chei0aiV

Debian at least. kernel.org too. Ubuntu Forums at one point. Gentoo too.

http://com.google/ is though...

I blame the Internet.

Strongly-typed languages FTW.

Anyone know of static analysis tools that find potential XSS/etc issues in your frontend (such as the innerHtml message) and backend code?

Why hasn't Gentoo made the same changes Calculate Linux has?

I think lwf was talking about the human cost of having two versions. That doesn't go away when they are both named foo instead of foo0 and foo1.

If you don't have Linux in each app bundle, it won't run everywhere. Linux breaks userspace ABI sometimes.

Some commands that can help with nuances of shell:

Check syntax:

sh -n myscript

Check for bash-specific syntax:

checkbashisms myscript

Check for various gotchas:

shellcheck myscript

Check for style:

bashate myscript

Check for badness:

grep -rE '(wget|curl).\|( sudo)? *(ba|z|)sh' myscript

'building from source' shouldn't intimidate you no matter which distro you use. Every distro does builds from source and lets its users build from source too. If anything, Gentoo makes it easier to build from source.

The TL;DR from the end of the post:

There are actually not that many facts that are disputed between both sides, except the questions on

    does Christoph hold sufficient rights on the code to bring forward the legal case?
    are vmkernel and vmklinux one work or two separate works?

You could make it a build-time choice and prevent building if the choice isn't made. Then Debian could choose to maintain user privacy and you could choose to violate user privacy.

The manufacturer exhibited such disdain for the GPL. Amazing.

Indeed, the cloud is a huge problem.

Of course :)

It is disconcerting because it is a reminder of the war on general purpose computing and devices where the user of the device does not have control of what software is running on the device.

Heh

The phrase "non-rooted" in this article title is disconcerting.

So when is the USA going to start enforcing its constitution?

The likes of Amazon can plug virtual USB devices into your VMs.

That doesn't work, for microphones, provide a physical switch and for cameras, provide a physical cover.

I would encourage Tor users blocked by CF to use archive.org or archive.is save functions instead of solving captchas and teaching Google how to be more human.

> Debian privacy policies don't allow it to check mod updates by default.

Just make it opt-in, should be fine to do that.

Some distro rolling releases get upgraded every 6 hours, are you sure you want to potentially upgrade that often?

If I were running a larger company I would assign my security team to help out a distro security team, so I benefit from the work of others as well as getting specific support for the software I really care about.

That isn't really possible, Linux for example doesn't even have a security issues page, you are expected to read git patches yourself and understand the implications of each patch.

In general, looking at the security information for a Linux/BSD distro containing the software you care about is probably the best way, along with tracking any RSS feeds you can find that do exist.

Debian has both models, so you can choose rolling or keep everything the same. There are also backports for when you need a hybrid of the two models.

For anyone who cares about the GPL, please financially support GPL enforcement:

https://sfconservancy.org/supporter/

Why is everyone assuming ants were killed in the process? There are plenty of abandoned ant colonies in the world.

Tell them to use a diceware/xkcd password. Memorable and secure (currently with 7 words or more).