|
|
Subscribe / Log in / New account

Recently posted comments

Out of the box experience?

Posted Sep 10, 2025 12:17 UTC (Wed) by MortenSickel (subscriber, #3238)
In reply to: Out of the box experience? by Trelane
Parent article: Testing the 2-in-1 Framework 12 Laptop

I have two dell laptops, one from work with win11 one private with debian. The windows one had hibernate working for a little while and then it started to turn it self on again immideately, same thing with sleep, I have told it to sleep as I take it out of the docking at work, and a bit later I take it out of my backpack so hot I can hardly touch it and with a near empty battery... My debian laptops just does as it is told, so my experience is that "I wish sleep and hibernate would work as well on windows as it does in linux"


SSPL vs AGPL / Free Software / OSD / DFSG on what must be included

Posted Sep 10, 2025 10:30 UTC (Wed) by arsen (subscriber, #161285)
In reply to: SSPL vs AGPL / Free Software / OSD / DFSG on what must be included by Wol
Parent article: Rug pulls, forks, and open-source feudalism

> The GPL v3 (and other licences) added patent law into the mix, which I personally think was a mistake.

Why? The goal is to undermine all sorts of restrictions that are placed by the owning class on users. Patents are, in this regard, no different to copyright.


Mirror integrity

Posted Sep 10, 2025 8:37 UTC (Wed) by edeloget (subscriber, #88392)
In reply to: Mirror integrity by taladar
Parent article: npm debug and chalk packages compromised (Aikido)

Are there any known hash collision for any modern cryptographic hash function (starting at the sha2 family)?


So much wasted time

Posted Sep 10, 2025 7:40 UTC (Wed) by kleptog (subscriber, #1183)
In reply to: So much wasted energy by muase
Parent article: npm debug and chalk packages compromised (Aikido)

It is wasteful is that most precious resource: time. We added a local cache to our build infra because it reduced time to test our patches significantly. The difference between a build that takes one minute and one that takes five minutes is huge.

It pains me every time I see a Gitlab or ADO build with steps that takes 10 seconds (or longer!) to download a container image and start it to run a process that completes in 2 seconds.


software-defined audio

Posted Sep 10, 2025 6:56 UTC (Wed) by marcH (subscriber, #57642)
Parent article: Testing the 2-in-1 Framework 12 Laptop

> The laptop's speakers are so-so, a bit tinny without much punch to the bass; they are definitely not speakers that will please audiophiles. They are adequate for watching shows or movies via streaming services, for example, but it would not make a good system exclusively for listening to music.

By now everyone knows about "computational photography" and how it allows two smartphones with the same hardware sensors but with different signal processing teams to produce very different looking photographs.

Next, take a guess about laptop speakers. OK, not that big of a difference but you get the idea.


Mirror integrity

Posted Sep 10, 2025 6:53 UTC (Wed) by taladar (subscriber, #68407)
In reply to: Mirror integrity by josh
Parent article: npm debug and chalk packages compromised (Aikido)

> Also, in an ideal world, it'd be nice to do cross-domain caching based on hash, so that if you've already downloaded a file with a given cryptographically strong hash, you don't have to re-download it from another site.

That sounds like it would just make hash collision attacks a lot easier (not finding the collision but using it once you found one).


Anandtech and NovaBBS

Posted Sep 10, 2025 6:17 UTC (Wed) by anton (subscriber, #25547)
Parent article: The need to reliably preserve our community history

Another site that has been demolished recently is Anandtech. They ceased publishing new content a year or two ago, but their old content used to be available, until recently. Now, every link to one of their articles is redirected to a forum (which seems to be about the same topics).

I think that is bad marketing from the owners. Eventually the search engines will stop producing links to those former Anandtech articles, and any ad money and potential traffic for their forum (which they could advertise for when showing the article) is going to dry up.

Another site that's recently gone is the NovaBBS interface to Usenet. The guy who used to run it has passed away. In this case, the content is still available (Usenet is a federated system, as they now call it), and even the Rocksolid Light software that NovaBBS used is still available, but is there a publically available website that provides the interface. It seems to me that the (text) Usenet providers become fewer over time, and eventually Usenet will go away.


M68k and SuperH are MMU ports!

Posted Sep 10, 2025 3:38 UTC (Wed) by raven667 (subscriber, #5198)
In reply to: M68k and SuperH are MMU ports! by andy_shev
Parent article: The future of 32-bit support in the kernel

Linux has tried, and succeeded, in being all things to all people on all systems, as much or more than NetBSD but there is a good reason that different projects exist with different goals and focus. Linux is the result of the worlds largest vendors efforts which are coordinated through the Linux Foundation trade consortium, but not every system *needs* to run Linux specifically, a subset of use cases could transition to NetBSD or another similar kernel and provide resources to that project and have both projects be healthier as a result. Vendors with niche CPUs could rally around a system like NetBSD and make the changes they want with less concern they are going to break some use case on billions of peoples devices that they weren't even aware existed.

