user6723

This is extremely obvious to most, but apparently it wasn't to you.

The base system packages are exempt from the stipulation I posted above.

Just because someone posts on a mailing list and calls themselves a sys-admin doesn't mean they are one.

What the author wrote objectively demonstrates a lack of essential skills and also a lack of temperament for what could be called a sys-admin, and therefore they are ultimately disqualified.

I also would not compile Firefox on ARM64. We have a handful of AMD EPYC boxes cross-compile ARM64 builds of Firefox and Ungoogled-Chromium for us.

Correct, most sys-admins use binary packages. However if a sys-admin finds maintaining packages for other CPU architectures difficult, like they can't handle something very basic like "uname -m", they aren't qualified for the role.

Whether this is "harsh" or not doesn't change that it is true.

If you can't do deb-src you aren't qualified to be a sys admin, at least not one that should be paid.

Being an amateur who landed a job and being someone who is qualified for the title are not the same.

>> No serious systems administrator is going full Gentoo on their entire setup. It's a waste of time and effort to do so.

This is a total strawman argument, but I'll knock it down anyway. There are professionals who actually do use Gentoo on their local machine. The local machine (a laptop) doesn't do any compiling, there is a server that builds the packages.

I was actually using Gentoo myself for a couple years and all my packages were automatically built by a cluster of servers using distcc, so any build job was done with something like "make -j128"

Because I knew how to use Unix-like systems properly and having a dedicated build server, Gentoo didn't cost me any time, quite the opposite actually, because Gentoo is flexible with package versions and everything tends to just werk.

>> That's not how sysadmins people get their software, though.

For those of us contending with PowerPC and ARM, it is half of how we get our software, the other half is we have already automated the process and a cicd pipeline has built the software often before we as humans notice a new version is out.

This post is of not of sufficient quality to be posted on HN. Shameful.

I see other comments mentioning IM. We have Matrix' Synapse on a private bare-metal K8s and outside clients can access our private Element Web from another K8s cluster when we need to collaborate more directly. Some clients or partner orgs have their own Matrix servers.

Our sys admin put in the crontab on our systems a script that fetches and runs Ansible code if the code has an accompanying valid crypto signature.

Mostly it deploys Podman configs to run proxies that do "nat traversal" and provide various things on our machine most using Git as a backend.

Our internal docs are mostly a variant of Markdown or Scientific Markdown.

We use a private Jitsi server for meetings and our company policy is to never impose influence (no matter how light) on any employee to inadvertantly leak their likeness/biometrics to a third party org.

Our CIO is pretty legit I must say.

Stallman did nothing wrong.

The Disaster Prediction App will show you the current state of the sun, it’s effects on Earth’s space weather, earthquake events, and areas of the Earth likely to have large earthquakes in the coming days. There is a space weather portion of the App and an Earthquake portion of the App.

https://9rese.com/disaster-prediction-app/

Isn't nitpicking tho. The courts recognize a language that seems totally foreign to people not speaking that language.

Yeah the correct spelling of the word is good to have there ya go.

Formal English and legalize are not the same language.

https://www.1215.org/lawnotes/lawnotes/language.htm

Climate change has been happening for billions of years, he can't keep getting away with it!

Per their terminology, corporations are persons not people. Legalize and formal English may appear similar on the surface but are not the same.

lol

Fortunately this lines up perfectly with my schedule.

About to roll a J and kick back probably gonna browse the web and some of my favorite subreddits.

I have work on Monday.

Beyond seeing this post on HN, I'd have no idea this "protest" is happening, and to be fair I'll have forgotten about it by Sunday.

Manjaro is a nice hobbyist distro but it's not a distro to be taken seriously.

> Irish > founded the United States

lol

Cuttlefish are smart like dogs. Cuttlefish jerkey also tastes pretty good.

While we can all appreciate that video out of Ukraine is "Hollywood level", the real world isn't a super hero movie set.

The crowd in Washington DC isn't like it was in the 80s and 90s. The notion that they've actually got a grip on things and Ukraine is going to go the way they want.. yeah..

Tim Pool switched to Dan Bongino's payment processor away from PayPal once it became available and has been using it since. Tim has a lot of viewers and is doing well.

Demography is destiny

What would make the iPhone personal and intuitive for me is an easy way to load apps without going through the app store.

I would gladly pay Apple $30,000, like I will get financing and see this as a new car payment, for a machine where all chips are full open source and documented and detachable and auditable.

Your cat doesn't eat you because you are bigger than it is. Simple as.

>> "This vulnerability does not exist on Intel-based consumer PCs with consumer firmware."

Yet it did exist on computers used by senators, lawyers, executives, everyone I mentioned. Consumers are not the high value targets.

>> This vulnerability was responsibly disclosed to Intel

The vulnerability was uncovered and well known of by very many private espionage teams for a very long time. If this wasn't already obvious to you then your view of the world is too sheepish and naive to meaningfully participate in discussion about this kind of topic.

>> I am not seeing all of these fatal 0 days that you are talking about.

Those of us in the offensive security space see vulnerabilities that could be exploited "locally", anywhere where bad code could get running on the ME as critical too. Getting SYSTEM or root (the former being easier because of that OS' particular culture) is generally easier than it should be. Intel ME makes it a much bigger problem than it otherwise would have to be.

While you most likely are not, you come across as a shill.

This is why on our GrapheneOS devices we use a messenger that is written in Rust.

Zoom is such nasty software I only permit it to be run in a VM.

The vulnerability where no authentication was required and could be exploited wirelessly while the machine was off is directly relevant to the security model of anyone with a laptop with an Intel CPU.

I have been responsible for keeping small fleets of laptops patched and I actually read the relevant CVEs Intel puts out, which if you bothered to do you would find that yes over the years there has been an endless stream of fatal 0days

The best the govs have been able to do is get a HAP bit.