Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
eschaton
Mar 7, 2007

Don't you just hate when you wind up in a store with people who are in a socioeconomic class that is pretty obviously about two levels lower than your own?
I haven’t worked on testing since about then but I’m still plenty associated with it in folks minds

your X stuff is so memorable in part because of just how clear it is for something that’s often explained pretty opaquely, and then there are the demos

Adbot
ADBOT LOVES YOU

Beamed
Nov 26, 2010

Then you have a responsibility that no man has ever faced. You have your fear which could become reality, and you have Godzilla, which is reality.


Suspicious Dish posted:

Because it was genuinely more fun than what I was doing at work that day. Speakings of, my new job lasted all of six months.

where're you off to next?

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe

Beamed posted:

where're you off to next?

heading back into games

pseudorandom name
May 6, 2007

hey, now that Telltale is dead and can't possibly care about secrecy, what were the Linux ports you were working on even for?

spankmeister
Jun 15, 2008






I wish Monty would do some more explainer videos, those were real good.

The_Franz
Aug 8, 2003

pseudorandom name posted:

hey, now that Telltale is dead and can't possibly care about secrecy, what were the Linux ports you were working on even for?

if they were secret and weren’t for steam it’s a 99.999% chance it was stadia

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe

pseudorandom name posted:

hey, now that Telltale is dead and can't possibly care about secrecy, what were the Linux ports you were working on even for?

https://www.dslreports.com/forum/r31704565-X1-Walking-Dead-game-on-X1

The_Franz posted:

if they were secret and weren’t for steam it’s a 99.999% chance it was stadia

we had a stadia project in the works but company died before it got out of prepro

feedmegin
Jul 30, 2008

Rufus Ping posted:

He said "a" though. He wanted the singular and got it right

You can't stack one sheet of lasagna. By nbsd's rules he wanted 'lasagnas'

spankmeister
Jun 15, 2008






freeing stuck post from radiums clutches

e: hm there wasn't one, oh well

Athas
Aug 6, 2007

fuck that joker
I just installed NixOS; partly because I wanted to learn a new computer thing, and partly because I was nostalgic for the evenings I spent as a teenager trying to tweak my Gentoo system.

It's not at all like it used to be. Both sound and GPU drivers worked out of the box. Only bit of excitement was that KDE (the suggested default) would crash upon login, but that was easily fixed by switching to GNOME.

Phoenixan
Jan 16, 2010

Just Keep Cool-idge
i'm starting to think the real reason linux people love scrapping everything and starting over is now they've had to endure the horrors of actually using a computer

Breakfast All Day
Oct 21, 2004

Athas posted:

I just installed NixOS; partly because I wanted to learn a new computer thing, and partly because I was nostalgic for the evenings I spent as a teenager trying to tweak my Gentoo system.

It's not at all like it used to be. Both sound and GPU drivers worked out of the box. Only bit of excitement was that KDE (the suggested default) would crash upon login, but that was easily fixed by switching to GNOME.

nixos is cj as gently caress but its a v diff cj than gentoo. if anything its the anti-gentoo. it's for cjs who care about having solved problems rather than relishing the act of solving identical problems over and over in an eternal simulacrum of 2003

i wouldnt want to run nixos on my workstation but i have it for small server i was always rebuilding and i literally havent thought about it or touched it in over a year. it does attract gentoo/slashdot types because of some weird torch-passing reputation but they tend to bounce quickly once they realize nixos has wholly embraced systemd and has no interest in changing

Progressive JPEG
Feb 19, 2003

i feel that way about arch. it doesn't come with everything pre-installed but all the packages work fine out of the box with reasonable defaults plus pretty consistently good documentation via the wiki, and the packages are kept up to date with no or minimal patching from the distro

it does effectively require already knowing how to do a linux and how the pieces fit together to get what you want, but if you're already starting with that knowledge level then it's pretty much set and forget

ive had a ThinkPad running the same arch environment for something like three years now. if it was on ubuntu or something i'd have probably needed to reformat once every 6-8 months in that timespan either due to new distro releases or from something simply making GBS threads itself in a way that isn't worth diagnosing. instead i just "pacman -Syu" every couple months or so and bump everything to latest and it all just kinda works as installed

akadajet
Sep 14, 2003

arch is like crossfit...

you do a lot of work, and you get real sweaty and tired. but in the end, you're not really accomplishing anything.

Granite Octopus
Jun 24, 2008

For the last couple of nights I've been setting up Arch on an old box I had lying around. My job requires me to lightly admin a bunch of linux servers but I never really have to do much, so I've embarked on this Arch experiment as a way of actually learning some stuff about linux.

For that its been quite nice, and the wiki is a surprisingly well-written resource. I probably wouldn't run it if I had to actually use it to do a job or anything productive though.

Sapozhnik
Jan 2, 2005

Nap Ghost
pacman is the best package manager, it's kind of shocking how bad everything else is by comparison

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe
Red Hat continually hosed themselves over with that one. rpm still uses bdb (yes, that bdb, the text file that is less stable that csv and shouldn't be called a "database") under the hood because... erm, nobody knows why. So more layers on top it goes.

razor was a good idea but team politics means it had to be cut.

apt is just... I really don't know how you invent something as broken as apt.

