News for hackers. Stuff that matters.

nobody42

Re:WTF Ubuntu? on Tuesday November 03, 2026 @08:04AM (#50351511)
My bad. For now, they were just cosplaying as such [0] with anti-consumer decisions in the recent years.

[0] https://en.ubunlog.com/Canonical-will-go-public-this-year/

> According to Shuttleworth, the company is now ready to go public , something they attempted in 2005, but the conditions are now more favorable.

> meaning that some Canonical products will cease to be developed by the company.

Re:WTF Ubuntu? on Monday November 02, 2026 @03:33PM (#50343314)
Everything that's built by a publicly traded company is built for shareholders, not for consumer. Switch before it became unswitchable or learn the hard way.
Re:PHP 8.2.35 on Saturday October 24, 2026 @11:14AM (#50222071)
I only managed to use my Nvidia card with the latest drivers:

https://docs.nvidia.com/datacenter/tesla/driver-installation...

[2019] An exposed database tracked whether 1.8 million Chinese women were “breed ready”:

https://www.theverge.com/2019/3/11/18260816/china-exposed-da...

Great points above. To add even more, Google is purposefully misleading user when designing user interfaces [0] [1]. Like language, user interface is affecting how we think.

Which only a hard-fork could fix, and who have the resources to fight that.

[0] https://www.accc.gov.au/media-release/google-llc-to-pay-60-m...

[1] https://www.theguardian.com/technology/2021/apr/16/google-tr...

I watched Brax a bit, and many of his technical assessments are incorrect. He has an attitude of a snakeoil salesmen. Hard pass.
Re:Social Reality in China on Saturday October 17, 2026 @09:33AM (#50131039)
> Now of course things aren't heaven in China, they aren't in USA either

In democracies gradual improvement is possible. In dictatorship it's not.

The real answer is, where do you want, and your children, to live? With barred university education due to parent's social score? With collapsing schools? With kindergarten target practice of "enemies"?

Not the case when using https://github.com/roddhjav/apparmor.d/blob/main/apparmor.d/...

(I'm a contributor to the repository)

Re:Social Reality in China on Saturday October 03, 2026 @04:07PM (#49947314)
Without even checking your stats, every stat from tightly controlled territories is juked. Only fifth chief statistician under stalin held his position after four previous were educated on how to count with a firing squad. USSR "prevailed against imperialism" the same way, until it didn't.

But when it comes to owning a home in China, you can't do it - because you can't own the land, only lease it. So effectively, anything could happen with your home.

Then, construction in China is a pyramid scheme. Highly praised amount of infrastructure and empty ghost cities is an effect of that [0]. Combine that with rampant corruption (guanxi)[1] and culture of corner-cutting (chabuduo)[2], and you will end with bridges and multi-story buildings crumbling like sand, waiting to collapse at any moment.

All of that with an addition of aging population due to half-witted decisions of delusional, unchecked power (one child policy) leaves China with construction it wont be able to maintain, not even with immigrants, because of recent decisions of tribal nationalism[3][4].

Trends are saturated about China's prosperity and superiority. But if you want actual prosperity - you cant rely on algorithms alone.[5]

With your stats you imply that a person could feel safe owning a home in China. Could you feel safe accounting for all of that?

[0] https://www.youtube.com/watch?v=oWDty6iNcgA

[1] https://en.wikipedia.org/wiki/Guanxi

[2] https://www.reddit.com/r/China/comments/ub6lwn/what_is_the_c...

[3] https://www.youtube.com/watch?v=NUaYNhzEq_E

[4] https://www.youtube.com/watch?v=4Jilv0b27m4

[5] https://www.firstpost.com/world/tiktok-manipulates-content-b...

And it's a proper way to use computer nowadays.

Apart from high-overhead solutions like VMs and containers, there are seamless and maintenance-free solutions (after the initial setup):

- systemd service hardening [0] [1]

pretty powerful, but it's a blacklist approach - whack-a-mole

- AppArmor [2]

Whitelist, proactive approach. Contrary to SElinux, it's not a programming language, and could be grasped pretty quickly. I made a tool to easily convert AA logs into usable rules. [3]

[0] https://github.com/alegrey91/systemd-service-hardening

[1] https://github.com/desbma/shh

[2] https://presentations.nordisch.org/apparmor/

[3] https://github.com/nobody43/apparmor-suggest

Re:Make your first edit to OpenStreetMap on Saturday September 12, 2026 @06:35PM (#49677920)
https://streetcomplete.app - basic task-based, on-the-ground, app for Android

https://every-door.app - intermediate on-the-ground app for smartphones

https://rapideditor.org - AI-assisted mapping in browser

https://www.hotosm.org - task-based mapping in browser

https://josm.openstreetmap.de - advanced editor for desktop (this post)

https://www.comaps.app - actually use the map with ability to make minor changes

Re:Stopping the smart TV from being used against you on Friday August 28, 2026 @06:25PM (#49484990)
Problem is, smart devices are heavily subsidized in an expectation for future profit from data collection.
Re:OpenStreetMap State of the Map 2026 on Friday August 28, 2026 @04:42PM (#49484015)
You can record the track with StreetComplete [0] and upload as a note (records tracks only in foreground). Then convert it to actual path in website editor. [1]

[0] https://streetcomplete.app

[1] https://www.openstreetmap.org

Also: https://wiki.openstreetmap.org/wiki/Upload_GPS_tracks

Re:OpenStreetMap State of the Map 2026 on Friday August 28, 2026 @04:34PM (#49483908)
Why you want to enable one of the biggest monopolies on the planet, that gatekeeps innovation? [0] [1]

Lets say you are building a delivery robot. You need not just situational awareness with LiDAR, but also a map for route planning. Will Google give you access for such technology if your innovation is a direct competitor?

