Hacker Newsnew | past | comments | ask | show | jobs | submit | __jal's commentslogin

"Render useless" makes me think of something more like the F00F bug - hard lockup until a reboot.

https://en.wikipedia.org/wiki/Pentium_F00F_bug

OS vendors worked around it in software.


Here's one for credential scanning:

https://github.com/dxa4481/truffleHog


For starters, that "just" is swallowing:

- Identify the relevant tokens you want to scan for, and create regular expressions to capture them.

- Create a token alert service which accepts webhooks from GitHub that contain the token scanning message payload.

- Implement signature verification in your token alert service.

- Implement token revocation and user notification in your token alert service.

And that would replace one piece of what this does.


It always warms my heart to see someone fighting the "why not just..." comments on here. Everyone underestimates how much goes into a project.


Jerry Weinberg used to say that whenever you hear the word "just" on a software project, replace it with "have trouble". Similarly, replace "should" with "isn't". "That should be easy" -> "that isn't easy"; "we should just use git" -> "we'll have trouble using git".

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...


We do several of these things, and bundling them together looks nice; I imagine troubleshooting the pipeline is much easier. We would need the enterprise version because we are on-prem, and our user count compared against the 'pro' edition makes me think this would be a hard sell - high 5 figures/year to replace a few shell scripts is tough.


I believe we can provide more value than what can be achieved with a few shell scripts, for example, the built-in best practices, the rules management option, and more ;) A volume-based discount is also available for enterprise customers. If you would like to hear more - feel free to reach out to Eyar [AT] Datree IO


Reminds me of a saying from the first dot.com crash. (Or at least I heard it then first.)

Tying two bricks together doesn't make them float.


It's a great saying, but aren't all large ships these days made out of components that don't float individually?


No, they are mostly made of air, which floats (Partial sarcasm, as that is what makes them float)


Why keep yourself in a position where you have to ask FB for permission to speak?

Vote with your feet. Build a website FB doesn't control.


But then when you see the cost difference between just removing the content, and potentially getting sued, you'll do the same thing. There needs to be a legal solution to this. A balance can be found, the current system is broken.


Many of us in California don't care if you think they "shouldn't" live here.

I'm perfectly well aware of the economic and tribal arguments. The former are not convincing and the proponents of the latter can go pound sand - given my preferences, I'd exclude them long before I'd exclude immigrants over paperwork.


Many of us in California do care if you think they "shouldn't" live here.


People have been migrating to California long before the US existed. In fact, it was first colonized by migrants.

There are people with family spanning generations on both sides and the border pretty much crossed them.


I think this may be where I step off the train. I grumbled, but can live with it as init, and it is easy enough to disable the ntp and name resolution nonsense to use decent tools.

Buy systemd has no business sticking its nose in authentication or storage, or more generally telling me how to manage users. This is a no.


If you want to rage at systemd, you can do that equally well with or without this optional feature: nothing changes unless you specifically tell systemd-homed to manage your home directory.


Why does any criticism of systemd have to be due to "rage"? There is this ongoing behavior whereby anything other than fawning praise is treated as irrational and emotion-driven.

You may as well ask why Lennart rages so hard against ZFS.


I’m not saying that all systemd criticism is irrational. I’m saying that this systemd criticism is irrational.


So, explain this. I mean, it is a positive step that you've backed off your strange "rage" accusation, but why do you consider my stance on the technical merits of this step irrational?


So this will be disabled by default? It will not become a default and as such nothing will start to depend on it as a default?

Also remarks and doubts on the use of json for this purpose is completely irrational?


Systemd is just an upstream project. It's up to your distro to ship it to you and then it's up to you if you want to use some feature or you want to do it a different way. This feature doesn't even do anything unless you create the user with "homectl".

If another open source program depends on it by default, then you can patch it to remove the dependency. If you disagree with the concept of JSON, feel free to write your own data format.

I have zero interest in using this feature, but still I find it really embarrassing that I have to regularly explain this basic concept of open source here. And I don't mean that as a dig at you, I mean it in the sense that there is a lot more work we have to do.


I decided to not act on it, take it easy and roll with defaults. After all alternatives remained, it is an upstream project indeed, etc But I took quite a bit of interest in the discussion as it raged on over the years those arguments you've used I've seen time and time again.

Especially this: "If another open source program depends on it by default, then you can patch it to remove the dependency." and "then it's up to you if you want to use some feature or you want to do it a different way."

Now recently also Debian has decided to drop support for other init systems. It just wasn't practical anymore. Now you get to be on the lookout when you "want to use some feature or you want to do it a different way." because if you don't you end up with shit like this: https://news.ycombinator.com/item?id=19291067 Now we get to see hilarious stuff like a systemd developer asking tmux to add systemd specific code to work around systemd's own default behaviour. Now we get BSD's putting in work to deal with the prevalence of Systemd. Now we get those working with embedded linux putting in work to deal with the prevalence and dependency on SystemD. Because at the end of the day the systemd devs don't care about ulibc, non linux and what have you whilst at the same time seeming to really want to set the standard for as much as possible.


I can see "user-friendly" distributions like Ubuntu becoming early-adopters of homed.


Or until e.g. GNOME requires use of this, and Firefox requires use of GNOME (thank God it doesn't yet). A computer without a browser is not terribly useful in 2020.

My problem with systemd really isn't what it does, though: it's how it does it. It's as though someone looked at late-90s Microsoft and admired the taste.


On the contrary, having a single blessed, supported, and secure home directory utility will simplify a lot of tasks around generating home directories and encrypting them. You no longer have to figure out/solve automounting, decryption/rotation, or realms using a litany of bash scripts or stack overflow snippets.


You are assuming that homed fits all use cases, which it certainly does not. It is opinionated and has a limited scope. This will add to the chaos, not subtract from it. I just hope the extra penetration of encrypted home directories is worth the added complexity.


it's called systemd and not initd for a reason.


What is that reason then?


    $ man systemd
    NAME
            systemd, init — systemd **system** and service manager
managing your whole Linux system in an unified way, with a single configuration language to learn, a single syntax for commands, and a shared framework allowing to refer to systemd domain objects (units) from everywhere where they can be relevant (journal, network, fstab, etc) is the raison d'être of systemd. It's why it has been created.


Just saying the word system does not mean anything. Maybe my system encompasses more than a single machine, maybe it encompasses more than just silicon. Same with units. It is a word that means as little as possible. You did not answer my question, you just regurgitated vague and useless documentation.


> with a single configuration language to learn,

So has anybody tried filing a bug for homed using JSON yet? Either homed is wrong, or that manpage is wrong.


> with a single configuration language to learn

+ JSON


Unless you stop using GNU/Lennax you're going to use it, like everyone else.


Devuan, and a bunch of others don't exist in your perception of the world, or what?


I think I'll keep that word.


There has been more than one Cisco vulnerability that struck people as suspicious.

I know it comes to my mind every time I see the string "Cisco zero day", whether or not it seems likely in any particular case.


Don't fall for the trap that this is about "big tech".

It isn't.

It is about your freedom of speech and ability to protect yourself.


It is about big tech: WhatsApp doesn't need section 230 immunity if it isn't part of Facebook.


I’m confused? What’s WhatsApp being part of a big tech company got to do with 230 immunity?


Can you explain how? The article lists WhatsApp as an example of an interactive computer service that is covered by section 230 immunity. Is it because WhatsApp is purely a messaging service without curation or moderation and so the law wouldn't consider WhatsApp to be a publisher anyway?


I don't use WhatsApp, but my understanding is that they are in the business of providing private communication between parties.

Section 230 protects the likes of Facebook, where people can post things for all the world to see, including things that are slanderous or illegal.

https://en.wikipedia.org/wiki/Section_230_of_the_Communicati...


Yes, section 230 protects Facebook for public conversations. But as far as I'm aware it also protects providers of private communication, because as a user of the provider you could potentially receive illegal content from them. The provider, should they choose to moderate content by e.g. having report buttons and moderation teams, could still be treated as a publisher.


Why do you think WhatsApp doesn't need section 230 immunity? Do you think it can survive while being held liable for every bit of content shared on it?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: