Viewing profile — Foxboron

> Could be one or one thousand. Frankly, the exact number doesn't matter. It does. Manually checking a couple of AUR packages is easy. Installing a thousand AUR packages is not som…

> Expecting users to manually review every single change, for every single AUR package they are using, every single time they do an update or installation is just unreasonable if y…

> The host key section makes me wonder about doing this with servers, but what are the security guarantees in places like the cloud with that? Are you relegated to a software TPM, …

This just reads like a LLM trying to come up with a conspiracy theory around systemd. It somehow got hyper-fixated on "three" for no particular reason and seems like it decided to …

`mkinitcpio` supports both. The `base` hook installs the shell PID 1, the `systemd` hook installs systemd as PID1. The default hook setup was changed with the latest'ish release to…

> Maintainers: You’re a primary maintainer or core team member of a public repo with 5,000+ GitHub stars or 1M+ monthly NPM downloads. You've made commits, releases, or PR reviews …

I have reported several spam emails to Github and from what I can tell none has been acted upon.

I mean, gitlab is only from ~2019. The first hit I could find of a git repository hosted on `archlinux.org` is from 2007; https://web.archive.org/web/20070512063341/http://projects…

Nor the 20 or so odd reimplementations of various filesystem drivers and LUKS encryption in the grub2 tree. But, who is counting?

> Sure, but can the system context-switch that PCR between two different users? Right, no it can't. But this was not really something the TPM was suppose to solve.

UEFI on x86_64 and phones are not comparable when it comes to being "locked down".

Phones don't implement UEFI.

> * Secure Boot (vendor-keyed deployments) I wish this myth would die at this point. Secure Boot allows you to enroll your own keys. This is part of the spec, and there are no ship…

> The TPM has nothing remotely resembling per-user PCRs. The system could extend one of the PCRs, or an NVPCR, with some unique user credential locked to the user directory. Then y…

> Who exactly are you thinking of that needs a job but doesn't have one? That is not your claim. Your claim is that they "are on the payroll of one of the big tech interests or a f…

> Linux, clang, python, react, blink, v8, openssl... You know what I mean. I stand by what I said. Do you have a counterexample you think is clearly unfunded? They exist[1], but th…

> but for almost any economically important project all the major contributors and maintainers are on the payroll of one of the big tech interests or a foundation funded by them. "…

> What else could they do? The government represent the country. If their business model is not welcome there then they withdraw. It's very fair to say "if you insist on those rule…

And the correct response to that is to write up a threat towards the entire population of a country?

They are a conglomerate and per Matthews words "an internet infrastructure provider". Why does the local revenue matter when they are serving a global market? EDIT: And fwiw, "Why …

So blocking Kiwifarms took.. months of activism and loud complaining. Heraled by Matthew as "this is an extraordinary decision for us to make and, given Cloudflare's role as an Int…