The Linux Thread - The Autist's OS of Choice

  • 🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.
  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
Ah man I wish rasterman hadn't gone off the fucking deep end and decided to make E17 a "full desktop experience" instead of just "E16 improved". I fucking loved E back in the day. Gorgeous, fast, flexible, couldn't pry it from my cold dead hands. E17 makes me weep.
rasterman was always an insane schizo (borrowing the difficult code from *magick but we don't talk about that), his only problem was that his schizophrenia didn't scale up to a full desktop project even with bountiful funding. https://web.archive.org/web/20160330125241/http://what.thedailywtf.com/topic/15001/enlightened is a classic for a reason.
 
no. there is a core arch maintainer team. But everyone in it has their own keys they use for signing their packages.

For the aur, that is completely community maintained, so that's completely separate, and different from anything involved in the archlinux-keyring. They just have quite a few maintainers for the arch team. Since it's a fairly big project, that isn't ran by a company like canonical, or something like that. It's just a bunch of people that work on this distro.
OK, so basically, if I want to be able to ship malware as 'Arch' all I need to do is infiltrate or compromise one random 'core Arch maintainer' and then I can ship whatever the fuck as a trusted package? They just compile all their own binaries on their own machines, hopefully they keep things secure, fuck it, we're doing it live?

Is there at least some kind of system where when a package maintainer pushes a new version it is added to some kind of list of checksums signed by some centralized team so that package maintainers can only distribute malicious builds of their own packages, so if an intelligence agency compromises whoever maintains the 'kmines' package, they can only use that the private key from that random fuckwit to push a malicious version of 'kmines', not to sign their own versions of any random Arch package and distribute them to anyone who connects to any HTTPS mirror they control or any HTTP mirror they can intercept traffic from? Fuck me.
Yes but Eterm has great transparency effects. Who cares about making it easy to 'render a window' if you can't apply variable transparency across the entire background area? Much more important than this basic corporate nonsense.
 
Last edited:
New annoyance found:
Noctalia 'upgraded' from v4 to v5, with this comes its own binary. Fun, right! Well, no. All your previous settings, preferences, look, style and feel have all been reset. Oh well, so you'd stick with the old v4 then, right, might as well keep those settings and such. Oh but no, you need noctalia-qs, which is a highly specific version of qs that's a dependency for noctalia, so you can't (easily) switch noctalia-qs for regular qs and remove all the bullshit. Your now "upgraded" noctalia-qs now has a segfault when booting up and now you can't even boot into v4. So you're basically forced to use v5, which sucks. Thanks, team!
 
Is there at least some kind of system where when a package maintainer pushes a new version it is added to some kind of list of checksums signed by some centralized team so that package maintainers can only distribute malicious builds of their own packages, so if an intelligence agency compromises whoever maintains the 'kmines' package, they can only use that the private key from that random fuckwit to push a malicious version of 'kmines', not to sign their own versions of any random Arch package and distribute them to anyone who connects to any HTTPS mirror they control or any HTTP mirror they can intercept traffic from? Fuck me.
That's the core model. it's a "web of trust" with the higher authority being the arch developer team.

They have a build server for the people that do maintain packages and from I can find the people who are building them are actually generally individual devs for arch. The way it works though the build server is more a supporting optional piece of architecture for maintainers to use, unlike fedora or Debian. I imagine the people that have to build things like Firefox use that. The keys are issued by the higher ups in arch that can obviously revoke them. The other thing is checksums for the source files in the pkgbuilds. And iirc they have something else while building. I know for sure all builds are done in a known good clean chroot with systems nspawn.
 
I know for sure all builds are done in a known good clean chroot with systems nspawn.
I mean, sure, as long as a) the maintainers aren't malicious themselves b) they haven't been hacked and the chroot compromised without their knowledge c) noone is standing behind them with a rubber hose.
 
I mean, sure, as long as a) the maintainers aren't malicious themselves b) they haven't been hacked and the chroot compromised without their knowledge c) noone is standing behind them with a rubber hose.
So far the only thing I know of ever getting seriously comprised are aur builds. But those are a completely different beast. And at some point in the future how those are handled is going to be changed.
 
Now that i got the UI figured out I'm now looking at replacing my android TV with a mini pc running Debian. And then my home network will be basically completely free of spyware - as my printer has a physical power switch that fully shuts it off. I'm just deciding between one with an i7-7700T that can play PS3 games and one with an i3-8100T that is $30 cheaper.
 
I'm just deciding between one with an i7-7700T that can play PS3 games and one with an i3-8100T that is $30 cheaper.
The i7 will be more vulnerable due to HyperThreading. Turning that off will leave it only around 25% faster than the i3.
 
The i7 will be more vulnerable due to HyperThreading. Turning that off will leave it only around 25% faster than the i3.
I completely forgot about Spectre and i didn't know about the hyperthreading vulnerability. Ah well no point spending $30 more for something i don't need. I don't really play PS3 games all that much anyways and i can always pony up for a more powerful system at a later date.
 
