* Posts by TrevorH

150 publicly visible posts • joined 22 Sep 2009

Page:

What can be done to protect open source devs from next xz backdoor drama?

TrevorH

Nice selective quoting there... the original says "ordinarily used by ..." meaning xz the package, not restricting it just to the compromised version.

Iowa sysadmin pleads guilty to 33-year identity theft of former coworker

TrevorH

This guy was on freenode and then libera.chat IRC in the #centos channels for years and came across as a thoroughly nasty person.

The Hobbes OS/2 Archive logs off permanently in April

TrevorH

This is not the first time that hobbes has announced it's going away. Last time it was rescued after a lot of complaints and a number of students or faculty came forward to continue to maintain it.

Windows keyboards to get a Copilot key – but how quickly will users jump?

TrevorH

*This* is what counts as innovation at Microsoft?

England's village green hydrogen dream in tatters

TrevorH

It should also be noted that the vast majority of homes in cities in the UK cannot use individual heat pumps due to lack of space and/or noise from the fan units. If you live in a terraced street with no garden, where do you put your heat pipes? There are hand-wavy vague and untested plans for utility companies to install street-wide pipe networks under roads and pavements but so far nothing concrete (no pun intended) about how this would function nor how much it would cost. To meet the 2050 deadline they would need to be converting 20,000 properties a *week* to heatpumps. I suspect the current conversion rate is more likely closer to 20 a week than 20,000!

Red Hat greases migration to RHEL for CentOS 7 holdouts

TrevorH

Nor do they mention "Where can I find £25,000 a _year_ stuffed down the back of the sofa to allow me to migrate my CentOS 7 systems to RHEL"

Red Hat retires mailing list, leaving Linux loyalists to read between the lines

TrevorH

It's been obvious they think it ought to be Windows for some time.

Researcher bags two-for-one deal on Linux bugs while probing GNOME component

TrevorH

why would you have anything installed with "tracker" in its name!

Some of us took one look at the package list and found something called "tracker" and immediately ran `yum remove \*tracker\*`

Sysadmin and spouse admit to part in 'massive' pirated Avaya licenses scam

TrevorH

The infamous Tuttle!

Previously known only for making the headlines for https://www.theregister.com/2006/03/27/tuttle_email/

ArcaOS 5.1 gives vintage OS/2 a UEFI facelift for the 21st century

TrevorH

Re: Compilers?

The entire gcc toolchain is available for OS/2 but there are also compilers from IBM and Borland though finding copies might be tricky.

TrevorH

64GB is correct

As a long time OS/2 user I can confirm that HPFS has a hard limit of 64GB per filesystem. JFS allows for larger volumes and quicker chkdsk times but I've also lost data to it so large is not always good!

Soon the most popular 'real' desktop will be the Linux desktop

TrevorH

Last time I looked Office 2019 was the last version you could install on your own computer.

AWS: IPv4 addresses cost too much, so you’re going to pay

TrevorH

$0.005/h is US$44 a year so not going to break the bank for most people who need one. People that use hundreds of them, not so much.

Twitter name and blue bird logo to be 'blowtorched' off company branding

TrevorH

So you pay $44B for a brand name and then dump the name, logo and even the verb "tweet" associated with the name you bought.

What a cupid stunt.

What it takes to keep an enterprise 'Frankenkernel' alive

TrevorH

> No API changes, and no internal ABI changes either

This is a bit disingenuous. The so called "Stable KABI" almost *always* breaks at a RHEL point release. And since this is Stream and the kernel will be continually updated with new changes during the lifetime of one RHEL point release so I would expect multiple KABI changes to happen during Stream's lifetime between one RHEL point release and the next. If you run RHEL then you just get used to the "stable" KABI not being stable over a point release. If you run Stream then it could break at any time.

Rocky Linux claims to have found 'path forward' from CentOS source purge

TrevorH

Re: A bit of advance warning wouldn't have gone amiss

Yes. I've seen what happens in CentOS Stream. The other day for example, they pushed out an update to gnupg2 which removed its ability to verify signatures using SHA1. Good move to remove insecure stuff... except that the key used to GPG sign all the packages in the distro uses SHA1 so immediately after applying that fix, you could no longer use dnf or rpm to upgrade or downgrade any packages because they all have invalid signatures. That is the level of testing that CentOS Stream packages get before they are inflicted on its users.

