Viewing profile — Vogtinator

> If, for example, a company wants to issue fleet computers to workers or school to students, you want to have secure boot on those devices to prevent tampering. Secure boot makes …

AFAIK that's just when plugging in a USB 3 device into a USB 2 port or using a USB 2 cable.

With https://github.com/thkukuk/account-utils (not the default yet), it's meanwhile possible to run openSUSE Tumbleweed (package based) with NoNewPrivileges= as usual.

> For example, Aeon (of openSUSE MicroOS vintage) looks like all KDE Linux is aiming for, just with Gnome as DE. And Kalpa is that just with Plasma as DE.

swapfile on linux must be directly mapped, bypassing any filesystem level checksums (see https://btrfs.readthedocs.io/en/latest/Swapfile.html )

ctrl-c sends SIGINT.

errno is in thread-local storage (TLS)

> Apps on Android have no access, or ability, to directly call kernel functions. That is nonsense.

That's the design with sdbootutil in openSUSE ( https://en.opensuse.org/Systemd-fde , https://github.com/openSUSE/sdbootutil ).

> You can mitigate this by including PCRs that sign the kernel and initrd. No, that's not an effective mitigation. The signed kernel+initrd would still boot into the impersonated r…

For multiple users on the same server it was IMO well designed. Everyone had their ~ and could place whatever libraries/binaries/etc. in there and do whatever they wanted. Package …

For x86 cores this is visible in Agner Fog's instruction performance tables: https://agner.org/optimize/#manuals The latency shows after how many cycles the result of an instructio…

Can wine do ARM64X resp. ARM64EC to mix native aarch64 code with emulated x86(-64) code in the same process for better efficiency?

https://duktape.org is in a similar ballpark.

My envy x360 has that button as well and it even puts a physical shutter in front of the webcam in addition to disconnecting USB.

Cargo.lock has 8750 lines. Is that normal for something like this? For comparison, QEMU basically just needs glibc, glib and zlib for basic functionality.

> you do you, but watch your market share always be niche. As long as I can use the OS I like and how I like, I don't care about metrics like market share.

> That said, it does require more care when you do OS updates or UEFI updates to remember to update the TPM sealed secret with the new measurements. Windows and Linux both have the…

> 1. This is interesting. So in a measured boot scenario, you wouldn't be able to boot the main OS, but it would give you access to sort of a minimal initramfs environment for debu…

Measured boot > trust chain through signature verification: With measured boot, components in the boot chain tell some trusted component (e.g. a TPM, possibly in FW) about all of t…

Would that actually have a positive effect? Running malicious software in the only user's context can already cause maximum damage: https://xkcd.com/1200/ This would just result in…

I'm using Tumbleweed with btrfs snapshots, systemd-boot and transparent disk encryption (using TPM + measured boot), works fine. Currently this needs to be set up semi-manually (se…

iwd is an alternative to wpa_supplicant, not NetworkManager. NM has support for iwd.