I completely forgot about Spectre and i didn't know about the hyperthreading vulnerability. Ah well no point spending $30 more for something i don't need. I don't really play PS3 games all that much anyways and i can always pony up for a more powerful system at a later date.
Do you often use your TV PC to host VMs for random malicious actors?
 
Do you often use your TV PC to host VMs for random malicious actors?
I'll be running Jellyfin, console emulators, and Moonlight, the only incoming connection would be ssh and that will be local network only and i can make it so it only accepts a ssh key from my laptop or server. It'll be running Debian and i3 and my tvwcs program and I don't remember telling the AI to sneak in malware
 
Now that i got the UI figured out I'm now looking at replacing my android TV with a mini pc running Debian. And then my home network will be basically completely free of spyware - as my printer has a physical power switch that fully shuts it off. I'm just deciding between one with an i7-7700T that can play PS3 games and one with an i3-8100T that is $30 cheaper.
Get yoself a Dell 3050 Micro foo. Thanks to the efforts of our good friend Leah (power word: Francis) Rowe, those little niggers can run a i3-9100T and 64GB DDR4. IIRC the i3-9100T is better per-core than the best i7 the 3050 can run natively, but has no hyperthreading so you've only got 4c/4t.
 
Get yoself a Dell 3050 Micro foo. Thanks to the efforts of our good friend Leah (power word: Francis) Rowe, those little niggers can run a i3-9100T and 64GB DDR4. IIRC the i3-9100T is better per-core than the best i7 the 3050 can run natively, but has no hyperthreading so you've only got 4c/4t.
I'm actually also looking at a Dell 3060 micro with the i3-8100T, the i7-8700t is a Lenovo m910q. is that one also compatible? where would i get the 9100t for it, and can it run a i7-8700T?

Wait is it socketed? I forgot that was a thing with these small computers.

though it looks like i may actually be bottlenecked by the GPU so might as well save $30 no amtter what
 
Last edited:
I'm actually also looking at a Dell 3060 micro with the i3-8100T, the i7-8700t is a Lenovo m910q. is that one also compatible? where would i get the 9100t for it, and can it run a i7-8700T?
The 3050 is socketed, yes, but AFAIK, you can only run the i3-9100T/i3-9300T/i3-8100T/i3-8300T on it with Libreboot. IIRC Francis said somewhere that you could, in theory, run other desktop CPUs of the same generation but you need to do some board modification. Not sure if it has ever been done in practice. The M910q can also be corebooted if that's the type of thing you care about. As for where to get them, Ebay? I'm looking at listings for a i3-9300T for $45 and i3-8100T for like $15-20. You might want to also consider an M920q, it has 8th/9th gen CPUs and an 8x PCIe slot if you want to stick a small form factor GPU in there to game on +++ coreboot.
 
The 3050 is socketed, yes, but AFAIK, you can only run the i3-9100T/i3-9300T/i3-8100T/i3-8300T on it with Libreboot. IIRC Francis said somewhere that you could, in theory, run other desktop CPUs of the same generation but you need to do some board modification. Not sure if it has ever been done in practice. The M910q can also be corebooted if that's the type of thing you care about. As for where to get them, Ebay? I'm looking at listings for a i3-9300T for $45 and i3-8100T for like $15-20. You might want to also consider an M920q, it has 8th/9th gen CPUs and an 8x PCIe slot if you want to stick a small form factor GPU in there to game on +++ coreboot.
I'm going on Favebook marketplace for the hardware and there don't seem to be other options and with shipping the ebay options are like $75 more
 
I'm going on Favebook marketplace for the hardware and there don't seem to be other options and with shipping the ebay options are like $75 more
Yeeeeeeeeeeah I guess it depends on where you are. Try local refurb resellers if you've got any, they have a pretty high turnover rate and sometimes sell these tiny office PCs for dirt cheap. If not, then just use whatever is cheapest, all of these would do great as media centers.
 
Yeeeeeeeeeeah I guess it depends on where you are. Try local refurb resellers if you've got any, they have a pretty high turnover rate and sometimes sell these tiny office PCs for dirt cheap. If not, then just use whatever is cheapest, all of these would do great as media centers.
it'll definitely be neat and I do have high hopes for the project i vibecoded, I might make a video about how it works and if anyone ever shows interest in the repository i'll clean it up and write a better installation guide.
 
Speaking of vibes, what is the actual, real, tangible downside to localmodconfig pinning a kernel? And I don't mean LTS, I mean proper kernel pinning to a specific, locally compiled version that does not get updated whatsoever until otherwise specified by the operator? Yes, yes, 200000000 CVEs and LoC per patch o algo, but really, is there any actual downside for older hardware that doesn't need cutting-edge drivers and such?
 
Back
Top Bottom