If its not a delivery robot, but firefighter robot?

[0] https://www.eff.org/deeplinks/2013/05/google-abandons-open-s...

[1] https://wp-events-plugin.com/blog/2018/07/17/google-maps-api...

Re:CoMaps integration with the wider FLOSS ecosystem on Thursday August 27, 2026 @12:15PM (#49467224)
OsmAnd is painfully slow, I keep it around just for unique features like transport routes and surface quality.

CoMaps rendering is almost instant and map palette is easier on the eyes.

Re:CoMaps integration with the wider FLOSS ecosystem on Thursday August 27, 2026 @10:10AM (#49465204)
Yess!

Please make an effort to improve underlying OpenStreetMap dataset:

https://streetcomplete.app - basic task-based, on-the-ground, app for Android

https://every-door.app - intermediate on-the-ground app for smartphones

https://rapideditor.org - AI-assisted mapping in browser

https://www.hotosm.org - task-based mapping in browser

https://josm.openstreetmap.de - advanced editor for desktop

Re:VMs won't contain cyber-capable agents on Wednesday August 26, 2026 @09:03PM (#49458086)
> it found a CUPS server (with a known CVE that had not made it to oldstable packages), but was not able to complete exploitation due to AppArmor.

It's evident that Mandatory Access Control has become, ahem, mandatory.

Both VM and inference engine processes should be confined, at least. There's a project where it's already done for many applications. [0]

Additionally, `lockdown=confidentiality` in kernel boot flags greatly reduces attack surface. (interferes with unsigned modules like NVIDIA drivers) [1]

Then AppArmor profiles could be written for absent applications with a learning-mode tool [2]

Nothing is bullet proof, but these approach significantly reduces potential consequences [3]

[0] https://github.com/roddhjav/apparmor.d (I'm the contributor)

[1] https://madaidans-insecurities.github.io/guides/linux-harden...

[2] https://github.com/nobody43/apparmor-suggest (I'm the author)

[3] https://en.wikipedia.org/wiki/Swiss_cheese_model

Re:Arch Linux disables AUR package adoption on Friday July 31, 2026 @02:29PM (#49126904)
It's just entropy.

Favorable environment of Linux distros is an initial phase of technology. This state is gone for years now, AI is just making it evident. Adapt or become obsolete.

Re:Ditching Vagrant: VMs with KVM and Virsh on Debian on Friday July 10, 2026 @08:48AM (#48859153)
It's usable (?) as a toy: numerous gui inconsistencies and lack of security isolation [0].

Can't say whether the of lack funding (move to Cockpit from Red Hat) is the reason, or maintainer is just an obstructionist (strictest feature policy).

[0] https://github.com/virt-manager/virt-manager/issues/358

Re:LineageOS Statistics on Wednesday July 08, 2026 @09:21AM (#48831604)
Is this some kind of FUD?

Shady sponsors (if there is any) doesn't matter when transparency is in place. Want to reveal malicious intent? Provide a PoC.

Only hardware that supports bootloader relocking are Pixel devices. There are no others to consider development effort - plain simple. No, you can't use an unlocked device as a daily driver. Up to a minute out of your hands (or triggered reboot from public power outlet, due to outdated Lineage firmware) - and your bootloader is rewritten with one that collect your FDE secret and sends it to a remote server.

Opaque hardware? Which hardware are better and more transparent than Titan and upcoming OpenTitan? Bruteforce protection which considers current ambient temperature - what more do you need?

I can't say anything about VPN affiliation, but everything else is complete bollocks.

Re:Organic Maps on Tuesday July 07, 2026 @08:02AM (#48816558)
"These no life where data broker isn't needed"
Re:CoMaps – FOSS Offline Maps on Tuesday July 07, 2026 @07:50AM (#48816437)
Every time GrapheneOS "just works" should be mentioned, because some ecosystems are straight hostile to user-controlled systems.
Re:CoMaps – FOSS Offline Maps on Monday July 06, 2026 @05:20PM (#48810664)
Its a renderer. It bakes live OSM data once very few weeks.
Because exposed, non-private, abused by-default is a business model. The company is incentivised to not provide restricted access - otherwise you can't have a cut from apps revenue. It's defective by design.
Re:New Nginx Exploit on Thursday May 14, 2026 @06:28PM (#48142102)
Memory safety is good, but does not protect from every threat. In this day and age infrastructure operators should familiarize themselves with proactive defenses, MAC: SElinux and AppArmor. It required much friction earlier, but there are more tools to ease the usage today.

https://presentations.nordisch.org/apparmor/

https://github.com/nobody43/apparmor-profiles/blob/master/ng...

https://github.com/nobody43/apparmor-suggest

Disclaimer: I'm the author of both repos.

Re:Copyparty, the FOSS file server [video] on Thursday November 27, 2025 @10:07AM (#46069909)
Attack surface of this thing gives me existential dread.

Older »