• 0 Posts
  • 96 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle
  • There’s a few programming languages that aren’t based around English, but they’re pretty rare and I’m not sure many people use them. It’s kind of sad because it makes programming much less accessible if you’re not an English speaker… But it’s also sort of a blessing because it’s easier to understand code you might have to interact with because it’s probably written in an English-ish language with the Roman alphabet, and you’re not stuck trying to read Japanese or Arabic or something to understand a library. I have mixed feelings on it. It’s convenient for me as an English speaker, but it also seems kind of unfortunate. I’ve heard that computer science is a field which is having a pretty big impact on the spread of English in the world, but I haven’t found a citation for that and I’m not sure I believe it.


  • The abysmal adoption of DNSSEC is just embarrassing, and I haven’t heard any good arguments for why we shouldn’t do it. There’s one blog post that gets passed around as justification for not adopting DNSSEC, but it doesn’t really go into any technical detail and is mostly just the author saying “I’m scared of governments and TLDs”… which is maybe fair, but you still have to trust them for regular CA certs and everything, so why not make thr base secure?

    Honestly, I might care slightly more about DNSSEC than IPv6 adoption… IPv4 exhaustion and NATing everywhere sucks, but the fact that you can’t trust DNS is like… insane.


  • DNS setups can get fairly complicated with enterprise VPNs and stuff, but the main thing is probably just that DNS is built entirely around caching, so when something does go wrong or you’re trying to update something it’s easy for there to be a stale value somewhere. It’s also really fundamental, so when it breaks it can break anything.

    Overall, though, DNS isn’t terribly complex. It’s mostly just a key-value store with some caching. Running your own nameservers is pretty cool and will give you a much better understanding of how it all fits together and scales.






  • I really do recommend doing a Gentoo install at some point, because I think you would learn a lot from it. It’s a really nice experience and a well put together distro. The compiling is potentially not as bad as you think, but there are a couple of packages that are notoriously painful to compile (there are prebuilt binaries available for some of the painful ones if desired too). You’d probably get a decent amount out of an Arch install too. Arch isn’t my cup of tea, but lots of people like it and it’d be quicker to get started than Gentoo. I’m not sure I’d recommend it for you at this stage but eventually you should check out NixOS too! You can even try the package manager out on any distro you want. NixOS is really interesting, but it does things a bit different from other distros, and if you’ve done an Arch / Gentoo install it’ll be interesting to see what NixOS does in contrast.

    Other things to mess with… You mention partitioning, so make sure to check out LVM, and also consider reading a bit about filesystems. Maybe give btrfs a go :).

    I wouldn’t worry about daily driving either Gentoo or Arch. Once you have them set up you’ll probably be fine.






  • I think even if you’re tech-savvy you can have issues with Arch tbh. I don’t think the distro is without merit — a minimal rolling release binary distribution is clearly something people want… But I’m not sure Arch does a great job of being that (for me, at least), and I’ve personally found pacman and the official packages to be kind of lacking (keyring update issue that they’ve maybe finally fixed, installing specific versions of packages / pinning specific versions / downgrading packages are either not supported or not well supported, immediately removing kernel modules on upgrade, even if the currently running kernel may need them, etc…). It just doesn’t feel very polished in my experience and for my use cases (clearly it works for some people!), and that’s what has driven me away from Arch personally. I think a lot of this stems from Arch’s philosophy of being aggressively minimal, which is maybe fair enough… but I don’t think it’s for everybody.


  • Chobbes@lemmy.worldtoLinux@lemmy.mlJust install EndeavorOS lol
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    7 months ago

    Who says it hasn’t happened? :P

    If it hasn’t I would just assume that Slackware isn’t a big enough target and that anybody in the position to man-in-the-middle a large number of people would have better targets. I mean, to be clear TLS is not a silver bullet either, but it goes a long way for ensuring the integrity of the data you receive over the internet in addition to hiding the contents.

    Distros usually sign their ISOs with PGP as well (Slackware does this), so it’s a good idea to verify those signatures as it’s a second channel that you can use to double check the validity of the ISO (but I’m not sure many people actually do this). Of course, anybody can make PGP keys so you have to find out which key is actually supposed to be signing the iso, otherwise an attacker can just make a bogus key and tell you that that’s the Slackware signing key (on the official website too, because it doesn’t use tls!). The web of trust arguably helps some (though this can be faked as well unless you actually participate in key signing parties or something), and you can hope that the Slackware public key is mirrored in several places that you trust so you can compare them… but at the end of the day for most people all trust in the distribution comes from the domain name, and if you don’t have TLS certificates you’re kind of setting up a weak foundation of trust… Maybe it will be fine because you’re not a big enough target for somebody to bother, but in this day and age it’s pretty much trivial to set up TLS certificates and that gets you a far better foundation… why take the risk? Why is it smart to unnecessarily expose your users to more risk than necessary?


  • Chobbes@lemmy.worldtoLinux@lemmy.mlJust install EndeavorOS lol
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    7 months ago

    I mean… I would consider anywhere that you might download software from sensitive. This isn’t really a smart move. And sure, the mirror’s page they link to uses https, but if the regular site doesn’t a man-in-the-middle could change the url and serve an official looking malicious version… I wouldn’t consider putting your users at an elevated risk when it’s relatively easy to set up TLS “a smart move”.


  • Chobbes@lemmy.worldtoLinux@lemmy.mlJust install EndeavorOS lol
    link
    fedilink
    arrow-up
    8
    arrow-down
    2
    ·
    edit-2
    7 months ago

    This was still an issue maybe a year ago, but I think they fixed the keyring issue finally in the past few months. This is not my only complaint with arch, but it’s frustrating that something this simple went unresolved for so many years. I honestly don’t understand why people love pacman. Downgrading packages is a pain, and there’s no way to install and pin a specific version of a package. I guess they want to keep it really minimal, but I find that this really gets in the way. All in all it was a death by a thousand papercuts for me! I won’t be going back to it. If other people like it that’s fine by me, I can understand the appeal, but I just find it frustrating personally.

    Edit: https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/commit/ad8698e96c423dfc68405b547f310f2e1075a95d this fix is kind of disappointing too to be honest…


  • Chobbes@lemmy.worldtoLinux@lemmy.mlJust install EndeavorOS lol
    link
    fedilink
    arrow-up
    16
    arrow-down
    3
    ·
    edit-2
    7 months ago

    I think Arch kind of deserves the hate it gets. I love barebones distros and have been a gentoo user (now on NixOS), and I’ve used arch a fair bit too… I just don’t feel like Arch is a well maintained distribution. There’s all sorts of little things that they can’t seem to get right that other distros do, like that silly issue where they won’t update the arch keyring first, so if you haven’t updated in a while it breaks. In my experience there’s a million little paper cuts like this and I’ve just been kind of unimpressed. If it works for you that’s great! I’ve just been disappointed with it. I get the niche that it fills as the binary “from scratch” rolling release distro, but I think the experience with it is a little rough. I’ve found gentoo more user friendly, which probably sounds bizarre if you haven’t used gentoo, but ignoring compiling stuff, gentoo does an excellent job of not breaking things on updates, and it’s much easier to pin and install specific versions of packages and stuff.



  • This was the lesson I was hoping somebody would give. Green tea shouldn’t be “really strong” if it is you’re probably over-steeping it or using scalding water.

    I like tea, but I don’t really like caffeine. It’s a conundrum :(. I wish I could have my sencha every day without it making me feel like a stranger in my own mind.