Sometimes I call the numbers on missing dog posters and just bark into the phone. I learn from the mistakes of those who take my advice.

  • 0 Posts
  • 26 Comments
Joined 8 months ago
cake
Cake day: March 28th, 2024

help-circle






  • At an old company I joined they had rolled them out to all employees. Six months before me getting onboard they had already given up, but we still had to support the ones out in the field. Fun fact about Surfaces, despite it being MS hardware running an MS operating system, the Windows 10 and 11 base system does not have drivers for the keyboard or mouse. You have to use a special image for the Surface devices. That meant maintaining two custom WIM images for deployment and keeping them in sync. We scrapped the remaining Surfaces and gave people the choice of Macs or ThinkPads instead. You can guess which was more popular among the office folk.


  • I used to have a black XBox sitting beneath the TV gathering dust. I think it is a One by the shape. As for the new ones I have no idea off the top of my head which is the best. I’ve seen some on sale in places, but the impulse buy isn’t there because I have no idea what I would be getting. I don’t own a PlayStation, but if I wanted one I know that 5 is the newest, and you can get the small slim one or the big Pro one.


  • Don’t give them ideas 😂

    If Canonical and RedHat weren’t backing different horses (Snap vs Flatpak), I could see the app containerization system coming under systemD as well fairly soon. The Cosmic DE project uses functionality from systemD to overlay changes onto the system that are reversible, so that alpha versions of Cosmic can be tested without permanently changing the base system. Imagine apps shipping on whatever container runtime, and dynamically overlaying system-level changes as needed for things that tap into the host system via systemd-sysext.


  • A lot (and I mean a lot) of criticism can be leveled at systemD. One of the upsides of it becoming popular is the standardization of much of things from the developers’ perspective. It’s easier to target multiple distros when you can rely on systemD’s single implementation of the feature. Over the next decade, I forsee systemD eating more and more of the userspace, until you are only left with managing the differences between DEs and which display server they are using. We’re already headed towards immutable base systems with apps shipping with their own dependencies, which we reduce the differences between distros even further.











  • I admire your gusto! I think it’s doable, and you can definitely pull it off if you want to. To replace MD5 and implement signatures you need to do the following, as a high level overview:

    Extend dpkg to know what SHA2 is, and reliably detect it. (maybe measure hash length or specifying a new version using the control file?)

    dpkg must also know what a signature is. More on that below.

    Providing automatic/mandatory signing will require code to handle PKI as well as a place to store the signing information. I would do it by signing the two archives found within Deb packages, then placing information about the signing in the top-level of the package. Existing tools need to be able to ignore or handle whatever you implement as a rule of thumb.

    Note that this is just my approach and maybe you can do better.

    I also recommended looking into https://lists.debian.org/debian-dpkg/2001/03/msg00024.html. This is the thread I mentioned earlier, in which package signatures were discussed and ultimately turned down. Maybe the easiest approach is to re-implement what the contributor was trying to do back then, but with modern code and standards? If you want more resources, including my presentation on the topic to HackCFL and CitrusSec, let me know. I am here for whatever technical assistance or industry contacts I can provide. The white paper might be done in a month, minus peer review. I’m very busy and so is he. Good luck in any case!