Run, run away.

TrevorH

Re: If RH can't do this...

RHEL 8 did and does have the same lifespan as RHEL 6 and 7. 10 years for all of them. CentOS Stream 8 and 9 are 5 years.

Red Hat strikes a crushing blow against RHEL downstreams

TrevorH

Never heard of "when you're in a hole ..."

...then stop digging. Or, double down on what you just said and go on a "you're all picking on us" rant: https://www.redhat.com/en/blog/red-hats-commitment-open-source-response-gitcentosorg-changes

TrevorH

Well, who knows how that is now. At one point when OEL started up, it was found that there were typos in their SRPMs that had come directly from the CentOS version of the SRPM so it was obvious where they came from.

TrevorH

Also "if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code".

TrevorH

Re: GPL violation

Hello Debian!

Western Digital: Customer info stolen in that IT attack

TrevorH
FAIL

I got the email from them telling me of this breach and, usefully, it contains only a JPEG of the grovelling apology from some WD bigwig. That JPEG has no explanatory text to go with it and like many I have images deliberately turned off in my email client so all I got on two email clients (gmail on Android 13 and Thunderbird on a desktop) was a blank email from them containing, apparently, nothing at all. Very useful. It was only because I wondered why WD would be sending me a blank email that I bothered to dig through the headers and work out that it was actually from them. I then had to hack through the HTML email source code to extract the JPEG URL so I could read it....

Not a great way to communicate

Shocks from a hairy jumper crashed a PC, but the boss wouldn't believe it

TrevorH

> Regomize

Nit pick time.

I'm pretty sure this should be 'regonomize' as in a smash of register and anonymize.

Regomize sounds more like a word smash of register and sodomize. Similar and maybe very registerish...

Curiosity gets interplanetary software patch for better driving and more on Mars

TrevorH

Eurpean format numbers?

> 21.921MB

Did you use Euro formatted numbers here with a . instead of a comma? Is that twenty one point nine two one MB or is it 21 thousand, 9 hundred and twenty one MB? The first seems unbelievably small and the second seems more realistic but quite bloated.

Red Hat at 30: Biggest Linux company of them all still pushing to become cloud power

TrevorH

> the RHEL clone CentOS changed its focus

I'm not sure why you continue to spout the RH company line on this.

What they did was kill CentOS. Only fools (and horses?) still use CentOS.

IBM shrinks z16 and LinuxONE systems into standard rack configs

TrevorH

> a single Rockhopper 4 would let customers replace at least 36 x86 servers, reducing energy consumption by 75 percent and space by 67 percent

So if it can replace 36 x 1U servers and use 67% of the space, does that mean this beast is a 24U rack mounted server? Does it come with a free forklift to get it into the rack?

Yukon UFO could have cost unfortunate balloon fan $12

TrevorH

K9YO is a $12 balloon but is KY90 33 year old personal lubricant?

Asus' latest single-board computer packs a 12-core, 4.5Ghz Intel i7

TrevorH

"barely larger than a Raspberry Pi " for some value of "barely"

rpi4 85x56mm

this 119x121

so that's 14399 vs 4760mm² or about 3 times as big.

Rocky Linux 9 and its new build service enter the ring

TrevorH

VirtualBox requires the guest additions to do integrated mouse. Those GA are not included in any RHEL9 clone, not even RHEL 9 itself so any rebuild of RHEL 9 will be lacking mouse integration in VBox. It's not unexpected.

Mars helicopter to take a breather, recharge batteries

TrevorH

You'd think that after the number of times they've had solar panels covered up in dust they would have invented a solar panel windscreen wiper

Broadcom's VMware buy got you worried? Give these 5 FOSS hypervisors a spin

TrevorH

Much as I like VirtualBox for home use, it's hardly Enterprise.

OpenSea phishing threat after rogue insider leaks customer email addresses

TrevorH

> To wit: opensae[.]io, opensea[.]org, and opensea[.]xyz would be bad domains.

OpenSAE is what you do with a Stamped Addressed Envelope when it arrives?

Micron aims 1.5TB microSD card at video surveillance market

TrevorH

Yes, but how much?

Enquiring minds want to know

RSAC branded a 'super spreader event' as attendees share COVID-19 test results

TrevorH

> However, 39.9 percent said they were unsure, for whatever that means.

I'd guess that since the conference didn't end until the 9th June, some people could still be unsure since the COVID-19 incubation period is still listed by the WHO as being on average 5-6 days but with outliers up to 14 days. So if it ended last week, there might still be new cases for another week yet.

Let's play everyone's favorite game: REvil? Or Not REvil?

TrevorH

VoIP attacks

The various VoIP extortion attacks last year were all claiming to be REvil so DDoS attacks would not be a new thing (if indeed the ones last year were REvil).

The new generation of CentOS replacements – plus the daddy of them all: RHEL 8.6

TrevorH

Re: It was sad to see Centos go

Red Hat decided to turn CentOS into a beta version of the next version of RHEL so it has become unstable and pretty much continually broken. Rocky and Alma were set up to replace it outside of Red Hat and both aim to release the same thing that CentOS used to : a clone distro of RHEL minus hte RH branding and logos.

Workstation, server, IoT? No worries. Fedora 36 is out – all 13 editions of it

TrevorH

Running Rawhide is like playing Russian Roulette. It's definitely not for the faint of heart. Nor for those without backups!

Elon Musk's latest launch: An unsolicited Twitter takeover

TrevorH

Another dangerous megalomaniac throws a strop.

Arch Linux turns 20: Small, simple, great documentation

TrevorH

The arch wiki is excellent

The arch wiki is one of the best resources out there for any flavour of linux. It's clear, concise, detailed and even better, it's usually right!

Chromium-adjacent Otter browser targets OS/2

TrevorH

I was always told the reason why it could not be opensourced was that a lot of the source files are "Copyright IBM, Microsoft" and that getting the two teams of lawyers to agree to anything like that would be, shall we say tricky.

Russian 'Minecraft bomb plot' teen jailed for five years

TrevorH

Thoughtcrime :-(

'Now' would be the right time to patch Ubuntu container hosts and ditch 21.04 thanks to heap buffer overflow bug

TrevorH

Still not patched in CentOS Stream

so much for Red Hat's promise to keep CentOS Stream up to date and free of exploits then...

SUSE announces 'tech and support' product Liberty Linux

TrevorH

A rebuild isn't really a rebuild if it doesn't include the same kernel as the original. Are they also doing what OEL do and providing the original RHEL distro kernel as an optinon as well?

Spruce up your CV or just bin it? Survey finds recruiters are considering alternatives

TrevorH

We discard something like 50% of applicants based solely on the contents of their CV which generally shows that they are not suitable for the role in question. Without a CV we'd have to interview all those too which sounds like a massive waste of everyone's time.

Microsoft rang in the new year with a cutesy tweet in C#. Just one problem: The code sucked

TrevorH

> "Yeah 2021 is wrong. We're still stuck in 2020."

No, it's 2020 too.

DDoSers take weekend off only to resume campaign against UK's Voipfone on Monday

TrevorH

Re: Annoying...

Unfortunately they use a botnet which is not just Russian, it's worldwide.

TrevorH

Re: this is what happens when you dont enforce authentication

So how do you authenticate when the pipe connecting you to the internet is so full of random data that the real stuff cannot get through. Your grasp of what a DDoS attack actually does and how it operates seems to be not very aligned with reality. You cannot protect against a DDoS attack once the packets from it arrive at your endpoint. It's already too late.

TrevorH

And that would help against a DDoS how?

Twitter's machine learning algorithms amplify tweets from right-wing politicians over those on the left

TrevorH

It's that Russian Troll farm liking posts most likely to lead to the demise of democracy...

Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations

TrevorH

After Kaseya it appears that REvil got out of the ransomware business. If the recent attacks on VoIP infrastructure are to be believed they've moved into plain extortion instead - "Send us 10 BTC or we will DDoS your business to death".

Page: