Benvenuto nel Poliverso

The (successful) end of the kernel Rust experiment

The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The consensus among the assembled developers is that Rust in the kernel is no longer experimental — it is now a core part of the kernel and is here to stay. So the "experimental" tag will be coming off. Congratulations are in order for all of the Rust for Linux team.

The end of the kernel Rust experiment

The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The cons [...]

^LWN.net

#linux

Questa voce è stata modificata (1 settimana fa)

like this

in reply to HaraldvonBlauzahn

Strit

in reply to HaraldvonBlauzahn • 1 settimana fa • •

This means that drivers written in Rust will have just a good a chance to be accepted as drivers written in C?

in reply to Strit

HaraldvonBlauzahn

in reply to Strit • 1 settimana fa • •

I guess that still depends on the maintainer which is responsible. But since drivers often deal with untrusted data, which can lead to security exploits, this makes a lot of sense.

like this

in reply to HaraldvonBlauzahn

sga

in reply to HaraldvonBlauzahn • 1 settimana fa • •

If i remeber correctly, the current approach is each device/vendor family is free to choose how they want to move. for example, gpu folks are actually interested to do rust stuff (for example novo, tyr by redhat,collabora). there may be some families who do not want to move fast.

in reply to HaraldvonBlauzahn

davel

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Ambiguous title is ambiguous ಠ_ಠ

like this

in reply to davel

TheFermentalist

in reply to davel • 1 settimana fa • •

Yep. Came here ready to rant

like this

in reply to davel

CHOPSTEEQ

in reply to davel • 1 settimana fa • •

My heart stopped. Sheesh.

in reply to davel

HiddenLayer555

in reply to davel • 1 settimana fa • •

Yeah ambiguity is for C code /s

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

sun_is_ra

in reply to HaraldvonBlauzahn • 1 settimana fa • •

You scared me for a second

in reply to HaraldvonBlauzahn

Buffalox

in reply to HaraldvonBlauzahn • 1 settimana fa • •

I would have guessed that mixing different programming languages would cause problems. But apparently it's working well.
It's been 20 years since I did any serious programming, so I'm a bit rusty, is that what Rust is for?

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

No, Rust is to make you feel like you haven't programmed seriously in 20 years when you first pick it up, even though you are actively doing it.

Before the angry rust "mob" comes to get me: this is a joke. I tried Rust out of genuine curiosity, cobbled together a silly little thing, and quite liked it. The borrow checker made me feel like a total beginner again, in some aspects, and it was great to get that feeling again.

Ultimately it does not fit my needs, but there are a few features I am pretty envious of. I can totally see why it's getting such a following, and I hope it keeps growing.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

Thanks, I might take a look at it just for fun. 😀

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

Enjoy! I don't know what you used to seriously program on but I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you, unless you forced yourself to code that way anyways.

Plus, as long as you're doing silly little home projects, the compiler errors are the absolute best I've ever seen. Literally just learn basic syntax, try it out, and when it does not compile, the compiler not only tells you why but also what it thinks you're trying to do and how to fix.

Absolute gem of a learning tool.

Questa voce è stata modificata (1 settimana fa)

like this

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you

Absolutely, I am more used to program closer to the iron mostly C. My favorite was 68000 Assembly, python is nice, but I prefer compiled languages for efficiency. Although that efficiency isn't relevant for basic tasks anymore.

The compiler error messages sound extremely cool. 👍

Questa voce è stata modificata (1 settimana fa)

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

Ah, a fellow C coder. Never did do assembly with chips older than x86_64 basically. The only old school stuff I touched was writing an interpreter for the CHIP-8. I tried writing some CHIP-8 too, but coming from more recent paradigms, it seemed quite unwieldy to me.

I like python for quick and dirty stuff, I don't like python for being interpreted and it being not obvious what happens under the hood, memory wise, at a glance.

Seeing as you do C I'll say this. The one thing I really did not enjoy, subjectively, with Rust, is that writing "C-style loops" comes with a performance penalty because there are bound checks happening, so the idiomatic version of a loop in Rust usually involves iterators and function composition.

I am stupid. C-loops are easy for me to understand. More sophisticated stuff is hard for my little brain. I'd rather be trusted with my memory access, and be reminded of my stupidity when comes the inevitable segfault. Keeps you humble.

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

it being not obvious what happens under the hood

To me it feels like it does things I didn't ask it to. So I'm not 100% in control 😋

the idiomatic version of a loop in Rust usually involves iterators and function composition.

What? You need to make a function to make a loop? That can't be right???

C-loops are easy for me to understand.

Absolutely, the way C loops work is perfect. I'm not so fond of the syntax, but at least it's logical in how it works.

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

What? You need to make a function to make a loop? That can't be right???

Ah no, there is a misunderstanding. You can write C-loops, of course, they just could involve more work under the hood because in order to enforce memory safety, there needs to be some form of bounds checking that does not happen in C. Caveat: I don't know whether that's always true, and what the subtleties are. Maybe I'm wrong about that even, but what is true is that what I am about to say, you will encounter in Rust codebases.

By function composition I meant in the mathematical sense. So, this example explains the gist of it. You may need to throw in a lambda function in there to actually do the job, yeah. I don't know what the compiler actually reduces that to though.

It's just the more functional approach that you can also see with Haskell for example. I find it harder to parse, but that may be lack of training rather than intrinsic difficult.

EDIT: pasted the wrong link to something totally irrelevant, fixed now

Function Composition and Pipelines in Rust: Building Complex Functionality

Explore the art of building complex functionality by composing simple functions and creating pipelines in Rust. Learn how to chain functions using method notation, leverage iterators and combinators, and enhance code readability and maintainability.

^{Software Patterns Lexicon}

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

OK thanks for clarifying. 👍

in reply to Buffalox

Melmi

in reply to Buffalox • 1 settimana fa • •

If you don't like the functional syntax you can usually use for each loops to the same effect.

for element in array.iter() {
    println!("{element}");
}

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

The one thing I really did not enjoy, subjectively, with Rust, is that writing "C-style loops" comes with a performance penalty because there are bound checks happening, so the idiomatic version of a loop in Rust usually involves iterators and function composition.

IIRC you can speed up such checks by putting an assertion in front that checks for the largest index - this will make repeated checks for smaller indices unnecessary. Also, bound checks are often not even visible on modern CPUs because speculative execution, branch prediction, and out-of-order execution. The CPU just assumes that the checks will succeed, and works on the next step.

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

I had no idea about the assertion! Thanks.

Yes, this is plain wrong or often unimportant on modern architecture, you're right. I, certainly mistakenly, thought this was one of the reasons for the idiomatic version involving function composition, which is the thing I, subjectively, don't enjoy as much.

I stand corrected.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

The function composition style comes from functional programming and Rust's OCaml heritage. It can make it easier to reason about invriants and possible sets of values of the result of a computation step.

Rust transforms these to the same or a close equivalent of hand-written loops.

Similar methods are used in specialized, high-performance C++ libraries such as blitz++ and Eigen. But if you mess up bounds, you will get UB with them.

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

I like Python for quick and dirty stuff

There is one more little secret that not everyone knows:

You do not need lifetime annotations and full borrow checking if you do not care to press out the last drop of performance out of the CPU, or if you just draft experimental code.

In fact, you can very much program in a style that is similar to python:

just pass function arguments as references, or make a copy (if you need to modify them)
just return copies of values you want to return.

This makes your code less efficient, yes. But, it avoids to deal with the borrow checker before you really need it, because the copied values get an own life time. It will still be much faster than Python.

This approach would not work for heavily concurrent, multi-threaded code. But not everyone needs Rust for that. There are other quality-of-life factors which make Rust interesting to use.

... and of course it can't beat Python for ease of use. But it is in a good place between Python and C++. A bit more difficult than Java, yes. But when you need to call into such code from Python, it is far easier than Java.

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

Enjoy! I don't know what you used to seriously program on but I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you, unless you forced yourself to code that way anyways.

Thinking about ownership is the right way e.g. for C++ as well, so if one has coded professionally in larger systems, it should not be too alien.

One still needs to learn life time annotations. So, assuming that you know, for example, C++, it is an a bit larger hurdle than picking up Java or Go, but it is worth the time.

In many aspects, Rust is far more productive and also more beginner-friendly than C++:

far better compiler error messages
a superb and easy-to-use packaging system
Unicode support
support for unit testing right in the language
strong support for a side-effect-free or "functional programming" style which is great for testing and tasks like data analysis or parsing
better modularization
avoids implementation inheritance, and the trait system is a bit different but superb
no undefined behavior (in safe Rust) which means nothing less than that the code does what it says - and this is extremely useful in larger projects
great support for safe concurrency
the language and library frees one to think about interfaces and algorithms which is where the big wins for performance are hidden (and IMO one of the key factors for the astounding success of Python).

I could go on... but I need to do other stuff

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Thanks for the detailed answer. Preaching to the choir.

The existence of the concept of ownership in languages like C++ is why I threw "moderately" in there. I agree depending on what you take that to mean, it may or may not do some heavy lifting.

For the rest, I'd divide it into hard facts (compiler messages are absolutely undeniable, in any circumstance) and things that can definitely be true depending on your personal use cases. I'm with you on this: for the vast vast majority of tasks commonly understood as software engineering, memory safety is a concern, and a lot, if not all, of your points, are valid.

I must humbly insist that it does not fit my needs, in the sense that memory safety is of no concern to me, and that the restrictions that a compiler-enforced approach imposes make me less productive, and, subjectively, also less enjoyable because causing more friction.

That being said, you may also not consider what I'm currently doing to be software engineering, and that's totally fine. Then we'd agree entirely.

EDIT: also, there are very few languages less productive and beginner-friendly than C++ in my opinion. The proverbial bar is in hell. But you are talking to an unreasonable C++ hater.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

EDIT: also, there are very few languages less productive and beginner-friendly than C++ in my opinion.

I am a professional C++ developer with 20 years of experience and have worked in about eight other languages professionally, while learning and using a dozen more in hobby projects.

I agree with you here. The only areas where specifics are worse are package management in Python, and maintainability of large SIMULINK models.

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

That's the sort of indictment of C++ I like to hear. It's not just me then. I sometimes feel like I'm taking crazy pills with some colleagues who are super enthusiastic about it still.

