• 12 Posts
  • 79 Comments
Joined två år sedan
cake
Cake day: 25 juni 2023

help-circle







  • wolf@lemmy.ziptoLinux@lemmy.mlHow to combat infection of your system?
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    1
    ·
    21 dagar sedan

    Welcome to Linux.

    Concerning your questions:

    How to keep your system clean?

    • Subscribe to the security mailing list/blog etc. of your Linux distribution and for software that you use
    • Update your system whenever there are updates available and reboot your system after applying the updates
    • Activate the firewall of your system and block all incoming traffic which was not initiated by your own system
    • Only install software which is distributed with your operating system or which is well known and you download from the official distribution page (for the sake of an example: If you use Google Chrome download the package/binary for your Linux from Googles Chrome page)
    • Use an adblocker for your browser like ublock origin

    What not to do:

    • Never install software found on the internet or a forum
    • Never run arbitrary script from the internet in your shell

    Doing the above and applying some common sense should be fairly secure. As a rule of thump: Less software is always better and well known software will usually be better scrutinized and more secure. (YMMV)

    As a normal desktop user your chances of getting your system infected when applying above rules are very low and they are your best line of defense.

    Securing a Linux system, especially in depth, fills books, and detecting an infection is another topic for specialists. One way to improve your chances of having a non infected system is using an immutable Linux distribution like Fedora Silverblue, which should in theory be more resistant to infections and which should in theory allow to detect infections easily.

    Unless you have a reason to expect being personally targeted (in which case: good luck to you ;-)), the answer to infections and similar is having regular full backups of all your data, so in case of an infection you can wipe your computer and recover everything. You should have regular full backups anyway, in case your SSD fails, your computer gets stolen and similar threats to your data.



  • Well, the fan service is a factor for sure… (Seriously, I find the discussion quite hypocritical: Sex sells, most actors/singers are quite good looking and most block buster movies have a cast of sexy/good locking people displaying status symbols. That is not even mentioning product placing and other shit going on in popular movies/TV shows.)

    • A PS 5 original which is optimized well enough to run on the Steam Deck and some potatoes smoothly
    • Responsive controls
    • Great enemy design which telegraph their intentions clearly
    • No in game purchases or other dark monetization schemes
    • A complete game which seems mostly bug free (from what I heard so far)
    • Shift Up Corporation seems like a company of gamer which create the games they want to play themselves

    Stellar Blade and Shift Up Corporation fully deserve a great start, and I happily payed the full price of admission w/o feeling bad about it.


  • wolf@lemmy.ziptoTechnology@lemmy.worldAn earnest question about the AI/LLM hate
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    1
    ·
    en månad sedan

    I am in software and a software engineer, but the least of my concerns is being replaced by an LLM any time soon.

    • I don’t hate LLMs, they are just a tool and it does not make sense at all to hate a LLM the same way it does not make sense to hate a rock

    • I hate the marketing and the hype for several reasons:

      • You use the term AI/LLM in the posts title: There is nothing intelligent about LLMs if you understand how they work
      • The craziness about LLMs in the media, press and business brainwashes non technical people to think that there is intelligence involved and that LLMs will get better and better and solve the worlds problems (possible, but when you do an informed guess, the chances are quite low within the next decade)
      • All the LLM shit happening: Automatic translations w/o even asking me if stuff should be translated on websites, job loss for translators, companies hoping to get rid of experienced technical people because LLMs (and we will have to pick up the slack after the hype)
      • The lack of education in the population (and even among tech people) about how LLMs work, their limits and their usages…

    LLMs are at the same time impressive (think jump to chat-gpt 4), show the ugliest forms of capitalism (CEOs learning, that every time they say AI the stock price goes 5% up), helpful (generate short pieces of code, translate other languages), annoying (generated content) and even dangerous (companies with the money can now literally and automatically flood the internet/news/media with more bullshit and faster).


  • Sorry, but this post is really, really bad.

    State clearly which distro and which versions of Gnome and dash-to-dock and perhaps what other extensions you are running, and there might be a chance someone is able to help you. (Also state clearly the source of your Gnome extensions).

