If qbits double every year, we’re at 20 million in 15 years. Changing crypto takes a very long time on some systems. If we’re at ~20000 in 5 years, we better have usable post quantum in place to start mitigations.

But I’m not convinced yet, we’ll have those numbers then. Especially error free qbits…

I hope they can build on some work from the lua devs. Isolating stuff like that is not always easy. But given lua is used extensively for embedded scripting, there is a good chance they can.

I played some minetest and then looked at Minecraft. Is minecraft really limited to -64 +256??? I read it a couple of times but still can’t believe it. Ho can a game with °mine° in its name be so limited? More like Buildcraft Imo.

Online play is 100% unencrypted or authenticated. Client executes lua code sent by the server. I hope the code is kinda sandboxed but wouldnt put my hopes up there.

A distro is corposed of:

• an installer
• base system (bootloader, filesystems, service runner, DE, basic apps, settings)
• packet manager and packaged software
• an updater between releases

The biggest things you notice are updated packages. Many of the base-system differences aren’t even pushed to updated installations. Most of what the user sees as °the os° is the DE anyway.

Certificate pinning?

Also all let’s encrypt certs are public. So if someone malicious gets a cert for your domain, you can notice.

(Thats also why it may be a bad idea to use that for secretButPublicStuff.Yourdomain.com certificate transparency logs are a great way to find attack surface.)

edit oh certificate pinning has been deprecated in favor of checking transparency logs.

It is not a problem to distribute the decryption algorithm. The question remains against what this will protect. Normal https encrypts the traffic safely during transit. With this, the data is also encrypted on the server. But if you can access the server, you can modify the javascript code to send the password back to a server.

It could be used on something like IPFS, where all data is basically public but you can be sure it hasn’t been modified.

Aren’t all (most?) those centralized services? What good is having the app if the service is unavailable? Tox, Jamie and Veilidchat are fully decentralized, not just federated, fully decentralized. They come with their own downsides though…

No wonder. That file is super slow to transfer for some reason. but wait till you get to /dev/urandom. That file hat TBs to transfer at whatever pipe you can throw at it…

For how long though? How do you know these are real people?

Imo the most important thing is the separation of what you do. If you’re logged in on facebook, you can do that from your public ip. Anything you’re not associated with your name you want to use a diffferent browser identity and maybe a different ip.

If you use Torrents or do anything illegal or whistleblowing or similar stuff, use a live linux iso with no persistence and a vpn bought with monero.

Soo they added webp and AV1, which aren’t that much better then old jpeg, especially with the modern jpeg encoder JpegLi. But JpegXL is out of the question.

Those examples all have a good reason that does not apply here. Browsers already support multiple formats and added a few in the last decade.

While I also noticed my webcam showing up with 3W in powertop and disabling the uvcvideo module removed that entry, it doesn’t affect the reported battery discharge rate at all.

I can see the files being opened with lsof and not so with the workaround. But again the discharge rate doesn’t change at all …

To me it seems the power consumption is misreported.

Ok, but how does the password file get compromised but the 2FA file not? Why not have a separate password file for every login with a different password then?

Was on the phone and only quickly looked up the latest version. So I only updated to 40, not rawhide.

Sure Gentoo had dependency resolution. Does Gentoo still have use flags? Because that makes dependency resolution much hardere It’s not enough to know the dependeicies, you also have to know all the use flags you dedend on. And if a maintainer adds a use flag for a feature you depend on, you have to add that dependency as well or people who disable that flag break with your package.

I’d be surprised if gentoo was considered stable, if you make heavy use of use-flags - if they still exist.

edit Maybe your “dependency resolution” is a new automatic thing that identifies dependencies including use flags automaticallt? It was automatidally done, only if the maintainers put the right stuff in their ebuilds.

phew long answer. I wouldn’t call Gentoo unstable. I was rather interested in why it’s supposedly more stable then Fedora.

I just wrote from my limited experience. I never had something break on Fedora. I just updated a system from 35 to 41. The stuff that broke was something I compiled against old dependencies. (That’s why I didn’t update so long)

My Gentoo experience is >15y old. I had numerous incompatibilities, because I used the tools the system gave me. But sure that’s on me if I cutomize my system with USE flags. And it’s probably better now.

IDK. Gentoo is considered stable, but fedora “leaning unstable”?

Anyway what is that whole un/stable supposed to mean anyway? All non-rolling distros try to be stable. What can break are third party repos and stuff you compiled yourself. With fedora that can “break” twice a year. With a rolling distro that can “break” on every updates

BTW: Anduril is a startup from Luckey Palmer, the guy that built the Oculus VR headset in his garage. The later sold Oculus to Meta for 2 billion $. 3 ex Palantir guys started Anduril together with him.