Notorious b.s.d.
Jan 25, 2003

by Reene

Suspicious Dish posted:

apt is just... I really don't know how you invent something as broken as apt.

second-system effect after the dselect fiasco

Granite Octopus
Jun 24, 2008

when i have to use npm at work, I long for something as stable and fast as apt

Progressive JPEG
Feb 19, 2003

akadajet posted:

arch is like crossfit...

you do a lot of work, and you get real sweaty and tired. but in the end, you're not really accomplishing anything.

thats the weird part tho, ive found arch to need little to no janitoring effort in practice, which is absolutely out of character with how niche distros usually work

its like someone made sure that any janitoring you do should be as predictable and straightforward as possible, so that on the occasion you want to change something it's done after 5-10 minutes of following a surprisingly competently written wiki page, and otherwise it's basically in a steady state of periodically updating packages and not having anything spontaneously break on you

i still wouldnt use it for something im getting paid to do (lol at being the arch guy at work) but its very pleasant for personal machines

Qtotonibudinibudet
Nov 7, 2011



Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki
arch requires a decent amount of janitoring to set up, especially if you need something less than standard. encrypted disk for work laptops has been an enjoyable hike through several contradictory wiki articles the last few times ive done it. the instructions even for standard installs are still pretty iffy. after getting a system to an installed and usable desktop state i'd say it's more painless than most systems: dist-upgrade and equivalents have typically caused me more pain than rolling release, even with the occasional breaking change/manual action needed.

pacman and aur integration tools are still amazing regardless.

Progressive JPEG
Feb 19, 2003

actually now that you mention it, I do specifically remember getting disk encryption set up the first time being a bit of trial and error, but I hadn't needed to touch it since that initial setup years ago and had forgotten about it

spankmeister
Jun 15, 2008






In my experience Arch needs constant attention. When doing a simple Pacman -Syu you really need to pay attention if anything has changed and make the required changes. Often these are well documented in the wiki, but if you don't follow the instructions you're hosed.

I have this old laptop that I put Arch on just to okay around with it and I would use it for a while then put it away for a couple of weeks. That is really dangerous. Getting an arch system updated after a couple weeks of not using it is very painful. In those weeks they might have changed several important things and if you just go in and run Pacman you'll gently caress up your system.

Instead, you have to spend an hour reading the wiki and figuring out what changed and make a plan on which updates to do, what manual changes they need, and most importantly in what order.

This has been my experience with Arch. If you give it constant attention it's fine. Treat it like any other Linux and you'll be punished for it.

And I just cannot be bothered putting in that kind of effort. I just wanna apt update && apt upgrade -y or dnf upgrade -y

Tankakern
Jul 25, 2007

ohh western digital is adding zoned device support (smr) to btrfs, cool

is it actually possible to get a drive with smr as a consumer, or are those drives still sold by the pallet to cloud providers?

Progressive JPEG
Feb 19, 2003

spankmeister posted:

In my experience Arch needs constant attention. When doing a simple Pacman -Syu you really need to pay attention if anything has changed and make the required changes. Often these are well documented in the wiki, but if you don't follow the instructions you're hosed.

I have this old laptop that I put Arch on just to okay around with it and I would use it for a while then put it away for a couple of weeks. That is really dangerous. Getting an arch system updated after a couple weeks of not using it is very painful. In those weeks they might have changed several important things and if you just go in and run Pacman you'll gently caress up your system.

Instead, you have to spend an hour reading the wiki and figuring out what changed and make a plan on which updates to do, what manual changes they need, and most importantly in what order.

the most I've experienced over the last few years of using it is if the kernel gets updated and I don't reboot afterwards then mounting new volumes sometimes won't work until I do that. it's otherwise been set and forget

r u ready to WALK
Sep 29, 2001

the thing that seems to be missing from all the linux package managers is a robust mechanism for doing stepped upgrades

if you are way behind on updates you should have the option to sequentially update to intermediate versions in the order they were released instead of going directly to the latest version, so that you can follow the most well tested path

i guess it would mean that repositories have to keep outdated versions of packages available for longer but i think it would be worth it to avoid breaking systems that are slow to update

Tankakern
Jul 25, 2007

in gentoo you can have the system only install packages marked as stable, but also mark specific packages as unstable, maybe thats up your alley

suse might be a candidate too, it has that zypper package management snapshot-thing integrated (using btrfs) which makes it really easy to roll back stuff

Athas
Aug 6, 2007

fuck that joker
I had only been running NixOS for a few hours before I created my first pull request, and today I made another. While it's clearly a cj-heavy distribution (because it has so few users and I have obscure needs), it does feel fundamentally sane and approachable. In contrast, I ran Debian for a decade and never managed to put together a package for upstream.

hobbesmaster
Jan 28, 2008

Athas posted:

I had only been running NixOS for a few hours before I created my first pull request, and today I made another. While it's clearly a cj-heavy distribution (because it has so few users and I have obscure needs), it does feel fundamentally sane and approachable. In contrast, I ran Debian for a decade and never managed to put together a package for upstream.

