Keyoxide: aspe:keyoxide.org:KI5WYVI3WGWSIGMOKOOOGF4JAE (think PGP key but modern and easier to use)

  • 0 Posts
  • 57 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle
  • There are a lot of binary packages now, and explicit bin versions of big ones like firefox or the kernel. Without using those an update after some months may take half a day. With them, even a weak laptop only takes a few minutes.

    Gentoo doesn’t want to push you into some compiled utopia, it’s offering you the option of customizing or taking control where needed.
    You can have your system use binary packages but then set one packet to source, download the source, modify it, write a patch, and have a package with a completely custom sourcecode modification that you can easily keep updating as normal at the cost of it now taking longer due to compiling from source.


  • It used to be that there was no option at all, on any distro. You’d have the broken proprietary drivers, or the open source reverse engineered one with half the performance and unreliability in specialty features.

    Since then Nvidia has shifted focus to get their drivers working properly, and there were also changes making them more open source, tho I’m not sure that’d mean the “proprietary driver” will go full foss at some point.

    If op is to be believed, the proprietsry driver is already a lot more stable, so it’s now a software licensing issue not an unfixable technical issue.




  • It’ll train everyone to ignore the warnings, so if a different platform implements such a system more sensibly users will be inclined to ignore those warnings too now. Overusing a warning is a really quick way to make people ignore it even where used correctly.
    If you placed wet floor signs everywhere just in case, fall injuries would increase.

    Systems around this will develop, either people will learn to dig up the dms, or it’ll be incorporated into normal communication. It’s already become the norm to use friend requests as a dm request on discord, due to previous dm restrictions.




  • At least those eat no resources besides taking up space in htop. And can be traced to the parent being weird.
    Have you dealt with io-locked processes? Funny D-statuses spreading like a disease, anything that touches an infected process or resource also inherits it. Worst cases I have seen (nfs client kernel module not connecting a mountpoint properly) made every one of those fully resistant to -9.






  • I cleaned it up. Your editor doesn’t like to nest formatting apparently. Using an editor that lets you write the markdown directly is probably better, and you are probably already familiar with markdown anyway, since it’s used all over the place.

    2025-07-09 “Sometimes, when one door closes (lack of code signing) in life, another one opens (vulnerability).”

    The sentence sumarizes well the situation in the previous version, 8.8.2.

    There were - and still are - many false-positives reported in the previous version v8.8.2, by the antivirus software due to the absence of Windows code signing certificate. How to install the root certificate:

    1. Double-click the certificate, it may tell you it’s invalid, ignore that and click: “Install Certificate…”.
    2. In the Certificate Import Wizard, select “Local Machine”, then click Next.
    3. If prompted by UAC (optional, depending on admin Previleges), click Yes.
    4. Choose “Place all certificates in the following store”, then browse and select “Trusted Root Certification Authorities”. Click Next.
    5. On the final page of the wizard, click Finish to complete the installation.For detailed instructions, see Notepad++ User Manual.

    We’re still trying to obtain a certificate issued by conventional Certificate Authorities, for a better user experience. But let’s be honest: it’s probably not happening. Notepad++ isn’t a business - it’s certainly not an enterprise - and apparently, that makes a popular open-source project invisible to their gatekeeping standards.

    If the “gatekeepers” won’t issue a certificate under the name we deserve - so be it. At least it spares us from wasting time and energy on a frustrting process that demands we beg for a new certificate every 3 years. The Notepad++ Root Certificate may not carry their approval, but it leads us to freedom.

    Edit (2025-12-03): Starting with v8.8.7, Notepad++ binaries - including the installer - are digitally signed using a legitimate certificate issued by GlobalSign. As a result, Installation of the Notepad++ root certificate is no longer required. We recommend that users who have previously installed the root certificate remove it.





  • The entire renewal process is fairly cheap, resource wise. 7 day certificates are already a thing.
    In terms of bandwidth you could easily renew a billion certificates a day over a gigabit connection, and in terms of performance I recon even without specialized hardware a single system could keep up with that, though that also depends on the signature algorithms employed in the future of course.

    The dependence on these servers is the far bigger problem I’d say.
    This shortening of lifetimes is a slow change, so I hope there will be solutions before it becomes an issue. Like keeping multiple copies of certificates alive with different providers, so the one in use can silently fall through when one provider stops working. Currently there are too few providers for my taste, that would have to improve for such a system to be viable.

    Maybe one day you’ll select a bundle of 5 certificate services with similar policies for creating your certificate the way you currently select a single one in certbot or acme.sh




  • As long as you don’t run out of memory, you can actually insert and lookup in O(1) time for a known space of values (that we have). Therefore we do get the quadratic speedup, that when dealing with bits of keysize or entropy means cutting it in half.
    Checking to get a specific uuid takes 128bit, so 2128 draws of a uuid. Putting all previous uuids into a table we expect a collision in 64bit, so 264. We also need about that much storage to contain the table, so some tens of exabytes.