Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)CH
Posts
0
Comments
465
Joined
2 yr. ago

  • I hope you gave them a good yelp review!

    At the end of the day, though, if I was desperate enough to rob a store I’d probably be pretty polite about it (as far as you can be considered polite in that situation, I guess!) Like, the cashier doesn’t want anything to do with this, I wouldn’t want to bother them needlessly. I hope they got the help they needed at the end of the day, and I hope it wasn’t too bad of an experience for you!

  • They even sell little packets of peanut butter to be eaten by itself out here.

    Are you sure you’re not just confused about those single serving peanut butter packets they leave on the table at brunch places to spread on your toast 😅?

  • I think even if you’re tech-savvy you can have issues with Arch tbh. I don’t think the distro is without merit — a minimal rolling release binary distribution is clearly something people want… But I’m not sure Arch does a great job of being that (for me, at least), and I’ve personally found pacman and the official packages to be kind of lacking (keyring update issue that they’ve maybe finally fixed, installing specific versions of packages / pinning specific versions / downgrading packages are either not supported or not well supported, immediately removing kernel modules on upgrade, even if the currently running kernel may need them, etc…). It just doesn’t feel very polished in my experience and for my use cases (clearly it works for some people!), and that’s what has driven me away from Arch personally. I think a lot of this stems from Arch’s philosophy of being aggressively minimal, which is maybe fair enough… but I don’t think it’s for everybody.

  • Who says it hasn’t happened? :P

    If it hasn’t I would just assume that Slackware isn’t a big enough target and that anybody in the position to man-in-the-middle a large number of people would have better targets. I mean, to be clear TLS is not a silver bullet either, but it goes a long way for ensuring the integrity of the data you receive over the internet in addition to hiding the contents.

    Distros usually sign their ISOs with PGP as well (Slackware does this), so it’s a good idea to verify those signatures as it’s a second channel that you can use to double check the validity of the ISO (but I’m not sure many people actually do this). Of course, anybody can make PGP keys so you have to find out which key is actually supposed to be signing the iso, otherwise an attacker can just make a bogus key and tell you that that’s the Slackware signing key (on the official website too, because it doesn’t use tls!). The web of trust arguably helps some (though this can be faked as well unless you actually participate in key signing parties or something), and you can hope that the Slackware public key is mirrored in several places that you trust so you can compare them… but at the end of the day for most people all trust in the distribution comes from the domain name, and if you don’t have TLS certificates you’re kind of setting up a weak foundation of trust… Maybe it will be fine because you’re not a big enough target for somebody to bother, but in this day and age it’s pretty much trivial to set up TLS certificates and that gets you a far better foundation… why take the risk? Why is it smart to unnecessarily expose your users to more risk than necessary?

  • I mean… I would consider anywhere that you might download software from sensitive. This isn’t really a smart move. And sure, the mirror’s page they link to uses https, but if the regular site doesn’t a man-in-the-middle could change the url and serve an official looking malicious version… I wouldn’t consider putting your users at an elevated risk when it’s relatively easy to set up TLS “a smart move”.

  • This was still an issue maybe a year ago, but I think they fixed the keyring issue finally in the past few months. This is not my only complaint with arch, but it’s frustrating that something this simple went unresolved for so many years. I honestly don’t understand why people love pacman. Downgrading packages is a pain, and there’s no way to install and pin a specific version of a package. I guess they want to keep it really minimal, but I find that this really gets in the way. All in all it was a death by a thousand papercuts for me! I won’t be going back to it. If other people like it that’s fine by me, I can understand the appeal, but I just find it frustrating personally.

    Edit: https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/commit/ad8698e96c423dfc68405b547f310f2e1075a95d this fix is kind of disappointing too to be honest…

  • I think Arch kind of deserves the hate it gets. I love barebones distros and have been a gentoo user (now on NixOS), and I’ve used arch a fair bit too… I just don’t feel like Arch is a well maintained distribution. There’s all sorts of little things that they can’t seem to get right that other distros do, like that silly issue where they won’t update the arch keyring first, so if you haven’t updated in a while it breaks. In my experience there’s a million little paper cuts like this and I’ve just been kind of unimpressed. If it works for you that’s great! I’ve just been disappointed with it. I get the niche that it fills as the binary “from scratch” rolling release distro, but I think the experience with it is a little rough. I’ve found gentoo more user friendly, which probably sounds bizarre if you haven’t used gentoo, but ignoring compiling stuff, gentoo does an excellent job of not breaking things on updates, and it’s much easier to pin and install specific versions of packages and stuff.

  • Yes, with a quantum computer you could hypothetically halve the effectiveness of AES (so AES-256 would be roughly equivalent to AES-128). This would make a 128-bit key fairly weak (and AES-128 is fairly common still)… a 64-bit space can be brute forced on regular computers in a reasonable amount of time. This doesn’t mean it will be cheap or feasible to break 128-bit AES on quantum computers, though. Maybe it can do it in roughly 2^64 computations, but if each operation is slow it still might not be feasible. At least initially it would probably be expensive to crack so hopefully they’d only bother for really targeted stuff.

  • This was the lesson I was hoping somebody would give. Green tea shouldn’t be “really strong” if it is you’re probably over-steeping it or using scalding water.

    I like tea, but I don’t really like caffeine. It’s a conundrum :(. I wish I could have my sencha every day without it making me feel like a stranger in my own mind.

  • This is probably not as big of a deal as the lack of common APIs like Vulcan. I doubt Valve has much (if any) raw x86 code in their game engine, and it would probably compile to arm just fine. You still have to set up a new build chain for this, though, which is a pain.

  • To be honest, I think this can also depend a lot on the climate that you’re from. In cold and dry climates you don’t necessarily get as smelly. When I moved to a hot and humid place it was like “okay, showers are a multiple times a day thing here, I guess.” Even when staying inside and loafing about in air conditioning it was noticeably worse. There’s a number of factors that change from person to person too… some people are greasier, some people are stinkier. You should probably shower and deodorant up whenever you’re going to leave the house and be near other people as a rule of thumb, but I think a fair number of people don’t shower every day and can get by okay.

  • A lot of open source projects do have windows versions, and the big projects that come to mind like blender or Firefox definitely do… but there’s a a lot of little pieces of software that don’t. One example that comes to mind for me is the Dino XMPP client… Linux only for now, unfortunately!