the only way to create a package for Debian is to create an open source project and wait. eventually a random build at least 6 months old will appear in Debian unstable with some strange changes applied to it

hifi
Jul 25, 2012

gnu hyperbole is the poo poo. i probably made fun of it 10 years ago but i'm getting all sorts of ideas with it.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

eschaton posted:

lasagñæ lmao

Progressive JPEG
Feb 19, 2003

hobbesmaster posted:

the only way to create a package for Debian is to create an open source project and wait. eventually a random build at least 6 months old will appear in Debian unstable with some strange changes applied to it

why does this encryption code need random numbers anyway

Sapozhnik
Jan 2, 2005

Nap Ghost

Progressive JPEG posted:

why does this encryption code need random numbers anyway

i'mma be real here, since i've talked a whole bunch of poo poo about debian on this very forum because of that issue

actually reading about this revealed that upstream openssh key generation program was using stack garbage as a significant source of entropy, in the sense that patching out the use of heap garbage reduced the entropy bits to a brute-forceable level

i'm not sure the entire fault lies with debian's maintainers in this particular situation

edit: to clarify, ssh key generation falls under the classification of "long-lived keys". the gold standard for this sort of key generation is to consider /dev/urandom to be of insufficient quality and requiring that /dev/random be used. stack garbage is uh, of somewhat lower-quality randomness than /dev/urandom.

Sapozhnik fucked around with this message at 02:00 on Jun 10, 2019

crazypenguin
Mar 9, 2005
nothing witty here, move along

Sapozhnik posted:

the gold standard for this sort of key generation is to consider /dev/urandom to be of insufficient quality and requiring that /dev/random be used.

and for what it's worth, I think the best crypto people keep telling everyone to stop saying this, urandom is fine for everything, and random is dumb paranoid garbage and not in the good way.

Notorious b.s.d.
Jan 25, 2003

by Reene

crazypenguin posted:

and for what it's worth, I think the best crypto people keep telling everyone to stop saying this, urandom is fine for everything, and random is dumb paranoid garbage and not in the good way.

idk if /dev/random is good enough to seed daughter prngs or not, but i do know that relying on /dev/random is a good way to hardlock your application on dozens of nodes at the same time

Sapozhnik
Jan 2, 2005

Nap Ghost
Yeah once you have enough bits of entropy needed to key an hmac csprng then for any sort of remotely realistic crypto applications you are good to go.

But that's just my non professional opinion.

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe

Sapozhnik posted:

i'mma be real here, since i've talked a whole bunch of poo poo about debian on this very forum because of that issue

actually reading about this revealed that upstream openssh key generation program was using stack garbage as a significant source of entropy, in the sense that patching out the use of heap garbage reduced the entropy bits to a brute-forceable level

i'm not sure the entire fault lies with debian's maintainers in this particular situation

edit: to clarify, ssh key generation falls under the classification of "long-lived keys". the gold standard for this sort of key generation is to consider /dev/urandom to be of insufficient quality and requiring that /dev/random be used. stack garbage is uh, of somewhat lower-quality randomness than /dev/urandom.

No, that's a mischaracterization of the issue. There were three entropy sources:

/dev/random
Process PID
Uninitialized stack garbage

The Debian maintainer attempted to remove 3, but because of a misunderstanding of the code, accidentally removed both 1 and 3, leaving only the PID as the only RNG source.

klafbang
Nov 18, 2009
Clapping Larry
Just use 7 IMO

spankmeister
Jun 15, 2008






Suspicious Dish posted:

No, that's a mischaracterization of the issue. There were three entropy sources:

/dev/random
Process PID
Uninitialized stack garbage

The Debian maintainer attempted to remove 3, but because of a misunderstanding of the code, accidentally removed both 1 and 3, leaving only the PID as the only RNG source.

The reason was very dumb. As I recall the maintainer did this because they just wanted to get rid of compiler warnings about use of uninitialized values without understanding why those warnings were generated.

Adbot
ADBOT LOVES YOU

BobHoward
Feb 13, 2012

The only thing white people deserve is a bullet to their empty skull

Suspicious Dish posted:

No, that's a mischaracterization of the issue. There were three entropy sources:

/dev/random
Process PID
Uninitialized stack garbage

The Debian maintainer attempted to remove 3, but because of a misunderstanding of the code, accidentally removed both 1 and 3, leaving only the PID as the only RNG source.

what's super bad about this is that crypto 101 courses teach that when you mix (xor) two entropy sources, one bad and one good, you get back entropy at least as good as the good source. bad entropy cannot harm good, it can only improve it.

although i seem to remember the debian maintainer did it just because they saw a compiler warning about use of uninitialized data? and thus didn't even think of it in terms of removing a bad entropy source, just thought they were fixing a bug. still points to "they should not have been allowed to touch that poo poo," because random noobs touching crypto code is just... idk how to describe it, you just don't fuckin want people who aren't wizards touching a single byte of crypto related source without expert supervision

(fake edit: beaten by spankmeister)

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply