Viewing profile — glass-

That paragraph has no relevancy to the GPLv2 , it is pointing out how they fixed the problem in version 3. The Linux kernel is still licensed under GPLv2. The differences between v…

Are we reading the same thing? It says: > The best way to make sure you are in compliance when distributing GPLv2 object code on BitTorrent would be to include all the correspondin…

My favourite part of the GPLv2 is the torrent technicality[0]. I wonder if all those people seeding Linux distributions realise they're violating the license. [0] https://www.gnu.o…

Also see, Ted Unangst's post about ZFS where he lists some criticisms[0] which somewhat expands on Brauer's criticism, and he talks about when he was interviewed on BSD Now[1]. Kee…

Go to justgetflux.com and CTRL+F for the word "patent".

Which parts of "being Firefox" did the Firefox versions in Debian stable, where the only changes were backported security patches, fail?

It's entirely inconsistent with Mozilla's past actions. You can compile Firefox source code of which 100% of it came from released Firefox versions in Mozilla's HG tree and they wo…

What Mozilla won't let you call "Firefox": a version of Firefox where the only changes are security patches backported from a future version of Firefox (see: the Debian and IceWeas…

The examples are just examples, the uses in the tree are different. For example, ksh doesn't exit if pledge fails, it just prints an error about why it failed and keeps running (im…

> I don't see how pledge is different from Capsicum which he criticises on this basis, one it is compiled in you cant disable it. This is addressed in the slides. Capsicum is 5 yea…

> he dismisses SE Linux on that basis. I don't see why the same doesn't apply to pledge. If you use a Linux distro that enables SE Linux, the second it gets in the way you can turn…

> Theo is getting good results on tightening up the classic UNIX command line tools. Has he tried EMACS yet? You may want to take a closer look at the slides about what has been pl…

Page 19 is interesting. It explains that this is possible, without everything that does logging needing access to sockets, because on OpenBSD syslog(3) doesn't use sockets and does…

There is a lot more than just the useragent when it comes to Tor Browser versus any other browser. Tor Browser has many changes to try and make every instance of Tor Browser look i…

I wonder if he realises that browsing over Tor with IceCat will be causing him to have quite a distinct browser fingerprint. He should just use Tor Browser.

> - Toggle layout.css.visited_links_enabled to False Firefox lies[0] to scripts that try to access the style-state of visited links. You probably don't need to set this. [0] https:…

That sounds like it was written by someone who doesn't completely understand Convergence, and also has an alternative agenda (they want their own solution adopted). > It is not ver…

The CA system is unique is that one hole, breach or incompetent actor compromises the entire system. It's also unique is that when an authority has a hole, breach or is an incompet…

I have no doubt that there would be incompetent or dishonest notaries. The difference being that in an alternative universe, where Convergence is used, a rogue notary doesn't destr…

Convergence was the perfect replacement, but it never gained any traction. Moxie's talk at BlackHat[0] introducing it is a good watch for those unfamiliar with the idea, and if you…

It makes me uncomfortable that the CA system is set up in a way that makes this necessary. If an alternative, such as Convergence, had taken off we wouldn't be in this situation.

I used your script to sign my cert and it works great. The best part is it doesn't need to bootstrap and try to install a bunch of dependencies that I don't want or need, unlike th…

That whole discussion on the slide from 38:50 is hilarious and scary. "You can't turn off the debugging malloc but you can turn off sockets" "If the size of socklen_t changes while…

LibreSSL is mostly a drop-in replacement for OpenSSL, while BoringSSL has removed things that some applications will depend on. OSes shouldn't/couldn't replace OpenSSL for BoringSS…