lfam

Tarsnap's client is not free software:

"2. You may use the Tarsnap client code for the sole purpose of accessing the service."

http://www.tarsnap.com/legal.html

You end up with a new, grafted dependency graph, which can be reproduced just like the un-grafted graph. Is there some other reproducibility issue you see?

In Guix, we address this problem with grafting.

Rather than rebuild everything that depends on the fixed glibc, we build the fixed glibc, then rewrite all references to the old glibc to refer to the new one. That rewriting happens in new copies of the referring packages, of course, since the "store" is immutable.

https://www.gnu.org/software/guix/manual/html_node/Security-... https://savannah.gnu.org/forum/forum.php?forum_id=8470

Indeed. I recommend you look into one of the projects that is trying to mitigate this problem by allowing you to precisely specify, inspect, and change the dependency graph of software on your computer. That is, Guix or Nix.

Guix (and I presume Nix) can then take advantage of that transparency and control to build containers, virtual machines, and bare-metal systems to your specifications.

It's fixed in 2.5.1.1: http://git.qemu.org/?p=qemu.git;a=log;h=refs/tags/v2.5.1.1

> I'm not sure Uber fits the profile for NSLs. Primarily given the fact that Uber likely doesn't have social network data on their riders so a simple court order for a single users rides and GPS locations is probably all that's available for an NSA/FBI investigations. Unlike an email provider like Yahoo/Lavabit, or an ISP for example, which could provide multi-hop data.

Well, the Uber app on Android requires access to the user's address book, call log, and location, so I'd say Uber does have valuable social network information. This is not a unique capability for an Android app, however.

I think a lot of Mutt users do what you are describing.

I use mbsync to synchronize my mail over IMAP with my remote mailserver. I use mu to index it for search. I use msmtp to send mail. And I use mutt to read and write mail.

Are you referring to a Neti pot?

https://en.wikipedia.org/wiki/Nasal_irrigation

That is a "dummy" key created for demonstration purposes, right?

People are carrying heavy things around the city. They don't even have carts or wagons with wheels.

You can do it on the same server without downtime by using the "webroot" method of the LE client.

Yes, use the "webroot" method of the official Let's Encrypt client.

> while it's a matter of public record, it's also secret.

Is that a typo, or is it "doublethink"?!

Windows really doesn't have a firewall with features comparable to other operating systems?

I suppose Microsoft's point of view could be that they don't want users to accidentally screw themselves while trying to open a port for BitTorrent, for example. I wonder what percentage of Windows users end up installing 3rd party spyware garbage to get a "real" firewall?

Why not just use your operating system's firewall? Why install some 3rd party firewall?

How does systemd violate your freedom? It's LGPL 2.1 and, as far as I know, respects the four freedoms: https://en.wikipedia.org/wiki/The_Free_Software_Definition

> On a network engineering level, something is deeply wrong if you can't separate internet access from access to sensitive resources. Or if you are treating a subnet which includes tens of thousands of students as "trusted."

I don't disagree with you. And I hate that I only have one choice of ISP.

I'm sure they were able to separate internet access from sensitive resources. But without forcing their users to install some piece of shit tracking software, how would they know who to forward letters to from the MPAA? ;)

Looks like I misremembered and it wasn't a kernel extension. It was a product called SafeConnect by Impulse. Based on the instructions I can find, it doesn't seem to require root so it must not be a kernel extension. But on contemporary Unix-y systems like OS X and GNU / Linux, pretty much all your privacy is gone if there is a rogue process running as you. You don't need root.

In any case, my attitude was that it was their network and they could put any restrictions on it, although they may be in very bad taste.

My alma mater required OS X users to install a kernel extension on their personal machines. I assume it wanted to do something like this.

The wonderful movie For All Mankind [0], from 1989, features high quality footage of the Apollo moon landings and a beautiful score by Brian Eno.

[0] https://en.wikipedia.org/wiki/For_All_Mankind

I grew up in South Florida which is not a good growing climate for many "classic" North American fruits and vegetables.

I didn't understand the popularity of tomatoes, strawberries, blueberries, peaches, or pears until I moved north and tried them at farmer's markets or from wild growth. I didn't even understand the relationship between the actual foods and the artificial "candy flavor" versions until I tasted the real things. That's how far the commercial varieties have diverged.

On the other hand, I miss a lot of the tropical fruits and vegetables that I had growing in my neighborhood down there.

Related to this?

*) Bugfix: the "try_files" directive inside a nested location given by a regular expression worked incorrectly if the "alias" directive was used in the outer location. from: http://nginx.org/en/CHANGES-1.8

You should check out Genode on i.MX53: http://genode.org/documentation/articles/trustzone

Care to elaborate on what happened when you poured water onto your laptop? Which model was it? Do you know why it failed?

> using a primitive console based browser

Be careful which you choose. Some of them are extremely primitive compared to the major GUI browsers. For example, I was shocked to learn recently that there is no upstream for w3m, and that w3m doesn't do SSL out-of-the-box. And yet, w3m is used to render HTML by all sorts of other console-based applications.

> I got a lawyer still runs XP and Vista and uses ClamAV because it is free. I worry that her systems might be infected, but her husband runs the tech support for their firm.

Scary. Small law firms are a prime target for cryptolocker-type attacks. In that case you need a solid backup / restore system.

Anyone can contribute to OpenStreetMap.

So if you find something missing, you may consider spending the time to add the missing information so that we can have maps that are owned in common: https://en.wikipedia.org/wiki/Open_Database_License

My friends called it "pretirement".

I don't mean free as in price. I mean free as in freedom, and I mean proprietary as in non-free: https://en.wikipedia.org/wiki/Proprietary_software

Careful with the headphones. If they are loud enough to obscure the noise of your coworkers, they are probably loud enough to damage your hearing if used every day.