A world where Linux ran on only 95% of the types of systems it does now, and the other 5% moved to Free/Net/OpenBSD or another kernel, but each group could focus on making their part the best would probably be a good world.


longevity

Posted Sep 10, 2025 3:19 UTC (Wed) by raven667 (subscriber, #5198)
In reply to: longevity by foom
Parent article: The future of 32-bit support in the kernel

I'm catching up very late but as a practical matter, unless you are letting people run new custom code on the system and need to protect against attacks from local users, there are a lot of cases where the security issues of the Linux kernel just don't matter. The kernel embedded inside of an ethernet switch probably doesn't matter near as much as the implementation of ssh, ospf/bgp, arp, or a web interface, anything that gives shell access to the embedded system is a bigger problem than a local vulnerability in the system, as that's not the security boundary the system is trying to enforce, everything could be running as root with filesystem perms of 777 in some embedded use cases ;-).


Firefox memory leaks: alternative to a full browser kill and restart to recover the leaked memory

Posted Sep 10, 2025 0:49 UTC (Wed) by mirabilos (subscriber, #84359)
In reply to: Firefox memory leaks: alternative to a full browser kill and restart to recover the leaked memory by Duncan
Parent article: No more 32-bit Firefox support

Good point, I’ve used that as well.

Sometimes there are tabs that just use up lots of resources (RAM, but mostly one full CPU) in the background, despite disabling service workers, so I still do that.


Is there nothing better than Yocto?

Posted Sep 10, 2025 0:34 UTC (Wed) by Arrange1030 (subscriber, #178702)
In reply to: Is there nothing better than Yocto? by proski
Parent article: Introducing Space Grade Linux

I'm already using Nix, and a minimal system config weighs in at almost 4GB. I guess I can try not-os next.


Firefox memory leaks: alternative to a full browser kill and restart to recover the leaked memory

Posted Sep 10, 2025 0:23 UTC (Wed) by Duncan (guest, #6647)
In reply to: Missing the reason by mirabilos
Parent article: No more 32-bit Firefox support

I generally exit firefox (and anything else) when not in use as well, but I'm using a bit different technique for firefox memory management.

First detailing the memory issue I see: For me it's generally youtube, but I expect the same happens on other "infinite scroll" sites, particularly image (thumbnails for youtube) -heavy ones. My particular issue may be exacerbated by extensions, likely either HoverZoom+ when actively hovering over many thumbnails over time (thus assuming the memory for those is leaked), or, someone else's theory I read, that uBlockOrigin's blocked connections somehow don't fully close and thus leak memory over hours of blocking youtube ads, etc.

Regardless, using a single tab for hours on youtube, either searching (with perhaps a thousand hover-zoomed thumbnails over several hours), or playing multiple videos (tho fewer longer videos doesn't seem to leak as much as many short ones, could be from either many more blocked ads or many more thumbnails loaded, tho with fewer zoomed than the first scenario) eventually uses multiple gigabytes of RAM, even sending me gigs deep into swap on a 16 gig RAM system if I let it go long enough. (Tho I've never had it actually crash, likely because I have an equal 16-gig swap partition on each of four SSDs (so I can stripe them using equal swap-priority values for all four), so 64 gig swap in addition to 16 gig RAM, and I've never let it get beyond single-digits gig into swap.)

In the search scenario, if I middle-click to launch the actual videos in new tabs, then close those tabs in a relatively shorter time to go back and search further from the main search tab, the newer tabs don't seem to accumulate as much and closing them doesn't seem to release much either -- the big memory usage is all in the main search tab that has stayed open. And simply refreshing the page doesn't reclaim the lost memory, nor does deleting cache (which is on tmpfs so does use some memory), so the culprit isn't the tmpfs cache. And FWIW, forcing garbage collection from about:memory doesn't help either -- whatever's leaking, firefox doesn't consider it garbage to be collected!

*BUT*, either duplicating the tab (along with its session history) and closing the old one, or (with another tab open, say just open a new-tab to its default page, or one of the separate-tabbed video pages, so the entire browser doesn't close), closing the offending tab and immediately doing a reopen-closed-tab, keeps the tab's session history, but releases all that leaked memory, sometimes double-digit gigs of it!

So I don't close/kill the entire browser, I simply ensure at least one additional firefox tab is open so the browser itself doesn't close, then either duplicate the leaking tab and close the old one, or close and reopen the leaker. That gets my RAM back without killing the full browser.

Perhaps you'll find that useful as well, tho admittedly, in some cases it's likely less hassle to just do the kill and restart thing. (Much like after upgrading various in-use libraries and apps, while reverting to a text-mode login and running something to tell you what's still using deleted/stale files and restarting it, plus possibly having systemd reload itself too if it's on the list, can usually avoid a full reboot, it's often just easier to just do the reboot and get everything fresh all at once, rather than doing it one app at a time.)


FF (direct) ALSA support

Posted Sep 9, 2025 22:59 UTC (Tue) by Duncan (guest, #6647)
In reply to: FF (direct) ALSA support by pizza
Parent article: No more 32-bit Firefox support

>> And with only a single active audio device to talk to, there's no /need/ for pulse/pipewire device-routing.

> Good for you. But I hope you understand you are in a *tiny* minority.

Well, I did say this was for me, and that it didn't really apply to most Linux users (tho as edited -- believe it or not my original was much longer than that long thing above -- that disclaimer was rather weaker than my original).

Of course for many of us that's what makes Linux so great, that it's open and not forcing a single-size-fits-all solution on everyone. All those "tiny minorities" together may not make a majority (in Linux scope I guess that'd be Android), but together they're anyway a significant minority, and the larger Linux community would be missing something quite valuable without them.


Is there nothing better than Yocto?

Posted Sep 9, 2025 22:41 UTC (Tue) by proski (subscriber, #104)
In reply to: Is there nothing better than Yocto? by Arrange1030
Parent article: Introducing Space Grade Linux

NixOS is somewhat in the same niche. It's harder to learn (it involved learning a special purpose functional language), but it's very rewarding. Reproducing builds are very valuable. Even more so in the environment where radiation can cause bit flips.


FF (direct) ALSA support

Posted Sep 9, 2025 22:33 UTC (Tue) by mirabilos (subscriber, #84359)
In reply to: FF (direct) ALSA support by pizza
Parent article: No more 32-bit Firefox support

Nah, Bluetooth is pretty much unusable as it’s also on the 2.4 GHz band which is already congested with microwaves, way too many WLANs from all the neighbours in the same house, adjacent and opposite houses, and whatever that neighbour to one side is occasionally doing.

I just recently had my new employer give me a decent wired headset.


I just got mine, too...

Posted Sep 9, 2025 22:18 UTC (Tue) by halla (subscriber, #14185)
Parent article: Testing the 2-in-1 Framework 12 Laptop

On the day this was posted, my Framework 12 was delivered, but I was in hospital. I'm home now, though, and while I haven't assembled it, I was quite happy just looking at the components.

The Ars Technica review ends with something like "It's cute _and_ functional, but for the price, you can get more performance", but, in my opinion, "cute and functional" is pretty much a USP. When I'm surrounded by my steamdeck, e-reader, tablet, yoga laptop, remarkable and boox, it's all black, black, black! Not cute at all.

I got this one for myself, all my other hardware is mostly for testing and developing Krita, and this is going to be for sketching a bit, doing write-ups and watching cooking videos, so I'm sure it'll be functional enough for that.

Plus, it's cute.

(I got the bubblegum version...)


64-bit big-endian

Posted Sep 9, 2025 20:58 UTC (Tue) by anton (subscriber, #25547)
In reply to: 64-bit big-endian by arnd
Parent article: The future of 32-bit support in the kernel

IBM switched their Linux support for Power to little-endian, when introducing OpenPower (Power 8 or Power 9). They completely dropped support for big-endian AFAICT, and other people seem to have picked up that attitude, too.


Was discussed at kernelsummit-discuss

Posted Sep 9, 2025 19:42 UTC (Tue) by bnorris (subscriber, #92090)
In reply to: Was discussed at kernelsummit-discuss by linusw
Parent article: Kernel prepatch 6.17-rc5

A month later, a "Change ID" discussion [1] discussed something similar, and at some point "Link:" + well-crafted Message-Id was suggested. IIUC, the resulting consensus was to (optionally) stick a "Change ID" into the Message-Id when submitting patches, but not necessarily to put that ID into a Link tag. That may not have been 100% consensus though.

Overall, I'm confused what the expected practice is here.

[1] https://lore.kernel.org/all/CAD=FV=UPjPpUyFTPjF-Ogzj_6LJL...


Out of the box experience?

Posted Sep 9, 2025 18:50 UTC (Tue) by bronson (subscriber, #4806)
In reply to: Out of the box experience? by Trelane
Parent article: Testing the 2-in-1 Framework 12 Laptop

Yes and yes, on Fedora/Bluefin/Aurora anyway.


So much wasted energy

Posted Sep 9, 2025 18:36 UTC (Tue) by Cyberax (✭ supporter ✭, #52523)
In reply to: So much wasted energy by kleptog
Parent article: npm debug and chalk packages compromised (Aikido)

NPM also has quite a bit of legacy. There's "integrity" field now in the package-lock file that can store the hash of the dependency, but it's not yet universal. Once it spreads a bit more, local caching can be made safe.

In comparison, Golang readily supports dumb caches because it stores the hashes of all the dependencies. If a cache tampers with a dependency, the download will fail.



Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds