hughsient

24 ms·

1.
by hughsient 2y ago
> since they have a low quality default conf file without commented out defaults Try `man fwupd.conf` for all the options.
2.
by hughsient 4y ago
You're going to have to be more specific on why a failing HSI attribute contributes to the undoing of your privacy? You're aware the security attributes are each based on mitigating actual real-world attacks, right?
3.
by hughsient 4y ago
> it devolved into a rabbit hole of turning on all the privacy bugs What does that mean? We've got a very comprehensive privacy policy... https://lvfs.readthedocs.io/en/latest/privacy.html
4.
by hughsient 4y ago
Yes, mostly that. Depending on local policy, it might be possible to upgrade [only] signed firmware from the correct vendor without authenticating. Downgrade always requires authentication for obvious reasons. Most firmware requires you to
5.
by hughsient 4y ago
blush -- my blog is https://blogs.gnome.org/hughsie/ for the important stuff, and https://mastodon.social/@hughsie is for the inane stuff.
6.
by hughsient 4y ago
> this is probably leaking information thru its comm channel It's really not. The fwupd process doesn't have any internet access at all -- all communication is done through a socket over DBus. All the telemetry is done with the
7.
by hughsient 4y ago
Can you open up a discussion on the fwupd GitHub project please, and maybe we can make things better.
8.
by hughsient 4y ago
Is Slackware a major Linux distribution? There's nothing wrong with Slackware, and no reason why fwupd wouldn't work on that distro -- but it's not one that most people would considered "major" IMHO. There are no GN
9.
by hughsient 4y ago
Samsung actually upload firmware to the LVFS on behalf of a few different OEMs, so they certainly know how. It's a policy decision, not a technical or legal one.
10.
by hughsient 4y ago
Make sure you open a support ticket asking for LVFS updates -- it's easy to ignore one person, but much harder to ignore hundreds of people asking for the same thing.
11.
Lenovo joins the LVFS(blogs.gnome.org)
5 points by hughsient 8y ago|0 comments
12.
by hughsient 8y ago
Is afuefi now open source?
13.
by hughsient 9y ago
The ColorHug is a colorimeter designed to calibrate screens with an approximately-sRGB gamut. If you're trying to calibrate a wide-gamut screen with a ColorHug it isn't going to work very well. If you need to do anything other tha
14.
by hughsient 9y ago
Apply hasn't cared about ColorSync for years. Every release they break something.
15.
by hughsient 9y ago
It's barely more than the device costs to make. It turns out making batches of 50 at a time is an order of magnitude more expensive than building them 50,000 at a time. Source: Am the person that sits in a shed and builds each ColorHug
16.
by hughsient 9y ago
Not an easy thing. The ICC-in-X specification specifies the index as the Xinerama screen number, which has no meaning with XRANDR-on-XOrg, and even less meaning on Wayland. There's nothing in the protocol to tie the ID to a monitor, or
17.
by hughsient 9y ago
True, Red Hat have been awesome with my time. Lots of donors are sponsoring the hosting; including Amazon for the bandwidth. There's a link on the lvfs page if you'd like to throw some money in the hat, so to speak. Long term this
18.
by hughsient 9y ago
True, I have. I've sent many hundreds of emails, but also some companies have reached out to me proactively. We're getting there, but it's going to be a slow burn.
19.
by hughsient 9y ago
It doesn't look like any work at all is actually being done on fwupd from my point of view. I've basically given up hope at this point that System76 is going to do the right thing. Source: Am the LVFS and fwupd maintainer.
20.
by hughsient 9y ago
It's disappointing System76 can't just use LVFS and fwupd like all the other vendors: https://fwupd.org/lvfs/vendorlist