you will need to allow packets to UDP port 546 and run a DHCPv6 client capable of handling PD messages.

    If you have a fixed prefix, then you probably don’t need to use your ISPs SLAAC at all. You could just put your router on a fixed IP as <yourprefix>::1 and then have your router create RA/ND packets (radvd package in linux, not sure what it would be on pfsense) and assign IPs within your network that way.

    If you have a dynamic prefix… It’s a problem I guess. But probably someone has done it and a google search will turn up how they handled it.

    EDIT: Just clarified that the RA/ND packets advertise prefixes, not assign addresses.


  • I believe the privacy concerns are made moot if all consumer level routers by default blocked incoming untracked connections and you need to poke holes in the firewall for the ports you need.

    Having said that, even knowing the prefix it’s a huge address space to port scan through. So it’s pretty secure too with privacy extensions enabled.

    But for sure the onus is on the router makers for now.