    Most of the hints/solutions in answer to this post are also not good. If dash-to-dock triggered the malfunction of the gnome-shell on your system, just login to a terminal and use dconf or gsettings to set org.gnome.shell enabled-extensions to an empty array or to an array w/o dash-to-dock.

    I am happily running dash-dock@micxgx.gmail.com on multiple physical and virtual machines w/o any trouble, using the dash-to-dock provided by my package manager on different CPU architectures YMMV.


  • Java is IMHO one of the most underrated platforms outside of enterprise environments.

    Most people also forget, that Java is not only a language, but also a platform, an ecosystem and active research is applied to many parts of Java.

    Concerning Oracle: OpenJDK is actively supported by very different but big and capable companies (IBM, Amazon, Eclipse Foundation…). The quality of the language, libraries and documentation needs people which are payed to work on this, full time.

    Bring to this the free IDEs one can get for Java - Eclipse and Netbeans are a little bit old school, but offer everything to build/debug and develop complex software.

    Java is not my favorite programming language, but when I want to write interesting software and ensure it will be running for the next decade w/o significant changes, Java is really hard to beat.

    Of course, in hindsight we know how to do a lot of things better as they were done in Java. Still, what other open source Language/Platform/documentation with the backing of capable companies and really independent and interoperable builds are out there?

    One last note to all people which were damaged by Java in university or school: Usually the teachers/professors/lecturers have no real world experience of software development besides the usually university projects, and for the usual university projects which basically means getting small to midsize projects to run Java is total overkill.

    Don’t confuse this with real world software projects in the industry, which are mission critical and need to work a decade from now on. Java was always a bread and butter language, but one which learned from other languages and even the verbosity makes sense, once one dives into code written a few years back by another person.


  • I care how much taxes I pay for several reasons (Germany):

    • Rich people are taxed less than working people
    • Given that we have one of the highest tax rates in the world, a big part of my taxes go into corruption, incompetence or the pensions of civil servants (pensions for civil servants are way higher than for normal people, especially for some pencil pushing)
    • It gets even more fun, when I think about how many big companies are getting subsidized by my taxes with billions (speaking about companies which are making billions for their stake holders)
    • In our system, costs for health care system and workers pensions are also mandatory deducted from my income (they don’t call it tax)… Given, what an average worker pays, we get not enough out of it, neither from health care nor when thinking about the pensions
    • A final tax, which is not called tax, is for public TV/state propaganda. There were more scandals about that money recently than anything else: The higher ups in that system earn more money than the president of Germany (no kidding), people get special pensions for the rest of their life which are obscenely high (after working like a few months, again, no kidding)

    Don’t get me wrong: I would happily pay taxes if the biggest parts would go towards services, infrastructure, public transport, health care, people in need and smart/strategic investments of the economy.

    As it is right now, my taxes are siphoned into the pockets of the so called elite instead , so I care.

    If you don’t care about paying taxes, you are either mostly happy about were the money goes or have too much money to care.




  • You are asking exactly the right questions!

    I have an Ansible playbook to provision the Pi (or any other Debian/Ubuntu machine) with everything need to run a web application, as long as the web application is a binary or uses one of the interpreters of the machine. (Well, I have also playbooks to compile Python/Ruby from source or get an Adoptium JDK repository etc.)

    Right now I am flirting with the idea of using Elixir for my next web application, and it just seems unsustainable for me to now add Erlang/OTP and Elixir to my list of playbooks to compile from source.

    The Debian repositories have quite old versions of Erlang/OTP/Elixir and I doubt there are enough users to keep security fixes/patches up to date.

    Combined with the list of technologies I already use, it seems to reduce complexity if I use Docker containers as deployment units and should be future proof for at least the next decade.

    Writing about it, another solution might simply be to have something like Distrobox on the PI and use something like the latest Alpine.






  • My development machine is an AMD64 and the Pi is an Aarch64… I have no clue how complicated cross-building images for a different architecture is?!? (I am thinking about using something like Erlang/Elixir, so I honestly don’t know at all.)

    I am not totally opposed to use a registry (free or payed), but, correct me if I am wrong: If I just build the image on the Pi, it is already exactly at the one spot where I need it, so what problem is solved for me by using a registry?

    Edit: Someone above mentioned docker buildx, so seems cross compilation is solved.