blackcatsec

to be fair, this isn’t a perfect solution but it does get us much closer to that solution each time. There are still plenty of democrats whom don’t support solving these problems (for any number of reasons, I’m not going to conjecture here why)

The best solution I’ve seen is to just keep pushing leftward—even if we only get a few increments here and there.

I always agree with a good-faith, well-reasoned political argument. And HN generally seems to have a much more educated base than most of the other stuff out there--but agreed with the other person that I think it's probably best to keep that content off of HN, unfortunately.

The Intel thing is extremely true, but also equally true is the god awful Nvidia drivers that existed in the early days of Windows Vista. I don't even think Nvidia had a non-beta driver until 6 months after Windows Vista went gold. I think I recall seeing that Nvidia was responsible for something like 30% of crashes on Windows Vista.

Now, we could split hairs over where the failure was with that one--whether Microsoft not working enough with Nvidia, or whichever; but the point still stands.

Windows Vista walked so Windows 7 could run, essentially.

This is a thread that's certainly going to go over well.

There are some valid criticisms of Microsoft, and a great many criticisms that are unfounded or are often misdirected. Or in some cases, the vast majority of folks don't use enough of their operating environments to encounter the same types of problems. After all, it's not like Linux operating systems are "perfect". Especially when you begin to push the platforms beyond the most basic functions, problems quickly become apparent.

Microsoft's largest challenge in the Wintel environment is the diversity of hardware, software, and skill levels involved in making it all work together. And quite frankly, most often people trying to cut corners in places they shouldn't or don't know they shouldn't.

On the hardware front, there's a lot of cheap nonsense out there. And lots of folks clamor for cheaper hardware. For example, my $500 Asus motherboard has a checks Device Manager Mediatek Wifi 7 card in it. Now, the reality is that Intel, widely seen as an incredible network chip manufacturer (both ethernet and wlan), doesn't have a Wifi 7 chip available for 3rd parties (i.e. AMD boards). So in order for Asus to get Wifi 7, they have to look elsewhere.

Mediatek's website appears that they focus on supporting new standards first, often before they're stable or solidified, but simultaneously does not provide a robust driver environment that supports multiple platforms.

At any rate, this is just one example. There are many thousands more. Much of this is driven by consumers either wanting features faster, platform vendors aiming for differentiation, or both clamoring for some middle ground between cost and margin. And Microsoft is stuck in the middle.

Maybe the current driver that Mediatek has released through IHVs doesn't have fixes for certain bugs. Perhaps the IHV (motherboard makers, etc.) doesn't have a robust enough team to want to package and release regular driver updates released by the vendor.

As it stands, Mediatek doesn't offer a driver for this card for Linux, either: https://github.com/openwrt/mt76/issues/927

But again, Microsoft often gets the blame for problems with this type of hardware (vendors that barely support it, etc.) whereas on Linux it's totally acceptable to say "yeah just ditch that and go buy an Intel Wifi NIC" or something and people just accept that as being a totally okay answer. And then suddenly the hardware problem just 'disappears'.

As far as things that are a bit more in Microsoft's control, for example, requiring cloud accounts to log in and use the computer. I still stand by that this is far less important than the shriekers on the internet make it out to be. But it's most often one of the most primary arguments (because there are actually very few to really make).

Google and Apple require you to login with a cloud account on any of their devices and platforms. In fact, I'd wager that the vast majority of you reading this page right now have Google Chrome signed in with a Google Account that's syncing your history, favorites, passwords, autofill, and tabs right now. You effectively can't use an iPhone without signing in with an iCloud account, and Google is just about ready to force that direction as well by disabling the ability to sideload applications in Android. They already long effectively killed rooting devices (although it is possible in specific circumstances).

In fact, every time you visit a Google property using any other browser than Chrome, Google makes sure to tell you that you really should be using Chrome. And any time you visit a Google property using Chrome, they insist you sign in using Chrome (to your Google account, no less.)

So I really don't get the abject hatred for Microsoft on this front. After all, once you light up Windows Hello on a modern system with TPM2.0 and Windows 11 24H2 or newer, you effectively get free software passkey support (pending the web application properly supports it and isn't using an ancient FIDO2 library that insists on hardware tokens).

For the aforementioned Google account: I'm using a Microsoft Account sign-in to my desktop with Windows Hello, with a TPM-protected passkey to sign into the aforementioned Google account. I get SSO to all Microsoft properties, and "soft" passkey support for all of my Google accounts as-needed, with unlimited passkey storage. No USB dongles required (although I have those, too).

About the only other end user facing problem that is well within Microsoft's control is the amount of Copilot and AI nonsense. I contend that Satya Nadella is well beyond what his tenure should be at Microsoft, but can you blame them for having FOMO? I mean after all, the mobile phone and tablet markets were hundreds of billions of dollars that they missed out on. They also missed the mark on cloud platforms where Amazon raked in hundreds of billions. If they flood the zone with their AI products, and AI happens to catch on somewhere eventually, they're well-positioned to take advantage of it.

Microsoft also lost out on being the primary development environment, when they stopped innovating in the computer browser and software development space, effectively handing the keys to the kingdom over to Google. They only partially regained that with VSCode (which was the perfect blend between their full-fledged commercial IDE and the text-driven IDEs used prior to VSCode's dominance such as Textmate).

As far as "ads" on the platform, I don't really have any. But I turn a lot of stuff like the widgets off. At least the widget bar is isolated and isn't annoyingly embedded into the software like you'll find the ample ad-based notifications being spammed at you via mobile phone notifications. And unable to disable them because you also need those same notifications to actually get time critical information (here's looking at you, Doordash).

This is ultimately a long conversation and has many layers to it. But what I've found in reality is that software of all sorts and all platforms isn't as rosy as the people pitching them as solutions tend to tell you. I think it's silly, for example, on Linux that you have to split your engineering between multiple software development stacks to accomplish typical systems administrator goals (Ansible/Python, Bash, perhaps some Go thrown in there if someone on your team wants to mess around, tons of YAML and JSON). Whereas on Windows it's pretty well unified behind PowerShell and .NET.

To be fair, I often encounter situations where available Powershell tooling doesn't exist and I need to call .NET APIs anyway, or if I really want to secure the environment I need to drop the ability to use Add-Type and end up having to create proper powershell modules anyway. But at least the paradigm and language used is mostly the same.

The reason people use Chromebooks is because they want to minimally manage the devices. The Chromebooks being locked down is ENTIRELY the point of using them in the first place...That and because Google.

Perhaps not, but in the USA you don't have a sudden fight with windows and gravity if you do something against the regime, either.

I'm not reading this whole thread, but based on the title I figured it kind of boiled down to name calling bullshit by more open source maintainers.

Folks, we have to stop this bullshit. NOBODY is perfect. Not you. Not me. Not anyone. It IS entirely possible that some script thing was written by an intern and it doesn't quite work right. That's possible. Does that make them a shitty intern?

As I've told others, and try to tell others, empathy is super important in the tech field. As a fellow autistic person who used to be this way towards other people, I find it equally as jarring now and completely turns me off to listening to whatever that person has to say when they make posts like this.

Give people some grace, make fixes, move on with your life. That's the beauty of OSS development. Submit some patches, reach out to maintainers, open a dialog, have good conversation. Don't just shit all over someone for the sake of doing so even if they are doing something "stupid".

I promise you we will ALL be better for it.

I mean, internet standards kept up. IPv6 is a thing, and some form of dynamic IPv6 stateful firewall hole punching a la UPnP would be useful here. Particularly if the application used the temporary address for the hole punch--because once the address lifetime ends, it's basically not going to get used again (64-bit address space). So that effectively nullifies any longer term concerns about security vulnerabilities.

Hamachi does not require you to open any ports on your firewall by nature. Except maybe the local firewall (Windows firewall, likely) which apps should automatically get asked for when they try to use a port.

Yeah. This is generally the type of thing that turns me off to working in the Linux/MacOS world. It's just a near constant "We're living in the 90s" attitude towards everything Microsoft does or has done. It's just absolutely insufferable.

I know more about both Windows AND Linux than most Linux Systems Administrators that I encounter. I know more about how making them work together in an enterprise than any Linux Administrator. I understand more about literally every underlying protocol AND how to manage those items on Linux and Windows, from DHCP, DNS, Networking, etc.

For all intents, I could be a pretty bad ass "Linux guru"--and for the most part, I hold my own quite well. I know how to manage SSSD, understand integrating Linux and Windows environments into harmony with each other. But my peers often see something in Windows they dislike, or a single thing that Microsoft hasn't really bothered to improve, and holy fuck in their minds the sky is falling and it's the absolutely worse thing they've ever had to do with a computer.

So I keep one foot outside of that world because these people are just fucking insufferable to work with and around.

Quite literally folks have done this for decades using Hamachi.

especially now that the example is gonna end up in some LLM somewhere and folks will just copy pasta.

