thomask

joined 1 year ago
MODERATOR OF
[–] thomask@lemmy.sdf.org 0 points 3 months ago (1 children)

Is this a joke? I'm not clever enough to get it.

 

The following summary from Debian's security list:

The Qualys Threat Research Unit (TRU) discovered that OpenSSH, an implementation of the SSH protocol suite, is prone to a signal handler race condition. If a client does not authenticate within LoginGraceTime seconds (120 by default), then sshd's SIGALRM handler is called asynchronously and calls various functions that are not async-signal-safe. A remote unauthenticated attacker can take advantage of this flaw to execute arbitrary code with root privileges. This flaw affects sshd in its default configuration.

 

Martin Kleppmann sets out a vision: "In local-first software, the availability of another computer should never prevent you from working."

He describes the evolution of how to classify local-first software, how it differs from offline-first, and proposes a bold future where data sync servers are a commodity working in tandem with peer-to-peer sync, freeing both developers and users from lock-in concerns.

[–] thomask@lemmy.sdf.org 1 points 4 months ago

It's convenient until you want to upgrade the distro.

[–] thomask@lemmy.sdf.org 9 points 7 months ago

If you can write correct C++ you'll be able to write Rust code that compiles first time. Don't stress, you're learning the good stuff.

[–] thomask@lemmy.sdf.org 10 points 8 months ago

IrfanView, now that's the good stuff

[–] thomask@lemmy.sdf.org 1 points 11 months ago

*A formerly chill laid back community up until someone posted it on Lemmy 😀

[–] thomask@lemmy.sdf.org 2 points 11 months ago

I was comparing frozen diced veggies a couple of years back (in Australia) and noticed that the store-brand version was approximately 1/3 broccoli stems by volume, which certainly explained the cost difference.

[–] thomask@lemmy.sdf.org 37 points 1 year ago

That is the discussion. Microsoft is pretending by making it the upgrade path for two products which actually are local, and hoping users won't notice.

[–] thomask@lemmy.sdf.org 13 points 1 year ago

Honestly I'm glad they highlighted the telemetry. I went through the local report about what's included and while it's not an upsetting level of detail, it's more comprehensive than I would have opted in to if asked.

Still, as sibling points out it's in a completely different league from slurping up your IMAP creds, something which has always been local-only data. This is the second time I know of recently where MS has trampled on this kind of local-only expectation - the other was Edge defaulting to sending the contents of textboxes you're filling out on webpages to the MS cloud for spelling and grammar checks. Thunderbird is still a sound recommendation, and unlike Microsoft, I trust that if I uncheck the telemetry box they're not going to try to get me some other way.

[–] thomask@lemmy.sdf.org 4 points 1 year ago (1 children)

Nothing in tech stands still. If you want a glimpse of a possible alternative future check out Pijul. And I don't know an example off-hand but the idea of doing version control on ASTs of program code rather than flat text is an interesting concept that hasn't taken off yet.

[–] thomask@lemmy.sdf.org 8 points 1 year ago (1 children)

I’d rather go to the local library and ask the clerk for a search term

Sounds kind of relaxing tbh

[–] thomask@lemmy.sdf.org 3 points 1 year ago (1 children)

You're putting yourself in a tough position by asking for both E2EE and the ability to use from a browser. You have to trust the web app each time you open the page, and hope that they haven't altered the deal to simply grab your data after it's been decrypted by your password. I have no idea how likely it is that Standard Notes would do that but I'd reconsider the browser requirement specifically if E2EE is non-negotiable for you - an offline open source client program would be a much stronger position.

For my money, I use local text files and SyncThing but it's probably not spiffy enough for many people/purposes.

view more: next ›