bisby @ bisby @lemmy.world

Posts

0

Comments

226

Joined

2 yr. ago

The archlinux-keyring package will install a few gpg keys.

But also, the AUR also uses gpg keys to validate things.

Just searching the AUR for one of the repos that Jaffa linked to in another comment...

https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=librespot

Here is the PKGBUILD. Note line 24:

    
validpgpkeys=('EC57B7376EAFF1A0BB56BB0187F5FDE8A56219F4') ## Roderick van Domberg


  

And I'm sure if you got through the AUR there are plenty of packages that use this

Many AUR helpers (like paru, or yay, etc), will either auto download these keys for you, or prompt you. Even if you were to build this pkgbuild by hand, unless you removed that line, it would require you to import the key for the makepkg to work. So "how does a fresh arch install wind up with GPG keys that I didn't manually import?" ... the answer is AUR helpers most likely (or you did it manually for a makepkg and just forgot).

It's also worth pointing out that GPG handles signing things, but also signature verification. These are all public keys in your system. Having public keys that have been used for signature verification is perfectly normal and kind of the point. If you had Roderick's private key that would be weird.

That's valid, but even then, a $120m bond is less risk that 4x companies supplying $120m bonds. When the time comes to pay out and you need to get your collateral, if there is only $150m available to actually pay out, you get yours, vs having to split it multiple ways, or otherwise not getting a payout at all.

And that's assuming you can get 4x companies to even throw in $120m. He is so unreliable that had to get an unlicensed company to even get that much, so I doubt he's going to find 4x legit companies to team up.

But then again, requiring the full amount should still just be enforced. If no one wants to provide bond, thats his problem, not the court's. I certainly don't get to say "Well I can't get bond" and get to have the amount lowered. If I say that, I just don't get to appeal.

I didn't realize that. I use a .xyz for a lot of my personal stuff and didn't realize this. I wanted basically .website ... i didnt want .com or .org or anything with tld that meant something, so xyz felt nice. Also, the domain I wanted with any popular tld was insanely expensive and i got my xyz for cheap when it was brand new (not for 1 dollar though).

Maybe I need to look into new domains, but I probably will just stick with it since its primarily for personal use anyway.

Thats not how loans necessarily work though. If I go to a bank and ask for $100m, but they see I already owe $350m to other lenders, they'll say no, because they know they arent getting paid back until after the other 3. So if they think trump has $450m in assets, just give him whole amount, and if they don't think he has that much, any money theyre giving him is just being thrown away.

This is a guy notorious for lying about his assets and not paying debts. Even giving him $125m is a bad idea, but the odds of getting paid back get even worse if you arent first in line.

Caveat: This is all written assuming the message is being written on a computer with a real keyboard. But if we're assuming this is written on a phone, then my analysis doesn't apply, but then again, writing a java program to execute in your messaging app is also a terrible idea. Which means we're suspending disbelief, so I choose to believe that a computer keyboard and shortcuts are available.

Type the phrase once. Select all. copy, paste, paste (the first paste replaces what you already have highlighted, the second paste adds a second copy). Now you have 2. Control + A, Control + C, Control + V.. Now you have 4.

It will take you only 7 cycles of this get 128*, you only need to copy/paste it one by one if you want to send each message separately. and even then, it's would purely be copy the original, then paste, send, paste, send, paste send, paste, send.

Assuming you can hold down control and just hit ACVV 7 times, that's 28 keystrokes. I'd bet I can get that done in 5 seconds or less (i tried it, it's less than that), so now I only save 5 seconds. Which means I only get 25 seconds to write the script. Which he chose to write in java for some reason?

[print("I'm sorry") for x in range(0, 100)] is actually a script I could write in less than 25 seconds.

*And I disagree with the "reason 4" given. She didn't say "exactly 100 times" she said "100 times before I forgive you" and to me, "before" implies >= and not ==. So if you drop it in 128 times, that exceeds the criteria. No one has ever rescinded forgiveness for receiving extra apologies.

In my ethics in engineering class, we spent a lot of time talking about things like the Kansas City Hyatt Regency walkway collapsing. The takeaway for me was "Depending on what you are doing, people might die if you are too confidently doing things the wrong way."

Most people, even a lot of engineers, don't have lives on the line in their day to day. Things means that most people don't have the "What if I am wrong about this and people die?" part of their brain firing 24/7. For most people, the "consequences of getting things wrong" means either a lecture from their boss, or literally nothing. When people never have to face consequences for being wrong, they feel very empowered to be wrong.

Its enough for me too. But not everyone has the same use case and environment. I definitely see why someone would want this.

What I disagree with is that it needs to communicate to the internet to do this. It adds delay and potential for outage if your internet is out. But they do this so they can force you to get their app and milk you for extra data to sell. Internet capable smart devices are to harvest data not grant features. Features could be done better by ZigBee and a hub, but that doesnt grant the device a way to phone home

Oh good, if that is all true, you wont have to change anything to be compliant with new laws and should have no issue with them.

