HNHacker News
TopNewBestAskShowJobs

baghira

194 karma · joined March 14, 2015

submissionscomments
baghira··on Firefox exploit found in the wild
I was debating the merit of having the pdf reader bundled and on by default, instead of having the pdf file downloaded like most other files. One can certainly change firefox's behaviour in the settings (unlike webgl).
baghira··on Firefox exploit found in the wild
It doesn't help your position the fact that you are unable to express it without belittling anybody who disagrees with you using stuff like "stay stuck in 1992" ("If you don't like America you should go to Russia!").

Also, the links/lynx jokes have really gotten tired, plenty of people browse the web with ublock, no(t)script, webgl and webrtc disabled and so on. The pretense that anybody who tries to retain a modicum of control on what its browser does and does not it a luddist is frankly irritating.

And the whole language debate is completely off point, we have plenty of safe(r) languages for writing stuff, the misguided idea is that the only way to do so is to use javascript and stick the resulting program inside the browser.

baghira··on Firefox exploit found in the wild
I disagree that this is innovation.

What innovation and what benefits do I reap by using pdf.js? It's slower and has less features than okular. It's stuck inside a firefox window, so I cannot add a window rule for it (barring adding one for firefox in general).

The same holds on windows: why would I use pdf.js when there are faster, lighter pdf readers (e.g. sumatra) or the actual adobe acrobat reader and its eight bilions features? Heck, I've also noticed that many users will skim the file and then forget to save it, so it doesn't even help less tech savy users.

There are genuine improvement in the new web technologies, but they are mixed with a lot of stuff that simply does not belong there, and with the insufferable attitude "you can do in javascript, hence you should it in javascript" (I'm not criticizing you, eh, and there is some security argument to be made).

baghira··on Shotcut – A free, open-source, cross-platform video editor
Per github page it's a Qt5 application. Qt can use Gtk2 to render its widgets, so that's probably what's happening in the ubuntu screenshot.
baghira··on Olbers' paradox
I'm really not convinced by the passages, both in Wikipedia and in the referenced book, concerning the role of the finite age of stars.

From what I remember from Coles-Lucchin, the finite age of stars does furnish a partial explanation: keeping the average density of lit stars the universe constant, does not solve the problem, since in general, when I look in a particular direction, any star in that direction will either be dead or lit, but still too far away for its light to have reached me.

Indeed the opposite would require fine-tuning the stars ignition time so that there is sphere of burning stars at the right distance.

baghira··on Microsoft’s new small print – how your personal data is abused
I know that, what I meant was that there is information stored about the past, that a malicious application could not get otherwise (i.e. it can record stuff only from the moment it is installed).

On similar note, I rememember someone arguing that the baloo/nepomuk db was a security threat, I guess since it makes slightly easier to search among the files on the system for a string like "password".

Both claims are technically true, and in neither case I believe they are practically relevant, neither for security nor for privacy. I was nitpicking, I guess.

baghira··on Microsoft’s new small print – how your personal data is abused
A normal user application, i.e. firefox, should not have access /var/log/messages. The zeitgeist db can be queried by any application running with the users privilege. Although to be fair the fedora 22 installation I'm running allows me read the logs launching journalctl as a user, so there's that. I don't think zeitgeist has much to do with the Windows behaviour (or with the scopes behaviour). It's just a potential security risk, albeit a minor one.
baghira··on Sparc removal
Probably related to the "Simple editor for X".
baghira··on The R9 Fury is AMD’s best card in years, but just who is it for?
Someone at Nvidia realized they were doing something non-evil by working on nouveau for tegra, and felt the need to restore balance. I had completely missed this new form of insanity, which generation of cards did it start?
baghira··on Plasma Mobile
I would image it should be able to run on Ubuntu phones. Also, and I'm guessing here, Tizen devices, if we ever get them.
baghira··on Firefox nightlies for Linux are now using Gtk+3
Rekonq is dead (as a project I mean), and I've seen plenty of compatibility problems, with rekonq, qupzilla or even the test browser (i.e. the problem is with the engine). FWIW epiphany (or "web", as is it called now) is GTKwebkit based and crashes just as often.

Qupzilla-git i.e. the version based on Qtwebengine is getting there, so reasonably soon we may have a decent Qt-based browser (I don't doubt scrollaway knows that). Also the fiber browser looks promising. I do think we need a way to do CI between chromium and Qtwebengine, or else we'll end up shipping browsers lagging one or two versions behind chromium.

As far as gecko goes, I think it's over. The hope is servo, which being much more modular may be integrated without struggling with XUL.

baghira··on The Weakness of the .NET OSS Ecosystem
The OOXML "standardization" is more recent. So is Silverlight.

In the end I'm always puzzled when people talk about Microsoft or Apple as if it was one dude who ran over your cat in the early 2000s. It's a vast corporation, whose attitude towards opensource has improved, at least in the cloud and .NET environment (though I've read people comparing Microsoft to Red Hat and Joyent, which is clearly way off). For instance, the issue I find most egregious is selling Windows phones with a restricted bootloader, just like Apple does.

baghira··on Announcing coreboot 4.1
See http://mjg59.dreamwidth.org/33981.html.

