• 2 Posts
  • 434 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle

  • The issue is big companies.
    Google/Amazon/Microsoft can now fork sudo-rs and not have to upstream their changes.
    So then Google fixes an exploit for their sudo-rs implementation (or whatever software) and patch it under a different licence. Now the upstream, Amazon and Microsoft forks don’t know if that exploit is also in their implementation, is related to their implementation, or how to potentially fix it.

    The only way it works is if sudo-rs is implementing new features in a way that it benefits Google/Amazon/Microsoft to contribute back to upstream so they don’t have to keep merging/fixing their exploit code.

    For something as stable as sudo, it actually benefits Google/Microsoft/Amazon NOT to share their changes.
    If they are rolling and recommending their own distros (which I’m sure they already are) that include their forked changes, then they can say that their software is more secure than other brands. It benefits them for their competition to suffer security breaches, especially if they trace back to these kinda changes.

    Which makes everything worse for everyone.





  • XKCD alt text is always worth!
    And it’s not always available (like, the well known ones being circulated around social media).

    Props to the OP for linking to the image from XKCD (as opposed to rehosting it) and further props for linking the source!

    Just missing the delicious alt text (at least for me using jerboa, Firefox and a pixel phone)


  • Years ago, I played with AWS then contacted their support to make sure any AWS billing to my account was disabled.
    I thought I’d try it again recently, and couldn’t log in.
    I still don’t think I’m missing anything.

    I’d rather have VPS or server providers where I know exactly what I’m getting per month no matter what, tho I’ve ran near data transfer surcharges.


  • Oh, it’s expected costs.
    Like, figure out the compute requirements of your code, multiply by the cost per compute unit (or whatever): boom, your cost.
    Totally predictable.
    Compared to suddenly having to replace a $20k server that dies in your data center.
    So much easier.

    Except when your code (let’s be honest, the most likely thing to have an error in it… At least compared to some 4+ year old production hardware that everyone runs) has a bug in it that requires 20x compute.
    But maybe that is a popularity spike (the hug-of-death)! That’s why you migrated to the #cloud anyway, right? To handle these spikes! And you’ve always paid your bills so… Yeh, here’s a 20x bill.


  • The amount of software that is limited free self-hosted but the next tier of “self hosted” is enterprise and thousands per year is ridiculous.
    Absolutely ridiculous.

    Like, you have self hosted. I like your software, I use it personally and that’s why I’m using it for (and recommending it to) small businesses. They could afford your 10-100 per month for whatever extra features, but they don’t want to rely on 3rd party hosting. They want to host it themselves.
    But the only way to get those features is to go for some “cloud” bullshit they don’t control, or to pay “enterprise” prices.

    It’s why I make part of what I make/charge a contribution to the products and projects I use and recommend.
    I’ll set all that up and tailor it to your company, but anything and everything I recommend/implement is standing on the shoulders of giants. So pay those giants.
    Although I think I’m lucky with the people I work for, in that that are interested in the tech, but not the detail.


  • Such a framework for a government to properly adopt FOS software would require provisions against a “bad government” controlling said software.
    Just because the US is plummeting into a political nightmare doesn’t mean the EU couldn’t do the same I. 20-40 years.

    Such a framework of governments moving from Microsoft/Google/Amazon/Cloudflare/Whoever to a FOSS equivalent should require the target Foss platform to be run by an independent non-profit that cannot be politically influenced.

    But I have no idea how to actually future proof that from corruption. Because money talks, and billions can buy so much influence in so many unexpected places






  • Trying to disable the windows key hotkey that opens the start menu, so the game The Witness can pause stuff, minimize, open the start menu and release the block on the windows key (IE do a more controlled start menu hotkey, instead of having windows rudely interrupt everything and break the game).

    Started with a 5 second hang whenever a debug breakpoint was reached. The dev started digging into the issue.

    Games use RawInput to get better mouse interactions, but that breaks the Microsoft recommended way of disabling windows key (as all input goes through RawInput instead of whatever the other windows API is).
    In the documentation for RawInput, it specifically states the flag to disable the windows key doesn’t work. So the Dev that was debugging the issue didn’t try it. Until the next day when they had the realisation that MSDN windows API docs are garbage, tried the supposedly not-working flag and it actually did work.

    The linked article is quite a good read, actually.
    I had to use one of the mirrors in the SO answer

    Edit:
    The mirror I used https://caseymuratori.com/blog_0006