I had no idea about the creepware. Good write up!
Migrate Everything from Linux to BSD
61–70 of 169 posts
Re: Migrate Everything from Linux to BSD
#62There's just not enough in BSD for desktops. Ultimately, BSD solves package manager fragmentation (kinda, although there are now four BSDs) but not graphics layer fragmentation, and nobody's investing their time in half of a solution. Sure, "it's for servers [and powerusers]", but the barrier to entry is always lower for OSs you can use on the desktop and the narrative that most developers like tinkering with their config files has by now been conclusively disproven.
As for graphics layer fragmentation, it seems like Wayland makes it worse by handing more of the graphics stack over to window managers. But I guess it's also an opportunity for a BSD to make their own 'blessed' compositor (although this is extremely unlikely IMHO, for graphics driver reasons if nothing else).
Re: Migrate Everything from Linux to BSD
#63> DNS over HTTPS is by itself bad enough, and highly criticized with good reason The criticisms of DoH seem to be around removing the ability of third parties to snoop on your DNS queries. Am I missing something here? Like, yes, some of the use cases outlined in the linked wiki article [0] are arguably legitimate (parental controls, cybersecurity identification of C&C nodes), but then we quickly move into murkier ter…
A better criticism of DoH is here:
https://blog.powerdns.com/2019/12/03/doh-anti-competitive-an...
I just hate that it breaks Split Horizon which is totally legitimate. Leaking local-to-the-LAN queries onto the public internet is also a concern.
IMO the right way to do this is to run your own local DNS recursive resolver, and deploy DNSCurve. This doesn't work for myopic browser vendors though...
Re: Migrate Everything from Linux to BSD
#64Earlier quoted context omitted.
I think the objection is the type of company that sees your requests. Traditionally, it's your ISP who gets to see your and all their users' DNS lookups. But now it's Google (on top of your ISP) and Cloudflare (on top of with 1.1.1.1 and instead of your ISP for DNS-over-HTTPS), and the claim is that they are going to misuse the data (well, it's pretty much a fact for Google). I am generally not in favour of any siloi…
Hello my friend List of public DoH Servers: https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Test+Serv... Simple guide for DoH over Tor: https://github.com/piskyscan/dns_over_tls_over_tor I don't consider 10+ public, free DoH servers as "quite limited".
You might not consider that "quite limited", but that is likely because of a different interpretation of "private DNS".
Private communication is something that only the two (or more) parties communicating are privy to.
With HTTPS, the risk is reduced to CA compromise. With DoH, the risk is the company running the service on top of the CA compromise.
The parties communicating are the root/TLD name servers and me. Private DNS is DNS where nobody sees any of my DNS traffic, except for the root resolvers (which thus become the target of potential privacy breach).
Any intermediary means that they can see your data, but if they are centralized in only a few places, it's a bit beside the point. But then again, if they are so small that only a handful people use them, your traffic will be simple to filter out.
Finally, how do I set up my system to use any of these half-solutions for all DNS requests today?
I'd still prefer a DNS-over-Tor solution if anyone came up with it.
Re: Migrate Everything from Linux to BSD
#65Earlier quoted context omitted.
You know you turn that DNS server off by adding "DNSStubListener=no" to /etc/systemd/resolved.conf right?
But why does it need to exist in the first place when my system has exactly 0 change in behavior when it's disabled?
The functionality provided by the stub resolver is documented in the man page[0]. You may not be using it, but other people are.
[0] https://www.freedesktop.org/software/systemd/man/systemd-res...
Re: Migrate Everything from Linux to BSD
#66>>> The GPL license is more strict on developers and it is an open source anti-pattern
...oookk...
Re: Migrate Everything from Linux to BSD
#67"Linux is fragmented", and then goes on to list Free, Open, Net, Dragonfly and avoids listing a few more. "Poettering creepware". Web developers who use Google Analytics are "stupid". This is emotion-driven drivel.
I really don’t get the weird cult of people seemingly obsessed with Lennart. The man sets out to solve really hard problems in the Linux desktop space, isn’t afraid of tackling complexity when it shows up in the problem domain, and is obsessed with correctness. That last one gets him in trouble from people who want him to be more pragmatic but I personally really appreciate it. I really admire him for being the poste…
Agreed. I think the hate against him stems from him just completely dismissing POSIX and the unix philosophy. Personally, I think this is a positive direction to move in. Let's stop worrying about the design principles that happened to underlie one of the operating systems that got popular. Instead, let's keep innovating and thinking of better ways to do things. That's what Poettering is doing.
Re: Migrate Everything from Linux to BSD
#68> DNS over HTTPS is by itself bad enough, and highly criticized with good reason The criticisms of DoH seem to be around removing the ability of third parties to snoop on your DNS queries. Am I missing something here? Like, yes, some of the use cases outlined in the linked wiki article [0] are arguably legitimate (parental controls, cybersecurity identification of C&C nodes), but then we quickly move into murkier ter…
If you want to prevent MitM attacks, run a local DNS server with DNSSEC. DoH is a trend in the wrong direction. The more IoT garbage begins using DoH, the less control over your privacy you will have. Solutions like pi-hole are rendered useless by DoH.
Not all MitMs inject malicious responses; denial of service is equally problematic. If you can block DNS requests via a pihole, so can your upstream ISP (whether it's because they want to throttle your internet usage, or police it, or whatever else).
And even just a passive observer snooping on your DNS requests can result in an invasion of privacy.
Re: Migrate Everything from Linux to BSD
#69Earlier quoted context omitted.
systemd isn't an init system and doesn't pretend to be one [note] - it's OS middleware with ambitions to becoming a distro unto itself. The systemd project assumes responsibility for numerous aspects of the system that have no technical justification for being under the same project umbrella. You might like systemd-homed, for instance, but it doesn't really have anything to do with the functions of init. Calling it a…
Honest question, if nobody likes systemd, then why is it still around and why is it so difficult for me to find a distro that hasn't adopted it?
Running a distro is a ton of work. Writing your own one off init scripts per package is even more work.
The short answer is...Red Hat has money and threw it behind systemd. Like them or hate them, they are in many ways the deciding fate of Linux systems. So, other distros fall in line. Ubuntu is a contender, but gave in and followed suit too.
Void and Solus are both good distros that don't use systemd. I'd go as far as to call Solus the best out of the box distro ive ever used.
Re: Migrate Everything from Linux to BSD
#70Ok, but then if everyone switches to BSD, won't it suffer the same fate? I.e. whenever something goes mainstream, corporations are drawn to it like insects to a lightbulb.
The article addresses that. Companies are free to do whatever they want with BSD and as such they don't need to try to affect the way things are going. If that wasn't the case we would possible see, for example, Sony trying very hard to influence the development of FreeBSD because they use that in their PlayStation products.
I didn't understand that argument at all. The GPL mandates that companies release their code. That's it. There's no rule that the code has to be upstreamed or that the companies need to try to make other projects use it. To the extent such behavior is incentivized, it should be incentivized just as much with more permissively-licensed code.