171–180 of 276 posts
Earlier quoted context omitted.
I think Windows BSOD including QR code was pretty clever idea, although unfortunately it's halfbaked in that it's just a fixed generic URL instead of something specific to the error.
The problem with bootloaders is they really can’t spare a lot of storage. Storing different QR codes for all the common errors might be asking too much.
Isn't secure boot the first thing you disable when you install linux?
You could if you want to, but if your distribution provides a UEFI bootloader (shim / grub / systemd-boot / whatever) signed by the default MS-trusted cert, or you're willing to set up everything yourself with your own certs, it doesn't hurt to enable it either (except when an incident like this happens).
Earlier quoted context omitted.
It's not a new trend - error-code based software would propagate that ERROR_INVALID_PARAMETER all the way from the function with the invalid parameter back out to the return value of the user operation, then helpfully tell the user "Invalid parameter!" Exceptions with string messages and full stack traces might be yet another underrated Java invention.
Dr Watson is still a thing for getting tracebacks. Doesn’t work for kernel mode of course, but most things don’t.
Does it help? The stack trace at the point where the dialog box is displayed is useless.
> Microsoft's stated intention was that Windows Update would only apply the SBAT update to systems that were Windows-only, and any dual-boot setups would instead be left vulnerable to attack until the installed distro updated its grub and shipped an SBAT update itself. I wonder what went wrong here? If you would read the EFI boot order it would clearly say to boot shim first? Or were these dual boot setups where the…
MS has zero vested interest in caring. If they brake booting for Linux users, how does that hurt them in any meaningful way? Sure they get some press, but is it bad press if most people are never affected by this?
I can tell you that you are wrong. Whatever the company’s flaws, the people in Windows care deeply about compatibility and about not breaking things with updates. I have hours of stories from the trenches, and could probably talk at length about how such a point of view would be suicidal for the Windows business.
I don’t know what went wrong here, and I’m not saying Microsoft is blameless. I am saying that whatever went wrong was NOT due to lack of caring about breaking things, even non-Microsoft stuff sharing the same computer.
Earlier quoted context omitted.
Seems to be a general trend in a lot of software nowadays. Vague error messages telling you "Something went wrong" with no additional details.
It's not a new trend - error-code based software would propagate that ERROR_INVALID_PARAMETER all the way from the function with the invalid parameter back out to the return value of the user operation, then helpfully tell the user "Invalid parameter!" Exceptions with string messages and full stack traces might be yet another underrated Java invention.
Failed to open configuration file
Caused by:
Failed to open path PATH
Error access deniedEarlier quoted context omitted.
Seems to be a general trend in a lot of software nowadays. Vague error messages telling you "Something went wrong" with no additional details.
I grew up with "System Error Type 11" (or whatever the exact quote was, hard to find on google). I think the only button on the dialog box was "Restart".
Earlier quoted context omitted.
https://wiki.archlinux.org/title/PCI_passthrough_via_OVMF Note that it requires a second graphics card to work.
Or a single GPU that supports SR-IOV, but AFAIK no consumer-grade GPU provides it.
I think there's more than meets the eye here. I think part of the reason MS is enforcing TPM2.0 and now this SBAT update is that there is widespread rootkit level malware and they are trying to stay ahead of the curve. When it comes to the realities of dual-booting, I had tons of problems with Win7/8/10 with suspend-to-hiberfile.sys issues and updates 10 years ago breaking grub. 10 years ago I finally decided, "You k…
> When it comes to the realities of dual-booting The sad and depressing part is that along the way we lost all possibilities of running coreboot or libreboot as an open alternative. The only real option is to buy a used laptop from before the T44x generation (if you really want it secure)... or newer machines that come with other perks like soldered-on batteries that destroy the mainboard along with them when they le…
Earlier quoted context omitted.
Or a single GPU that supports SR-IOV, but AFAIK no consumer-grade GPU provides it.
IIRC Intel iGPUs support it and I read somewhere that their dGPUs do as well, but I might be misremembering.
Earlier quoted context omitted.
[flagged]
The German government caused Let's Encrypt to issue fraudulent certificates to xmpp.ru and jabber.ru by physically intercepting the server's network connection. https://news.ycombinator.com/item?id=37961166
You could potentially protect against this by cert pinning to a CA that won't issue to an interloper, or possibly using CAA records in DNS if you can be confident your DNS won't be MITMed or changed out from under you buy your registry. DNSSEC helps, if your registry (and the root) won't fold under pressure, but not if they do ... and DNSSEC is in the top 3 causes of high profile DNS failures in my estimation.