• 0 Posts
  • 65 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle

  • stuner@lemmy.worldtoLinux@lemmy.mlThe CUPS Vulnerability
    link
    fedilink
    arrow-up
    23
    arrow-down
    5
    ·
    8 days ago

    This seems very one-sided. Sure, the disclosure was not handled perfectly. However, this post completely ignores the terrible response by the CUPS team.

    The point on NAT is certainly fair and prevented this from being a much bigger issue. Still, many affected systems were reachable from the internet.

    Lastly, the author tries to downplay the impact of an arbitrary execution vulnerabilty because app armour might prevent it from fully compromising the system. Sure, so I guess we don’t need to fix any of those vulnerabilities /s.


  • This article is conflating terms that I need help distinguishing between. The other commenter mentioned that Ubuntu is a type of Debian but this article lists Debian and Ubuntu as distributions.

    I’d say that the article is correct in calling them separate distributions.They are certainly related (both part of the Debian family), but I think most people would consider them to be separate distributions. Software built for Ubuntu 24.04 may work on Debian 12, but it might also not. For a beginner, I think it’s most useful to consider them to be separate things.



  • The main downside of double-decker train cars is the time it takes passengers to to board them. And, since this is one of the main factors limiting metro frequencies and thus capacity, they’re not that suitable for subways. To maximize metro capacity, you want long trains with many doors and very high frequency.

    Double-decker cars are much more suitable for lower-frequency service (S-Bahn, regional, long-distance,…) where they’re also commonly used.

    Of course, you could still use double-decker cars in a metro (and maybe some places do), it’s just suboptimal.


  • I think when I messed it up, it worked when I tried switching to the proprietary drivers for the second time. I think you can try that without much risk.

    In my case I ended up disabling Secure Boot anyway because it just got too annoying (a BIOS update breaking it was the final straw for me). The security benefit after you’ve enrolled a MOK seems dubious anyway. It would be nice if distros could ship signed kernels with the open-source Nvidia driver but I guess that’s not happening.



  • I’ve also recently built my own NAS and I’ve gone through similar considerations. One of my mayor decisions was not to use btrfs because it’s not recommended for Raid Z1/Raid 5. With that, I landed on ZFS and TrueNAS Scale. Note that RAID expansion should be landing in both very soon.

    Things with TrueNAS were pretty easy, very quick, and everything worked nicely. However, I noticed that it was constantly accessing the disks and preventing them from spinning down. I really wanted to keep the power consumption low (<20 W idle), so I eventually decided to just go with Vanilla Debian + ZFS. I can recommend that if you want to tinker with things yourself. Otherwise, I’d recommend TrueNAS Scale.

    As for migration, you might be able to create a degraded pool initially, copy over the data, and add the parity disk last. Raid expansion would ofc also help there…







  • Edit: adding some context. I am planning to setup a dev machine that I will connect to remotely and would like to babysit very little while having stable and fresh packages. In the Ubuntu world we would go to an LTS release but on the RPM/Dnf world is there any other distro apart from CentOS Stream? And also is CentOS Stream comparable to an LTS release at all considering that they do not have release number?

    Wanting both stable and fresh packages is unfortunately somewhat difficult in my experience. I think the primary choice within the Fedora ecosystem is if you want to have fresh packages (Fedora) or if you prefer a slower update cycle and more stable packages (RHEL/Alma/Rocky). In the second case you can also choose if you wish to pay Red Hat for support (RHEL) or not (Alma or Rocky).

    One thing that’s quite different in RHEL vs Ubuntu/Debian ist that it gets minor releases that include substantial new features. For example you’ll get new compilers, python versions, drivers, … CentOS Stream gets those slightly ahead of RHEL/Alma/Rocky (a cynical person might say that CentOS Stream is a rolling beta for RHEL). But, IMHO that’s not really a strong reason to use CentOS Stream.

    If you’d go with an Ubuntu LTS release, then I’d look into RHEL/Alma/Rocky.






  • Jeder der nicht exakt der gleichen Meinung ist sofort ein Atomtroll?

    Ich würde den Atomausstieg nicht auf ein Einziges Jahr beziehen, sondern auf einen Prozess der gut 20 Jahre gedauert hat. Wikipedia scheint das ähnlich zu sehen:

    In Deutschland begann der Atomausstieg unter der ersten rot-grünen Bundesregierung (Kabinett Schröder I) mit der „Vereinbarung zwischen der Bundesregierung und den Energieversorgungsunternehmen vom 14. Juni 2000“. 2002 wurde der Vertrag („Atomkonsens“) durch Novellierung des Atomgesetzes rechtlich abgesichert.[120] In der Folge wurden am 14. November 2003 das Kernkraftwerk Stade (640 MW)[121] und am 11. Mai 2005 das Kernkraftwerk Obrigheim (340 MW)[122] endgültig abgeschaltet.


  • Der Punkt ist, dass Deutschland im Jahr 2000 ca. 170 TWh/Jahr an relativ sauberem Atomstrom produzierte. Diese Kapazität wurde schnell reduziert während die Erneuerbaren ausgebaut wurden und die Stromproduktion mit Kohle langsam reduziert wurde. 2023 wurden in Deutschland noch 135 TWh Kohlestrom produziert.

    Eine alternative Strategie wäre ein Ausbau der Erneuerbaren und ein schneller Ausstieg aus der Kohle gewesen. In einem zweiten Schritt hätte man dann aus der Atomenergie aussteigen können.

    Ich denke die zweite Strategie wäre sowohl aus ökologischer als auch aus gesundheitlicher Sicht eine bessere Wahl gewesen. Wenn man von einer Todesrate von 25 Personen pro TWh bei Kohlestrom ausgeht, dann hätte man mit den 170 TWh* Atomstrom ca. 4000 Tote pro Jahr vermeiden können! Aber weil die Atomenergie ein viel besseres Feindbild abgibt, hat man den Ausstieg aus der Kohle verschleppt.

    *Ein Weiterbetrieb wäre aber wohl nicht bei allen Kernkraftwerken sinnvoll gewesen.