But again, I'm stupid, I know I'm stupid, and C++ has way too many features and convoluted behaviours which are hard for me to remember and reason about. It often feels like it makes me think more about the language problems than the actual problem I'm supposed to work on. It may say more about me than the language, but I do feel validated with comments like this.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

jaybone

in reply to HaraldvonBlauzahn • 1 settimana fa • •

What’s wrong with implementation inheritance? Don’t you want that?

in reply to jaybone

pr06lefs

in reply to jaybone • 1 settimana fa • •

The consensus seems to be that implementation inheritance leads to code that is difficult to understand and difficult to reuse. Its perhaps the main reason C++ is banned from the kernel.

Questa voce è stata modificata (1 settimana fa)

in reply to jaybone

HaraldvonBlauzahn

in reply to jaybone • 1 settimana fa • •

Generally no. As soon as a class hierarchy becomes moderately complex, implementation inheritance makes code very hard to maintain, because you need to read the whole stack of classes to see what a single change will actually do.

Rust has another system, traits and trait implementations.

in reply to Buffalox

Victor

in reply to Buffalox • 1 settimana fa • •

What have you been doing since you stopped programming?

Alternatively, why did you stop (seriously) programming?

in reply to Victor

Buffalox

in reply to Victor • 1 settimana fa • •

It was never a major part of my job description, and I lost interest doing small hobby projects.

in reply to Buffalox

Victor

in reply to Buffalox • 1 settimana fa • •

Understandable

in reply to Buffalox

Ephera

in reply to Buffalox • 1 settimana fa • •

Lots of "modern" languages don't interop terribly well with other languages, because they need a runtime environment to be executed.
So, if you want to call a Python function from Java, you need to start a Python runtime and somehow pass the arguments and the result back and forth (e.g. via CLI or network communication).

C, C++, Rust and a few other languages don't need a runtime environment, because they get compiled down to machine code directly.
As such, you can call functions written in them directly, from virtually any programming language. You just need to agree how the data is laid out in memory. Well, and the general agreement for that memory layout is the C ABI. Basically, C has stayed the same for long enough that everyone just uses its native memory layout for interoperability.

And yeah, the Rust designers weren't dumb, so they made sure that Rust can also use this C ABI pretty seamlessly. As such, you can call Rust-functions from C and C-functions from Rust, with just a bit of boilerplate in between.
This has also been battle-tested quite well already, as Mozilla used this to rewrite larger chunks of Firefox, where you have C++ using its C capabilities to talk to Rust and vice versa.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

zaphod

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Oh well, time to switch to TempleOS.

like this

in reply to zaphod

kubofhromoslav

in reply to zaphod • 1 settimana fa • •

Or get a catgirl ears. And safer memory.

like this

in reply to kubofhromoslav

Hule

in reply to kubofhromoslav • 1 settimana fa • •

My memory is safe. Nobody ever knows what I'm going to forget..

in reply to Hule

kubofhromoslav

in reply to Hule • 1 settimana fa • •

Then catgirl ears are enough 😉

in reply to zaphod

HiddenLayer555

in reply to zaphod • 1 settimana fa • •

Pff you know how many layers of abstraction HolyC still has? Real computing enthusiasts write their OS in machine code. Not assembly, that's an abstraction too, literally tapping out high and low electrical pulses like you're in the Marconi room on the Titanic.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

tehn00bi

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Isn’t one of the main concerns the licensing of Rust?

in reply to tehn00bi

Anafabula

in reply to tehn00bi • 1 settimana fa • •

No. The Rust code in the kernel is GPLv2 just like the rest of the kernel. The licence of the compiler has nothing to do with that, that's nonsense Rust haters make up.

You can argue against independent projects like the Rust coreutils not using a copyleft license, but that has nothing to do with Rust or the kernel. There are independent C projects without non-copyleft licenses too.

Questa voce è stata modificata (1 settimana fa)

like this

in reply to Anafabula

LeFantome

in reply to Anafabula • 1 settimana fa • •

Ah thank you. You likely guessed the reason for the question.

Many popular projects written in Rust, including the UUtils core utils rewrite, are MIT licensed as Rust is. There have been people that purposely confuse things by saying that “the Rust community” is undermining the GPL. I can see how that may lead somebody to believe that there is some kind of inherent licence problem with code written in Rust.

Code written in Rust can of course be licensed however you want from AGPL to fully proprietary.

I personally perceive a shift in license popularity towards more permissive licenses at least with the “younger generation”. The fact that so many Rust projects are permissively licensed is just a consequence of those kinds of licenses being more popular with the kinds of “modern” programmers that would choose Rust as a language to begin with. Those programmers would choose the same licenses even they used the GCC toolchain. But the “modern” languages they have to choose from are things like Rust, Swift, Zig, Go, or Gleam (all permissively licensed ). Python and TypeScript are also still trendy (also permissively licensed).

Looking at that list, it is pretty silly to focus on Rust’s license. Most of the popular programming languages released over the past 20 years are permissively licensed.

Questa voce è stata modificata (1 settimana fa)

in reply to LeFantome

Muehe

in reply to LeFantome • 1 settimana fa • •

Many popular projects written in Rust, including the UUtils core utils rewrite, are MIT licensed as Rust is. There have been people that purposely confuse things by saying that “the Rust community” is undermining the GPL.

How would that ever be a problem in any case? I mean I'm not that versed in licensing stuff, but MIT explicitly allows sublicensing, so if in doubt just slap a GPL-sticker on the MIT code and you are good, no?

in reply to tehn00bi

Auli

in reply to tehn00bi • 1 settimana fa • •

Huh, its a programing language. People can write the code and use whatever license they want.

in reply to tehn00bi

atzanteol

in reply to tehn00bi • 1 settimana fa • •

Rust is mit/apache licensed? What concerns are there?

in reply to atzanteol

Mactan

in reply to atzanteol • 1 settimana fa • •

rust the language is, but projects using it can be any other license, like GPL 2 or 3 or whatever cursed one that sudo has

in reply to Mactan

atzanteol

in reply to Mactan • 6 giorni fa • •

Yes, I know.

in reply to tehn00bi

LeFantome

in reply to tehn00bi • 1 settimana fa • •

I have never heard the licensing of Rust being raised as a concern for the Linux kernel.

As Charles Babbage would say, “I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.”

The distro I use builds the entire Linux kernel with Clang which uses the same license as Rust. Linux is bound by the same modified GPL license regardless of what compiler I use to build it.

The compiler has no impact on the license applied to the code you build with that compiler. You can use closed source tools to build open source software and vice versa.

And, of course, the Rust license is totally open source as it is offered as both MIT and Apache. Apache 2.0 even provides patent guarantees which can matter for something like a compiler.

If you prefer to use GPL tools yourself, you may want to keep an eye on gccrs.

rust-gcc.github.io/

A legitimate concern about Rust may be that LLVM (Rust) supports a different list of hardware than GCC does. The gccrs project addresses that.

GCC Front-End For Rust | Alternative Rust Compiler for GCC

^{rust-gcc.github.io}

in reply to HaraldvonBlauzahn

onlinepersona

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Phoronix commentors will be furious.

in reply to HaraldvonBlauzahn

selokichtli

in reply to HaraldvonBlauzahn • 1 settimana fa • •

This title really bait me.

like this

in reply to selokichtli

partofthevoice

in reply to selokichtli • 1 settimana fa • •

Yeah, thought that was going the other way for a second.

in reply to partofthevoice

eldavi

in reply to partofthevoice • 1 settimana fa • •

ditto and it made me sad; i was afraid that the maintainers had become too ossified to embrace change.

ALIS via Technology

1 settimana fa • •

ALIS
1 settimana fa • •

The ALIS Codex: Learn. Survive. Connect.

ALIS cuts the noise: the game turns experience into skill and brings it back to real life.,, Connections. Our goal is to create connections between people and support their interaction in the real world.,, Resources. You learn to use resources effectively: water, food (real caloric value), sleep, injuries; energy drains by activity.,, Mechanics. Realistic mechanics with practical value - sense beyond the screen.,, Knowledge. A variety of useful information reinforced through gameplay as skills.,, Learn. Survive. Connect - we’re in your next decision.

#technology

reshared this

ALIS via Technology

1 settimana fa • •

ALIS
1 settimana fa • •

Why We Make ALIS: The Enemy Within

We accept the challenge - to create a world harsh and real down to the last detail, without killing the soul of the game.,, We expose the abyss of war’s tragedy and, with clear-eyed honesty, the depth of human grief, loneliness, distance.,, Our mission is to make ALIS a tool for growth that helps you better understand yourself, those around you, and life itself.,, May the project bring meaningful experiences and real connection.

#technology

reshared this

in reply to ALIS

muzzle

in reply to ALIS • 1 settimana fa (Ricevuto 2 giorni fa) • •

" Alis? Who the fuck is Alis?"

Smokie, probably

Questa voce è stata modificata (1 settimana fa)

Peter Link via Palestine

1 settimana fa • •

Peter Link
1 settimana fa • •

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

cross-posted from: lemmy.ml/post/40114112

Civil Defense teams recover 98 additional bodies of people trapped under the rubble of Al-Shifa hospital. A new report estimates the Gaza genocide has produced over 60 million tons of rubble in Gaza. Tony Blair appears to be out as the prospective head of Trump’s “Board of Peace.” The Israeli government to allocate an additional $843 million to West Bank settlements. Israeli warplanes strike southern Lebanon. Israeli National Security Minister Itamar Ben-Gvir and other party members wear a noose on their lapels to signal support for legislation that would allow for lynching Palestinian prisoners. Chairman and CEO of Paramount Skydance David Ellison launches a hostile takeover bid for Warner Bros. Discovery backed by Jared Kushner. The National Defense Authorization Act (NDAA) would force the U.S. to make up for any deficits in weapons sales caused by boycotts of Israel, Zeteo reports. The Supreme Court seems ready to green-light Trump’s firing of independent bureaucrats. President Donald Trump says the U.S. will place five percent tariffs on Mexico to rectify a water dispute. Sudan’s Rapid Support Forces seizes an oil field in west Kordofan. Yemen’s Southern Transitional Council claims control over south Yemen. Honduras AG issues a warrant for the arrest of a former President pardoned by Trump. A government airstrike in Myanmar kills 18. Fighting breaks out between former allies in eastern Congo.