The original is an ad for a Posturite mouse. Then reddit added the mouse. then someone else added saddam.

Interesting. I upvoted because I saw this 11 years ago and it made me nostalgic. 11 years is a huge gap in repost time.

I was at a track meet once and the lady running high jump was doing a horrible job. She was finally figuring out what she was doing and said : OK, we got this. Next height will be 5'12"

Hopefully. The thing about social platforms is that if everyone else leaves and doesnt tell them to fuck right off, it can get lonely. Xmpp still exists and im sure some people use it successfully, but its definitely not the same scale it once was

The point of the meme is "Debian users are so proud of not having frequent updates... but when they do update, they have a huge backlog of things to update" ... so yes, the fact that it's not apples to oranges, and yet Debian users act superior is kinda the point.

And I use arch on my desktops but debian on my servers. I understand the difference. and yes, 20+ config changes is a bit of an exaggeration. I more frequently have to do minor tweaks to fix things on arch, but I also don't need to set aside time to do arch updates "just in case" ... because I have had debian upgrades cause weird side effects that wound up taking up my whole day.

The fact that i can go 2 years between those weird update days means I will still use it for my server, because "just security upgrades" is good enough for a server (even though I would love to have an updated tmux and neovim, so i could share config files, but oh well, i can go without config files on my server, debian DOESNT manage user config files, definitely not any more than arch does.). I don't "not get it" or something. I understand why people use debian, I use it in certain contexts, but it does also have it's own set of drawbacks.

e^{x and 7 were walking down the street having a nice chat, when in the distance, they see a derivative walking towards them. 7 panics, turns and runs in the opposite direction. e}x is smug and walks right up. "Hi, I'm e^x" it boldly declares to the derivative. The derivative smiles back, "Hi, I'm dy/dt"

"update" here referring to the version update, eg bullseye to bookworm. hence the title sources.lists because version updates disable all ppas.

Also, because of the "stable" nature of things, instead of a slow trickle of updates, when you finally update the version, you get a flood of updates. Changing from $PACKAGE version 5 to $PACKAGE version 9 very likely has breaking config changes... Avoiding breaking config changes is the entire purpose of a "stable" distro right?

If on arch, you get those breaking changes once a month, a two year release cycle means that the update to the next debian will have 24 breaking changes involved that you get to deal with all at the same time, while accounting for the fact that your /etc/apt/sources.list.d are all disabled.

This was fixed ages ago, but you are using Debian because it is "stable" and thus software from ages ago and don't have the fix.

The cross platform friend requests bugs mean I still havent been able to play with the friends who convinced me to buy the game in the first place. But yeah, otherwise quite fun.

Its 100x better of a starship troopers game than the actual starship troopers game that came out last year

Most people use stable to refer to something that doesn't crash or cause issues. Something that you might call "rock solid" which implies it's not going to fall over. Something to put on your server because you'll get great uptime without issues.

Debian is one of the few places where stable might crash more than unstable, because known bugs in Debian don't get backported unless they cause security issues.

I use Debian on my servers because "some testing" is nice and the only thing I run on my servers is docker. And ironically, I have to use a PPA for docker.

So for me, it's a stable enough base OS, but it "too stable" for anything that actually runs on the servers.

Debian is not all about "stability" in the sense of "doesn't crash". Debian is all about consistency. The platform doesn't change. That means if there is a bug that crashes the system for you... it's going to consistently be there.

For me, it was when stable was on kernel 3.16, and 3.18 was in testing, but the latest kernel was 3.19. And this was an era where AMD's drivers not fully OpenGL compliant yet. Which meant games would crash. And knowing "this game will always crash until 3 years from now when we finally get a newer kernel" was enough to chase me off.

debian's neovim package is 0.7.2. Sid is 0.7.2. Experimental is 0.9.5... If there are any bugfixes between 0.7.2 and 0.9.5 that are critical for your workflow... too bad. If its not a "security" release, its not getting updated. You can live with knowing the bug.

"Never change anything, stick to known good versions" only works if you know 100% that the "known good version" is actually bug free. No code is bug free, so inevitably the locked down versions in Debian will have still some flaws (and debian doesn't backport bugfixes, they only backport SECURITY fixes). For most use cases, the flaws will be minor enough to not matter. But inevitably, if a flaw exists, it affects SOMEONE.

If you actually want to do any sort of complicated computing, debian is not a great choice. if you want a unchanging base so you can run a web browser and processor, I'm sure it's great.

(although my ~15 years as a windows sysadmin probably bias my opinion)

So basically: it's not any harder in linux, but you have more than a decade of muscle memory in windows, so it's harder for you.

That's like saying "Japanese is a less efficient language than English, all of the words are different, and when I want to say a word, I have to learn it first, but in English I just know the words! English is so much better! (My 30 years speaking english probably bias my opinion)"

Things are certainly different, but its hard to compare which is "harder" for the advanced use cases.

There's no shame in having long term experience with one platform and having that shape your expectation about how a solution should look.