Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Lennart Poettering, Christian Brauner founded a new company

amutable.com

Post reply on HN
Print view View original

711–720 of 770 posts

Re: Lennart Poettering, Christian Brauner founded a new company

#711

Post by egorfine »

Spivak wrote: post #294
direwolf20 wrote: post #249

Earlier quoted context omitted.

This is basically propaganda for the war on general purpose computing. My user data is less safe on a Windows device, because Microsoft has full access to that device and they are extremely untrustworthy. On my Linux device, I choose the software to install.

What are you talking about? This has nothing to do with general purpose computing and everything to do with allowing you to authenticate the parts of the Linux boot process that must by necessity be left unencrypted in order to actually boot your computer. This is putting SecureBoot and the TPM to work for your benefit. It's not propaganda in any sense, it's recognizing that Linux is behind the state of the art compa…

> we should improve the Linux boot process to be a tight security-wise as the Windows

I hope this never happens. I really want my data secure and I do have something to hide. So, no Microsoft keys on my computer and only I will decide what kind of software I get to run.

Absolutely fuck that.

Re: Lennart Poettering, Christian Brauner founded a new company

#712

Post by egorfine »

direwolf20 wrote: post #249
Spivak wrote: post #185

Earlier quoted context omitted.

https://0pointer.net/blog/authenticated-boot-and-disk-encryp... You. The money quote about the current state of Linux security: > In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions. Say what you want about systemd the project but they're the only ones moving foundational Linux security forward, no one else e…

This is basically propaganda for the war on general purpose computing. My user data is less safe on a Windows device, because Microsoft has full access to that device and they are extremely untrustworthy. On my Linux device, I choose the software to install.

Propaganda begins with reframing. What russia is waging is not a war, it's a special military operation. War is peace. Data on Windows is secure. Linux's security is far behind.

That sort of things.

Re: Lennart Poettering, Christian Brauner founded a new company

#713

Post by egorfine »

bayindirh wrote: post #9
mikkupikku wrote: post #3

Earlier quoted context omitted.

Sounds like kernel mode DRM or some similarly unwanted bullshit.

It's probably built on systemd's Secure Boot + immutability support. As said above, it's about who controls the keys. It's either building your own castle or having to live with the Ultimate TiVo. We'll see.

> who controls the keys

Not you. This technology is not being built for you.

Re: Lennart Poettering, Christian Brauner founded a new company

#714

Post by egorfine »

microtonal wrote: post #50
direwolf20 wrote: post #31

Earlier quoted context omitted.

Remote attestation is literally a form of DRM

There are genuine positive applications for remote attestation. E.g., if you maintain a set of servers, you can verify that it runs the software it should be running (the software is not compromised). Or if you are running something similar to Apple's Private Compute Cloud to run models, users can verify that it is running the privacy-preserving image that it is claiming to be running. There are also bad forms of rem…

> There are genuine positive applications for remote attestation

No doubt. Fully agree with you on that. However Intel ME will make sure no system is truly secure and server vendors do add their mandatory own backdoors on top of that (iLO for HP, etc).

Having said that, we must face the reality: this is not being built for you to secure your servers.

Re: Lennart Poettering, Christian Brauner founded a new company

#715

Post by egorfine »

TacticalCoder wrote: post #322
ajnin wrote: post #304

Everyday the world is becoming more polarized. Technology corporations gain ever more control over people's lives, telling people what they can do on their computers and phones, what they can talk about on social platforms, censoring what they please, wielding the threat of being cutoff from their data, their social circles on a whim. All over the world, in dictatorships and also in democratic countries, governments…

> To me Linux is not a technological object, it is also a political statement. It is about choice, personal freedom ... I use Linux since the Slackware day. Poettering is the worse thing that happened to the Linux ecosystem and, of course, he went on to work for Microsoft. Just to add a huge insult to the already painful injury. This is not about security for the users. It's about control. At least many in this threa…

> I use Linux since the Slackware day. Poettering is the worse thing that happened to the Linux ecosystem

Same here, Linux since about 1995. Same opinion.

> And, once again of course, it's from a private company. Full of ex-Microsofties.

And funded. And confident they will sell the product well.

Re: Lennart Poettering, Christian Brauner founded a new company

#717

Post by fao_ »

account42 wrote: post #570
fao_ wrote: post #296

Earlier quoted context omitted.

I remember ALSA. Sure, it was finnicky to use `alsamixer` to unmute the master channels now and then, but I personally never had any trouble with it.

I still need to use alsamixer to unmute my headphones after accidentally unplugging them and plugging them in again fails to do so. That's with PipeWire - never had that problem with just ALSA.

Eh, I had to do that with pulseaudio too, but constantly, across all distros and headphones. Pipewire is shonky, I have to restart now and then on my steam deck (I'm using it as a desktop), but it's still much better than pulseaudio. Even ALSA was better than pulseaudio lol

Re: Lennart Poettering, Christian Brauner founded a new company

#718

Post by pseudalopex »

faust201 wrote: post #362
teiferer wrote: post #217

Earlier quoted context omitted.

> I've been a FOSS guy my entire adult life, I wouldn't put my name to something that would enable the kinds of issues you describe. Until you get acquired, receive a golden parachute and use it when realizing that the new direction does not align with your views anymore. But, granted, if all you do is FOSS then you will anyway have a hard time keeping evil actors from using your tech for evil things. Might as well g…

You could tell this sort of insinuation to anyone. Including you. Argument should be technical.

> Argument should be technical.

Yes. Aleksa made no technical argument.

Re: Lennart Poettering, Christian Brauner founded a new company

#719

Post by surajrmal »

account42 wrote: post #547
surajrmal wrote: post #535

Earlier quoted context omitted.

I don't think this is generally true. If you are running Linux in your stack, your device probably is investing in 1GiB+ RAM and 2GiB+ of flash storage. systemd et al are not a problem at that point. Running a UI will end up being considerably more costly.

I can assure you there are many Linux devices with specs significantly lower than that.

Sure, but devices that do that are not running a Linux distro off the shelf. They are creating something custom with the minimal amount of dependencies possible.

Re: Lennart Poettering, Christian Brauner founded a new company

#720

Post by UltraSane »

tliltocatl wrote: post #576
UltraSane wrote: post #574

Earlier quoted context omitted.

You are acting very entitled thinking you can dictate the conditions under which you can connect to other people's computers. This is a "it takes two to tango" situation. I'm sure YOU would refuse to connect to any bank that refuses to use TLS.

No man, there is no tango. "It takes two" doesn't apply when one part is a huge corporation.

BOTH parties have to agree on the conditions under which the computers will connect and EITHER can reject them.
Post reply on HN