It does increase security, since for instance in spite of its complexity Secure Boot has proven to be reasonably secure, and thus it is simpler to attack the firmware.

However I agree with Garrett and disagree with aaronem: just as shown by Secure Boot on x86, you can have a reasonable choice between security and user's choice i.e. you can give freedom and security. A similar mechanism, in which a user could enroll its keys and install its signed coreboot payload, is possible. The same applies to TPM. Given that Intel had 55 bilions in revenues last year, I see no reason to cut them any slack (same goes for Apple, Qualcomm, etc).

As far as the "new Microsoft" goes, the policy on Windows phone is the same on Windows 10 as it was on Windows RT and Windows 8: Secure Boot on ARM is locked down in such a way that the user cannot add its own keys, or send a binary to Microsoft to have its signed for 99$ (i.e. the result is functionally equivalent to Apple policy with ios). If you sell devices on which the users can't even decide which kernel to boot, you probably don't have a problem with devices in which the users can't decide which firmware to use.

baghira··on The Art of Command Line
I find it a bit irksome that when discussing command line editors, the dichotomy appears to be be "nano vs vim".

There are other CLI editors. I'm quite partial to ne (the Nice Editor), which has more manageable shortcuts than emacs, a command line (it's still a non-modal editor, to be clear), macros and syntax highlighting. Also jed is not bad. While vim (and nvim) have advantages, and certainly benefit from being ubiquitous and having ther shortcuts replicated in other programs, users should shop around, even on the command line.

baghira··on The Death of the Von Neumann Architecture
Not to complain about terminology, but appliances used to be precisely the sort of stuff you could repair. I've fixed my microwave, I did not carry it to a genius bar. This is the reason why I fear this pernicious business model will spread: it promises lock-in for everybody, from John Deere to coffee machines makers.

As far as the iwatch being just a watch, the same thing could have said of the iphone. It was a phone, only cooler. Almost a decade later, ios devices are the platforms where many users do a significant fraction of their computing. And while ios devices may not require on bitcode submission, they limit the users freedom in a way that is fundamental. Image a world were every x86 computer sold post 1995 (outside of the server space) could only run Windows.

Besides, even if you own a "creation machine", you'll often be catering to the market of restricted devices (case and point: gecko on ios).

EDIT: I'll grant you may be right in the specific sector of non-computing electronics (watches, calculators, etc).

baghira··on Mr. Robot
FWIW I've basically had the conversation seen in the show, albeit with a friend, not a stranger. He was running XFCE because it was the default in Debian, and I was running KDE (have been for twelve years). So I found the exchange at least plausible. I think it boils down to the fact that, some people find DE quite uninteresting (unlike editors), while others have strong feelings about them.
baghira··on Microsoft’s Cortana Headed to iPhone and Android Phones
IE was available for OSX all the way through 10.6 IIRC.
baghira··on Fedora 22 released
There is no need to create mount units, all those thing will work from /etc/fstab, which overrides the generator. And I don't think the intent is to deprecated /etc/fstab. The list of possible automounts is limited: http://www.freedesktop.org/software/systemd/man/systemd-gpt-... the point really being that of having a system that can boot without /etc.

I've read quite a few complaints about Ubuntu 15.04+btrfs problems, for what is worth I had no problems with Fedora22 and Opensuse Tumbleweed.

baghira··on Mozilla overhauls Firefox smartphone plan to focus on quality, not cost
On the first point I was specifically arguing on window management, e.g. the fact that FirefoxOS does not use surfacefinger is, as far as I can tell, minor, compared to the applications wonderful capacity to lock everything on just about every OS. FirefoxOS can indeed boot on 128MB (so the problem with Android is not really the kernel nor bionic), but if the applications do run poorly, what good does that make (yes, it does make some good, my previous post was overly cynical). My (admittely brief) experience with a FirefoxOS device with 256MB was precisely that surfing the web was quite frustrating.

On the second and the third point I'll both agree with you and continue disagreeing. Yes, in some places a FirefoxOS is the only option. And yes, negligible is was a dickish term. But I was specifically talking about points on a graph. This doesn't make the project worthless (as I guess my post made it sound), but, IMHO, also means that the result will not fundamentally change the trajectory of the web and of the mobile market. One can obviously reply that giving someone their first smartphone should be enough, and that is a perfectly tenable position.

On the specific example of those two countries, I'll happily take back my complaint.

baghira··on Mozilla overhauls Firefox smartphone plan to focus on quality, not cost
This may very well be true, but completely ignores the context:

1. As far as the effect of the window manager: this isn't emacs+X11 in 1995: the drag on CPU/ram/battery of gecko/blink will dwarf the "weight" of the windowing system.

2. FirefoxOS maybe be leaner in principle, but the competition has vastly better hardware, both in the Windows Phone field and in the Android one, via what I can guess is a combination of subsidies (is mobile MS still burning piles of cash or has the division posted some profits?) and sheer mass scale production. So, for little more money you get a get a better device that actually runs all the apps that your friends have, and a web browser.

