• 1 Post
  • 1.41K Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • corsicanguppy@lemmy.catolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    16 hours ago

    Don’t worry, Snap: Flatpak and Tarballs are NOT better by much. And, chances are, the system package manager may be lacking in so many validation requirements that it’s not iso27002-compliant and thus could be junk.

    There-there, Snap. Most people won’t even know why you suck.



  • Pease tell me you know of someone where this actually was true: that they made crazy money and they’re set for life.

    Because, based on 30 years in and a complete lack of knowledge of anyone who got out and retired early, either personally and via someone I know, I conclude the only people for whom this worked were C-level. Even the smartest man I know didn’t cash in and get out.

    I do know someone who retired at 48, though. He was a heavy duty mechanic. Paid off his house in a town he chose specifically for location, and bikes and kite-surfs all summer and skis all winter.

    Yeah, mechanic. Union. Half pay for life is still half pay, but it’s FOR LIFE. He won.








  • People seem to think that those who choose permissive licences don’t know what they’re doing. Software can be a gift to the world with no strings attached. A company “taking” your code is never taking it away from you, you still have all the code you wrote. Some people want this. MIT is not an incomplete GPL, it has its own reasons.

    As mentioned in another post, I had another motivation for preferring the BSD license over the GPL .

    I maintained a security product for years after the original author left this mature project and focus on life things. In South Korea, 4 engineers used this GPL project internally, but when they went to submit changes back to the project, they were accused and tried for industrial espionage, as the laws in South Korea could be construed to have bearing.

    They lost. They’re in jail. The FSF took on their case, but was unable to change that. And, in reality, they were jailed for fulfilling the license requirements.

    Since then, I simply cannot guarantee that people will be free from penalty when following the license terms, and I carry a lot of guilt over it – it ultimately led to my scaling-back on work and then moving off the project completely. But the code I do write, I prefer the BSD license. I cannot control or predict what people will do, and I certainly cannot control the action of companies when even the FSF can’t steer them properly.

    I have no issue with people choosing the GPL; consider it, choose it, support it, that’s all good and well and proper. Keep doing that, and were my support ever needed, you’d have it. But my choice is different.

    I got a LOT of flack when I mentioned this before; like I’m some turncoat or cuck and not allowed in the techbro club. And while their opinion is unassailable, its value scales accordingly. Bless their heart.






  • Short answer: yes.

    One of the tenets of security is that a user or process should have only enough access to do what it needs, and then no more. So your web server, your user account, to your mail server, should have exactly what they need, and usually that’s been intricately planned by the distro.

    If you subvert it you could be writing files as root that www-data now can’t read or write. This kind of error is sometimes obvious and sometimes very subtle.

    Especially if you’re new to this different access model, tread carefully.

    Great news! If you mess it up, many distros are really great at allowing you to compare permissions and reset them. The bad news is that maybe you’re not on one of those. But you could be okay.