You are not logged in.
zapper wrote:golinux wrote:Is it time to lock this useless thread?
Please do, nothing good will come from it...
It's just a bunch of flaming... which I realize i definitely participated in, but yeah...
This isn't doing anything beneficial.
+1 for locking this dumb thread
Yes, I agree but that's the easy way out of this. I'd rather see a collective effort of restraint that would also serve to challenge each participant's personal growth trajectory. That's a win/win solution for everyone to cultivate the concept of personal responsibility. If that fails, I'll reconsider . . .
Well, hope not taking the "easy way out" works... I am definitely unsubscribing from this topic for now though. Too much flames...
zapper wrote:+1 for locking this dumb thread
Well, this wasn't a "dumb thread" when I started it.
Looking at how fast it went off the rails in several respects, though, I regret having opened it in the first place.
Some people, it seems, just can't have a civil discussion. And, apparently, you're one of them.
I do at least admit I have some issues, I just don't like it when people outright make up scrap to satisfy their own goals/beliefs.
The addon structure for palemoon may not get updated as often, meaning individual addons, but whether its old code or not, the new code is just effed up to hell and back. I mean it is google's code so... yeah. I don't want a webkit chromium empire.
That being said, my real issue came when people started to mock me and think they are entitled to think they are better than me.
I hate being looked down on. When people do that, it can tick me off. People who think their superior to others tend to be the real ones who are inferior.
PS, yes it did go off the rails... sorry... I should learn to stay away from extremists like magicbanana and blackhole...
They will just try to make me feel like crap.
EDIT: and when I feel like crap, I usually only go off the rails myself just like them.
The projected price is $665 but that doesn't include a power supply. The old Unleashed board cost ~$3,000 with the expansion so the Unmatched board is pretty good value. I might even buy one myself...
That's way better than 3000$, still not great,
but yeah, its an improvement...
Though, 665$ is still twice as expensive as some intel or amd processors. Heh...
Still, it has modern security and virtually no backdoors so far to my knowledge, so thats a plus.
Is it time to lock this useless thread?
Please do, nothing good will come from it...
It's just a bunch of flaming... which I realize i definitely participated in, but yeah...
This isn't doing anything beneficial.
+1 for locking this dumb thread
HiFive Unmatched ushers in a new era of RISC-V Linux development with a platform in a PC form factor. Powered by the SiFive Freedom U740, a high-performance multi-core, 64-bit dual-issue, superscalar RISC-V processor.
https://www.sifive.com/boards/hifive-unmatched
This is a more affordable replacement for the Unleashed board and has M.2 slots for an NVMe drive & wireless card along with an x16 PCIe slot.
Product brief: https://sifive.cdn.prismic.io/sifive/c0 … sed%29.pdf
Interesting... I wonder how much it costs...
zapper wrote:Whenever HyperbolaBSD is finished...
I wouldn't hold your breath nor stake your hopes on a project which makes such "hyperbolic" statements as:
"Due to the Linux kernel rapidly proceeding down an unstable path..." and talks a lit about GPL3 while planning to base its project on code which is anything but.zapper wrote:I have interest in this because of wine-staging doesn't work in it
So you have an interest in an, at this stage, theoretical project from developers that want use the OpenBSD kernel, GNU userland, remove all firmware and "liberate" the kernel, just so that you can run wine and MS Windows programmes? I see.
zapper wrote:Edit here, OpenBSD disabled the mutlilib in wine for security reasons,
The OpenBSD project don't do any work on wine. The wine port has been incomplete / broken / abandoned for years.
Yes I have interest, I want my operating system to be as secure as possible while still being able to do what I want on it. Only one of my laptops will ever have wine on it though.
PS, I don't need to hold my breath, And by the way, don't insult me. It will turn into a flame war...
I am tired of being pissed, let's just say...
Hey, kids . . . this sandbox is for adults so take it down a notch.
FWIW, there is no ignore function on this forum. Get along or move on and take your delusions of self-importance along with you . . .
You raise a good point, I just don't like being looked down on.
Perhaps, I need to work on controlling my pride.
zapper, there is no "feud". You are spreading misinformation and betraying your own ignorance. Please stop.