3. The appeal of FirefoxOS even in those low end markets was negligible (this has been discussed to death). Besides they released phones in places such as Italy and Spain, two markets were people will en masse shell out the cash for an Iphone. I found that simply baffling.

baghira··on Relicensing Dolphin: The long road to GPLv2+
To be fair, most FLOSS license, including GPLv2 and BSD 2-clause and 3-clause, are (were?) usually considered to have an implicit patent grant, similar in spirit to the one in MPLv2 or GPLv3. I don't think that argument that one could use GPLv2 while thinking that software patent are good has that much ground.
baghira··on Convert Servers to Docker Containers
Granted, I was not arguing for LXD as a ready for mass deployment tool. And certainy docker at the moment is more popular. However I don't think LXD is ubuntu specific, see

https://github.com/lxc/lxd https://insights.ubuntu.com/2015/03/20/installing-lxd-and-th...

I've just compiled it on Fedora 22 and both the daemon lxd and the cli tool lxc seem to work, haven't tested any container however.

baghira··on Convert Servers to Docker Containers
I think he meant LXD, the daemon for managing LXC containers written by Canonical. See https://www.stgraber.org/2015/04/21/lxd-getting-started/. I guess that the point is that, compared to other solutions, Docker was specifically meant to run with only one service per container instance.
baghira··on Firefox tracking protection decreases page load time by 44%
Relevant: https://news.ycombinator.com/item?id=9509930
baghira··on Fish shell
/bin/sh on debian is dash, but the default interactive shell is still bash (sorry for nitpicking).
baghira··on Yum is dead, long live DNF
We are basically agreeing. The point is not that you cannot automate pacman, but rather that other package managers automate for you, which is bound to be a virtue for some people. I personally never found the "integrated" rollback in dnf/yum particulary useful, but I've heard of enough people who used it to accept that it is a desired feature. Same goes for "dnf config-manager" for managing repositories with one command.

As far as pinning goes, however, I disagree: if you mark a package as IgnorePkg it does not get updated. You could use either naming conventions or splitting the repos up to track different repos for different packages, but it starts looking like an antipattern to me (i.e. the way you would have firefox track jessie while you are on wheezy would be by setting up your own repo only for firefox, a bit of an hassle). It's fine if you are the packager, it's a bit cumbersome if you want a stable debian box with a fresher version of django and nginx.

After all the road map for pacman 5.0 proposes hooks and a better handling of optdepends. Both can be already automated via scripts, but both would be nice to have out of the box.

baghira··on Yum is dead, long live DNF
I thought apt-rpm was basically dead, happy to read that it is still around. And yes, I reckon the second part of my comment was wrong, you can have apt on top of .deb .
baghira··on Yum is dead, long live DNF
To be clear: I also am an Arch user (albeit not exclusively). I'm not complaining about the bleeding edge part (from your answer I get the feeling you already had similar discussions, with people complaining "upgrade X broke my system"). What i was driving at is the fact that pacman, as it is, does not cover the whole use case of other distros.

Would you take debian, with its three branches, and move it to pacman? No, because the lack of pinning and differentiation between security upgrates and normal upgrades would wreak havoc ("get a better upstream" is a nice suggestion, but an unpractical one). The same could be said for Fedora (actually, for Red Hat, but Fedora is Red Hat testbed after all).

I could set up my own repository, clearly, it may very well be a good solution, but to me that is not automation anymore. Similarly, there is nothing preventing one from setting up one's own repo of old packages, and reinstalling those. Still, I see the value in having the rollback features inside DNF (call it laziness, if you wish). I guess my comment came out as random pissing on Arch, when what I wanted to point out was that other distros simply have different needs.

baghira··on Yum is dead, long live DNF
Syntax isn't really the problem, given that one could easily write a wrapper around pacman, or apt-get, or dnf/zypper (at least for the subset of common operations supported by all). The problem with pacman as a package manager is that it simply does not have the features needed by fedora or debian. With the infrastructure given by Arch there is basically no way to have automated upgrades without potentially breaking the system. The same goes for the AUR: it's great when you know that the user is reading the script and making sure it's not malicious: it's not a model that scales for server (just like FreeBSD ports do not cut it if you have lots of machines), or if you imagine 10% of the computer running Arch (malware bonanza). Still, automating apt-get is messy (and here dnf/zypper do a better job) and building .deb packages and setting up your own repo is too complicated.
baghira··on Yum is dead, long live DNF
As far as I can tell the fedora guys wrote libhawkey and dnf to reach some sort of middle ground, as switching to zypper would have implied breaking everything (i.e. all the scripts admins use, rewriting parts of anaconda, etc). The compatibility is not perfect, and in fact a fair amount of people complained (see some discussion on phoronix). As far as the parent post is concerned, to switch to apt would imply switching to deb, which would be a massive change. RPM is simply too different, both in positive (the possibility of changing target directory and of rolling back) and in negative (dependency specification is still rudimental compared to .deb, see https://www.youtube.com/watch?v=FNwNF19oFqM). And as rwmj14 said, libsolv is better.
← PreviousPage 3 of 4Next →