Arthur Besse

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland

(as i wrote last time this was posted here)

he followed up to simultaneously say he was joking while also doubling down 🤦

https://xcancel.com/theronster/status/1538239717032042497

also... blurring his name was really not necessary; he's so proud of this that a screenshot of his reddit comment about it is still his pinned tweet four years later.

::: spoiler and it's also his twitter bio now: :::

The *digital dark age* is a lack of historical information in the digital age, which is a direct result of outdated file formats, software, or hardware that becomes corrupt, scarce, or [...]

iirc the Linux kernel dropped support for pre-Pentium x86 in the last few years, so any distro with 486 support now isn’t running a recent kernel. I think if you want a maintained operating system for your 486 today, NetBSD is probably the thing to run.

www.youtube.com/watch?v=ftjEcrrf7r0

could Red Hat eventually take control of the project

Fedora started in 2002 and merged with "Red Hat Linux" in 2003.

Red Hat, Inc has had full control of it ever since then.

It is a "community project" inasmuch as there are Fedora developers who are volunteers (and some who are paid by companies other than Red Hat), and the Fedora Council includes people who are not employed by Red Hat - but the Project Leader is always a Red Hat employee, and if the Council ever has an irreconcilable difference with Red Hat then Red Hat can simply ignore and/or dismiss them.

Red Hat owns all Fedora-related trademarks, and the Fedora Project is not an independent legal entity: it is a part of Red Hat.

If Fedora developers don't like Red Hat's decisions regarding the project, they can fork it but they'd need to change the name and find some other sources funding.

Also, icymi, Red Hat became a subsidiary of IBM in 2019.

groot is this real?

::: spoiler spoiler

https://xcancel.com/RichardDawkins/status/2049973529576108160 :::

(well actually) you forgot Poland

Yep, Fastly the CDN company (doing HTTPS mitm-as-a-service for millions of websites) which Apple also uses (along with CloudFlare) for their similar iCloud Private Relay feature.

Unlike Apple though, Firefox's new "built-in VPN" does not claim (falsely) to use different providers for ingress and egress.

the upvotes didn't federate to your instance due to some bug; there are 120 where it was posted and 118 on the instance i'm on

As a new member of the lemmy.ml admin team I've also been removing a lot of posts from here which belong in lemmy_support, which I think is worthwhile for preventing this community from becoming a boring list of support questions. To the many people who are flagging them: please read the examples above and don't flag *every* post that is about lemmy; only flag ones that are actually concrete support questions. And do feel free to actually answer these questions before flagging them, so that the person asking doesn't necessarily need to re-post it. Thanks!

Poe’s law 🙄

As you can see, it says nothing about researching, troubleshooting, reverse-engineering, etc. As long as you write and understand the code yourself AI is allowed for everything else. As long as you’re not using generative AI it’s fine. I’m not sure if you’re joking or legitimately confused, but, assuming the latter, fyi the “AI” that people use for “researching, troubleshooting, reverse-engineering, etc” is part of what is called “generative AI”. Given this, it’s not much a stretch to read it as saying that even telling people about the existence of @sv1sjp@lemmy.world’s github repo in Nura forums would actually be a violation of Nura’s policy (as of today; I expect it will evolve in the not-too-distant future).

This might be useful for some Linux users who want (but don’t need) to run Microsoft 365 occasionally, but actually relying on this kind of hack is a terrible idea. Once fully implemented, this will help draw in people into Linux, as many shudder at the thought of switching to the platform because their preferred office suite doesn’t work here. I certainly hope this doesn’t “help draw in people into Linux”. It’s sad to think about people and organizations switching to Linux on the basis of someone misleading them into thinking that relying on this kind of thing is a good idea because when it breaks it will give them a bad impression and they’ll blame “Linux” instead of Microsoft (or Bottles or whoever told them it was a good idea). When the lack of a Linux version of a specific proprietary program is the blocker preventing someone from switching to Linux, relying on a workaround which remains unsupported by the proprietary/adversarial software vendor is… a recipe for a bad time. Even if this mostly works today, it is extremely likely that (either intentionally or inadvertently) Microsoft will break it in the future. So, although I do see how this can be useful for some people when/while it works, in my opinion Linux and the world at large would be better off if this software didn’t exist. I hope Microsoft breaks it sooner than later!

Nura will not accept generated patches, by the way. If you click OP’s github link and scroll down you’ll find this section which acknowledges that: github.com/…/mi-max2-oxygen-msm8953-nura-drivers#… The drivers, patches, scripts and write-ups here were produced in collaboration with an AI assistant and tested on a real Mi Max 2 (oxygen). The Nura project does not accept LLM-generated contributions. One of its maintainers explains the reasons in this post: the social and environmental cost of these models, and the risk that people use them to produce private knowledge instead of joining and strengthening the community whose work the models learned from. We respect that decision. So: This repository is not a contribution to Nura or pmaports, and its code should not be submitted there as it is. It is public documentation, not private notes. The reusable part is the knowledge: how the hardware is wired, register addresses and meanings, root causes, what was tried and ruled out, and how to test safely. These are facts anyone can check on their own device. It can save time for anyone who wants to understand what works and what does not, and then write their own code to submit upstream. If you want to get this into Nura or upstream, learn from it, verify it on your hardware and write your own implementation, following the rules of the project you contribute to (Nura, the Linux kernel and libcamera each have their own contribution policies). Please engage with the community. The Nura wiki, the msm8953-mainline project and the people credited below did the groundwork this builds on. @OP (@sv1sjp@lemmy.world) what isn’t clear to me is why you don’t try to upstream the kernel parts, since Linux is accepting LLM-assisted contributions (as is Nura actually, just only indirectly after their upstreams like Linux accept them).