Peter Link

2025-12-10 05:43:01

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

Civil Defense teams recover 98 additional bodies of people trapped under the rubble of Al-Shifa hospital. A new report estimates the Gaza genocide has produced over 60 million tons of rubble in Gaza. Tony Blair appears to be out as the prospective head of Trump’s “Board of Peace.” The Israeli government to allocate an additional $843 million to West Bank settlements. Israeli warplanes strike southern Lebanon. Israeli National Security Minister Itamar Ben-Gvir and other party members wear a noose on their lapels to signal support for legislation that would allow for lynching Palestinian prisoners. Chairman and CEO of Paramount Skydance David Ellison launches a hostile takeover bid for Warner Bros. Discovery backed by Jared Kushner. The National Defense Authorization Act (NDAA) would force the U.S. to make up for any deficits in weapons sales caused by boycotts of Israel, Zeteo reports. The Supreme Court seems ready to green-light Trump’s firing of independent bureaucrats. President Donald Trump says the U.S. will place five percent tariffs on Mexico to rectify a water dispute. Sudan’s Rapid Support Forces seizes an oil field in west Kordofan. Yemen’s Southern Transitional Council claims control over south Yemen. Honduras AG issues a warrant for the arrest of a former President pardoned by Trump. A government airstrike in Myanmar kills 18. Fighting breaks out between former allies in eastern Congo.

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen
Drop Site Daily: December 9, 2025
^{Drop Site News}

#Palestine

like this

Peter Link via World News

1 settimana fa • •

Peter Link
1 settimana fa • •

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

cross-posted from: lemmy.ml/post/40114112

Civil Defense teams recover 98 additional bodies of people trapped under the rubble of Al-Shifa hospital. A new report estimates the Gaza genocide has produced over 60 million tons of rubble in Gaza. Tony Blair appears to be out as the prospective head of Trump’s “Board of Peace.” The Israeli government to allocate an additional $843 million to West Bank settlements. Israeli warplanes strike southern Lebanon. Israeli National Security Minister Itamar Ben-Gvir and other party members wear a noose on their lapels to signal support for legislation that would allow for lynching Palestinian prisoners. Chairman and CEO of Paramount Skydance David Ellison launches a hostile takeover bid for Warner Bros. Discovery backed by Jared Kushner. The National Defense Authorization Act (NDAA) would force the U.S. to make up for any deficits in weapons sales caused by boycotts of Israel, Zeteo reports. The Supreme Court seems ready to green-light Trump’s firing of independent bureaucrats. President Donald Trump says the U.S. will place five percent tariffs on Mexico to rectify a water dispute. Sudan’s Rapid Support Forces seizes an oil field in west Kordofan. Yemen’s Southern Transitional Council claims control over south Yemen. Honduras AG issues a warrant for the arrest of a former President pardoned by Trump. A government airstrike in Myanmar kills 18. Fighting breaks out between former allies in eastern Congo.

Peter Link

2025-12-10 05:43:01

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

Civil Defense teams recover 98 additional bodies of people trapped under the rubble of Al-Shifa hospital. A new report estimates the Gaza genocide has produced over 60 million tons of rubble in Gaza. Tony Blair appears to be out as the prospective head of Trump’s “Board of Peace.” The Israeli government to allocate an additional $843 million to West Bank settlements. Israeli warplanes strike southern Lebanon. Israeli National Security Minister Itamar Ben-Gvir and other party members wear a noose on their lapels to signal support for legislation that would allow for lynching Palestinian prisoners. Chairman and CEO of Paramount Skydance David Ellison launches a hostile takeover bid for Warner Bros. Discovery backed by Jared Kushner. The National Defense Authorization Act (NDAA) would force the U.S. to make up for any deficits in weapons sales caused by boycotts of Israel, Zeteo reports. The Supreme Court seems ready to green-light Trump’s firing of independent bureaucrats. President Donald Trump says the U.S. will place five percent tariffs on Mexico to rectify a water dispute. Sudan’s Rapid Support Forces seizes an oil field in west Kordofan. Yemen’s Southern Transitional Council claims control over south Yemen. Honduras AG issues a warrant for the arrest of a former President pardoned by Trump. A government airstrike in Myanmar kills 18. Fighting breaks out between former allies in eastern Congo.

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen
Drop Site Daily: December 9, 2025
^{Drop Site News}

#Worldnews

Peter Link via Palestine

1 settimana fa • •

Peter Link
1 settimana fa • •

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

Civil Defense teams recover 98 additional bodies of people trapped under the rubble of Al-Shifa hospital. A new report estimates the Gaza genocide has produced over 60 million tons of rubble in Gaza. Tony Blair appears to be out as the prospective head of Trump’s “Board of Peace.” The Israeli government to allocate an additional $843 million to West Bank settlements. Israeli warplanes strike southern Lebanon. Israeli National Security Minister Itamar Ben-Gvir and other party members wear a noose on their lapels to signal support for legislation that would allow for lynching Palestinian prisoners. Chairman and CEO of Paramount Skydance David Ellison launches a hostile takeover bid for Warner Bros. Discovery backed by Jared Kushner. The National Defense Authorization Act (NDAA) would force the U.S. to make up for any deficits in weapons sales caused by boycotts of Israel, Zeteo reports. The Supreme Court seems ready to green-light Trump’s firing of independent bureaucrats. President Donald Trump says the U.S. will place five percent tariffs on Mexico to rectify a water dispute. Sudan’s Rapid Support Forces seizes an oil field in west Kordofan. Yemen’s Southern Transitional Council claims control over south Yemen. Honduras AG issues a warrant for the arrest of a former President pardoned by Trump. A government airstrike in Myanmar kills 18. Fighting breaks out between former allies in eastern Congo.

Nearly 100 bodies recovered under Al-Shifa hospital in Gaza; UAE-backed separatists claim control of southern Yemen

Drop Site Daily: December 9, 2025

^{Drop Site News}

#Palestine

return2ozma via politics

1 settimana fa • •

return2ozma
1 settimana fa • •

Eileen Higgins wins Miami mayoral runoff, breaking 30-year Democratic drought

Higgins defeated former city manager Emilio Gonzalez with 59% of the vote, pledging to tackle housing affordability, climate resilience, and restore trust at City Hall.

^{Doug Myers (CBS Miami)}

#politics

like this

jankforlife via Memes

1 settimana fa • •

jankforlife
1 settimana fa • •

Liberals: proceeds to lap up empire propaganda instead

#memes

in reply to jankforlife

grandel

in reply to jankforlife • 1 settimana fa • •

Maybe don't post this on lemmy.ml? Try lemmy.world if you're looking for an echo chamber.

in reply to grandel

Jentu

in reply to grandel • 1 settimana fa • •

The thing on the scroll is usually what the meme poster supports and the 4th panel person’s reaction is who they’re making fun of.

in reply to Jentu

grandel

in reply to Jentu • 1 settimana fa • •

Ah, thanks. I misunderstood.

in reply to grandel

eldavi

in reply to grandel • 1 settimana fa • •

.world is probably the furthest a lemmy instance can be from an echo chamber on m/l theory.

Peter Link via World News

1 settimana fa • •

Peter Link
1 settimana fa • •

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

cross-posted from: lemmy.ml/post/40113504

Published date: 9 Dec 2025 16:18 GMT

In footage posted on Instagram, Lammy is seen telling campaigners and the strikers’ families that he did “not know anything” about the prisoners’ cases.
“I’ve written to David Lammy, so the fact he’s saying he doesn’t know about this is a lie,” Sultana told Middle East Eye.
In the video, Shahmina Alam, the sister of one of the strikers, confronted Lammy, saying that he and the Ministry of Justice had failed to respond to a letter alerting them of the planned strike and outlining the participants' demands.

Peter Link

2025-12-10 05:09:12

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

Published date: 9 Dec 2025 16:18 GMT
In footage posted on Instagram, Lammy is seen telling campaigners and the strikers’ families that he did “not know anything” about the prisoners’ cases.
“I’ve written to David Lammy, so the fact he’s saying he doesn’t know about this is a lie,” Sultana told Middle East Eye.
In the video, Shahmina Alam, the sister of one of the strikers, confronted Lammy, saying that he and the Ministry of Justice had failed to respond to a letter alerting them of the planned strike and outlining the participants' demands.

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’
British MP Zarah Sultana has said that Justice Secretary David Lammy “lied” when he claimed he did not know about the eight Palestine Action-linked prisoners currently on hunger strike.
^{Katherine Hearst (Middle East Eye)}

#Worldnews

Peter Link via World News

1 settimana fa • •

Peter Link
1 settimana fa • •

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

cross-posted from: lemmy.ml/post/40113504

Published date: 9 Dec 2025 16:18 GMT

In footage posted on Instagram, Lammy is seen telling campaigners and the strikers’ families that he did “not know anything” about the prisoners’ cases.
“I’ve written to David Lammy, so the fact he’s saying he doesn’t know about this is a lie,” Sultana told Middle East Eye.
In the video, Shahmina Alam, the sister of one of the strikers, confronted Lammy, saying that he and the Ministry of Justice had failed to respond to a letter alerting them of the planned strike and outlining the participants' demands.

Peter Link

2025-12-10 05:09:12

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

Published date: 9 Dec 2025 16:18 GMT
In footage posted on Instagram, Lammy is seen telling campaigners and the strikers’ families that he did “not know anything” about the prisoners’ cases.
“I’ve written to David Lammy, so the fact he’s saying he doesn’t know about this is a lie,” Sultana told Middle East Eye.
In the video, Shahmina Alam, the sister of one of the strikers, confronted Lammy, saying that he and the Ministry of Justice had failed to respond to a letter alerting them of the planned strike and outlining the participants' demands.

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’
British MP Zarah Sultana has said that Justice Secretary David Lammy “lied” when he claimed he did not know about the eight Palestine Action-linked prisoners currently on hunger strike.
^{Katherine Hearst (Middle East Eye)}

#World

Peter Link via Palestine

1 settimana fa • •

Peter Link
1 settimana fa • •

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

Published date: 9 Dec 2025 16:18 GMT

In footage posted on Instagram, Lammy is seen telling campaigners and the strikers’ families that he did “not know anything” about the prisoners’ cases.
“I’ve written to David Lammy, so the fact he’s saying he doesn’t know about this is a lie,” Sultana told Middle East Eye.
In the video, Shahmina Alam, the sister of one of the strikers, confronted Lammy, saying that he and the Ministry of Justice had failed to respond to a letter alerting them of the planned strike and outlining the participants' demands.

