UDisks2: Security Considerations

steve_v · Yesterday 15:54:20

someone else’s posts

s/someone/something/g

Obvious wall of LLM-generated copy-pasta is obvious, and the arguments it makes are all either inane or inapplicable. Do you really think anyone here cares about the threat of "shadow IT", "unknown assets" or the rest of the corporate-drone buzzword-soup padding? We are shadow IT.

Many other boards have policies regarding AI generated content (usually "go away"), perhaps it's time for the same here?

Last edited by steve_v (Yesterday 15:54:58)

igorzwx · Yesterday 16:19:43

You seem to insist on your right to censor my posts.

fsmithred · Yesterday 16:27:34

Igor,

If steve_v has censored any posts, they were his own, and there's a note showing that he edited them. He can't edit your posts. I can, and if I ever do, I will leave a note in that post saying so. If any of your posts were edited by another admin, I'm not aware of it.

fsmithred

igorzwx · Yesterday 16:35:07

Censorship doesn't necessarily mean editing. There are many ways to silence someone.

There are many subtle ways to discourage someone from posting on a forum — beyond outright censorship. Constant accusations, excessive moderation, personal attacks, or repeatedly questioning someone's intent can create a hostile environment that pushes people away.

Last edited by igorzwx (Yesterday 16:53:19)

laurie_dev1 · Yesterday 22:40:52

brocashelm wrote:

It's possible to remove the D-Bus daemon and get a pretty lean desktop, but if you want every single part of it (e.g. libraries) gone, you'll pretty much have nothing to work with. I experimented with this in a VM, and it's pretty bleak if you do it. Dillo is the only "graphical" Web browser that actually does survive this purge.
There was/is an experimental Refracta ISO from the Beowulf era that removes as much D-Bus as possible, using SpaceFM with LXDE's panel in place of Xfce. Perhaps Fsmithred could upload it again for your curiosity.

I gave it a try with some input from that thread @fsmithred quoted.
I was able to run the xorg session using bspwm ok, pretty much left to terminal utilities for the most part unless you install programs using tk an the like.
Yes, dillo was a graphical web browser i could install, good old fltk.
gtk3 needs dbus libraries, not sure about gtk2, but seeing as gtk2 is being phased out, im probably out of luck there as well with binary installations.
As has been noted, one could probably build programs without dbus, i had a look into firefox but seeing as though it relies on a host of dependencies related to dbus and gtk3, one would probably have to build gtk3 without the need for dbus first then firefox without dbus, not sure if that would be even doable.
Maybe palemoon or basilisk gtk2 web browser versions could be built without dbus.
There was one browser called privacybrowser that didnt need dbus provided by debian but it wants to drag in a lot of kde/qt6 dependencies and from what ive read debian does not include support for security updates in stable in regards to the qt6-webengine.
https://bugs.debian.org/cgi-bin/bugrepo … ug=1057755

This was just an experiment btw, not something i would use in production or daily, I need a fully functioning web browser like firefox.

But yeah here is what i did to pin all the dbus packages, not sure if all of those packages are warranted to be pinned, but why not do it anyhow!

Package: dbus
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus
Pin: release n=excalibur
Pin-Priority: -1

Package: dbus-system-bus-common
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus-system-bus-common
Pin: release n=excalibur
Pin-Priority: -1

Package: dbus-x11
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus-x11
Pin: release n=excalibur
Pin-Priority: -1

Package: dbus-bin
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus-bin
Pin: release n=excalibur
Pin-Priority: -1

Package: dbus-daemon
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus-daemon
Pin: release n=excalibur
Pin-Priority: -1

Package: dbus-session-bus-common
Pin: release n=excalibur-security
Pin-Priority: -1

Package: dbus-session-bus-common
Pin: release n=excalibur
Pin-Priority: -1

Package: libdbus-1-3
Pin: release n=excalibur-security
Pin-Priority: -1

Package: libdbus-1-3
Pin: release n=excalibur
Pin-Priority: -1

Last edited by laurie_dev1 (Yesterday 22:49:47)

ralph.ronnquist · Yesterday 22:54:00

Don't copy AI output to here, @igorzwx, or anyone.

igorzwx · Today 00:29:59

The skepticism toward AI today parallels the Soviet-era rejection of cybernetics.

From 1950 to 1954, the reception of cybernetics by the Soviet Union establishment was exclusively negative. The Soviet Department for Agitation and Propaganda had called for anti-Americanism to be intensified throughout Soviet media, and in an attempt to fill the Department's quotas, Soviet journalists latched on to cybernetics as an American "reactionary pseudoscience" to denounce and mock. These attacks were interpreted as a signal of an official attitude to cybernetics, Soviet writers thus portraying cybernetics as "a full embodiment of imperialist ideology” during Joseph Stalin's premiership.
_https://en.wikipedia.org/wiki/Cybernetics_in_the_Soviet_Union

Nikita Khrushchev called genetics and cybernetics "prostitutes of capitalism."
Nikolai Vavilov, a geneticist, was arrested in 1940 and died in prison in 1943.
He was a fellow of the Royal Society, that is why, perhaps, we know what happened to him.
The fates of many other Soviet scientists remain obscure.
_https://en.wikipedia.org/wiki/Nikolai_Vavilov

