Viewing profile — yrro

Debian builds Exim against GnuTLS because OpenSSL used to use a license with an advertising clause, making it incompatible with the GPLd Exim. Since OpenSSL 3 is now available unde…

Ask the CA/Browser forum what they will insist upon

FYI RHEL's SELinux policy blocks AF_ALG socket creation for confined services out of the box. But disabling via RestrictAddressFamilies= unit option, or initcall_blacklist= kernel …

They've bumped the severity and 8/9/10 are now 'affected'. Hope a patch comes soon!

Have you got any info about this. 'seinfo -c' shows there is an alg_socket class. I presume this permission is required to be able to create an AF_ALG socket: $ sesearch -A -c alg_…

... and that is why all 'modern' software is incredibly memory and CPU intensive...

Take it from someone who saw it when it first aired on standard definition analogue TV: it doesn't really matter all that much. The performance of the actors and the story is what'…

A _real_ web site! When I first returned to it rewatching B5 a couple of years ago, I actaully found it difficult to navigate. It took me a while to realise that my brain was parsi…

The "TKO" 'A' plot is silly but it has one of the most moving and memorable 'B' plots of the series!

This is the same company that, back in the day, warned users to not click links in Internet Explorer. A web browser.

Doesn't this break CRL fetching and OCSP queries?

Of course not, the vulnerability is in "AMD’s AutoUpdate software" (i.e., vendor trash).

That won't overwrite pages not allocated to a namespace (which can happen due to wear levelling/underprovisioning, or because the controller has decided to stop using that page bec…

What's the difference between this and sanitize? Should we be doing both? [edit] sanitize runs on the controller level while format works on the namespace level. So I suppose forma…

I suppose arguably the kernel, or at least some component of the OS, should be freezing/locking drives as they come online. The firmware doing so as one-off operation during boot i…

I've lost faith that Linux distros will ever fix the problem where some PCR changes and the TPM refuses to unseal the key... the user is left with a recovery passphrase prompt & no…

> So I connected it to the computer with the USB to NVME M.2 converter > blkdiscard: /dev/nvme0n1: BLKSECDISCARD ioctl failed: Operation not supported I've got a USB-to-NVME adapte…

Somehow, I knew this would be curl before finishing reading the headline. Good on them!

In the UK it's minimum code and we don't bother to inspect. We trust the building firms to self-certify, with predictable results...

How much easier would it be to design build & maintain aircraft if we did away with (passenger) windows?

https://www.electricitybills.uk/ shows a breakdown of the components of consumer energy bills. It's not as simple as saying "it's expensive because of gas", though pricing based on…

If only the inventors of NAT had patented it and then refused to license it!

Is it commonly used within small/medium/large businesses?

Spare some context for a poor old blind beggar?

Dandelion roots are ridiculously long! https://images.wur.nl/digital/collection/coll13/id/676/rec/3