Thing is, it’s just not true. OnePlus also allows relocking.
- 22 Posts
- 2.57K Comments
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
1·10 days agoHave you ever looked at the available packages in a Linux distribution like Debian or a BSD? There are thousands and thousands of library packaged to support software releases. Like I said, that had been the distribution model for the better of twenty+ years until this new, shittier, model.
wildbus8979@sh.itjust.worksto
Canada@lemmy.ca•Cloudy future for bourbon has Jim Beam closing Kentucky distillery for a year
58·11 days agoNo, were just sobering up to American booze. The shelfs here are fully stocked with local alcohols.
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
1·10 days agoThat’s essentially how most distributions of Linux and Unix work. You package an app with a list of depencies like “libcaca >= 1.2.3” and that’s that. If that dependency isn’t available in the distro you need to have that packaged (and thus have a maintIner for said package) first. The distro’s package maintainers are responsible for keeping an eye on the upstream sources and provide reviews. Often there’s also a security team that watches for packages requiring expedited attention, and security backports.
Then this sort of crap like NPM came along and it became popular for devs to package their own dependencies.
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
0·11 days agoI’m not super familiar with Maven so I could be wrong, but doesn’t Maven still pull depencies from upstream? That doesn’t fix the problem. Having depencies packaged in the OS means there is in theory some level of overview and review by the package maintainer(s).
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
1·10 days agoDebian does as well for anything that is packaged; python, golang, rust, etc.
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
1·11 days agoThe first issue is NPM specific sure, but the second is true of all the languages I mentioned. Even golang which originally had a goal of having a built in library so vast you didn’t need much depencies has devolved into a large and fractured community.
wildbus8979@sh.itjust.worksto
Technology@lemmy.world•NPM Package With 56K Downloads Caught Stealing WhatsApp MessagesEnglish
81·11 days agoThis truly has grown past a JS problem. NPM was kind of the first time dependencies were installed by the project rather than through the OS. But nowadays this has become the norm, golang, rust, and to an extent python also work by installing dependies directly from git for the most part. This isn’t going to get any better unless we revert to OS based dependencies which noone wants to do because developers want the latest and greatest model.
wildbus8979@sh.itjust.worksto
Linux@lemmy.ml•The Optimal, Performance-Centric Method of Installing Windows on virt-manager/QEMU/KVM
2·13 days agoThe comment I’m replying to mentioned other OSs and non gaming functions. For those purposes Virtio requires almost no configuration to work with acceleration and works more than well enough.
That said, vietio drivers do in fact exist for windows.
wildbus8979@sh.itjust.worksto
Linux@lemmy.ml•The Optimal, Performance-Centric Method of Installing Windows on virt-manager/QEMU/KVM
2·13 days agoVirtio works jisy fine.
wildbus8979@sh.itjust.worksto
Canada@lemmy.ca•China’s Trade Ultimatum to Canada: Comply or Suffer - former diplomat Michael Kovrig explains the deeper logic behind Beijing’s economic coercion
84·14 days agoIf the Walrus could stop referring to fucking spies as “diplomats” that would be great.
The principality of Sealand keeps annexing new land mass formations popping out of the Atlantic!
wildbus8979@sh.itjust.worksto
Selfhosted@lemmy.world•What DDNS providers you guys recommend?English
5·19 days agoAnything that supports bind’s built-in nsupdate.
wildbus8979@sh.itjust.worksto
World News@lemmy.world•Cuba on edge as US seizure of oil tanker puts supply at riskEnglish
2·21 days agoI don’t know to what extent, we’ve long had business in Cuba. Nortel was selling them gear for example.
You can even use SecureBoot and TPM in a VM ;) OVMF EDK2 fully supports both ;)
SecureBoot is fine, sucks that vendors won’t add distro keys but you can do that yourself, or use the shim.
I don’t know which distro you’re using, but in Fedora and Debian it’s pretty easy to install the signed version of grub and the signed shime and get full secure boot in Linux. No setup needed.
















You could always sign the messages with GPG or S/MIME.