Victor Glushkov: Insights to Remember
... In 1952, he earned his doctorate by proving the Fifth Generalized Problem of Hilbert and continued his academic career. In 1956, he headed the modeling and computing technology laboratory at the Mechanical Institute in Kyiv, where Sergey Lebedev and his team assembled the first European computer MESM.
In 1957, Glushkov transformed his lab into the Computing Center of the Academy of Sciences. In five years, it evolved into the separate Institute of Cybernetics.
..It is fascinating to delve into the intriguing narrative of how Glushkov navigated resistance to defend his mindset against Soviet bureaucrats, dragging talented managers into the swamp of the communist party's internal struggle.
_https://glushkov.dataart.com

For some strange reason, Victor Glushkov did not hate AI. In 1970, he developed the Evidence Algorithm (EA) as a research program in artificial intelligence focused on automated theorem proving. He considered AI as a part of cybernetics.

The Soviet rejection of cybernetics and repression of scientists contributed to its problems with technological innovations and failure in the Cold War arms and computing race.

Last edited by igorzwx (Today 20:01:01)

pcalvert · Today 00:34:30

ralph.ronnquist wrote:

Don't copy AI output to here, @igorzwx, or anyone.

A possible exception to this is:

You wrote something yourself, and you asked an AI to proofread and improve your writing because you aren't very good at writing, or because English is not your native language.

igorzwx · Today 00:45:14

There was an old Polish joke from the 1930s. A group of hares tried to cross the Polish border. They said they needed refuge because the Soviet secret police were arresting camels. But you’re not camels! Yes, but how can we prove it?

golinux · Today 03:37:38

It is the word "camel", or any other word for that matter, that is the problem. We assign words to objects but the words are not and never will be those objects. IOW we live in a "world" of abstract thoughts that weave a "fantasy" that has little to do with reality and ironically keeps us on a never-ending treadmill of more of the same . . ..

tux_99 · Today 04:25:33

ralph.ronnquist wrote:

Don't copy AI output to here, @igorzwx, or anyone.

Thanks for that, what I find particularly annoying is when people post LLM slop without even declaring it (and therefore pretending they wrote it themselves), people should at least have the decency to put it in quotes and declare which LLM/chatbot they got it from, just like when quoting from a website or any other source.

Last edited by tux_99 (Today 04:29:26)

ralph.ronnquist · Today 04:34:08

Yes we don't want AI output copied to here at all.

Feeling insecure about language or whatever is not an excuse: No AI output copied to here.

We are all grown-ups; a range of ages, from very old and down to quite young. Just show respect for everyone's language ability.

Devarch · Today 09:04:38

The skepticism toward AI today parallels the Soviet-era rejection of cybernetics.

It's possible that it was just propaganda to make West to believe in it.
They were first or among first in AI. The soviet AI called Pankrat and some soviet ideas probably got their second birth in Deepseek.

igorzwx · Today 13:02:06

The problem is not censorship, but mob censorship.

greenjeans · Today 19:56:56

If you write the software, you get to decide what options and dependencies it has.
If you package the software, you get to decide which of those are enabled.
If you just use the software, you get to complain ineffectually, and I get to give you shit for it.

ROTFL! That is some sig-line material right there.

So true too....

@Igor if you were in reality a robot and you didn't know but the rest of us did, would you want us to tell you?

igorzwx · Today 20:27:35

Devarch wrote:

It's possible that it was just propaganda to make West to believe in it.

If you like conspiracy theories... maybe anti-AI propaganda is sponsored by Russians. Kremlin is not a charity organization.

Last edited by igorzwx (Today 20:50:10)

ralph.ronnquist · Today 21:57:57

Find some other place for chatting please.

The officially official Devuan Forum!

#26 Yesterday 15:54:20

Re: UDisks2: Security Considerations

#27 Yesterday 16:19:43

Re: UDisks2: Security Considerations

#28 Yesterday 16:27:34

Re: UDisks2: Security Considerations

#29 Yesterday 16:35:07

Re: UDisks2: Security Considerations

#30 Yesterday 22:40:52

Re: UDisks2: Security Considerations

#31 Yesterday 22:54:00

Re: UDisks2: Security Considerations

#32 Today 00:29:59

Re: UDisks2: Security Considerations

#33 Today 00:34:30

Re: UDisks2: Security Considerations

#34 Today 00:45:14

Re: UDisks2: Security Considerations

#35 Today 03:37:38

Re: UDisks2: Security Considerations

#36 Today 04:25:33

Re: UDisks2: Security Considerations

#37 Today 04:34:08

Re: UDisks2: Security Considerations

#38 Today 09:04:38

Re: UDisks2: Security Considerations

#39 Today 13:02:06

Re: UDisks2: Security Considerations

#40 Today 19:56:56

Re: UDisks2: Security Considerations

#41 Today 20:27:35

Re: UDisks2: Security Considerations

#42 Today 21:57:57

Re: UDisks2: Security Considerations

Board footer