gnufx

5 ms·

1.
by gnufx 2mo ago
Not the first time I've said this: the 1970s-era GEC OS4000[1] was really fast, like compared with everyone's VAX 780s, and we users benefited in the '80s. I don't know whether or not it was strictly a microkernel, but
2.
Largest scorpion revealed from 415M-year-old fossils(manchester.ac.uk)
5 points by gnufx 4mo ago|0 comments
3.
Pintheft Linux LPE(openwall.com)
4 points by gnufx 4mo ago|3 comments
4.
by gnufx 4mo ago
The latest page cache-related LPE, even though it's not Thursday night (here). EL9 kernels don't have the modules enabled, and the PoC doesn't build on Debian 13 or Ubuntu 24.04, whether or not that means they're safe.
5.
by gnufx 4mo ago
You might not have root on an organizational "managed" system.
6.
by gnufx 4mo ago
Any university or national HPC system as I'd understand the term is multi-user. There are also things like the extensive high energy physics WLCG compute federation, which is somewhat different, but can potentially be compromised quick
7.
by gnufx 4mo ago
The primary source, which says keep the dirtyfrag mitigations in place, is https://github.com/v12-security/pocs/tree/main/fragnesia
8.
by gnufx 5mo ago
Yes, but its authN components only act locally, and PAM is optional for sshd. It can/does call out to network services like Kerberos/LDAP given a password, of course, but I was thinking of network authN connected directly with OI
9.
by gnufx 6mo ago
I'm happy for anyone who doesn't have MS Windows/Active Directory -- so Kerberos -- in their organization, but I'd need (Free)IPA or similar for user/access management anyway. Certificates are an extra layer of SSH
10.
by gnufx 6mo ago
Yes, FreeIPA is Kerberos+LDAP+X.509 CA, and GSSAPI is in OpenSSH (normally with the key exchange patch). SSSD is a local mechanism, not network authentication. I mentioned authorized keys distribution mechanisms elsewhere, but I was think
11.
by gnufx 6mo ago
I don't want to have to get a special purpose credential when I have a TGT which can work generally, and is at least required for secure remote filesystem access. You have to manage extra infrastructure for certificates and, as a user,
12.
by gnufx 6mo ago
Public keys (for OpenSSH) can be in DNS (VerifyHostKeyDNS) or in, say, LDAP via KnownHostsCommand and AuthorizedKeysCommand.
13.
by gnufx 6mo ago
If you mean using OIDC, in that space there's at least https://github.com/EOSC-synergy/ssh-oidc , https://dianagudu.github.io/mccli/ and OpenPubkey-ssh discussed in https://news.yco
14.
by gnufx 6mo ago
Life is easier if you can use Kerberos SSO, i.e. GSSAPIAuthentication in OpenSSH. (If we're talking certificates, presumably it is OpenSSH, or does anything else implement them?)
15.
by gnufx 6mo ago
As far as I remember, that's just because only the find/replace was implemented, and it could have more sophisticated (semantic?) features.
16.
by gnufx 6mo ago
Its author says it implements a CRDT in its theory documentation.
17.
by gnufx 6mo ago
Before isnan() the Fortran test for NaN was (x .ne. x), assuming an IEEE 754 implementation.
18.
by gnufx 7mo ago
> I had a Fairphone 3, and after 5 years, /e/OS was outdated by 4 years w.r.t. the manufacturer updates Mine is running /e/ and reporting Android 13, which appears to be the last one Fairphone support. /e/ s
19.
by gnufx 7mo ago
Some of those codebases might be (interesting) operating systems. https://en.wikipedia.org/wiki/ALGOL_68#Operating_systems_wri...
20.
by gnufx 7mo ago
Used in the impressive Guix bootstrap. https://guix.gnu.org/manual/1.5.0/en/html_node/Full_002dSour...
21.
by gnufx 7mo ago
Indeed. The first dedicated light -- for various values of "light" -- source[1] repurposed the tunnel and various bits and techniques from the particle physics accelerator it replaced, and on which parasitic "light" mea
22.
by gnufx 7mo ago
In the context of the article "collider" means intersecting particle beams, like in RHIC and LHC, which obviously involves rather low probability interactions, as opposed to accelerators which slam a beam into a dense target (like
23.
by gnufx 7mo ago
You imply that experiment contaminated drinking, and other, water. How? Are you saying the Cs¹³⁷ leaked, and at concentration above that from fallout, say? Its γ-rays don't activate materials — I've used enough of them.
24.
by gnufx 7mo ago
Since when were industrial products the purpose? Why do you think my colleagues can't analyse LHC data and discover the Higgs particle? The article says RHIC was a considerable scientific success.
25.
by gnufx 7mo ago
As I recall, RHIC itself replaced some cancelled project. I remember the tunnel being at least partly there in the mid-80s, with a plan to trundle ions from the tandem lab through a crazy long beamline across the site and stop nuclear stru
26.
Brookhaven Lab's RHIC concludes 25-year run with final collisions(hpcwire.com)
100 points by gnufx 7mo ago|69 comments
27.
by gnufx 8mo ago
Good to see. For what it's worth, data were previously available from the Competition and Markets authority, used by https://localfuelprices.co.uk/
28.
by gnufx 8mo ago
Oh, I hadn't found that. Yes, it seems strange not to publicize something like that to give users confidence (assuming the audit/pentest isn't damning). It doesn't have to have been perfect initially, as long as appropri
29.
by gnufx 8mo ago
With regard to European sovereignty, I note that Netbird uses AWS.
30.
by gnufx 8mo ago
I've looked without success for external audit reports of either Tailscale and Netbird, like Mullvad gets. While I don't approve of the sort of auditor box-ticking we get at work, it would be reassuring to see a report from a prop

More ›