Re: [DNG] printing in a D-Bus free system

2018-03-15 Thread Arnt Gulbrandsen
Florian Zieboll writes: I suggest you get some workout and then target the original source of your frustration, constructively - instead of (cowardly) dissing 40+yo script kiddies (yeah, that's me^^). This brings definitely more fun and satisfaction, while providing at least some slight potential

Re: [DNG] printing in a D-Bus free system

2018-03-15 Thread Arnt Gulbrandsen
Steve Litt writes: As one such back seat driver, allow me to explain. When you've been both programming and using for a long time, you get a feel for the many ways something can be done, ... I stopped here, because I remember what you wrote about Redis recently. Perhaps you don't have a feel f

Re: [DNG] printing in a D-Bus free system

2018-03-15 Thread Arnt Gulbrandsen
Dave Turner writes: which network printers should we buy? Look for something with wired ethernet, postscript and IPP, not under €300, not under 20kg for a BW laser. WLAN is okay but if the printer doesn't have wired ethernet, it's not targeted at the right market niche. HP, Lexmark, Brother

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
chill...@protonmail.com writes: lol @ about the browser taking longer to compile.. I have no doubt you didn't exaggerate this. That'll have been Chrome. A giant. It includes several compilers and lots of libraries. The only things I've seen that are comparable are gcc (over a gigabyte of sour

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
J. Fahrner writes: That's also what I do. I have a Brother DCP-7045N connected as network printer with lpd protocol. I can install it with a single ppd file, but then printing is VERY SLOW. Printing is fast with the Brother supplied "cupswrapper" driver, but this is only available as 32bit pac

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
Didier Kryn writes: Do you remember any of these comics where the driver of a car opens the motor to repair, throws away a bunch of parts, and then the engine starts again and the guy goes away with the car? Here we are with Linux. The BIG piece to remove was systemd, but there are quite a

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
Menelaos Maglis writes: Why should an application need a system bus to pass messages between its own components? CUPS is not using D-Bus and is able to print to other printers; only HPLIP uses D-bus, so far as I am aware. Why not keep using the same method/interfaces that are proven for decade

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: yeah, namely. Why on Earth do we need dbus to send a print job over the network via lpd or http? The real answer is "we don't". The effective one is "the developers of hplip don't give a toss". Yet another answer is: The developers don't see another way that's both

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
Didier Kryn writes: You're certainly right: it isn't simple. But it's essential, isn't it?. Graphics printing reached the personnal computer probably with the first McIntosh, in 1982. Not sure it's more feature-rich today than 10 years ago, when it wasn't depending on dbus. I wrote a pri

Re: [DNG] printing in a D-Bus free system

2018-03-14 Thread Arnt Gulbrandsen
Menelaos Maglis writes: I realize that unfortunately one cannot even print without hplip/dbus these days... "Cannot even print"? You make it sound as if printing were a simple task. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dy

Re: [DNG] The FSF seems to have finally sold out

2018-03-10 Thread Arnt Gulbrandsen
taii...@gmx.com writes: I still have not received an answer from the FSF about if purism will be allowed to fraudulently market their products at libreplanet, they avoid the question as if I never asked it whilst answering my other questions. I've answered enough support mail to be able to ex

Re: [DNG] The FSF seems to have finally sold out

2018-03-08 Thread Arnt Gulbrandsen
taii...@gmx.com writes: Purism is NOT free hardware and certainly not "grassroots" as their mysterious founder somehow has a bottomless pit of money to burn on hardware costs and propaganda campaigns. Bit of a dissappointment as mysteries go. Crunchbase and the team page suggest that Purism h

Re: [DNG] Request file system reviews and recomendations.

2017-12-28 Thread Arnt Gulbrandsen
> ext3/ext4 are solid fs, and have > always been. the lost+found folder is a remainder of the ext2 era, and > is not even mandatory any more, AFAIU. lost+found is required since ext3+ext4 permit mounting as ext2, which requires it. A poor reason, perhaps, but put differently getting rid of a sing

Re: [DNG] Debian Devs using OSx? was Devuan in the German Wikipedia

2017-12-21 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: So, if everybody switch to macbooks, we don't need to struggle any more to make things work on Linux, right? That's right. But irrelevant since not everyone will switch to macbooks. Personally I didn't see a problem with being in a tiny minority when I installed l

Re: [DNG] Debian Devs using OSx? was Devuan in the German Wikipedia

2017-12-21 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: Yes, I see. It's not that macbooks are preferred by developers. It's more like they are forced onto them by the marketing departments of their companies, who must ensure that their employees' laptops shine at least as much as their competitors'.and then we gasp at

Re: [DNG] Debian Devs using OSx? was Devuan in the German Wikipedia

2017-12-21 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: I don't see how macbooks could be the "standard" among developers (BTW, what kind of developers?). I cannot associate any feeling except *claustrophobia* to the very few times when I had to use a Mac. But perhaps I don't qualify as the kind of developer to whom Mac is

Re: [DNG] Debian Devs using OSx? was Devuan in the German Wikipedia

2017-12-20 Thread Arnt Gulbrandsen
Steve Litt writes: Is there evidence somewhere that Debian DDs use OS/x? It's so common among developers in general that it would be very surprising if zero debianites do it. Macbooks are almost a standard among developers, certainly a majority of the last hundred developers I've worked wit

Re: [DNG] NFS: was mounting /usr

2017-12-05 Thread Arnt Gulbrandsen
Yevgeny Kosarzhevsky writes: I don't see that it will give lower security than any other FS in this case. Rick is trying to say: NFS has a poor reputation for accidental security misconfigurations. Something about the way NFS is configured leads even careful, clueful people to make configurat

Re: [DNG] mounting /usr

2017-12-04 Thread Arnt Gulbrandsen
k...@aspodata.se writes: If you know any specific packages which breaks the "separate /usr" idea, please report. Libraries in these libdiscover2 libffi6 libgmp10 libgnutls-deb0-28 libgnutls-openssl27 libgssapi-krb5-2 libhogweed2 libk5crypto3 libkrb5-3 libkrb5support0 libnettle4 libp11-kit0 lib

Re: [DNG] NFS: was mounting /usr

2017-12-04 Thread Arnt Gulbrandsen
Steve Litt writes: It appears you're using NFS. Back in my youth, the wise men told me that NFS was a horrible security threat unless you also used YP, which was too sophisticated for me to ever figure out. That's a long time ago and the world has changed. Back then, the big problem was that

Re: [DNG] netiquette Was: Re: Installing & running eudev broke USB drives auto-listing in Thunar.

2017-12-02 Thread Arnt Gulbrandsen
Svante Signell writes: This is not the first posting from Eduardo to this list. He still has not learned netiquette, a very sad story. Sorry for raising this issue now, I just couldn't wait any longer. Regarding technicalities we are speaking about he is fully aware. Fix your own mail reader be

Re: [DNG] Countering trusting trust (Was: forensics on systemd or journald logs)

2017-11-25 Thread Arnt Gulbrandsen
Edward Bartolo writes: The parent compiler and the other compilers must produce identical code from the same source code. How is the control (parent source) compiler known to produce exactly the same executables as the other compilers? No. David Wheeler's dissertation goes into that in detail.

Re: [DNG] ..forensics on systemd or journald logs, was: rc.local removed from Debian 9, rly?

2017-11-22 Thread Arnt Gulbrandsen
Didier Kryn writes: Well, postgress is a database manager. You have a choice of several others; they must be able to deal with high fluxes of data. None of them is a critical system component. WTF? Postgres is a critical system component of every single server where I've ever installed th

Re: [DNG] ..forensics on systemd or journald logs, was: rc.local removed from Debian 9, rly?

2017-11-22 Thread Arnt Gulbrandsen
Aldemir Akpinar writes: No, I've actually asked an honest question. In that case you'll get my honest answer. I've implemented several file/network formats vaguely like that journal format, one of them has likely been used by millions of people. In each case, the team decided to use a heade

Re: [DNG] ..forensics on systemd or journald logs, was: rc.local removed from Debian 9, rly?

