irundebian

How do you know? There were offers on HackForums which did not relate to software components such as smartphones operating systems or webservers but to web sites. Why wouldn't that be possible for Google's developers docs site?

How do you know? You could explain the impact of the vulnerability and let buyers on the black market decide and bid whether they could do something useful with it.

Security is not always a cat and mouse game.

Yes, you can take the day off, but your pay will be reduced by 20%. Just because technology and productivity are advancing doesn’t mean you can work less and still get the same pay. By that logic, hardly anyone would need to work today, as productivity has increased many times over compared to previous centuries. If one company works less, then other companies that work more have an advantage. That’s why it doesn’t work.

Danke Merkel

Some domains work, some not. I assume that working domains are cached.

That doesn't mean anything.

Do you have evidence for that?

I doubt that most critical systems are air gapped. Even if there are, most part of Russians economy is not, but is still using IT based on COTS systems. Why wouldn't the Ukraine DoS or compromise the whole non air-gapped IT infrastructure of Russia to hit the economy if they could have easy access to RCE just because they are a government?

No, he didn't. Learn to discuss properly. OP stated that any government could get RCE for any OS. And that is highly unlikely, since budget above market rates does not imply that you can easily get RCEs. The market rates are high because there is scarcity of such vulnerabilites.

Governments using COTS operating systems does not imply that these systems are unackable. If the statement of OP would be true, we would just see constant exploitation of RCE zero days, or at the least the impact of that. But that is not the case.

Just because the market would buy something for X$, doesn't mean that you could buy that if you have more than X$.

The provided binaries may still contain malicious code but it guarantees that no malicious code has been inserted in between the build process of the published code. So if your binaries contain malicious code, you can be sure that all other users of the software version are affected, too.

It can be hard to write macros with state in typst.

In Ada you can pay for integer overflow checks (runtime) if you want to. With Ada SPARK you can prove that your code does not contain integer overflows so that you don't need runtime checks.

These should be very few cases in contrast to the number of people traveling into the US.

Yeah, if you really care about security, only use computer which use line printers as output mechanisms.

After Qubes OS I ended up using Fedora with Wayland, Flatpaks and running applications as different users but this introduced other problems.

The security profiles of many "flatpacked" applications are quite permissive (see https://flatkill.org/) so that they could be circumvented. Besides that I'm experience some convenience issues when accessing files on my drive. It's especially annoying when using "flatpacked" office such as onlyoffice.

> scrolling web pages with large images is laggy

Now that I've read this, I can also remember that I was also annoyed by jerks when scrolling web pages.

I also found the backup management too complicated. I didn't want to back up entire VMs, just the data within the VMs. In principle, I would have had to start up all VMs for backups and run a backup script for each individual VM.

Correction: I think I experienced noticeable stutters with Full HD videos not with HD videos.

I'm using an Intel i7-8850H with 6 cores so I think it's powerful enough. It's not that I couldn't watch HD videos but I was experiencing stutters and it left me with the feeling that the CPU is insufficiently utilised.

Have used it for several months as my daily OS and dropped it because of bad graphics performance (only software rendering supported, many frame drops when watching HD videos on YT) and bad battery management. Due to software rendering the overall systems perfmance also dropped. So I cannot recommend it for people with high requirements on graphics and battery duration. Besides that it was an interesting and good experience.

I think it would be good to make it possible to deactivate certain security features such as strict graphics isolation so that users can adjust their settings to their risk acceptance level. It would also be interesting to be able to optionally replace Xen with lighter isolation mechanisms, even if the user would compromise on security here too.

I've been using for more than a decade as my desktop system and I'm still running into freezing and black screen issues. Things got worse after buying a laptop with a dedicate NVIDA graphics card and using Fedora.

Please give me an example of a police station which post exclusively on Twitter.

To which CrowdStrike incident are you refering to? The global impact CrowdStrike incident was caused due to a driver defect which wasn't caught by quality assurance processes. It had nothing to do with malicious actors which were interfering with the code repository or the software deploment process.

NOT (any pedos or far-right extremists) != Gerontophiliacs and Marxists

There is no clean interface to configure app-based network rules.

No, you have to install additional software for that.

Thank you. I took a look at both and while stateright seems to check/derive implementation against the spec, antithesis rather seems to do testing instead of verification.

How do I can check an implementation against a TLA+ spec?