Zarah Sultana: Lammy claim he did not know about Palestine Action hunger strikers is a ‘lie’

British MP Zarah Sultana has said that Justice Secretary David Lammy “lied” when he claimed he did not know about the eight Palestine Action-linked prisoners currently on hunger strike.

^{Katherine Hearst (Middle East Eye)}

#Palestine

Peter Link via World News

1 settimana fa • •

Peter Link
1 settimana fa • •

Two US fighter jets circle Gulf of Venezuela in escalation of hostilities

cross-posted from: lemmy.ml/post/40113212

Roque Planas
Tue 9 Dec 2025 21.37 EST

Two US fighter jets circled the Gulf of Venezuela on Tuesday, in what appeared to be an escalation of the Trump administration’s ongoing hostilities toward the South American country and its leftist leader, Nicolás Maduro.
Venezuelans and South American media followed the flights in real time using websites like FlightRadar24, which showed a pair of F/A-18 Super Hornets flying together into the narrow Gulf of Venezuela for about 40 minutes. The jets flew just north of Maracaibo, Venezuela’s most populous city.

Peter Link

2025-12-10 04:59:19

Two US fighter jets circle Gulf of Venezuela in escalation of hostilities

Roque Planas
Tue 9 Dec 2025 21.37 EST
Two US fighter jets circled the Gulf of Venezuela on Tuesday, in what appeared to be an escalation of the Trump administration’s ongoing hostilities toward the South American country and its leftist leader, Nicolás Maduro.
Venezuelans and South American media followed the flights in real time using websites like FlightRadar24, which showed a pair of F/A-18 Super Hornets flying together into the narrow Gulf of Venezuela for about 40 minutes. The jets flew just north of Maracaibo, Venezuela’s most populous city.

Two US fighter jets circle Gulf of Venezuela in escalation of hostilities
Trump had further said Nicolás Maduro’s ‘days are numbered’ as military has targeted alleged drug boats
^{Roque Planas (The Guardian)}

#World

in reply to Peter Link

PrinceOfSloth

in reply to Peter Link • 1 settimana fa (Ricevuto 2 giorni fa) • •

The US really wants that Venuzuelan Oil huh.

in reply to Peter Link

tyrant

in reply to Peter Link • 1 settimana fa (Ricevuto 2 giorni fa) • •

God damnit.

Peter Link via World News

1 settimana fa • •

Peter Link
1 settimana fa • •

Two US fighter jets circle Gulf of Venezuela in escalation of hostilities

Roque Planas
Tue 9 Dec 2025 21.37 EST

Two US fighter jets circled the Gulf of Venezuela on Tuesday, in what appeared to be an escalation of the Trump administration’s ongoing hostilities toward the South American country and its leftist leader, Nicolás Maduro.
Venezuelans and South American media followed the flights in real time using websites like FlightRadar24, which showed a pair of F/A-18 Super Hornets flying together into the narrow Gulf of Venezuela for about 40 minutes. The jets flew just north of Maracaibo, Venezuela’s most populous city.

Two US fighter jets circle Gulf of Venezuela in escalation of hostilities

Trump had further said Nicolás Maduro’s ‘days are numbered’ as military has targeted alleged drug boats

^{Roque Planas (The Guardian)}

#Worldnews

in reply to Peter Link

Evilsandwichman [none/use name]

in reply to Peter Link • 1 settimana fa • •

And this is why North Korea has nukes

in reply to Peter Link

6stringringer

in reply to Peter Link • 5 giorni fa • •

Only 13 shopping days until til Christmas.
In other news, ”Yeah, this is probably not a good thing”.

Skavau via Television

1 settimana fa • •

Skavau
1 settimana fa • •

[Pluribus Spoilers] A distressing thought about Koumba and the hive...

The hive exist, or desire to please the survivors. However they want. Koumba has used this more than anyone else to his own advantage to live the life of a decadent, hedonistic and shallow playboy - roleplaying as James Bond and surrounding himself and having sex with women. Now, to me - this is very much - at the minimum - taking advantage of them. The women he's having sexual relations with are not who they were, and it is unlikely - even if the hive came to him and suggested it (as I suspect they did) - that the women before the joining would be remotely interested in doing this. They are not them. Who they were has been lobotomised, malformed and disappeared into the hive - segmented up into billions of bodies.

I've seen some people (not here, but elsewhere) suggest that this behaviour is okay because the hive is consenting. The women he's picking show enthusiastic and active consent. This to me is disgraceful, not just in the context of that - but also what could be the case if Koumba had different, darker interests.

Now the show will not address this (and rightfully so) - but it still seems true to me regardless of that. If Koumba was a pedophile, they would provide him with children he requested - and the children would provide active consent. Just like the women he picks now, they wouldn't be who they were. There is no concept of childhood or child innocence anymore. The hive literally can't say no unless it contradicts their survival or asks them to hurt others.

So to anyone who thinks the hive is a good thing (and some people actually do), or that Koumba is doing no wrong with what he's doing. This should be a point to consider.

Questa voce è stata modificata (1 settimana fa)

in reply to Skavau

adhocfungus

in reply to Skavau • 1 settimana fa • •

In theory they aren't individuals anymore, they are appendages. So there would be no issue with consent the same way you decide consent for your hand or mouth. In a sense your mouth consents because it is part of the you making that decision.

Except... If there were any chance your hand could separate from you and become an individual in the future it'd be immoral to use it for sex now. And Carol is already very confident that it's possible to reverse the Joining. But even if she wasn't it was always a possibility. So having sex with any of them is incredibly wrong, which should be obvious to anybody on a gut level.

☆ Yσɠƚԋσʂ ☆ via A community for people who love to cook!

1 settimana fa • •

☆ Yσɠƚԋσʂ ☆
1 settimana fa • •

The Ancient Spice That Replaces Garlic and Onion With a Pinch

https://www.seriouseats.com/guide-to-asafetida-11863496

#cooking

in reply to ☆ Yσɠƚԋσʂ ☆

Multiplexer

in reply to ☆ Yσɠƚԋσʂ ☆ • 1 settimana fa • •

Strange... You also mobile and on Android?
For me, cookie banner just won't go away...

in reply to Multiplexer

☆ Yσɠƚԋσʂ ☆

in reply to Multiplexer • 1 settimana fa • •

oh I was on a laptop, so not sure if there's a banner on mobile

☆ Yσɠƚԋσʂ ☆ via United States | News & Politics

1 settimana fa • •

☆ Yσɠƚԋσʂ ☆
1 settimana fa • •

How Corporate Democrats Made Trump Possible: A 10-Year Timeline

Saving the country from autocracy requires recognizing—and then overcoming—the chokehold that Democratic leaders have on the party.

^{norman-solomon (Common Dreams)}

#USA

return2ozma via politics

1 settimana fa • •

return2ozma
1 settimana fa • •

Project 2025 architects lay out 2026 policy vision

https://www.axios.com/2025/12/09/trump-china-project-2026-2025-policy-heritage-foundation-abortion

#politics

copymyjalopy likes this.

iturnedintoanewt via Linux

1 settimana fa • •

iturnedintoanewt
1 settimana fa • •

Konsole now prompts for passwords and other questions in pop-ups??

I mean, who thought of this as a good idea? I find it rather distracting. I'm trying to SSH into a computer and blam...a massive pop-up blocks me from reading what was before or anything else...just the pop-up in front, blocking text. It has the hidden password text field thing, but this one is to type yes/no to whether accept the server's cert. Y hit enter after typing yes...and blam, another pop-up, this one is for the actual password.

How can I disable these pop-up prompts? I want to be prompted as text, on the konsole main screen, as it always was. I haven't changed anything, because well, this is a brand new install. It started happening on a different computer and found it equally irritating.

Any idea how can I disable this? Thanks so much!

#linux

in reply to iturnedintoanewt

Ramin Honary

in reply to iturnedintoanewt • 1 settimana fa • •

It could be that a recent software update to Konsole or the environment variables which configure it, has it now using the ssh-askpass utility to prompt you for passwords. You can configure it to always prompt over the TTY of the parent process that executed the ssh-askpass command.

in reply to Ramin Honary

iturnedintoanewt

in reply to Ramin Honary • 1 settimana fa • •

Thanks. This is the first time I hear about this program, but it looks like it's indeed the one taking over the pw credentials. I tried unsetting the variables, and hopefully it will stop bugging after a reboot.

in reply to iturnedintoanewt

Eager Eagle

in reply to iturnedintoanewt • 1 settimana fa • •

check you SSH_ASKPASS and SSH_ASKPASS_REQUIRE variables

man.openbsd.org/ssh-add.1#ENVI…

ssh-add(1) - OpenBSD manual pages

^{man.openbsd.org}

BrikoX via Linux.zip

1 settimana fa • •

BrikoX
1 settimana fa • •

Linux Foundation aims to become the Switzerland of AI agents

An attempt to provide vendor-neutral oversight as the agent train barrels on

Linux Foundation aims to become the Switzerland of AI agents

: An attempt to provide vendor-neutral oversight as the agent train barrels on

^{Thomas Claburn (The Register)}

#linux

BrikoX via Rivian

1 settimana fa • •

BrikoX
1 settimana fa • •

Rivian is building its own AI assistant

The EV maker will likely share more details on its upcoming AI & Autonomy Day scheduled for December 11.

Rivian is building its own AI assistant | TechCrunch

The EV maker will likely share more details on its upcoming AI & Autonomy Day scheduled for December 11.

^{Kirsten Korosec (TechCrunch)}

#rivian

BrikoX via Entertainment

1 settimana fa • •

BrikoX
1 settimana fa • •

Wake Up Dead Man digs deep for a darker, more powerful Knives Out

Benoit Blanc shows his range.

Wake Up Dead Man digs deep for a darker, more powerful Knives Out

Wake Up Dead Man, the latest in the Knives Out murder mystery series, starts streaming on Netflix on December 12th.

^{Andrew Webster (The Verge)}

#entertainment

BrikoX via Right to Repair

1 settimana fa • •

BrikoX
1 settimana fa • •

Congress quietly strips right-to-repair provisions from US military spending bill

A win for the contractors

Congress quietly strips right-to-repair provisions from US military spending bill

: A win for the contractors

^{Brandon Vigliarolo (The Register)}

#right2repair

like this

BrikoX via Technology

1 settimana fa • •

BrikoX
1 settimana fa • •

Google is powering a new US military AI platform

“The future of American warfare is here, and it’s spelled A-I.”

