• 0 Posts
  • 46 Comments
Joined 3 years ago
cake
Cake day: June 8th, 2023

help-circle

  • dist-upgrade must die.

    I spent like three hours I didn’t have the other day trying to bring a Debian Unstable system up to date, it decided to stop every few packages to tell me it failed because the t64 libraries conflict with the regular ones and nobody taught apt how to figure that shit out for me and install the right ones.

    Even Ubuntu is like “oh hey there’s a new release, you’re available for three hours straight to, every two to fifty minutes, explain to a TUI dialog that you don’t have an opinion, right? Oh also can you resolve this merge conflict on this config file we think you edited, but you didn’t, by being shown the diff once and then opening nano?”

    This is not an acceptable way for this to go.



















  • The graphics stack is better, but the security isolation is IMHO solving a problem no one really had, at the cost of breaking a bunch of integration mechanisms people actually used.

    You want UI security isolation for something like Android, where most software being run is fundamentally opposed to the interests of the user and wants to steal anything not nailed down, and you also contain things at the file system level. If Facebook could screenshot every other app all the time it absolutely would, and people would download it anyway. To some extent the enforceable promise that it can’t do that is why people are still willing to download it anyway and let it do all the other things it does to compromise a system.

    In a distro shipping legitimate software, isolation at the desktop UI level is nice for defense in depth, but not really drawing a real security boundary around any program to the point where a user can trust a machine with malicious software running. It doesn’t matter if I can’t steal Firefox’s pixels if I can echo "export PATH=$HOME/.evil-firefox/bin:$PATH" >>~/.bashrc.