This a bad case of "the mote and the beam"... first exhibit is your trolling of the OpendBSD misc mailing list with misinformation:
https://marc.info/?l=openbsd-misc&m=158692336815902&w=2
Software like wine or palemoon belongs in "ports" in any of the BSD projects. They are not part of the base system. If you want an OpenBSD port of palemoon, you're free to contribute one.
Your embarassingly childish outburst again on the misc mailing list, only betrayed yout complete lack of knowledge of the project.
https://marc.info/?l=openbsd-misc&m=158692845817261&w=2
Because you cannot post snything factual or worth taking the time to read you are ignored.
@Ron, is "old and obsolete, though still actively developed, code" better?
Blackhole, you are a troll and nothing more I have heard enough. Damn what an asshat you are. And the fact you plan to ignore me is further proof of your childishness.
You are "arrogant" Nice to see you still worship your magic banana ideology.
PS, I don't need to stop,
Also, they ARE ACTIVELY BLOCKING IT NOW!
Do you want to know the reason I don't post anything factual beyond what I have mentioned? Because you will never believe me no matter what.
I gave up long ago, but I detest being picked on. Kindly eff off!
Devuan's reason for existing has to do with Debian making retarded decisions on its users' behalf. If Systemd was an optional install and essential packages didn't depend on it, then all would have been well, but nope...
And, I think that's all Devuan needs to be: an actively maintained Debian without Systemd.
Why should it try to be anything else? I don't like most distros that are "designed" like Christmas lights and try to "reinvent the wheel" of Unix-like OSes. Let the individual decide how his or her system should be configured.
It will get harder to do that I am sure, but yeah you make a good point.
It's rather useless to ennumerate what Devuan should be doing unless you are willing to actually do it.
Maybe I wasn't clear enough, I meant it as a possible suggestion. I don't really have programming skills beyond some command line, and not much else.
Most of it isn't anything much... I know how to use things for my own personal use and not much else.
Do what you guys need to do, but I was throwing out my thoughts. You do have a point.
If nothing else though, ditching forking debian and being your own brand would be cool.
But yeah, do what is needed.
I realize what I am saying is from my own tower. I probably don't have a clue how much work any of that would be. It would be good if you could accomplish it all, long term, but such things might not be your aim and could destroy the project if done wrong or would be too tedious...
So yeah, probably not worth it.
You have enough trouble to work with already probably, forget I said anything.
debugging is something I am a little bit familiar with also, but fixing bugs... lol no way...
Hey, at least I am honest...
Was surprised that some members not aware of pulseaudio and systemd written by the same 'person' to put it nicely. Because most of his stuff is bloatware I wonder if he worked for M$ at one point! :->
And why name a running process rt-kit daemon? Apart from bad naming on another forum thread I read it was a potential security hole in respect of real-time processing!
Debian could ditch more of this bloatware and go in its own independent direction. Hyperbola a much smaller distro is already doing something similar.
why not cut, networkmanager, pulsecrap, system dumb libraries and even dbus out in future?
Not like you cant make other options open. dhcpcd-gtk works well enough, if dhcpcd has no dbus dependency.
Yes you would have to become more independent long term, but it could be worth it long term. The other option is to continue what your doing and to eventually struggle with fighting against redhat's trash.
It is a hard road though which should not be taken lightly though.
Whenever HyperbolaBSD is finished... I hope devuan or someone from devuan will make a derivative...
I have interest in this because of wine-staging doesn't work in it but could be made to work if someone wants to.
Edit here, OpenBSD disabled the mutlilib in wine for security reasons, but that will likely remain the same.
Not all of this is directly devuan related, and I don't know if anyone will take this seriously, just putting it out there.
Take whatever you want from it as long as you don't use it against me.
Ron, being a one man project with a few helpers is still to all intents and purposes a one man project - Slackware for example (and he hasn't released in 4 years), is still a one man project. Debian for example is not.
So no I'm not spreading "misinformation".
Zapper, a very secure piece of software can still be a data mining telemetry engine - but can do that securely (as paradoxical as that may seem). You're perhaps conflating security and privacy - a common fallacy. Using your logic, bug ridden code with multiple vulnerabilities could be considered "security focused", if it doesnt "phone home" [to google]?
"Webextensions vulnerabilities" won't occur "much" in pale moon, they won't occur at all, as it doesn't implement webextensions. So not sure what your point is there?
So thus far I remain unconvinced that pale moon, based on dead firefox code, is more secure by default on account of it not bundling the google spyware (which you can disable in firefox) and not using webextensions.
I'm not sure of the stance on noscript, I'm sceptical of add ons which come with a default whitelist which includes facebook, google, etc. It boils down to privacy not being something you can just install.
If you want further confirmation of which browser is the most secure, then I suggest you read this comment by Theo de Raadt of OpenBSD:
https://marc.info/?l=openbsd-misc&m=152872551609819
Or is the lead developer of arguably the most secure FOSS OS also spreading misinformation?
To add: One can find plenty of vulnerabilities in webextensions. It looks shoddy, but sadly xulrunner (xul xpcom) was actually quite poor in terms of security and privacy and there were whole slews of vulnerabilities in that over the years, so its not a great choice. It calls the whole idea of "browser addons" into question. When you install any add on you essentially place trust in a 3rd party - who are then in a position to intercept all traffic.
A search of cvedetails.com for anything relating to xul xpcom or xulrunner gives over 800 results where a search for webextensions gives just over 250 or so. obviously as webextensions is still in its early years (it only completely replaced xul xpcom around 3 years ago) and due to much greater exposure and being a much bigger target (who is going to care about looking for vulnerabilities in dead and obsolete code used by <1% ?) it stands to reason there will be more cves there and more recent ones. Whether its privacy focused designed to be secure or part of a google plot is an entirely separate issue.
Yeah... you do realize palemoon is restricted in OpenBSD because of a feud between palemoon and OpenBSD right?
They are very easily ticked off, the people of OpenBSD,
That aside, stop saying its dead code, that is false, as he and his team of devs is working on it currently.
I should also mention, you would be correct in the assumption that I wrote that wrong, what I mean is this, privacy doesn't exist on firefox or chrome. You cannot have privacy without security true, but I don't think with all firefox's antifeatures that matters. Some may be hidden from even volunteers, aka, only the core developers know about it. Perhaps, even google only knows some of the worst webextension ones. Besides that though, Most of those XUL fixes I would be willing to bet if they are on the CVES list, they have mostly been patched by now.
I also though would like you to show me the scale of the threat. Like say, 1-10. 10 being really critical issues.
But why do you waste your breath on someone who sees through your bias. Sigh... its this kind of thinking thats given chrome so much of an empire on the web browser market. Firefox was way better off staying away from anything google.
By the way, maybe you should look at the motives of firefox, chrome and Palemoon and compare.
From what I remember, palemoon's motives are more or less, as a service for the community.
Firefox on the other hand is a friggin corporation, and they get donations from google lol! so yeah... no.
Google chromium... yeah... let's not even go there. its google!
You remind me of a user from a certain forum, I will leave his name hidden for now though. But he supports anything bloated, gnome 3, webextensions, redhat's system dumb, pulseshit, dumb-bus, etc... java and rust also... which are both crap. I prefer not to beat a dead horse though forever and ever, we will not see eye to eye, but stop misinforming people. You don't even know what you are talking about.
-_- ....
EDIT: Oh and also I should add, if the privacy issues include backdoors, you literally are reducing security.
So yeah... nope, not interested.
Please feel free to move this to "Other topics", or elsewhere if another section is more appropriate. Two questions and accompanying comments. Today was my first encounter with Devuan, and the overall experience was largely positive--thank you.
1. Printer: effortless. Worked very well. Thanks to all. Question is coming.... First: a dozen odd (and some "old", but all 64 bit) computers running Debian, Mint 19.3, or 20.0. A fresh install of 19.3 is accomplished just as easily as today's install of Devuan Beowulf. No such luck, however, with Mint 20. Reason, I guess, is because Ubuntu no longer supports 32 bit drivers for my printers, scanners, etc....all of which, themselves, work just fine, though they are a decade or so, old. I am not flush with cash, and reluctant to discard something just because a shiny new toy exists. I am keeping my printers and scanners, and hoping that I will continue to find a Linux version to support them, though they are connected via Win XP software, on a separate computer running that antique operating system. Question: How long will I be able to use Beowulf, to print, or, is the future looking just as bleak, as it does, for Mint 20 --where my devices no longer function?
2. Sound: Wow, felt like back in 1980 running Unix on a Dec VAX. Very primitive, completely the contrary to the experience with Mint 16, 17....20. This is to my way of thinking, a killer, for this OS, if it isn't possible to fix, in a forthcoming iteration. Of course, could be user fault. This is my first experience, and four hours later, I still haven't solved the issue. Granted, unlike the first hour, I do have sound!!! hurrah. BUT, the road isn't obvious, nor does it work, simply by turning on the computer, as everything else does. In the olden times, we had to type, for example, startx, which was a user interface to the X-Windows system. How many users of Devuan would be pleased to know that they could see the desktop, whenever they wanted, just by typing startx ? I don't want to type startx. I want the desktop to work when I turn on the computer. Ditto for sound. More than an hour of fiddling, editing obscure files in /etc, and so on, I STILL DON"T HAVE audio, unless I open a terminal, and yes, TYPE, no, not startx, but rather, pulseaudio --check followed by pulseaudio -D. N.B. (nota bene) these two commands work, and work well, however, one must not type pulseaudio -check, or pulseaudio --D. Those hash marks, i.e. hyphens, must be spaced and elaborated, exactly as shown. WHY? Why must I type these two commands with their oddly asymmetric hyphens, every time I boot the computer, as if "startx", all over again? (mind you, startx was itself, an improvement, three decades ago, over the alternative!!!)
cheers,
caieng
Alsa is way better than pulseaudio. install alsa-utils, and enable that. Pulseaudio sucks in my opinion. You should remove pulseaudio. Also, each release of devuan usually is supported for at least three years at least that's what I recall anyways.
Will clarify, pulseaudio is not only bloated but its focused on newer technology. Older technology it doesn't work on as well. Typical redhat right? *cough system *cough Dumb *cough
But yeah hope you stick around for a while.
Next to Hyperbola, this is my favorite linux distro.
There is some misinformation about Pale Moon in this thread, so at risk of being called a lackey, I'd like to correct the record. I'll just mention one inaccuracy.
blackhole wrote:I don't disagree with many of your points, but a largely unknown browser from a one man project . . .
According to the developer,
Pale Moon is not "just me" and hasn't been for the majority of its life. There are some talented and dedicated people at work in our community to make Pale Moon what it is, and actually has seen support in many ways by many people over the years.
The above quote is from here. If you want the facts on Pale Moon, I suggest giving it a read.
Yeah, I don't think your a lackey. I think people are either biased against palemoon or misinformed. Not sure which...
Also, webextensions vulnerabilities dont occur much on palemoon. XUL has a lot less vulnerabilities that I have seen so far compared to webextensions...
so yeah there is misinformation on this thread... not sure if its on purpose though.
I don't disagree with many of your points, but a largely unknown browser from a one man project forked from dead code which was previously developed by a large paid team of devs, cannot automatically be considered secure - especially as that generation of firefox/mozilla was never particularly secure to begin with. You seem to be missing the point the firefox cves will mostly apply to its forks as well... Check the dates of all of those exploitable and bear in mind that most of his security fixes are backports. I assune that the two cves, one severe and remote, are palemoon specific and that firefox was not affected as it was not based on the same obsolete code. .You're also skipping over the fact that modern browser have security features such as sandboxing. Despite the bundled data collection, chromium project is currently the most secure.
He also only dropped google's safebrowsing telemetry because the version in his fork was obsolete and unsupported by google. Not for any rationale relating to privacy. Same reason geo.ip was dropped - and for that he found a reolacement. Go to that site and see how precisley and efficiently it locates you.
I have nothing against palemoon, but agree with the author of the linked article that user spinning it as a privacy and/or security focused browser are doing so out based sone misunderstanding. Its pre australis firefox.
Pale moon amounts to a tiny fraction of a percent of browser marketshare, where firefox is more than a few percent and chromium is massive (a massive monopoly). These browsers have greater exposure, more eyeballs and are bigger and more attractive targets, so it stands to reason that move vulnerabilities are found and fixed.