Google is powering a new US military AI platform

The Department of Defense is announcing its own “bespoke” AI platform, GenAI.mil, and Google Cloud’s Gemini will be the first to be available on the platform.

^{Jay Peters (The Verge)}

#technology

BrikoX via Gaming

1 settimana fa • •

BrikoX
1 settimana fa • •

Microsoft unveils massive 2026 expansions for Age of Empires and Mythology series

The Age of Empires franchise has been back in a big way for years now, both thanks to Definitive Edition remasters as well as new games like Age of Empires IV. With 2025 now coming to a close, Microsoft is looking towards where the franchise will go in 2026. Today, the development team shared a roadmap that details these plans, and there are plenty of good news for fans.

https://www.neowin.net/news/microsoft-unveils-massive-2026-expansions-for-age-of-empires-and-mythology-series/

#gaming

Questa voce è stata modificata (1 settimana fa)

copymyjalopy likes this.

BrikoX via Technology

1 settimana fa • •

BrikoX
1 settimana fa • •

UK spending half an hour longer online than in pandemic, says Ofcom

The survey found people in the UK spent on average four hours and 30 minutes online every day in 2025

UK spending half an hour longer online than in pandemic, says Ofcom

^{Laura Cress (BBC News)}

#technology

BrikoX via Gaming

1 settimana fa • •

BrikoX
1 settimana fa • •

Call of Duty won’t release Modern Warfare or Black Ops back to back anymore

“We will drive innovation that is meaningful, not incremental.”

Call of Duty won’t release Modern Warfare or Black Ops back to back anymore

Activision’s future Call of Duty releases will no longer include back-to-back launches of Modern Warfare or Black Ops games.

^{Jay Peters (The Verge)}

#gaming

BrikoX via Canada

1 settimana fa • •

BrikoX
1 settimana fa • •

Canada’s Big Banks are a ‘culprit’ driving housing prices out of control

Canada’s political and media class has spent years chasing convenient villains to blame for the housing crisis, pointing the finger at foreign buyers, immigrants, supply shortages, zoning rules, or an overheated market.

https://breachmedia.ca/canadas-big-banks-are-a-culprit-driving-housing-prices-out-of-control/

#canada

Questa voce è stata modificata (1 settimana fa)

BrikoX via Path of Exile 2

1 settimana fa • •

BrikoX
1 settimana fa • •

[Announcement] Path of Exile 2: The Last of the Druids Item Filter Information

Early Access Announcements - Path of Exile 2: The Last of the Druids Item Filter Information - Forum - Path of Exile

Path of Exile is a free online-only action RPG under development by Grinding Gear Games in New Zealand.

^{Path of Exile}

#PathofExile2

BrikoX via United States | News & Politics

1 settimana fa • •

BrikoX
1 settimana fa • •

Trump’s Enemies List Meets Media Blackout

Why the NSPM-7 fueled FBI blacklist isn’t considered news

Trump’s Enemies List Meets Media Blackout

^{Ken Klippenstein}

#USA

BrikoX via Entertainment

1 settimana fa • •

BrikoX
1 settimana fa • •

Jimmy Kimmel Inks ABC Contract Extension After Trump-FCC Culture War

The one-year deal will take ‘Jimmy Kimmel Live!’ through the 2026-27 season.

Jimmy Kimmel Extends ABC Deal Through 2026-27

^{Rick Porter (The Hollywood Reporter)}

#entertainment

☆ Yσɠƚԋσʂ ☆ via Clojure programming language discussion

1 settimana fa • •

☆ Yσɠƚԋσʂ ☆
1 settimana fa • •

State of Clojure 2025

Who uses Clojure and how? Let's find out.

^{www.surveymonkey.com}

#clojure

PearOfJudes via Linux

1 settimana fa • •

PearOfJudes
1 settimana fa • •

Linux audio stuttering when opening separate application, how to prioritise audio when using Linux?

Spotify, freetube, youtube website, either it's a streaming issue or an audio playback issue. Whenever my cpu is working too hard audio playback stutters and delays making it unlistenable. Actually some games have alright audio so I think it's a streaming issue. Anyway I want to know how to prioritise sound streaming or playback cpu in linux?

#linux

in reply to PearOfJudes

curbstickle

in reply to PearOfJudes • 1 settimana fa • •

What distribution, DE, browser, etc? Is hardware acceleration enabled? Do you have multiple audio outputs simultaneously enabled?

A bit more detail would be helpful

in reply to curbstickle

PearOfJudes

in reply to curbstickle • 1 settimana fa • •

Sorry, I have a linuxmint wiith KDE plasma installed. I'll check on the other things

in reply to PearOfJudes

tekato

in reply to PearOfJudes • 1 settimana fa • •

Audio from low priority processes is expected to stutter under high CPU load. I experience this a lot when playing music while compiling programs.

in reply to tekato

Karmatrine

in reply to tekato • 1 settimana fa • •

It's kinda not supposed to happen if your setup is correct.

Most likely reason is too short buffer. And on high CPU load it's just getting overrun. There are legitimate ways to mitigate it in pipewire. And even manage some rt prio things. Arch wiki and pipewire docs should have comprehensive info on how to properly setup things. It can be bit complicated because different sources can have different quantum values. So some can stutter and some not, but it should be all configurable. Pipewire is very good in that regard, just sad I don't see any good tools to manage these values w/o creating/editing configs, so people don't jump into this rabbit hole of research.

Please note that defaults on pipewire should not stutter regularly with proper interface, my main audio interface performs way above what pipewire set by default. But I did used different interfaces and some do struggle with default quantum values.

Questa voce è stata modificata (1 settimana fa)

in reply to Karmatrine

tekato

in reply to Karmatrine • 1 settimana fa • •

Yeah you can mitigate it. Doesn’t change the fact that if you have no CPU time available, the audio is not getting played.

in reply to PearOfJudes

erebion

in reply to PearOfJudes • 1 settimana fa • •

Does it stutter if you open Pavucontrol? I've seen a couple setups where Pipewire stutters when pipewire-pulse is used, as does Pavucontrol.

(In some setups this only happened when the volume indicator is enabled in Pavucontrol and disappeared when it was switched off.)

in reply to PearOfJudes

FauxLiving

in reply to PearOfJudes • 1 settimana fa • •

Run pw-top while you’re having the issue and post the output.

It’s probably a bad default setting that’s setting the buffer/quantum incorrectly.

in reply to PearOfJudes

diamond

in reply to PearOfJudes • 1 settimana fa • •

none of these applications require particularly low latency, so if you're on Pipewire, you can increase both min, max and default quantum to something like [1024, 4096]. i have to do this on my N100 laptop and it helps a lot.

pw-top tells you which app uses which quantum too, and often times, your machine will slightly struggle with apps that suddenly demand lower quantums and cause stuttering. increasing the min quantum fixes this issue.

in reply to PearOfJudes

Atemu

in reply to PearOfJudes • 6 giorni fa • •

Did you/your distro set up realtime ulimits correctly such that pw can acquire rt priority?

in reply to PearOfJudes

mybuttnolie

in reply to PearOfJudes • 6 giorni fa • •

had a similar issue on my desktop, i had to disable onboard audio, even though it wasn't in use or even recognized

☆ Yσɠƚԋσʂ ☆ via Share Funny Videos, Images, Memes, Quotes and more

1 settimana fa • •

☆ Yσɠƚԋσʂ ☆
1 settimana fa • •

How this year went

#funny

Basic Glitch via Technology

1 settimana fa • •

Basic Glitch
1 settimana fa • •

AI Surveillance Startup Caught Using Sweatshop Workers to Monitor US Residents

Bombshell new reporting from 404 Media found that Flock, which has its cameras in thousands of US communities, has been outsourcing its AI to gig workers located in the Philippines.

After accessing a cache of exposed data, 404 found documents related to annotating Flock footage, a process sometimes called “AI training.” Workers were tasked with jobs include categorizing vehicles by color, make, and model, transcribing license plates, and labeling various audio clips from car wrecks.

In US towns and cities, Flock cameras maintained by local businesses and municipal agencies form centralized surveillance networks for local police. They constantly scan for car license plates, as well as pedestrians, who are categorized based on their clothing, and possibly by factors like gender and race.

In a growing number of cases, local police are using Flock to help Immigration and Customs Enforcement (ICE) agents surveil minority communities.

It isn’t clear where all the Flock annotation footage came from, but screenshots included in the documents for data annotators showed license plates from New York, Florida, New Jersey, Michigan, and California.

Flock joins the ranks of other fast-moving AI companies that have resorted to low-paid international labor to bring their product to market. Amazon’s cashier-free “just walk out” stores, for example, were really just gig workers watching American shoppers from India. The AI startup Engineer.ai, which purported to make developing code for apps “as easy as ordering a pizza,” was found out to be selling passing human-written code as AI generated.

The difference with those examples is that those services were voluntary — powered by the exploitation of workers in the global south, yes, but with a choice to opt out on the front-end. That isn’t the case with Flock, as you don’t have to consent to end up in the panopticon. In other words, for a growing number of Americans, a for-profit company is deciding who gets watched, and who does the watching — a system built on exploitation at either end.

AI Surveillance Startup Caught Using Sweatshop Workers to Monitor US Residents

The powerful surveillance startup Flock was caught using workers in the Philippines to collate data on US residents.

^{Joe Wilkins (Futurism)}

#technology

like this

reshared this

in reply to Basic Glitch

myfunnyaccountname

in reply to Basic Glitch • 1 settimana fa (Ricevuto 2 giorni fa) • •

Noticing a trend. You had Amazon use sweatshop workers for their shopping by camera thing. You had that AI company that was just like 400 people in a sweatshop typing away. Now this.

in reply to myfunnyaccountname

Basic Glitch

in reply to myfunnyaccountname • 1 settimana fa (Ricevuto 2 giorni fa) • •

I mean, there is actual "AI" tech that exists, and isn't just people working in sweatshops, like this:
deeplabcut.github.io/DeepLabCu…

It's just kind of difficult to get consistency between trials, and reliability seems to boil down to completely eliminating variability. So kind of useless outside of a lab setting (as is).