2017-11-22 Thread Arnt Gulbrandsen
Aldemir Akpinar writes: Could you elaborate why are you comparing a relational database system where its files must be binary with a logging system where its files doesn't need to binary? You make it sound is if binary files were some sort of horror that requires special justification. Please

Re: [DNG] ..forensics on systemd or journald logs, was: rc.local removed from Debian 9, rly?

2017-11-22 Thread Arnt Gulbrandsen
Arnt Karlsen writes: you appear to suggest that law enforcement wanting to read systemd journal logs, _should_ depend on the mercy of systemd developers not "filtering" away inconvenient evidence of e.g. systemd developer wrongdoing from said law enforcement. That's routine. Few readers read

Re: [DNG] rc.local removed from Debian 9, rly?

2017-11-20 Thread Arnt Gulbrandsen
Olaf Meeuwissen writes: Crying wolf like this time and again is not doing Devuan any good. Amen. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Please provide systemd-free libreswan package

2017-11-17 Thread Arnt Gulbrandsen
John Hughes writes: The lkml.org archive contains a broken link. How odd. There's another message from Linus with the same subject: https://lkml.org/lkml/2017/10/26/524 That one's to the point... Linus may/will not react to conspiracy theories about possible future commits, but it there's

Re: [DNG] Please provide systemd-free libreswan package

2017-11-17 Thread Arnt Gulbrandsen
Didier Kryn writes: That's why a bunch of people have endeavoured replacing systemd-udev by mdev or mdevd, something much simpler to configure and not locked-in. The only issue now is that sysfs is unstable on purpose to force libudev on people (sysfs is developped by the same persons whic

Re: [DNG] ID Quantique "Quantum" PCI-e RNG's - does anyone have more info?

2017-11-12 Thread Arnt Gulbrandsen
One more. When we say entropy and random numbers, we generally mean completely unpredictable. Intel's RDRAND, ekey, presumably ID-Quantique's solution and others rely for their entropy on quantum physics. If our understanding of quantum physics is correct, then by constructing such and such

Re: [DNG] ID Quantique "Quantum" PCI-e RNG's - does anyone have more info?

2017-11-12 Thread Arnt Gulbrandsen
If this is not your field of expertise the you should not call Intel's solution junk. It will not help with disks. What it helps with is applications that need properly independent random numbers often. A VPN server is such a case, it needs a few bits every time a client opens a connection an

Re: [DNG] Different philosophies

2017-11-10 Thread Arnt Gulbrandsen
Nate Bargmann writes: I've also used Procmail for an equal length of time and it is now claimed to be "unmaintained". Who claims that? Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] RMS: was Google abandons UEFI in Chromebooks

2017-11-03 Thread Arnt Gulbrandsen
If I am remember well, MS Windows (the operating system) does have a micro-kernel, but is it more efficient with an extra layer of intercommunication? Windows NT is based on DEC VMS, not a very modern OS ;-) https://en.wikipedia.org/wiki/Dave_Cutler Based on VMS, right, like Linux is based on

Re: [DNG] Google abandons UEFI in Chromebooks

2017-10-31 Thread Arnt Gulbrandsen
Didier Kryn writes: The distinction trust-zone vs normal doesn't look very different of kernel-mode vs user-mode, does it? Or, for that matter, like the privsep distinctions used in some programs. It's all the same kind of thing. Arnt ___ Dng m

Re: [DNG] Google abandons UEFI in Chromebooks

2017-10-31 Thread Arnt Gulbrandsen
Martin Steigerwald writes: I don´t know much about Trustzone. Do you have any links to a good explaination of it (preferable from a non-vendor source)? Not offhand, sorry. But let me summarise the one I read: You can put code and data in a part of RAM and then turn off regular access to those

Re: [DNG] Google abandons UEFI in Chromebooks

2017-10-30 Thread Arnt Gulbrandsen
Martin Steigerwald writes: I wonder about ARM64 as an alternative? But they have some Trustzone crap if I remember correctly. ARM64 is fine from a performance viewpoint. The mobile phone vendors have spent a decade optimising ARM SOCs for performance on small batteries. I haven't found laptop

Re: [DNG] Google abandons UEFI in Chromebooks

2017-10-30 Thread Arnt Gulbrandsen
Dr. Nikolaus Klepp writes: Nice. But it they suffer from the "not invented here"-syndrome: instead of using prooven good busysbox, they rewrite userspace in GO .. oops, who "invented" Go and wants to push it to the users? They use the linux kernel, but suffer from NIH syndrome? Has it crossed

Re: [DNG] ID Quantique "Quantum" PCI-e RNG's - does anyone have more info?

2017-10-28 Thread Arnt Gulbrandsen
taii...@gmx.com writes: I can't imagine it being equivalent to a (non-intel/amd) hardware source of entropy when it comes to quality of entropy - have there been any quality analysis performed? Yes. But it misses the point. http://www.irisa.fr/caps/projects/hipsor/publications/havege-tomacs.

Re: [DNG] ID Quantique "Quantum" PCI-e RNG's - does anyone have more info?

2017-10-27 Thread Arnt Gulbrandsen
Olaf Meeuwissen writes: I have used the `haveged` package to keep my /dev/urandom "topped up" when randomizing disks. Greatly shortened the time needed to fill my disks. No idea about the quality of randomness, though. I looked at it now. It seems to observe some real entropy, but I think the

Re: [DNG] systemd-udevd: renamed network interface eth0 to eth1

2017-10-23 Thread Arnt Gulbrandsen
(Sorry, forgot to send earlier) Steve Litt writes: Something that used to take no more than correctly configuring grub now requires execution of the volumes of information in these links, with much of that execution being trial and error because of different UEFI/secureboot implementations. Th

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
Didier Kryn writes: I've read previously on this list that secureboot doesn't prevent booting from a usb key... Or did I misunderstood? People spread too much FUD. Various people have asserted, without naming names, that some/most vendors do not allow you to delete keys from the list of a

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
taii...@gmx.com writes: No you aren't. Intel ME + "Secure" boot non-owner controlled firmware code signing enforcement (probably hardware enforced via boot guard, so one couldn't even spend the thousands to have it removed via a coreboot platform port) If you can't execute whatever you plea

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
Didier Kryn writes: For me the things which need to be protected are 1) the data 2) the OS, to avoid backdoors I can't see any need to protect a motherboard against booting from a "foreign" disk. To access the data: Boot from foreign media, modify or replace the usual boot p

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: Yes, but what about *adding* your own keys? This does not seem to be a popular option, AFAIK. Of course it isn't. Who has a reason to talk about it? Microsoft doesn't talk much about that, because Microsoft wants most users to use Windows Upgrade and get timely up

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: I don't know much about signed bootloaders, and i will try to re-read the thread to fully understand your statement. The short version: You can remove keys, so that only your own key is valid for booting. If you're then careful about that key, then later physical

Re: [DNG] UEFI and Secure Boot

2017-10-23 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: And what if you want to use your own unsigned bootloader? Why should you ask someone else the permission to boot your own machine? o_O Because I want deny people with physical access the ability to boot unsigned bootloaders. I am both the owner of my hardware and

Re: [DNG] systemd-udevd: renamed network interface eth0 to eth1

2017-10-21 Thread Arnt Gulbrandsen
Dr. Nikolaus Klepp writes: Sorry to say, it's not. These keys don't allow booting your retail windows. Uh-huh. Are we talking about black helicopter keys? Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/list

Re: [DNG] systemd-udevd: renamed network interface eth0 to eth1

2017-10-21 Thread Arnt Gulbrandsen
Dr. Nikolaus Klepp writes: Well, that's not true: If you are lucky, your vendor installed a bios that allows you seamingly do so. But most likely he didn't. Most likely his implementation has a backdoor for windows. You're saying most vendors do this? Not just some but MOST? Name one or two

Re: [DNG] ID Quantique "Quantum" PCI-e RNG's - does anyone have more info?

2017-10-21 Thread Arnt Gulbrandsen
taii...@gmx.com writes: I found this seemingly cool product, a pci-e hardware RNG that produces a large stream of "truly random" "quantum" random numbers. ... I am curious what the deal with this is, does it really work? what is the use case for this? does anyone here have one? I have a comp

Re: [DNG] systemd-udevd: renamed network interface eth0 to eth1

2017-10-21 Thread Arnt Gulbrandsen
John Franklin writes: That’s not an apology. Would you like to try again? I'm not Steve, but the occasion fits: Tobias, until I read your posting a couple of days ago I did not realise that UEFI/Secure Boot can be configured such that ONLY my kernels can be booted, not even fresh install me

Re: [DNG] trusting components (was: systemd-udevd: renamed network interface eth0 to eth1)

2017-10-19 Thread Arnt Gulbrandsen
Simon Hobson writes: My memory on the details are vague, but there's been a project (Part of Debian ?) to "prove" that a binary was created from a given source - not trivial since slight differences in environment and compiler optimisations mean that simply compiling the source won't always cr

Re: [DNG] Debian testing drop redis non systemd

2017-10-19 Thread Arnt Gulbrandsen
jaro...@dyne.org writes: Same here, its a core part of many software projects, not only web based but also on embedded systems and micro-service related. Totally offtopic but some if you will be fascinated by the references to redis in this talk by John Regehr: https://youtu.be/Ux0YnVEaI6A S

Re: [DNG] Debian testing drop redis non systemd

2017-10-18 Thread Arnt Gulbrandsen
Steve Litt writes: Does anyone here actually use redis? I looked it up, and to me it looks like dbus on steroids. An in-memory data store accessible by lots of different applications. What could POSSIBLY go wrong? I've used in several contexts, it's great at its job and a joy to use. Redis' ni

Re: [DNG] systemd-udevd: renamed network interface eth0 to eth1

2017-10-17 Thread Arnt Gulbrandsen
Alessandro Selli writes: Plus, it's purported security is mostly a mith. It only checks if the first-stage bootloader was signed by a known, authorized key, everything else is as exposed to malware and rootkits as it's always been. It protects from one of the smallest attack vectors that wa

Re: [DNG] Firefox >= 57 will NOT support Zoom Page plugin!

2017-10-06 Thread Arnt Gulbrandsen
Try https://addons.mozilla.org/en-US/firefox/addon/zoom-page-we/ instead. The Web Extensions API is Mozilla's attempt to get various plugin-related performance problems under control. While Firefox had its own performance problems, the users who complained that Firefox would drain their laptop'

Re: [DNG] New behaviour under Devuan.

2017-09-21 Thread Arnt Gulbrandsen
Rowland Penny writes: Please stop being obtuse, You know very well what I meant. I do indeed, and I think you're wrong. Devuan has taken a no-systemd decision, that's all. That isn't a promise from anyone to provide alternatives in any other question, or to make alternative packages. Not eve

Re: [DNG] New behaviour under Devuan.

2017-09-21 Thread Arnt Gulbrandsen
Rowland Penny writes: This is all down to the sysadmins decision and I thought one of the main ideas behind Devuan is that nothing is forced on the sysadmin. Systemd isn't forced on you. LOTS of other things are, starting with the choice of .deb as package format. Arnt __

Re: [DNG] Gnome?

2017-09-21 Thread Arnt Gulbrandsen
help the guy who started GNOME.ORG "earn a job at Microsoft", Some people consider that a reward. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] upgrade from Debian stretch to Devuan ascii?

2017-09-19 Thread Arnt Gulbrandsen
Edward Bartolo writes: With a compromised CPU that has questionable smaller cores running a HIDDEN OS, I cannot see what advantages anyone gets by installing grsecurity. This is worse than having a compromised machine that is always connected to your computer. Bah. We already know that a CPU c

Re: [DNG] Could not open a connection to your authentication agent.

2017-09-16 Thread Arnt Gulbrandsen
Arnt Karlsen writes: ..which idea is worse then, keep having dbus interacting with ssh-agent, or ripping out dbus of Devuan? Ripping it out looks like a lot of work, based on just a quick look at dpkg/status. A lot of nontrivial things to think about. I noticed a printer library on the list

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-06 Thread Arnt Gulbrandsen
Alessandro Selli writes: What makes you think IBM is more trustable than Intel? Who, other than IBM, produces Power8 CPUs? Are the blueprints publicly available? You're just raising the bar to the point where noone can possibly build an acceptable product. (Not just you, Alessandro, most p

Re: [DNG] Purism Librem and disabling Intel ME: it can be done [ Re: TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server ]

2017-09-05 Thread Arnt Gulbrandsen
taii...@gmx.com writes: I take it you work for purismraptor has made a legitimately owner controlled computer - whats stopping you? Is that an actual owner-controlled computer, or is it controlled by whoever is at the keyboard? Or is it controlled by all the people who have a certain pass

Re: [DNG] TALOS 2 - The Libre Owner Controlled POWER9 Workstation/Server

2017-08-31 Thread Arnt Gulbrandsen
Rick Moen writes: Having the i.MX6 ori.MX8 CPU 'separate' from the baseband controller (a term on which they have not yet elaborated), but the latter remains deeply problematic, being a proprietary black box with proprietary, opaque firmware. Really? I suppose you've dealt with as many ISPs

Re: [DNG] noatime by default

2017-08-30 Thread Arnt Gulbrandsen
Simon Hobson writes: [1] The drive "most likely" does not know about partitioning, and even if it did, it would be very dangerous to assume that any space not occupied by a partition was "fair game" to be erased since there may be other ways the space might be used (for example, the way Grub u

Re: [DNG] noatime by default

2017-08-28 Thread Arnt Gulbrandsen
Narcis Garcia writes: Perhaps there is some kernel parameter to change default behavior from boot? I'm not looking a solution for a single installation but for hundreds of my users. If you use puppet or another similar way to deploy to a large set of computers, then you can deploy a suitable u

Re: [DNG] noatime by default

2017-08-28 Thread Arnt Gulbrandsen
If you want to do it it can be done, though. You can intercept the mount system call using LD_PRELOAD and about 10 lines of C, or you can write an /etc/fstab line for /mnt that specifies noatime and your usual USB device (perhaps sdb1, YMMV). If you write the fstab line at least "sudo mount /mn

Re: [DNG] noatime by default

2017-08-28 Thread Arnt Gulbrandsen
Narcis Garcia writes: USB drives use filesystem as were formatted. When they are formatted in ext4, support atime. Indeed. I assumed you meant USB drives generally, not ones restricted to work only with linux. Sorry. I was asking for a method to set noatime by default. Is udev/eudev trigger

Re: [DNG] noatime by default

2017-08-28 Thread Arnt Gulbrandsen
Narcis Garcia writes: Does anybody know some way to configure an already installed system to mount points with noatime by default? Edit /etc/fstab. I'm specially interested for USB pendrives, that are automatically mounted in a desktop environment. USB drives generally use some sort of wind

Re: [DNG] Which desktops are available in Devuan?

2017-08-17 Thread Arnt Gulbrandsen
Android apps run in one process each, and anything in the background may be killed at any moment. If you are in the background and the foreground app needs memory, you just die. If the system invokes you, you do not get another process, you get another thread in your existing process. Thus, u

Re: [DNG] openssl/libssl1 in Debian has disabled TLS 1.0 & 1.1

2017-08-17 Thread Arnt Gulbrandsen
ael writes: I am happy with that. Just as long as one can enable it when *necessary*. You have a compiler and building is easy. What is unacceptable is for Devuan to take away the freedom to read email or prevent communication with devices which cannot be updated. Keep in mind that compilin

Re: [DNG] Which desktops are available in Devuan?

2017-08-15 Thread Arnt Gulbrandsen
My office desktop runs KDE on Devuan, without any problems. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Excessive bounces

2017-08-03 Thread Arnt Gulbrandsen
For what it's worth, SPF, DKIM and DMARC were developed by largely different sets of people, who disagreed without each other about what was acceptable tradeoffs, what was doable and more. The "they" you mention act senselessly because it is not one set of people. Patching up email against sp

Re: [DNG] Please keep 32-bits alive

2017-07-24 Thread Arnt Gulbrandsen
Hendrik Boom writes: How much source code actually cares whether pointers are 32 or 64 bits? How many packages are ctually affected? Any guesses? a+b. a = the number of things whose maintainers all use 64-bit OSes, and chance to have a relevant bug. Given the number of small teams, I'm not at

Re: [DNG] [Desktop-Environment] Cinnamon and MATE

2017-07-23 Thread Arnt Gulbrandsen
Rick Moen writes: Quoting KatolaZ (kato...@freaknet.org): All those users are being left without any other choice than throwing their hw away by many distributions, without a concrete motivation (well, except the usual "it's old so it must be thrown away", which is as popular as lame these days.

Re: [DNG] [Desktop-Environment] Cinnamon and MATE

2017-07-22 Thread Arnt Gulbrandsen
Juergen Moebius writes: No, not only Devuan. You forgot the great "Slackware", the mother of Linux distributions. If we're going to go into ancient history — Slackware was (simplifying) a fork of SLS, but SLS wasn't the first either. Either ABC or H. J. Lu's nameless microdistribution might b

Re: [DNG] Devuan Constitution and Social Contract WAS: Sexual politics and society

2017-07-19 Thread Arnt Gulbrandsen
G.W. Haywood writes: it isn't worth my time even to delete the rants, never mind read them, so I'm going to unsubscribe and go back to Debian. It's perfectly possible to run a server on devuan without paying any attention to this list, so you can save yourself the work of reinstalling. I und

Re: [DNG] Forums: was I have a question about libsystemd0 in devuan ascii,

2017-07-15 Thread Arnt Gulbrandsen
Rick Moen writes: I'm curious who implied this. I didn't, for one. My impression is that you're talking about something nobody upthread has been talking about, and asserting that they did. You weren't around then — at least a year ago Edward made a bit of a nuisance of himself on this list

Re: [DNG] Listserver configuration

2017-07-05 Thread Arnt Gulbrandsen
If the name server receives a question via UDP, that's how it will answer, necessarily. The client could have asked via TCP, but it doesn't know how large the response will be when it sends the question. The general intention here is that the client will receive either an ICMP message or a rep

Re: [DNG] grsecurity ripoff by Google, with Linus' approval WAS: I have a question about libsystemd0 in devuan ascii,

2017-06-27 Thread Arnt Gulbrandsen
Please pay attention to what Linus actually wrote. Linus complained about the patches, not the grsecurity code. I know (from other threads) that he's not in love with the code either, but what he actually complained about is the patches. Linus wants patches with clean version history, and he w

Re: [DNG] scanner dependencies

2017-05-29 Thread Arnt Gulbrandsen
Hendrik Boom writes: Sounds like sonething that should go into Devuan jessie as a bug fix. After someone tests it, of course. "Of course"... Which would you rather have, an untested fix or a known bug? IMNSHO that's an insidious question and neither a yes or a no is "of course" correct. Ar

Re: [DNG] just curious,

2017-05-26 Thread Arnt Gulbrandsen
It is nicely stable already. After all, it is mostly Debian. Just use it. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] git.devuan.org migration

2017-05-18 Thread Arnt Gulbrandsen
jaro...@dyne.org writes: for now however I can anticipate that a "shared" server that is also used for other things can host a mirror (if bandwidth is enough) - and we will document also how to have a package mirror. However for other uses we likely need to have a dedicated server. I have two,

Re: [DNG] PHP-7 on Devuan

2017-05-16 Thread Arnt Gulbrandsen
Better yet, don't change in a year. Cross-distribution apt-get is risky, in the sense that you may often be the first person to try your combination. I would rather look at building from source or contributing packages to devuan, so as to avoid that risk. Contributing also takes time, but you

Re: [DNG] dovecot / exim4 / system users -- restriction of emails per user

2017-05-12 Thread Arnt Gulbrandsen
IIRC this isn't at all simple with that software. For mostly poor reasons that may have changed since last time I looked. You could approximate it with a bit of hacking, though: Use exim to force a bcc to something like policyviolation@asdf, and use a generated sieve file for that address to c

Re: [DNG] sane-utils depends on libsystemd0

2017-05-09 Thread Arnt Gulbrandsen
Hendrik Boom writes: So... does sane need saned? Do the scanners have to initiate communication with the computer for which there always has to be a daemon running? That's not what sane does. Sane doesn't need saned to scan; I use devuan and a scanner without even having saned installed. Sa

Re: [DNG] tiny service state api [WAS: Fwd: init system agnosticism]

2017-04-18 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: Unfortunately we are already paying the consequences of badly-written software implementing oddly-designed solutions to non-existing problems... Indeed. But what's your point? Arnt ___ Dng mailing list Dng@lists.dyne.org

Re: [DNG] tiny service state api [WAS: Fwd: init system agnosticism]

2017-04-18 Thread Arnt Gulbrandsen
kato...@freaknet.org writes: I genuinely don't understand why the kernel should know about the internals of running processes, or get notified if a process is "ready" to do whatever it is supposed to do, or get queried by other processes which would like to access this kind of information, or mai

Re: [DNG] tiny service state api [WAS: Fwd: init system agnosticism]

2017-04-18 Thread Arnt Gulbrandsen
I've read this thread fairly thoroughly, but fail to see much of a use case... There's hypothetical stuff, what if service x needs service y. Well, what if it does. Should it demand that y be running at every moment and on the same host? DOES it demand that? This isn't a good thing to spend

Re: [DNG] Why I don't want to have Pöttersoft on my system

2017-04-17 Thread Arnt Gulbrandsen
Aldemir Akpinar writes: It also has the grand finale: poettering locked and limited conversation to collaborators 2 hours ago Makes sense. Nothing new was being said, just old stuff repeated, and the bug was fixed three weeks ago. Arnt ___ Dng mai

Re: [DNG] message from rdiff-backup

2017-04-04 Thread Arnt Gulbrandsen
I do the same and suffer the errors. A backup without an exception is a backup without a buggy exception. "Oh, the exclusion that was meant to not back up coredumps also excluded the vital config file foo/cf/core/vitalfile?" I am not making this up. Arnt _

Re: [DNG] message from rdiff-backup

2017-04-04 Thread Arnt Gulbrandsen
That message means that the file changed during backup. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan and oss(4)

2017-02-03 Thread Arnt Gulbrandsen
Klaus Ethgen writes: I wonder if Devuan will stay with free software like debian was long time ago and let the user choose what to use or if it follows debian in only supporting one (non-working) sound system. There are two questions here. Open source support is limited by a) volunteer availab

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Alessandro Selli writes: This still doesn't explain why they decided to force-feed Google's DNS server on the user without prompting the poor fellow any possible choice. "Your network sucks. Do you want to [ ] use google or [ ] just give up?" BTW, how many Debian installations are perform

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Simon Hobson writes: For the rest of us, if we have no DNS servers in resolv.conf then we expect the system to respect that and not do DNS resolution. That is the **ONLY** correct behaviour. What is absolutely, 100%, not acceptable behaviour is what's been done - to silently do something that

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Rick Moen writes: You might not have noticed that you were strenuously agreeing with me. I mixed up the participants in the thread while reading through the posts. Sorry. Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/c

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
I wrote: This year I've seen... No I haven't ;) Happy new year, everyone! Arnt ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Alessandro Selli writes: Why are Debian folks so eager at increasing Google's traffic and "free" "services"? Just a guess: Because so many of the resolvers at random hotels suck, and that suckage causes support load. This year I've seen almost infinitely slow resolvers, resolvers that filter

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Steve Litt writes: What's wrong with 8.8.8.8? It's Google's public DNS, and for me, it always works. Didn't work for me at the captive portal in the hotel I was in two weeks ago. There are two kinds of hotel networks that block 8.8.8.8: Hotels in China, and ones that block all DNS except th

Re: [DNG] how to clear DNS cache

2017-01-03 Thread Arnt Gulbrandsen
Rick Moen writes: One recursive namserver per LAN is obviously better than several on grounds of multiple considerations that I won't belabour here. Is it, really? Significantly? It eases the load on the root and big-zone TLDs. I've heard that most of their load is caused by other factors, th

Re: [DNG] Networking on installation: was Devuan GNU+Linux, Beta2 release

2016-12-10 Thread Arnt Gulbrandsen
Yes, it has to point to something the client knows. Android uses a gstatic.com link. The key is that the client knows to expect a particular response, but the captive middlebox does not. Thereby the client can find out whether there is a captive middlebox or not, by seeing whether it gets the

  1   2   >