michel-slm

Stream gets faster fixes in general, but yeah for embargoed security fixes it goes the other way around

Even if you are Meta. The only trick we use is something anyone can do - hotfix it in Hyperscale, or download the Stream fix as soon as a signed build is available without waiting for it to be fully released

Right. But it does not matter in this case - Meta rolls out its own kernel (we employ a lot of kernel engineers, and PSA our Linux teams are hiring software engineers!) and we maintain our systemd backports and some other packages in the CentOS Hyperscale SIG

> That is: on 64-bit x86, you have with frame pointers twice as many available registers as 32-bit x86 has without frame pointers

Indeed.

> I don't think getting rid of frame pointer omission would be viable if Fedora still supported 32-bit x86

Fedora still supports it (e.g. packages are still built for i686, and you can install them on x86_64) though it has dropped 32-bit ARM. But the change to reenable frame pointers will not be applied to 32-bit x86 builds.

Big Tech firm - acknowledged it with a day of learning but no day off, which is not fun especially for parents whose kids' schools do close on Monday

yeah, I wonder when the Facebook container will make it to mobile - it's one of their own after all so there should be no safety issue.

Freenode's IRC servers were down which was unexpected for me. I was expecting old-school communication networks to not have a dependency on Cloudflare.

Ironically, the best phones to do that are Google's own Pixels - to give credit where it's due, at least the phones have unlockable bootloaders (unless you buy the Verizon variants).

eg GrapheneOS currently only supports Pixel 2, 3 and 3a:

https://grapheneos.org/releases

Roku and Amazon Fire TV works fine with captive portals though (Roku elegantly asks you to connect to a custom WiFi AP that just forwards the captive portal to your phone). So this is another case of Google making assumptions that limit their devices' usability.

It's been awesome. The one feature I'm still missing from LastPass is being able to mark some entries as more secure and reprompting auth on those.

Which desktop client did you try? The official Mac client, at least, has secret chat just like the mobile clients (I just used it yesterday)

Note that Telegram secret chats are end to end encrypted (default chats are not) but you're still dealing with the Telegram server (not peer to peer)

Ouch, which university is that? I've heard of universities negotiating deals to get student discounts with certain vendors, and others requiring students (normally in engineering programs) have laptops meeting certain requirements, but this is the first time I hear of students having to purchase underpowered laptops.

> Maybe you could make the argument that the really poor Facebook users are essentially drafting off of imperfectly targeted advertising?

Note that the really poor Facebook users can still be targeted for advertising by politicians to curry their votes.

Indonesian ISPs are required to filter certain domains, but go further than the Denmark case - they also block access to third-party DNS servers. Using DNScrypt or a VPN (or hosting your own DNS on a port they're not blocking like 80) is the only workaround.

Prior to third-party DNS servers being blocked a lot of tech-savvy people were using either Google's DNS or OpenDNS anyway since they tend to be more reliable than the local ISP's (even before they started filtering).

I'm no longer in Indonesia, but I could imagine the results people are posting here would be useful to folks back home so they can adjust their DNScrypt config.

The one recent kernel bug I remember is poll returning early:

https://daniel.haxx.se/blog/2016/10/11/poll-on-mac-10-12-is-...

From what I hear, at Apple you're not allowed to contribute to open source projects (unless it's part of your day job) even in your own time - in contrast to Google (from what I hear) and Facebook (personal experience) where you can but you must clear it with legal and it can't be related to your day job.

from a previous blog post:

"Our engineers were comfortable with Git and we preferred to stay with a familiar tool, so we took a long, hard look at improving it to work at scale. After much deliberation, we concluded that Git's internals would be difficult to work with for an ambitious scaling project."

https://code.facebook.com/posts/218678814984400/scaling-merc...

It's not as simple as choosing which service not to use - for example, people who have your details in their address book might inadvertently leak your data without your knowledge.

So while I agree that people should be free to trade privacy for other things like getting a free service, I do wish there are stronger regulations to protect people who choose to opt out. And better transparency on how your data is being used.

This is a refreshing move. Doing a traditional IPO is not a recipe for success anyway (hello, Snap).

I personally would be watching this and probably try and buy a couple of shares - Spotify is a streaming music pioneer and I shudder at the thought of yet another industry segment being dominated by the GAFA players (in this case, everyone but Facebook -- Google, Apple, Amazon).

I personally am fine with using Firefox (though after Looking Glass I've disabled the setting to allow experiments).

IIRC the person that advocated for Chromium (instead of a third-party Firefox rebuild) base it on performance (they were dubious Quantum is actually better, I personally find it fast enough except when loading Facebook), as well as the alternative versions of Firefox not keeping up with the official version. Also, supposedly Chromium (as opposed to Chrome) settings are reasonably privacy-friendly out of the box.

They did recommend installing uBO-Extra in addition to uBlock Origin on top of Chromium, which is revealing -- with Firefox, there is not even a need for uBO-Extra.

My original point (which I didn't elucidate clearly enough) is that this Looking Glass experiment is resulting in unwarranted backlash against Mozilla -- whereas from the standpoint of preserving an open web and protecting user privacy it's actually one of the better players.

Indeed. I'm seeing people recommending Chromium (not Chrome) instead of Firefox because of this.

That's similar to my experience when using HDMI cables. Switched to using USB C -> MiniDP cables and things are better now, except since I can't daisy-chain the two monitors with DisplayPort (the rMBP can't drive them both, a Thinkpad happily would) that means two out of the four USB C ports are used up.

Still getting random freezes sleeping and waking though. Especially if I don't open the internal panel before disconnecting the external monitors and USB hub before putting the laptop to sleep.

Anyone knows if Secure Boot on these laptops are locked down, or if they allow users to add additional keys?

i.e. can we run Linux on these?

As someone originally from Jakarta, thank you for sharing this! Some of it resonates with my experience (esp. the rejection of colonial buildings) and some of the observations never occurred to me before.

Tidbit: "Pancasila" actually means "Five principles" so "The Five Pancasilas" sounds to me like Hugh Grant pointing out "The La Trattoria" in Mickey Blue Eyes.

Minnesota always struck me as very... Scandinavian. Must try and visit in summer when it's not so cold.

I find it kind of cute myself (and went ahead and starred it) but I could see how others might find it distracting.

Also affecting those arriving on H-1B, I bet. If your previous job is in a non-Western, non-Middle-Eastern country (plus Japan, Singapore etc.) your previous salary is likely much lower.

I'm tempted by this (had the previous 2015 Chromebook Pixel, ran great except storage is limited, which this version fixed, and the battery is now dying).

I've just splurged on some hardware this year though, but keeping an eye for this and hope that with Google's Pixel strategy they're now serious about hardware (yearly refresh etc.).

better than the Facebook trick! Thanks

Google forked WebKit and called it Blink, which Chrome uses. It might be partly this but I guess also that Google prioritized implementing a multi-process architecture.

For something in-between the two the Xonsh shell might be nice. It's basically a Python-based shell with full access to Python for scripting purposes.

I like Bash but writing anything remotely complex in it is... not recommended