I tend to feel like it's more trouble than it's worth and too unreliable (as is) to usually bother with it, but I know people who are just fellow lab rats (not broligarchs) and are super devoted to getting AI to work for their projects. Like most sectors in this country, even science is being forced to embrace AI. Regardless of if it actually makes sense for your line of work or not, the expectation is get it working or face the chopping block, and there are definitely people who are trying their hardest to really get this shit off the ground (because the alternative is be prepared to be out of a job for being obsolete).

This is also why it's kind of surprising to learn that even "AI" that's simply comparing license plates from one camera to the next, is actually just due to human slave labor.

So, do any of the broligarchs receiving these huge contracts actually believe that eventually they'll get AI to work once enough data and money is dumped into it and the little people at the bottom figure out all the kinks for them?

Or is it just that everybody at the top acknowledges this is a dead end, but once you're in the secret club at the top of the food chain, and you're making ridiculous amounts of money, your incentive is just to keep your mouth shut, keep making money, and fuck the consequences because once society collapses you'll get to be kings of your own little monarchs anyway?

If it is the second, and nobody at the top really believes AI is going anywhere, then what are all the giant, energy sucking data centers that are being built across the country actually for?

Welcome! 👋 — DeepLabCut

^{deeplabcut.github.io}

in reply to Basic Glitch

Diurnambule

in reply to Basic Glitch • 1 settimana fa (Ricevuto 2 giorni fa) • •

You thing too big. IA is already used and work well in tool like n8n. Where you use it to write 3-5 lines of code to fill a function box.
Still have to think to coordinates actions but the coding is mostly done by IA.

Questa voce è stata modificata (1 settimana fa)

in reply to Diurnambule

Basic Glitch

in reply to Diurnambule • 1 settimana fa (Ricevuto 2 giorni fa) • •

But if the broligarchs don't actually expect to ever get any of this "AI" shit actually working, then what is the end game?

Obviously the majority of people are only in it to make quick money, but what about the psychos at the very top who are directing policy and building these giant nuclear powered "AI" data centers?

If Thiel/Musk/Zuckerberg don't actually have the expectation that "AI" will eventually work itself out, then it won't matter how money the rich (but not broligarch rich) Wall Street bros and bankers dumped into the "AI" boom.

It won't be like the .com boom and the Internet, because it doesn't actually exist. If the economy completely collapses, and dollar becomes worthless currency, the "money" the average rich asshole hoards away after investing in the 2025 "AI" boom, will have about as much value as monopoly money.

Meanwhile the fucking Bond villain billionaires like Thiel (who have been dreaming of this exact scenario for over 20 years) hold all resources (including a recently purchased uranium mine).

So, "hypothetically," if that was Thiel's endgame, and the "AI" jig is up, then they no longer have to pretend they're trying to develop artificial intelligence or AGI. But they do already hold control of most resources, have mass surveillance capabilities, and each broligarch owns one or more of these giant supercomputers/data centers that have been built in cities all over the ~~U.S.~~ world and soon in outer space.

In this totally fictional scenario, once the dollar collapses (likely followed by all of society collapsing along with it), what do the broligarchs actually use their giant nuclear powered "AI" data centers for?

AI or no AI, they're currently being built all over the country, so what is their actual purpose?

Questa voce è stata modificata (1 settimana fa)

in reply to Basic Glitch

zebidiah

in reply to Basic Glitch • 1 settimana fa (Ricevuto 2 giorni fa) • •

AI = actually Indians

Jack_Burton via Linux

1 settimana fa • •

Jack_Burton
1 settimana fa • •

Had an issue with an update and had no networl access after reboot. How many kernals can be available in grub?

Still pretty new to Linux, I'm on Ubuntu Studio 24.04 LTS and had some issues with updates through the updater with errors and so I did sudo apt update/upgrade instead. Something went wrong and had errors, and after a reboot I had no internet access, Ethernet or WiFi, and no options to connect to anything. Running sudo lshw -c network showed unclaimed networks.

In case anyone has a similar issue, I fixed it by:
1. Reboot, spam shift to get into grub
2. Advanced options
3. Recovery mode for the lower number kernel
4. Enable networking
5. Fix broken packages

My question is about number 3. There were 4 kernel options, 2 normal with a recovery for each (I can't remember the specifics but one had 37 and the other 36). I selected recovery 36 as it was the older kernel. Is that amount of options (2 for each kernel) normal or can I create more? Like 37, 36, 35, 34, etc.

I was in panic mode since this PC is for work, and thought it might be nice to have more older kernel options if possible. I've also learned my lesson and am currently running Timeshift.

#linux

in reply to Jack_Burton

HelloRoot

in reply to Jack_Burton • 1 settimana fa • •

If the partition where your OS stores boot images at is large enough, you can have practically infinitely many kernels in grub.

Some distros store those in a boot partition. Some store it in the root partition subdir. I don't know about ubuntu tbh.

I once had a 2gb boot partition and I needed to add a graphics stack to the boot image so I could use a touchscreen keyboard during boot to enter a LUKS password. That made a single kernel image over 1gb, so I could only have one...

Questa voce è stata modificata (1 settimana fa)

in reply to HelloRoot

Jack_Burton

in reply to HelloRoot • 1 settimana fa • •

Interesting thanks. I'll look into it more.

in reply to Jack_Burton

rhythmisaprancer

in reply to Jack_Burton • 1 settimana fa • •

It's been a long time since I used Ubuntu, but at the time I did I recall running into issues keeping too many old kernels. They were stored in a fixed space folder (or maybe partition?) that was like 100MB and sometimes wouldn't clear out automatically, so I remember this. May not be relevant now, but if it is, space in the storage folder is the limiting factor so you would need to change that. If it IS a partition, then you would need to deal with all that is involved with that.

edited to add that my current OS only stores three or four as well. I have never really dived into it.

Questa voce è stata modificata (1 settimana fa)

in reply to rhythmisaprancer

Jack_Burton

in reply to rhythmisaprancer • 1 settimana fa • •

Huh, I certainly don't want to cause more issues haha. I've got timeshift setup now so hopefully if it or similar happens again and I can't get it running the kernel way I can just use that. Thanks.

yazomie via Linux

1 settimana fa • •

yazomie
1 settimana fa • •

The Quest for Reasonably Secure Operating Systems

TL;DR - About switching from Linux Mint to Qubes OS from among various other options that try to provide security out-of-the-box (also discussed: OpenBSD, SculptOS, Ghaf, GrapheneOS)

The Quest for Reasonably Secure Operating Systems

I never worried on Windows about security as much as I should have, it just so happens I've been lucky to have never been hit with ransomware. By the time...

^{yazomie > tech}

#linux

Questa voce è stata modificata (1 settimana fa)

like this

in reply to yazomie

Lonewolfmcquade

in reply to yazomie • 1 settimana fa • •

I find it odd that the author didn't mention secureblue at all. I wonder why they didn't consider that option?

in reply to Lonewolfmcquade

yazomie

in reply to Lonewolfmcquade • 1 settimana fa • •

I actually forgot to mention it, but I was going to say anyway that sandboxing I deem less ideal than paravirtualization

in reply to yazomie

Lonewolfmcquade

in reply to yazomie • 1 settimana fa • •

I don't know anything about that but it sounds interesting. If you have any sources for further reading about sandboxing vs paravirtualization, I'd like to read up on it

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

What I want out of a secure Linux (or BSD) system is full (top-to-bottom) sandboxing of all components to enforce least privilege. I am want to learn how to make my own distro (most likely for personal use) which uses strong SELinux policies, in conjunction with syd-3 sandboxing, which seems like the most robust and feature rich, unprivileged sandbox in both the Linux/BSD worlds (also it's totally in safe Rust from what i can tell).

Another thing that I would love to make is a drop-in replacement for Flatpak that is backwards compatible but uses syd-3 instead. It has much better exploit protections than Bubblewrap, and is actually an OOTB secure sandbox. I dont know much about the internals of Flatpak, or how to use xdg-desktop-portal, but I am going to start more simple with a Bubblejail alternative. One major advantage of syd is that you can modify an already running sandbox, so theoretical you could show a popup that says something like "App1 is requesting microphone access.", where you could toggle on without needing to restart the app.

Need to get better at coding tho lol

in reply to N.E.P.T.R

iopq

in reply to N.E.P.T.R • 1 settimana fa • •

You can try to just make a hardened NixOS config. The only requirement is systemd to use NixOS options. Other components you can freely interchange.

in reply to iopq

sudoer777

in reply to iopq • 6 giorni fa • •

I'm not very good at securing Linux, but from what I've seen, NixOS leaves a lot to be desired. It doesn't officially support SELinux and requires a lot of work to make it function properly. It supports other mandatory access control programs, which I'm not really sure how they compare. The store being world readable is another problem. The most obvious issue with that is if you're doing business work with two clients on the same computer where infrastructure needs to remain confidential, where one client's programs can read the store and see information about the other clients, even on separate user accounts.

Questa voce è stata modificata (6 giorni fa)

in reply to sudoer777

iopq

in reply to sudoer777 • 6 giorni fa • •

I think the preferred approach is AppArmor because SELinux is not supported on immutable distros. I'm not a security expert either, but I would not share environments between two clients at all, I would put them in separate VMs

in reply to iopq

aaravchen

in reply to iopq • 6 giorni fa • •

SELinux is used on all the Fedora Immutable distros, and the OpenSUSE Immutable distro.
It's actually much easier to do SELinux in Immutable distros in a lot of ways than non-immutable. Especially the bootc-style ones where even more of the system is defined and prebuilt before deployment.

AppArmor is OK, but the whole issue is that you have to know what to throw into it. That's also its benefit, you can focus in the high risk things and ignore the low risk things. It keeps expanding profiles more and more though, and ironically the ultimate destination is everything being under MAC.

in reply to aaravchen

iopq

in reply to aaravchen • 6 giorni fa • •

Well, that's because it's a first party solution. From NixOS point of view SELinux is mutating the store which is forbidden

in reply to N.E.P.T.R

yazomie

in reply to N.E.P.T.R • 1 settimana fa • •

I'm all for a better Flatpak, but I'm on the fence with full-on usage of Rust, I'd wait for there to be a second Rust compiler. Otherwise, sandboxing might be enough for some users, but not exactly for me.

in reply to yazomie

moonpiedumplings

in reply to yazomie • 1 settimana fa • •

Syd3, and gvisor, a similar project in go aren't really sandboxes but instead user mode emulation of the linux kernel. I consider them more secure than virtual machines because code that programs run is not directly executed on your cpu.

Although syd3 doesn't seem to emulate every syscall, only some, I know rhat gvisor does emulate every syscall.

If you compare CVE's for gvisor and CVE's for xen/kvm, you'll see that they are worlds apart.

Xen has 25 pages: app.opencve.io/cve/?vendor=xen

Gvisor has 1: app.opencve.io/cve/?q=gvisor

Now, gvisor is a much newer product, but it is still a full 7 years old compared to xen's 22 years of history. For something that is a third of the age, it has 1/25th of the cve's.

There is a very real argument to be made that the hardened openbsd kernel, when combined with openbsd's sandboxing, is more secure than xen, which you brought up.

Xen CVEs and Security Vulnerabilities - OpenCVE

Explore the latest vulnerabilities and security issues of Xen in the CVE database

^{app.opencve.io}

Questa voce è stata modificata (1 settimana fa)

in reply to moonpiedumplings

yazomie

in reply to moonpiedumplings • 5 giorni fa • •

I could use gvisor inside distrobox inside an appVM in Qubes, couldn't I?

Many CVE's for Xen were discovered and patched by the Qubes folks, so that's a good thing...

As for OpenBSD, I thought I mentioned in the blog post that I'm intending to use it as sys-net VM inside Qubes if not as HVM alongside my Linux appVMs, for when I need Linux. The best of both worlds, so to say.

in reply to yazomie

moonpiedumplings

in reply to yazomie • 5 giorni fa • •

to answer your first question, kind of. Gvisor (by google btw) uses the linux kernels sandboxing to sandbox the gvisor process itself.

Distrobox also uses the linux kernels sandboxing, which is how linux based containers work.

Due to issues with the attack surface of the linux's kernels sandboxing components, the ability to create sandboxing or containers inside sandboxes or containers is usually restricted.

What this means is that to use gvisor inside docker/podman (distrobox) you must either loosen the (kinda nonexistent) distrobox sandbox, or you must disable gvisors sandboxing that it applies to itself. You lose the benefit, and you would be better off just using gvisor alone.

It's complicated, but basically the linux's kernels containers/sandboxing features can't really be "stacked".

Linux | Madaidan's Insecurities

^{madaidans-insecurities.github.io}

in reply to moonpiedumplings

yazomie

in reply to moonpiedumplings • 4 giorni fa • •

Oh, good to know... In other words, sandboxing is not the best practice on Linux... So I'm better off with Qubes than with Secureblue

in reply to yazomie

moonpiedumplings

in reply to yazomie • 4 giorni fa • •

sandboxing is not the best practice on Linux… So I’m better off with Qubes than with Secureblue

No, no, no.

It's no that sandboxing is the best practice, it's just that attempting to "stack" linux sandboxes is mostly ineffective. If I run kvm inside xen, I get more security. If I run a linux container inside a linux container, I only get the benefit of one layer. But linux sandboxes are good practice.

I do agree that secureblue sucks, but I don't understand your focus on Qubes. To elaborate on my criticisms let me explain, with a reply to this comment:

Many CVE’s for Xen were discovered and patched by the Qubes folks, so that’s a good thing…

If really, really care about security, it's not enough to "find and patch CVE's". The architecture of the software must be organized in such a way that certain classes of vulnerabilities are impossible — so no CVE's exist in the first place. Having a lack of separation between different privilege levels turns a normal bug into a critical security issue.

Xen having so many CVE's shows that is has some clear architectural flaws, and that despite technically being a "microkernel", the isolation between the components is not enough to prevent privilege isolation flaws.

Gvisor having very few CVE's over it's lifespan shows it has a better architecture. Same for OpenBSD — despite having a "monolithic" kernel, I would trust openbsd more in many cases (will elaborate later).

Now, let's talk about threat model. Personally, I don't really understand your fears in this thread. You visited a site, got literally jumpscared (not even phised), and are now looking at qubes? No actual exploit was done.

You need to understand that the sandboxing that browsers use is one of the most advanced in existence currently. Browser escapes are mostly impossible... mostly.

In addition, you need to know that excluding openbsd, gvisor, and a few other projects almost all other projects will have a regular outpouring of CVE's at varying rates, depending on how well they are architectured.

Xen is one of those projects. Linux is one of those projects. Your browser is one of those projects. Although I consider Linux a tier below in security, I consider Xen and browsers to exist at a similar tier of security.

What I'm trying to say, is that any organization/entity that is keeping a browser sandbox escape, will most definitely have a Linux privilege escalation vulnerability, and will probably also have a Xen escape and escalation vulnerability.

The qube with the browser might get compromised, but dom0 would stay safely offline, that’s my ideal, not the utopic notion of never possibly getting attacked and hacked.

This is just false. Anybody who is able to do the very difficult task of compromising you through the browser will probably also be able to punch through Xen.

not the utopic notion of never possibly getting attacked and hacked.

This is true actually. Browser exploits are worth millions or even tens of millions of dollars. And they can only really be used a few times before someone catches them and reports them so that they are patched.

Why would someone spend tens of millions of dollars to compromise you? Do you have information worth millions of dollars on your computer? It's not a "utopic notion", it's being realistic.

If you want maximum browser security, ~~disable javascript~~ use chromium on openbsd. Chromium has slightly stronger sandboxing than firefox, although chromium mostly outputs CVE's at the same rate as firefox. Where it really shines, is when combined with Openbsd's sandboxing (or grapheneos' for phones).

Sure, you can run Xen under that setup. But there will be no benefit, you already have a stronger layer in front of Xen.

TLDR: Your entire security setup is only actually as strong as your strongest layer/shield. Adding more layers doesn't really offer a benefit. But trying to add stronger layers is a waste of your time because you aren't a target.

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

I am excited to see Chimera Linux mature because iy seems like a distro which prioritizes a simple but modern software stack.

Features of Chimera that I like include:
- Not run by fascists
- Not SystemD (dinit)
- Not GNU coreutils (BSD utils)
- Not glibc (musl)
- Not jemalloc (mimalloc)
- Proper build system, not just Bash scripts in a trenchcoat

What I would like:
- MAC (SELinux)
- Switch to Fish over Bash (because it is a much lighter codebase)
- Switch from mimalloc to hardened_malloc (or mimalloc built with secure flag). Sadly hardened_malloc is only x64 or aarch64
- Hardened sysctl kernel policy

Chimera Linux

^{Chimera Linux}

in reply to N.E.P.T.R

Kajika

in reply to N.E.P.T.R • 1 settimana fa • •

What are the pros/cons of GNU coreutils vs BSD utils?

EDIT : from their website : Desktop environment -> GNOME. What a choice, not for me.

Questa voce è stata modificata (1 settimana fa)

in reply to Kajika

yazomie

in reply to Kajika • 1 settimana fa • •

GNOME is just the default, there's also KDE and no-GUI options if I'm not mistaken

in reply to Kajika

LeFantome

in reply to Kajika • 6 giorni fa • •

First, I use either Niri or KDE Plasma on Chimera Linux. Both are just an “apk add” away. You do not have to use GNOME. There is even a KDE live image so you do not even have to run GNOME once to install if you do not want.

I really like the BSD utils and have come to prefer them. Well written. Sleek. Well documented. The man pages are a walk through UNIX history. They feel “right” to me.

That said, the BSD userland is frequently a pain when interacting with the rest of the Linux universe. You cannot even build a stock kernel.org kernel without running into compatibility problems. The first time I built the COSMIC desktop on Chimera, I had to edit a dozen files to make them “BSD” compatible.

Sed, find, tar, xargs, and grep have all caused me problems. And you need bash obviously. But bash is no big deal because it has a different name.

The key GNU utils are available in the Chimera repos. But you get files named gfind, gtar, gxargs, gsed, etc. so scripts will not find them.

You often have to either add the ‘g’ to the beginning of utilities in scripts or edit the arguments to work with the BSD versions.

I mean, most things are compatible and I bet most of the command-line switches you actually use will work with the BSD utils. But I would be lying if I did not say third-party scripts are a hassle.

If I could do Chimera all over again, I would make it bsdtar and bsdsed (or bsed maybe) for the BSD versions.

Maybe the regular names could be symlinks with sed pointing to bsdsed by default but you could point it to gsed instead of you want. The system Chimera scripts and tools could use the longer names (eg. bsdsed) instead of the symlinks. The GNU tools could be absent by default like they are now. That would be the best of both worlds. The base system would have the advantages of the BSD tools (like easier builds as outlined on the Chimera site), the system could be GNU free if you want, and you could have a system that actually works out of the box more often with third-party scripts.

It pains me to say this. I would prefer not to use the GNU stuff but the GNU tools are the de facto standard on Linux and many, many things assume them. No wonder UUtils aims for 100% compatibility.

Anyway, even with what I say above, Chimera is my favourite distro. The dev can be a little prickly, but they do nice work.

Questa voce è stata modificata (6 giorni fa)

in reply to LeFantome

Oinks

in reply to LeFantome • 6 giorni fa • •

The GNU utils vs BSD utils issue should be easy to work around with a bit of symlinking and PATH modification:

> type find
find is /bin/find

> type gfind
gfind is /usr/local/bin/gfind

> sudo mkdir -p /usr/local/opt/gnuutils/bin/
> sudo ln -s /usr/local/bin/gfind /usr/local/opt/gnuutils/bin/find

> PATH="/usr/local/opt/gnuutils/bin:$PATH" type find
find is /usr/local/opt/gnuutils/bin/find

or in script form:

\#!/bin/sh
# install as /usr/local/bin/gnu-run
# invoke as gnu-run some-gnu-specific-script script-args
export PATH="/usr/local/opt/gnuutils/bin:$PATH"
exec "$@"

/usr/local/opt/... is probably not the best place to put this but you get the idea, you can make it work with POSIX tools. I don't know that much about Chimera Linux but I'd be very surprised if nobody has thought of doing this systematically, e.g. as part of a distributable package.

Questa voce è stata modificata (6 giorni fa)

in reply to Oinks

LeFantome

in reply to Oinks • 5 giorni fa • •

Thank you for the suggestion. I am ashamed to confess that a temporary PATH variable had not occurred to me.