To build on this: One might ask, why don't countries with larger populations directly derive more wealth (particular by measurement of GDP) than smaller populations naturally?

There are a lot of reasons for this, but the short answer is that health, education, and enough individual wealth to explore figuring out ways to generate new revenue streams is important. Authoritarian countries are by nature not able to do this due to limits of their authoritarian nature, not necessarily limits of their population numbers.

It's all intertwined :)

The comments rebuking you appear to forget that by definition GDP and wealth are derived from the population. Wealth for social programs is not a finite resource as the general consensus is that over one's lifetime more wealth is created by one's work effort than is needed to sustain the individual. Capitalism by definition extracts this extra wealth for the private interests of a few. But there's no particular reason that this extra wealth can't be used to assist those that may not even meet the necessity of output of sustaining themselves.

This is a difficult concept for people to understand because they look at their paychecks and go "I'm not deriving so much wealth!" well yeah. A huge, large chunk of your wealth is being extracted for capitalism. And in manners that will be very difficult for you to understand.

I'll try to explain it, though, for the audience that peruses these forums. You're a software developer.

You work for a public B2B software company. Your wealth is being extracted to: Pay for those company pizza parties, pay for the office you work in, pay in to the healthcare system that "your company is paying for" that isn't directly part of the premium you see on open enrollment, paying for the company holiday parties, paying into everyone's various insurance plans to reduce the out-of-pocket costs for everyone in those insurance plans (outside of your company, of course), paying for the CEO's multi-million dollar paycheck, paying for the bonuses of all of the management, paying for shareholder value and dividends, paying for the taxes your company pays, paying for the taxes you pay.

If your existence at your job didn't pay for those things, most companies will tend to lay you off.

And this goes for pretty much the vast majority of workers in the vast majority of jobs.

So saying that more immigrants somehow puts a strain on the system is just by definition incorrect, even if a percentage of those immigrants don't generate the same level of value you do as an individual. Do you think every person in your organization generates the same relative value? Of course not. In most businesses in America, does the janitor generate the same wealth as the CEO?

To be fair, there is a snarky comment to be made there about CEOs--but the objective reality is probably not. But the janitor is still generating some wealth by ensuring a safe, healthy, and comfortable workplace for the employees. Does that mean the janitor is not entitled to income? to healthcare? to benefits? to company holiday parties? to company pizza parties?

Just convert this into a much larger scale of the entirety of a country's population--and well, the answer is that most populations have enough free money floating around somewhere to provide essential services to everyone: education, food, safety and security, health, and likely even housing, electricity, and pretty much any other public service we could provide.

And this scales as a population grows.

As with any protocol and application, there's a big, massive, "it depends" on pretty much everything. There are pros, cons, tradeoffs to make that sometimes it's easier to just have the underlying platform make those trade-offs, or to surface those problems to the application layer for developers to decide how they want to handle those problems.

Folks shouldn't necessarily argue "one is better" more so than they should consider all engineering aspects of why you should use one technology over another.

Thanks! Happy to oblige! lol

Sure, but that isn't the prevailing norm anymore? What hardware doesn't effectively make you sign up for an account? Even Google does this under the hood with devices managed via Android Enterprise. Managed Google Play devices just create a device-specific account under the hood that isn't visible to the user. But it's still there. The requirement for this and the software infrastructure is still there.

Hell, even internet-of-shit devices make you sign up for an account to manage the hardware you buy (Ring, Nest, smart LEDs, etc.)

I'd give that on pure number of raw technical devices deployed to the internet today, some form of account and/or internet connectivity is a requirement moreso than not.

Nah screw it, it's late and I'm unable to sleep and gonna rant a little more.

Microsoft made changes to force consumer users to create Microsoft accounts to login to their PCs and you can go on Youtube and see 500 videos on how to use some bespoke tool to bypass this that has racked up thousands of views because some 'nerd' who literally walks around with a Macbook and an iPhone told them that it's the most evil thing Microsoft could make you do.

Meanwhile, once Google completes this transition on Android, you'll basically be forced to have a Google or Apple account to install any software on your devices, backup and restore the device, etc. And yet folks that dominate these boards are just like "yah that kinda sucks but like, ya know, ya know? ya know!?"

I agree that open software and even open hardware is a good thing. But both Apple and Google have done an incredible amount of damage to the open ecosystem of the web over the last 20 years in so many more ways than Microsoft could have ever dreamed of doing back in the 1990s.

And nerds not only let it happen, but embraced it, camped out in days-long lines wearing diapers to buy the latest shiny overpriced brick they could put in their pocket so they could look cool to all of their friends for a whole 12 months before the next one came out and made them look like a povo. And now walking around with a Macbook at college is like wearing the latest fashion trend because everyone has to show off that they're completely irresponsible with money and spend $2000 for something they could realistically get for under $1000 just so they can show off that they're in the same social class as everyone else.

It's the most infuriating thing to happen to the internet and technology.

Oh, and then to add on, they all get jobs in the tech industry and throw a fucking entitled childish hissy fit when their company hands them a $1000 Windows PC that's got monitoring and security software with no Admin rights on it instead of the $2500 Macbook Pro that they get root access to because mommy and daddy never told them no.

I think one thing the internet community, particularly the likes of folks here who dominate the HN readership, is to stop listening to Google or using Google-derived services. The problem is everyone goggles Google's googleys every time they put something out: Chrome, Android, Kubernetes, QUIC, BBR, Analytics, Gmail, GCP, Go. And y'all continue to fucking do it.

I can't even go into my workplace and get the company to not install Google Chrome and use Microsoft Edge on Windows (mind you, Edge is now based on Chromium) because everyone is so far up Google's ass that they must run CHROME and not another CHROMIUM browser because MICROSOFT. It's fucking insanity. It's taken as a default.

Stop using their products. Stop giving Google so much power over the fucking internet. Meanwhile I go on internet forums, IRC, and places like HN and people still fucking cry about Microsoft as if somehow we're in the 1990s. Like literally Gen Z wasn't even born in the 1990s and they decry Microsoft because us Millennials and Gen X continue to think Microsoft is the absolutely worst evil ever and Google is like the patron saint of the internet.

Apologies for the little bit of pro Microsoft rant here, but the point I'm trying to make is we should evaluate both Google and Apple through the same lens that we all give Microsoft shit for.

DeGooglify your brain, and then the rest of the world will begin to follow. Stop changing everything in your fucking services to kubernetes and istio. Don't switch your projects over to Go. Stop letting them run everything.

Like every time Google releases a new piece of technology the entire industry jumps on their tallywhacker. And that just continues to cement their legacy in all of these stacks.

I mean, it also makes sense considering space debris would have hit that plane with significantly more force than a busted window.

A reminder for those in the back, government regulation made this safe (FAA limits).

And yes, this is good engineering, but through decades of learning crowdfunded with tax dollars.

I guess it depends on the objective of the relative programs. SpaceX made for an ambitious project, that to date, appears to have bitten off more than it can chew:

A full-flow staged combustion engine, which proven works (yay) most of the time (not yay). If you follow the Starship launches, look at the random engines that go out on the Super Heavy every time it launches. The engines going out during ascent aren't planned outages.

A rapidly re-usable second stage. This is by far the most challenging part of the program. It turns out, returning things from space is mad difficult. And while I think it's great that we are investigating ways to make this happen, I'm a bit bearish on whether Starship itself will be the vehicle and team that ultimately figures this out. However, at the very least, there's a ton of science being done here that will ultimately help making this a reality.

Starship isn't returning in any meaningfully reusable form just yet. And while they've figured out how to get the thing up suborbital, there's yet no guarantee on the survivability of the vehicle itself. I am for sure certain that Elon is very likely unhappy with having to use heat shield tiles because they are not reusable. We don't yet know the stresses on the vehicle itself when returning from space and just how reusable the second stage actually is. Nor, for that matter, just how usable the second stage is.

Do I think they'll figure out how to get it to orbit? Of course. Do I think they'll figure out how to make it rapidly reusable? I'm not sure. And we won't yet know for a couple of years.

Getting a payload to LEO as far as rocket launches are concerned is "easy" relative to the loftier goals of the Moon, and by much further extension, Mars. The Moon is significantly harder to pull off and that's why the Saturn V was a 3-stage rocket.

In order to make all of this worth it, Starship and Super Heavy must be rapidly reusable--with a turnaround measured in hours/days, not weeks and months. And I'm just not sure it's there yet. Which really sucks, because getting mass to orbit is critically important for us to dominate our solar system.

I think the research is important, personally. And I'm glad we're investing at least some money into these projects. But there's no way Starship and Super Heavy meet the timelines allocated. But I'm wishing the best for the team to figure out something. And if not them, then some future generation that piggybacks off of the work they did to do it better.

Sounds like something DANE could be used for.