5,763 karma · joined October 27, 2011
Would require an architectural license and lots of talent and time.
Getting stock Neoverse cores is an incredible deal for them, this is probably a big part of the reason they can offer cheaper services from their chips.
Arm cores aren't really all that behind, there are just tendencies for wildly incorrect comparisons (past Arm cores vs upcoming competition cores, scale-targeted configurations vs workstation-targeted ones, etc.)
You cannot accomplish sudo without setuid. Note that sudo means gaining privilege in the current context, with all its environment (including inherited file descriptors, the process group, etc.), not doing a privileged action at a distance.
> also true for the /usr/libexec/polkit-agent-helper-1 helper it uses which is a setuid binary but doesn't really have to be
Try making it non-setuid and see what happens.
(It will fail to check your password because most mechanisms for doing so, like the usual pam_unix, are only accessible to root.)
In fact a duktape backend has just landed:
https://gitlab.freedesktop.org/polkit/polkit/-/merge_request...
Speaking of security though, I'd trust SpiderMonkey much more because it's battle-tested in the most hostile environment imaginable (millions of browser instances loading completely untrusted code 24/7). But in this context we don't execute untrusted code so whatever :)
> pkexec should not exist
Hmm. For things that do want "just a graphical sudo" for whatever reason, it is kinda the perfect answer. Reusing the per-desktop authorization UI that is used for more fine-grained actions for a sudo-like tool is the correct thing to do. No one wants to have more redundant authorization mechanisms and UIs…
> a scheme of having a privileged service that acts on the requests of unprivileged processes
That is precisely what polkit is!
Why would all the Android Java stuff actually require a newer chip?
e.g. OnePlus 3 started with 7.x, was officially updated only to 9.x, but with LineageOS it runs 11.x currently.
> Untrusted sources
As if the vendors are super trustworthy…
> you might be able to install Google Apps... after the 6th try
Google services are "just one more zip to flash" and I've never heard of having to retry multiple times.
> no Google Wallet
Not too hard to carry the actual physical cards, or use a separate device (smartwatch).
> or banking apps
Complain to your bank / switch to a better bank.
> no idea what is included
LineageOS shoves the commit log right in your face, you can have a pretty good idea when it's really important to update.
> Performance and stability of the device usually takes a big dive
Really? Performance and stability are typically the reasons to switch to custom.
CyanogenMod/LineageOS have been, in my experience, the most performant and stable Android experiences by far, since the 4.x days at least.
System76 have built a more serious setup UI: https://github.com/system76/firmware-setup
Microsoft’s https://github.com/microsoft/mu also probably contains UI from the Surface line or something??
Glade is very mature, people use it extensively for serious software:
https://blog.horizon-eda.org/misc/2021/01/29/glade.html
Cambalanche is a fresh start, with gtk4 in mind, of course it's not production ready yet. But I'm really excited about it, the architecture is cool (probably the best use of the broadway backend ever)
XML is a markup language. It's in the name even. Trying to use it for serialization is weird.
LET'S GOOOOO
The day web developers forget about stupid "csrf protection tokens" is coming \o/
> PEP (power management plug-in) in the OS […] ACPI spec allows a manufacturer to do this
Doing management in AML is almost the whole point of ACPI. Microsoft pushing this PEP thing into the ACPI spec is bad. This is the "letter" of ACPI now, unfortunately, but it's very much against the original "spirit" of ACPI :/
Apple silicon Macs have the main CPU cores fully in control, with zero external peripherals having full DMA access to system RAM (everything goes through IOMMU), and have an interesting secureboot architecture that allows different security levels on different OS installations (you can run unsecured Linux side-by-side with a fully Netflix-ready macOS).
I have much worse news about the typical Intel BootGuard'ed PC laptop.
How can ISPs do anything close to this when they're not even concerned with how many devices you have? ISPs just do not connect individual end user "devices", they connect subnets.
> content providers may refuse to serve you
Providers of Hollywood-copyright-mafia content like Netflix have already been demanding hardware DRM (at least for high resolutions) for years.
Providers of public ad-supported content like YouTube care about maximizing views above everything. They'll happily serve a 4K stream to a Windows 98 machine if it can connect with modern TLS somehow. YouTube isn't even trying to fight youtube-dl all that much, there was an attempt at throttling recently but it was very quickly defeated. Heck, YouTube Music on the web does not use DRM at all, and that's all music-copyright-mafia content there.
What? There is no fucking way mining is using anywhere near 50% clean energy.
And using any energy for proof-of-waste is awful. That clean energy could've been used for something productive rather than a hashing lottery.
> on this basis
That's far from the only problem. The bigger problem is that this "technology" only works for crime and does not work as an actual regular currency.