I first ran into these issues creating package templates. Chimera has a beautiful package build system where packages get built in containers and source code gets downloaded into the container and and built against a clean environment. As you point out, creating a package that creates the symlinks as a dependency (along with the GNU utils) could be a viable approach here. Maybe even just in /usr/local. The GNU utils get installed to /usr/bin in Chimera and the container gets recycled for every new package. The distro would never accept such hacky packages but I can use them myself.

For just generally working in the distro at the command-line, your temporary path idea could work well.

Thanks again. I appreciate it!

in reply to N.E.P.T.R

yazomie

in reply to N.E.P.T.R • 1 settimana fa • •

Chimera is a nice alternative to Alpine, have you thought of sending this feedback to Chimera's dev?

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

I thought about it (and I might still) but the project is still in beta and implementing sysctl and MAC would slow everything down development-wise. Switching to Fish would be easy and cool though.

Questa voce è stata modificata (1 settimana fa)

in reply to N.E.P.T.R

LeFantome

in reply to N.E.P.T.R • 6 giorni fa • •

Chimera Linux is great. APK and cports are so good I cannot imagine going back to anything else.

Bash is not the default shell though. Chimera uses the Almquist Shell from FreeBSD. Other Linux distros have “dash” which is basically an Almquist variant.

Almquist is lighter than fish and fish is not POSIX compatible.

Bash is available in the Chimera Linux repos of course and is required for many common scripts.

“Not run by fascists”. Sometimes I wonder.

in reply to yazomie

Jay🚩

in reply to yazomie • 1 settimana fa • •

ironclad-os.org/

Ironclad

Ironclad is a free software formally verified kernel written in SPARK/Ada

^{ironclad-os.org}

in reply to Jay🚩

yazomie

in reply to Jay🚩 • 1 settimana fa • •

Thanks, Ironclad and Gloire look interesting for a RISC-V system, gonna try out at some point alongside CheriBSD

in reply to yazomie

marcie (she/her)

in reply to yazomie • 1 settimana fa • •

I think Secureblue + GrapheneOS are the most reasonable choices imo. Qubes is highly hardware intensive for what it does, it will frustrate most people.

in reply to marcie (she/her)

peskypry

in reply to marcie (she/her) • 1 settimana fa • •

Not only is it resource‑intensive, but Qubes also lacks Secure Boot and Wayland support. Secure Boot is critical to ensure the OS has not been tampered with, and Wayland is required to isolate individual apps running within a single VM from capturing input intended for other apps. For an average user, I would recommend SecureBlue rather than Qubes.

in reply to peskypry

yazomie

in reply to peskypry • 1 settimana fa • •

AppVMs are isolated in Qubes even without the help of Wayland

in reply to peskypry

dXq9dwg4zt

in reply to peskypry • 1 settimana fa • •

Qubes OS has an Anti-Evil Maid option that is far, far better than signed boot.

in reply to marcie (she/her)

yazomie

in reply to marcie (she/her) • 1 settimana fa • •

It works decently with just 8 GB RAM, and I'm going to upgrade the RAM.

Secureblue is based on sandboxing rather than paravirtualization, and I'm not sure that's secure enough for me.

in reply to yazomie

marcie (she/her)

in reply to yazomie • 6 giorni fa • •

I do agree it's likely more secure, but the tradeoff for common use cases (gaming, development) is steep. I could see using it solely for browsing and messaging people

You can also just slot secure blue into a qube I believe

Questa voce è stata modificata (6 giorni fa)

in reply to yazomie

non_burglar

in reply to yazomie • 1 settimana fa • •

I don't understand... Your motivation for a secure operating system was from an incident where you were nearly social engineered? How will a "more secure" os help you with that?

in reply to non_burglar

yazomie

in reply to non_burglar • 1 settimana fa • •

How is using disposable VMs in Qubes not going to help?

in reply to yazomie

non_burglar

in reply to yazomie • 1 settimana fa • •

You aren't going to like this:

Because if you got yourself pwned by a malicious link in discord, your account highjacked, etc., then having discord in a vm, container, chroot, jail, or whatever won't help you on the server-side api abuse that got you pwned. In this case, you yourself should have been more vigilant.

From your article, and with respect, I think its nice you're thinking more about security, but you're mixing up quite a few concepts, and you should probably make smaller moves toward security that you actually understand, instead of going all-in on qubes with only a vague concept of the difference between sandboxing and paravirtualization.

in reply to non_burglar

mub

in reply to non_burglar • 6 giorni fa • •

Slightly harsh but that is the truth of it. Improving the walls and doors will help, but if the guard on the door can be convinced to admit an uninvited guest then the physical security will have much harder time protecting your data. The weakest part of any security system is the people.

in reply to mub

non_burglar

in reply to mub • 6 giorni fa • •

Yep.

I was hoping not to sound too harsh, I'll have to work on that.

in reply to non_burglar

youmaynotknow

in reply to non_burglar • 6 giorni fa • •

As long as it's factual harsh is even welcome.

in reply to mub

KubeRoot

in reply to mub • 6 giorni fa • •

The weakest part of any security system is the people.

Well, maybe not any, but most ;D

in reply to yazomie

mybuttnolie

in reply to yazomie • 6 giorni fa • •

i have this well guarded city with big walls and tough gates. oh hey look someone is gifting me a big wooden horse, send them in!
edit: thought i was funny but it sounds mean now. but i know how you feel, i got pwned once like 10y ago and they sent spam from my skype...

Questa voce è stata modificata (6 giorni fa)

in reply to non_burglar

sudoer777

in reply to non_burglar • 6 giorni fa • •

More secure OSes limit what social engineering attacks can take place and what damage they can do.

in reply to sudoer777

non_burglar

in reply to sudoer777 • 6 giorni fa • •

OK, I'll bite... How exactly?

in reply to non_burglar

MouldyCat

in reply to non_burglar • 6 giorni fa • •

often social eng attacks rely on a vulnerability as well e.g. getting your mark to open an Excel file that exploits a vulnerability in MS Office.

in reply to MouldyCat

non_burglar

in reply to MouldyCat • 6 giorni fa • •

Sure, but if the compromise stays within its own app, like for a browser, sandboxing won't help.

The bulk, and I mean like 95% of the compromises I see are normal employees clicking on things that "look legit".

Excel is now wrapped in a browser. Discord, almost all work apps are all wrapped in a browser. So you can be completely locked down between apps like grapheneos, but if you are choosing to open links, no amount of sandboxing is going to save you.

This is why we deploy knowbe4 and proofpoint, cause people are a liabilities, even to themselves.

Questa voce è stata modificata (6 giorni fa)

in reply to non_burglar

FoundFootFootage78

in reply to non_burglar • 5 giorni fa • •

Clicking on things that look legit is a critical part of interaction with computers. Programs should not be installed unintentionally, so first and foremost Office Macros should not be enabled by default (and eventually Microsoft did disable them).

Recently I think the main avenue for malware is to send a PDF with a fake popup for an update, that links to a phishing site and prompts you to download an exe with malware. That kind of thing is a harder issue to solve, but at the very least an OS should probably not let that program update your BIOS.

in reply to non_burglar

sudoer777

in reply to non_burglar • 6 giorni fa • •

One example is on GrapheneOS, programs can't touch system files due to no root access, and they also can't access data files for other programs.

Questa voce è stata modificata (6 giorni fa)

in reply to sudoer777

non_burglar

in reply to sudoer777 • 6 giorni fa • •

Sure, but op chose to follow a link. You can be sandboxed to high heaven and still get pwned if you make choices like that. Discord is particularly rife with this.

in reply to non_burglar

sudoer777

in reply to non_burglar • 6 giorni fa • •

Yes, but I never said you won't get pwned. I said that it would limit how it could be done and what damage it could do.

For instance, if you click a link and download something shitty, it can't just steal your auth tokens on GrapheneOS because all of that is isolated to only the program that uses them. Meanwhile on Windows/Linux there are tons of Python scripts that do that. It would take extra steps on GrapheneOS for someone to use social engineering to hack someone's Discord/Bank/etc account, which could be enough to prevent it for some people.

Questa voce è stata modificata (6 giorni fa)

in reply to yazomie

fruitycoder

in reply to yazomie • 6 giorni fa • •

Another step up is the confidential computing project. Requires hardware that supports it though, which sucks, but takes the virtual hardware concept and adds multi key memory encryption on top.

Remember though security without a threat model is just paranoia, so what level of hoops and investment you need really depends on what your threats actually look like.

I personally love containers and Macsec. It limits most of my concerns. I want to mess with confidential containers next, which is to say lightweight VMs in containers with memory encryption set, but thats all future to me. The irony is that I then I have to figure out attestation better for those machines since from the host they are black boxes.

in reply to yazomie

FoundFootFootage78

in reply to yazomie • 5 giorni fa • •

What did clicking on the cloudflare button actually do? As far as I know just clicking on a link shouldn't give you malware.

☆ Yσɠƚԋσʂ ☆ via Space, the final frontier

1 settimana fa • •

☆ Yσɠƚԋσʂ ☆
1 settimana fa • •

Voyager 1 will reach one light-day from Earth in 2026. Here’s what that means

https://www.cnn.com/2025/12/09/science/voyager-1-light-day-earth

#space

birdwing via Privacy

1 settimana fa • •

birdwing
1 settimana fa • •

iOS 26 doesn't offer privacy settings at all for "Home" app

It appears that even if you don't have the app installed, it is in Settings > Apps. But there's no option at all, to customise its privacy settings.

Downloading the app also doesn't let you customise its privacy settings. In fact, the app then disappears altogether from the privacy settings! It doesn't even appear anymore in the "Hidden Apps". Removing it again however, shows the app popping up again in the settings.

What's more, it's deliberately erroneously labelled as "Start Screen" when you don't have downloaded it.

Ridiculous. One more reason to go to a Fairphone or something like it.

However, you can edit it... but very cumbersomely, only by going to Settings > Siri > App Access ... and then suddenly, you see the app!

This seems like it's straight up illegal.

#privacy

Questa voce è stata modificata (1 settimana fa)

in reply to birdwing

Irdial

in reply to birdwing • 1 settimana fa • •

If by “privacy settings” you mean controlling what system permissions the Home app has, you’re out of luck. It’s a semi-default app and may be more deeply embedded into iOS than is apparent.

If you’re trying to control what other apps have access to HomeKit data, you can find that in Privacy & Security.