• 1 Post
  • 30 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle
  • Open source software literally means that the source code is available to anyone. In GitHub, that just means that your repo is public rather than private. But your method technically doesn’t matter. You could publish to a forum if you wish. That’s still open source!

    Free OSS just means that anyone is free to use and modify the source code for any purpose. The details are usually defined in a LICENSE file.

    I feel like you’re really asking about the common practices and methods used in FOSS. Right? If so, that’s entirely up to you as the maintainer. As the project matures, you may attract other contributors which will in turn will motivate change to your tools and methods.

    Start with what works for you. Model after similar projects if you wish. Adjust as change is needed.




  • Unfortunately, I don’t remember the source so we may need to go digging. But I recall reading that something like 1/3 of all bugs are related to memory safety. And those bugs translate to things like buffer overflow and privilege escalation attacks.

    The proclaimed advantage is that by making the entirety of Rust memory safe, that entire class of bugs simply won’t exist for projects written in Rust. When they do happen, the bugs will be addressed by the language rather than many thousands of downstream projects. It should be an enormous gain in development performance for the world.

    I think the idea makes sense. Time will tell us how well that works.




  • Lodra@programming.devtoSelfhosted@lemmy.worldBest way to dockerize a static website?
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    edit-2
    4 months ago

    The simplest way is certainly to use a hosted service like GitHub Pages. These make it so easy to create static websites.

    If you’re not flexible on that detail, then I next recommend Go actually. You could write a tiny web server and embed the static files into the app at build time. In the end, you’d have a single binary that acts as a web server and has your content. Super easy to dockerize.

    Things like authentication will complicate the app over time. If you need extra features like this, then I recommend using common tools like nginx as suggested by others.


  • I recently dug into this because I accidentally trashed my wife’s OS which was encrypted with bitlocker. PITA btw and I couldn’t beat the encryption

    Bitlocker encryption key hash is stored in 2 possible places. First is an unencrypted segment of the encrypted drive. This is bad because it’s pretty easy to read that hash and then decrypt the drive. The second place is on a Trusted Platform Module (TPM) which is a chip on the motherboard. This is better because it’s much more difficult to hack. It can be done but requires soldering on extra hardware to sniff the hash while the machine boots up. Might even be destructive… I’m not sure.

    Either way a motivated attacker can decrypt the drive if they have physical access. For my personal machines, I wouldn’t care about this level of scrutiny at all.

    Anyways you can see if any open source solutions support TPM.





  • This really depends on the services you’re interested in. If you want something like aws, then no 🙂

    There are plenty of other service providers that do things more ethically. Bitwarden is good, random example in my opinion. The software is e2ee and their service just syncs data between your devices. It’s not really possible for the bitwarden, the company, to read or mishandle your data in a way that matters. Note that this doesn’t apply to the credit card info for paid accounts. Still, this is what I consider “the good guy”.

    So what services are you looking for?




  • Lodra@programming.devtoOpen Source@lemmy.mlOSS Notetaking App: Notesnook
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    8 months ago

    I actually have to agree that the price is too high. Yes, Notesnook is competitive. But they’re all way too expensive for my taste. I’m really not happy with any of the solutions I’ve seen recently.

    For comparison, I pay for bitwarden. It costs me $10 per year. That’s a price point that I’m more willing to consider.



  • Lodra@programming.devOPtoLinux@lemmy.mlHelp me choose a distro, please!
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    9 months ago

    Hardware has come up a few times in this post now. Seems I should share a bit about what I’m running 🙂

    I bought an ASUS ROG Strix GA15DK just over 2 years ago. The hardware was shiny but not top-tier at the time. It’s not new at this point but also not old by Linux standards.

    • AMD Ryzen 7 5800X Processor
    • NVIDIA GeForce RTX 3070
    • 16GB DDR4 3200 MHz RAM