PieFed.caranzispa, ranzispa@mander.xyz
Instance: mander.xyz
Joined: 9 months ago
Posts: 8
Comments: 835
Posts and Comments by ranzispa, ranzispa@mander.xyz
til
sysadmin
farming
science_memes
linuxmemesComments by ranzispa, ranzispa@mander.xyz
Linux@lemmy.ml
Hello, thank you for the in depth explanation! I am not very familiar with nix, and yes I’m talking about the package manager. I have installed NixOs recently to toy around with it and see whether it could be a good solution to certain problems we have. I have determined that NixOs itself is not mature enough for what we need, but I do see value in the nix package manager that other solutions do not offer.
Regarding the 4 points you raise
- I’m not too worried about hash squatting, I guess there’s no way around it, but other ways of managing packages have way worse flaws than that.
- I do want my users to be able to build packages. In most cases I imagine we’ll use pre built packages, but often packages available are not optimized for certain architectures.
- How does the nix sandbox work? Just so I know what I’m working with. Do you know where I can read about it?
- Does root actively run installed packages at any point? If that is the case I’d be a bit wary to use nix for this purpose.
Linux@lemmy.ml
Thank you for the clear explanation. This is good enough for me I guess then. What I am most afraid is not really a colleague building a malicious package on purpose, but rather them installing something which is then run as root and gets access to the whole system. I understand packages are built by unprivileged users, but in the end they are owned by root.
What I wonder is whether in the way it is possible that something is run as root without someone specifically deciding it should be.
I mostly run Debian on servers. I do not want a rolling release on a server, at all. I don’t care how well they check their packages, I just want the thing to work. I do not care about new features, I just want it to work.
Linux@lemmy.ml
Thank you for the explanation. Yes, I’m talking about the nix package manager, not about the operating system.
As far as I understand packages are built by less privileges users, but libraries and binaries are owned by the root user in the nix store.
https://nix.dev/manual/nix/2.34/installation/multi-user.html
What I wonder is wheter this could lead to root executing untrusted code. I will have several users installing packages and I can not trust that they will check every package. Thus I’d like to know whether I can trust the system to be resilient without careful attention.
Fair, I’m always scared to upgrade to a new Debian release and the process is always painful. But that happens every couple years and I can take a week or two to look into it before doing it.
Every time I did pacman -Syu it was a Russian roulette. Most of the times everything was fine, but often enough there was a problem and something was broken and I had to spend a couple days figuring out what was the problem.
EuropeYou need an API key to use the app… I doubt the people who need it will ever use it. Besides, is this needed? Do people not know which areas of their town are in shade?
TechnologyAny mathematician here who reviewed the correctness and relevance of these proofs?
TBF, I remember working for a company producing a domotic system. They had this way to program it, which involved a button and nothing else, no leds, no buzzers, just one button.
Do you want to enable this specific functionality? Press the button 63 times, make sure you don’t lose the count or you’ll enable something else.
I reckon that is a problem. A fair solution would be to popularize housing occupation again, that way the risk of not renting the houses I much higher for landlords.
People are very worried about squatters, in my opinion there’s way too little squatters. Where I live there’s not enough housing, yet you walk around and see entire streets of buildings in which nobody lives.
World NewsThe state department said the discussions at the conference were “substantive and constructive” despite the map
I can imagine how substantive and constructive you can be, when you discuss about politics, problems and collaborations with countries you don’t even know where they are…
the Spanish government said about 50,000 people had crossed the border
Spain’s interior ministry … said more than 48,300 people had voluntarily returned to Morocco
Does that make it approximately 2,000 migrants?
Ceuta is part of Spanish kingdoms since way before Morocco ever existed.
I believe that is about browser navigation tracking, not email.
But to be fair I did not dig down on how it works.
Most of the people developing AI are Linux users.
Apparently they found a solution.
In 2026, GTM added enhanced server-side tagging containers that run on Google Cloud or your own infrastructure, sending data to ad platforms via server-to-server APIs rather than browser requests. This bypasses ad blockers entirely while maintaining GDPR compliance through first-party data collection.
The data Is sourced from Meta. Possibly it is a bit inflated, since they sell the service, but I imagine they know what they sell.
To be fair, I’m not too interested in that number itself; the article is rather interesting since it broadly goes in depth into why and how tracking pixels are used and what is the economy behind them.
How is this legal?
We’re going to close your business in 24 hours if you don’t make money.
Here’s 350$ to save your business.
Oh, you don’t have the code to pay with your debit card, figure it out I guess.
I mean, would they have done better in such conditions?
science@lemmy.world
No, regarding breaking encryption, it can definitely be used. Algorithms to do that already exist. We are missing a large enough computer for that to be feasible, but once it’s available everything which is encrypted with a non quantum safe algorithm can be decrypted.
Luckily they already developed encryption algorithms which should not be broken by quantum computers.
Regarding the working of the computer, yes you can see it a bit as rather than having a bit on or off you can have intermediate values as well. However qbits can also be “linked” to each other. As such you don’t really work on individual qbits but rather on the overall state of the system: changing one qbit will change the value of other ones as well.
Then also you have to be careful about measurement: if you want to read the result you’ll have to measure the qbits, doing that will change the state of the system and you have to account for that.
However, I’m not an expert in quantum computers. I have not studied them or worked on them. Most I know is from bar talks with physicists.
Programmer HumorFinally a good example of a project which should, and does, use the WTFPL.
Hello, thank you for the in depth explanation! I am not very familiar with nix, and yes I’m talking about the package manager. I have installed NixOs recently to toy around with it and see whether it could be a good solution to certain problems we have. I have determined that NixOs itself is not mature enough for what we need, but I do see value in the nix package manager that other solutions do not offer.
Regarding the 4 points you raise
Thank you for the clear explanation. This is good enough for me I guess then. What I am most afraid is not really a colleague building a malicious package on purpose, but rather them installing something which is then run as root and gets access to the whole system. I understand packages are built by unprivileged users, but in the end they are owned by root.
What I wonder is whether in the way it is possible that something is run as root without someone specifically deciding it should be.
I mostly run Debian on servers. I do not want a rolling release on a server, at all. I don’t care how well they check their packages, I just want the thing to work. I do not care about new features, I just want it to work.
Thank you for the explanation. Yes, I’m talking about the nix package manager, not about the operating system.
As far as I understand packages are built by less privileges users, but libraries and binaries are owned by the root user in the nix store.
https://nix.dev/manual/nix/2.34/installation/multi-user.html
What I wonder is wheter this could lead to root executing untrusted code. I will have several users installing packages and I can not trust that they will check every package. Thus I’d like to know whether I can trust the system to be resilient without careful attention.
Is multi user nix safe?
I’m thinking of setting up multi user nix on a compute cluster. The advantage would be to have a shared storage where common packages are reused, this is a great advantage compared to conda where every environment duplicates storage and inodes.
Fair, I’m always scared to upgrade to a new Debian release and the process is always painful. But that happens every couple years and I can take a week or two to look into it before doing it.
Every time I did pacman -Syu it was a Russian roulette. Most of the times everything was fine, but often enough there was a problem and something was broken and I had to spend a couple days figuring out what was the problem.
You need an API key to use the app… I doubt the people who need it will ever use it. Besides, is this needed? Do people not know which areas of their town are in shade?
Any mathematician here who reviewed the correctness and relevance of these proofs?
TBF, I remember working for a company producing a domotic system. They had this way to program it, which involved a button and nothing else, no leds, no buzzers, just one button.
Do you want to enable this specific functionality? Press the button 63 times, make sure you don’t lose the count or you’ll enable something else.
I reckon that is a problem. A fair solution would be to popularize housing occupation again, that way the risk of not renting the houses I much higher for landlords.
People are very worried about squatters, in my opinion there’s way too little squatters. Where I live there’s not enough housing, yet you walk around and see entire streets of buildings in which nobody lives.
I can imagine how substantive and constructive you can be, when you discuss about politics, problems and collaborations with countries you don’t even know where they are…
Does that make it approximately 2,000 migrants?
Ceuta is part of Spanish kingdoms since way before Morocco ever existed.
I believe that is about browser navigation tracking, not email.
But to be fair I did not dig down on how it works.
Most of the people developing AI are Linux users.
Apparently they found a solution.
The data Is sourced from Meta. Possibly it is a bit inflated, since they sell the service, but I imagine they know what they sell.
To be fair, I’m not too interested in that number itself; the article is rather interesting since it broadly goes in depth into why and how tracking pixels are used and what is the economy behind them.
Just found out tracking pixels have a 3-5x 60 days ROI (improvado.io)
How is this legal?
We’re going to close your business in 24 hours if you don’t make money.
Here’s 350$ to save your business.
Oh, you don’t have the code to pay with your debit card, figure it out I guess.
I mean, would they have done better in such conditions?