How can chromium be the most secure if its doing a massive amount of data collecting? That doesn't make sense. Also, they plan to make addons that block ads worthless, not sure if they have been doing that yet, but they planning to last I checked, plus its made by google. Don't trust google man, its bad...
If you want to make a case against palemoon, there is only one issue I have with them, they don't seem to be too fond of noscript. As for everything else you say, i kind of doubt sandboxing is enough to justify using a chrome based web browser. If there is another issue, its that not enough addons get updates.
Besides, more eyeballs doesn't work if they aren't razor focused on the real issues, such as blocking data collection and preventing malware. I am sure they are decent at preventing malware, but Palemoon focuses on stability, security and usability and nothing else.
Firefox has become like, hardly better than chromium. They are losing their individuality due to webextensions, which in itself, has a fingerprinting issue.
Greater exposure can be good, but only if the developers are serious about not allowing the phone home crap. Which btw, firefox isn't. So meh... I will keep using palemoon till something better shows up. Which I really doubt.
That all being said, the two issues gave are valid, the ones you gave, not so much.
zapper wrote:Palemoon does not phone home anymore if it ever did. That I don't know[...]
I hope I'm not alone in seeing the fallacy there...
If data collection can be disabled, in firefox then I don't personally see the need for any of the current 3rd party forks or "based on" projects. With the exception of ungoogled chromium I can't see the benefits.
Of course the browsers, the web in fact has becone hugely complex and is largely under the control of several huge US corporations (including FAANGS). To build a new browser is beyond the resources of any individual, small project - beyond anyone lacking the support of those. Linux itsekf haa become largely developed and financed by fortune 500 companies. A web browser like chromium/blink is a larger codebase now than some entire OS'. If you have tried building firefox or chromium from source you will know what I mean.
From a security perspective, firefox has been catching with chromium in terms of multi process sandboxing and other security features, pale moon, a fork of a several years old firefox release, isnt even close.
Nope, no yours is the fallacy, Seriously...
chrome and even chromium are spyware hell and is largely insecure due to this. As for, palemoon, they focus on stability and security primarily. Not new features like firefox does. Also, those new features of firefox and chromium are largely antifeatures. Remember pocket? that spys on you. They try to add stuff like that all the time...
So... yeah. I refuse to trust webextensions anything. Or google anything. By the way, palemoon is not built from scratch, its based on old firefox yes, but they have less vulnerabilities in their system, not more but less!
They also are making changes based on current firefox and they patch things quickly. By current firefox, I mean stuff that would affect palemoon too. Which by the way, there is alot less of that... Defense in depths and not applicable are alot more common though.
Adding that correction so you know what I mean. aka about defense in depht, etc...
Also, even if you disable data collection in options in firefox, it dials home a hell of a lot.
I have seen this a lot even in post webextensions icecat, let alone regular firefox. My cache by firefox was used twice as much even when i disabled all of their spyware defaults. I compared palemoon to firefox, both with noscript on default settings. I don't know why you would trust anything googleized, including firefox webextensions versions.
By the way, the larger the code base, the more time it takes to audit and fix problems.
This is the same issue as system dumb and arguably redhat's freedesktop.org crap in general. Bloated...
The more bloat, that harder to audit, the harder to fix.
Compare the vulnerabilities here: https://www.cvedetails.com/
You will find more critical bugs in firefox than palemoon.
I am kind of surprised someone who hates something as bloated as system dumb, would support something as bloated as firefox or chromium whether its ungoogled or not when there are clear alternatives... This puzzles me to no end.
When installing multimedia software pulseaudio can be pulled in as a dependency or as a recommends. This can be blocked by using APT pinning. Place a file in /etc/apt/preferences.d containing the following: -
Package: pulseaudio
Pin: release n=beowulf
Pin-Priority: -10Any software you do not want installed can be blocked in a similar way.
I use a Perl script to generate an avoid-pkgName file.
Sounds good!
Palemoon is also sometimes recommended by people as a privacy respecting browser, but Palemoon is not even promoted as a privacy respecting browser so I don't know where that comes from. Palemoon also "phones home" and it also connects to Google every time it is started up just like Chromium.
This mitigation guide resolves the above problems (i.e. "phoning home" and contacting Google). There's also a fork with placeholder title Web Browser that corrects much of Pale Moon's mistakes (e.g. automatic updates, add-on blacklists).
Palemoon does not phone home anymore if it ever did. That I don't know, but anything based on webkit or webextensions, you should look at from a distance if at all even.
remember, google made webextensions and as for webkit apple and google both must use it for a reason... Do not trust them for this and because google is google.
Which is to say, do plenty of evil.
blackhole wrote:There was a thread about Mozilla recently on LQ:
The trouble is, that the alternatives to Firefox are worse. The 3rd party forks are what amounts to snake oil salesmen peddling their wares. I despise the UIs of both chromium anf Firefox, but just learned to live with them and disable the telemetry / data collection where possible.Sounds like Stockholm syndrome to me. I can't speak to other FF forks, but your comments about them don't apply to Pale Moon.
I trust palemoon, way more than the other browsers, Moonchild can be sometimes, a bit of a dick, but he means well. And he isn't in this for greed like mozilla, google, microsoft, etc... and also, he is the only one fighting the webkit/chromium empire.
Thus, I will always use palemoon or basilisk or iceweasel-uxp if possible.
That being said, yes it sounds like stockholm syndrome to me also.
I used cinnabar colors for Beowulf. That crimson pigment (which is quite toxic) was very popular in the Renaissance.
Yes, and that was very lovely.
This one is a bit more meh, but if you guys like it, go ahead. I mostly use Hyperbola nowadays aside from my X230 which I might use less in the future.
Besides, wallpaper isnt as important as the project itself, right?
Unless one uses older hardware, intel graphics and/or rhe nouveau or vesa drivers you're pretty much stuck with proprietary firmware for display adapters . Even when using a completely FOSS solution, x86 as an architecture uses a lot of firmware, much of it already on the devices - and it's almost always proprietary.
Yes, I had forgotten that... my bad...
I use a few old thinkpads at the moment...
third gen + second gen. Both on the X type.
Although for the life of me, if something cannot be corebooted and have intel me disabled, I will not use it for my personal projects.
Also, I wont store anything sensitive or anything projects of lasting value unless I have a better setup than that still. Like something where you can completely remove the intel me from the hardware.
This all being said, I think nvidia, is harder to liberate then intel even.
I guess my point is, avoid new hardware whenever possible if its x86ish whether its intel or amd.
Otherwise, security and stability issues will occur eventually.
Edit: I should probably stop replying here, this is way off topic... ps, I do have some writing hobbies in case you wonder what I try to hide.
Runit with runit-init for me was twice as fast as openrc. Hard to believe, but yeah it is.
It worked fine for me on both testing devuan and devuan beowulf, can't say if the others it works well on.
But, on devuan beowulf when you switch from openrc to runit and add runit-init and then try to go back for some reason to openrc, I once had some issues on beowulf. heh... weird stuff.
If you intend to install runit-init + runit the moment you install devuan beowulf, don't install openrc right off the bat. Unless you know something I don't...
That kind of thing caused me some issues once, where dependency hell got in the way...
PS, in my experience, runit + runit-init cut my boot time in half. and shutdown happens in a 1/3 less time if I recall correctly.
There has never been a brown theme. That was Ubuntu.
Hmm, maybe its more of a dark redish brown i was thinking of.
Lol...
I got my colors mixed up probably.
This wallpaper is okay, but I liked the brown one more. A light gray one would also be good in future someday though!
I installed devuan on one computer once, a while back, it refused to let me log in without logging me back out, different problem, but it may be due to the same sort of issue, this desktop computer needed propreitary firmware to run properly. My point being, avoid nvidia if possible... or any propreitary firmware... not even just a security issue, but also stability issue and a juice guzzler issue... meaning it drains battery fast.
If you still insist on using it, the poster above me has a point, you need some more logs or information to give us for us to help you.
I know my inital reply isn't helpful if you insist on using the nvidia driver or if its required, but yeah, that's usually how I think. So my bad...