modrobert @modrobert@social.cleverlibre.org

Revision Online 2021 - Compos

https://www.youtube.com/playlist?list=PLNqQO7lFY6dkvTJ4KS3iECatGUCzGhHHq

@freemo Cabin fever victims? Perhaps I'm being too nice... ;)

@lynne@pars.ee Impressive!

@th Problem with CCD or bad SD card?

helicopter flight on mars success
https://twitter.com/NASA/status/1384099167832735748

"First Flight of the Ingenuity Mars Helicopter: Live from Mission Control"
https://www.youtube.com/watch?v=p1KolyCqICI

"Former CIA Agent John Stockwell Talks about How the CIA Worked in Vietnam and Elsewhere"
https://www.youtube.com/watch?v=NK1tfkESPVY

@lynne@pars.ee Posits looks very promising to me, especially from hardware design point of view.

@lynne@pars.ee https://en.wikipedia.org/wiki/Unum_(number_format)#Unum_III

@lynne@pars.ee What happened to "posit"? Has it been adopted anywhere? Designed for direct drop-in replacement for IEEE Standard 754.

https://www.youtube.com/watch?v=aP0Y1uAA-2Y

How about hyperinflation?

@lynne@pars.ee I guess Ctrl+Q should join Ctrl+S in hell?

@loke Found the tweet to Joanna (QubesOS founder) from 2016, no mention of RPM there specifically (might have done that via email), but the dom0 update part: https://twitter.com/modrobert/status/793406741925007360

@loke In general I think the threat has changed the past decade from being blackhat hackers doing things to government hacking directly through APT groups (https://en.wikipedia.org/wiki/Advanced_persistent_threat) and otherwise government sponsored groups/individuals, their focus is different, and so are their methods. I think central package handling systems and repositories are at risk now more than ever. Their focus are on spyware and backdoors. We need a smart system where binaries can be matched with open source code and checksums stored immutable against blockchain or similar tech.

@loke Yes, I contacted Qubes OS, specifically Joanna Rutkowska (founder) several years ago because it looked so promising except that they rely on rpm packages and updates which could compromise everything, and eventually it did: https://www.qubes-os.org/news/2021/03/19/qsb-067/

@loke I use 'firejail' in Linux for Firefox, and snap does it for Chromium, both utilize the kernel container system (aka namespace isolation). Any programs which requires internet to function. Sure, VM isolation is safer, I use that for anything Windows related, but also takes a lot more RAM to run practically.

Gives new meaning to side-channel attack.