csolisr

What are the chances, a CVE due to KDE Connect authenticating pairs of nodes it shouldn’t, while I at home can’t get to keep the authentication between nodes that should (they automatically disconnect after a while, for some reason)

It’s to know whether it’s still ethically safe to keep using FWUpd or not.

Given the precedent with Framework: does somebody know if the maintainer of FWUpd is right-wing?

Fair reason to rename the project, but isn’t it reasonable to consider it already too tainted by historic association and requiring a delisting instead?

Nearly everyone else in a team I work on decided to leave along with their boss, so guess who’s left with the knowledge

Corporate needs to have somebody to sue in case of a policy violation. Very especially those debloated apps that float around the web - they need to ensure they have a physical person to pin the blame to in court.

Calling it already, one of the most popular apps around will be a wrapper around ADB in order to install new apps - maybe Shizuku or Sui?

I should probably go get a replacement screen for my old OnePlus 3T, while I still can…

Flatpak being securely sandboxed by default is both its biggest strength and its worst point of contention. The XDG is still scrambling to replicate the permission requests paradigm from Android on the Linux desktop.

That reminds me, is Flatpak packaging CLI tools already?

I’d settle for that solution anyways, but only as long as users can still mix and match kernels (one for secure boot and games that require anti-cheat, and another for custom hardware)

Which is why I prefer the MacOS approach better - instead of relying on the developer adding a hypervisor, Apple uses binary signatures for all the relevant system files which are attested via something similar to Secure Boot, plus an Apple-provided API for runtime attestation, to ensure that the system has not been touched since boot. I suspect that Valve’s assistance in making Arch Linux builds reproducible is pointing towards that goal.

Single-player? Absolutely. Multiplayer though? Outside of fighting games, indie games, and anything made by Valve, it’s increasingly difficult to find any multiplayer game that works on Linux, and even those that still work can have the multiplayer yanked off down the line like what happened with Apex Legends.

Considering that Vanguard has already been bypassed at least once (see dailydarkweb.net/vanguard-bypa… ), I think somebody must already know if the tool is ultimately malicious or not. Problem is, the somebody that knows has a vested interest in not disclosing any details, being a cheat bypasser and all.

That’s precisely why I haven’t so much as touched any games if they don’t support Linux with their anti-cheat solution. The developers of Apex Legends proudly announcing that dropping support for Linux made cheaters drop “significantly” doesn’t sit well with me, and in fact I suspect EA is doing something malicious that can’t be feasibly detected precisely because of their kernel-level access. And don’t even get me started with Tencent-funded Riot’s Vanguard, it’s practically guaranteed that China will eventually demand to use it as a backdoor someday.

A shame that many multiplayer game developers, like EA and Riot, still consider Linux to be too unsafe to trust with an anti-cheat. I wonder if Valve is working on a proper solution for that - signed kernels and packages a la MacOS, perhaps?

That must have taken some diplomacy, but it would have been even more impressive to have convinced Stallman to come too

We should be boycotting all art and entertainment from Big Media in its entirety, but nobody is willing to do so

Any plans to start saving up to move elsewhere, by the way?

It might be my inner prescriptivist at work, but while I understand the need for a singular they, I absolutely loathe it’s accompanied with a singular are. If the language is being reformed, why not take a page out of AAVE and start using “they’s” and “you’s”?