[-] kixik@lemmy.ml 2 points 1 day ago

Arch and Arch based distros like Artix have linux-libre available from AUR if one doesn't have an issue with building from source. Also see my other comment about Guix, there's a non official repo with ucode and hardware firmware...

[-] kixik@lemmy.ml 3 points 1 day ago

Not sure why you mentioned this. At least on Arc, or any distro based on it like Artix, the ucode per CPU is offered as a separate package:

% pacman -Ss ucode
system/amd-ucode 20241111.b5885ec5-1
    Microcode update image for AMD CPUs
world/intel-ucode 20241112-1 [installed]
    Microcode update files for Intel CPUs
world/iucode-tool 2.3.1-5
    Tool to manipulate Intel
galaxy/amd-ucode-xz 20230625.ee91452d-4
    Microcode update image for AMD CPUs
extra/intel-ucode 20241112-1 [installed]
    Microcode update files for Intel CPUs
extra/iucode-tool 2.3.1-5
    Tool to manipulate Intel

If your distro doesn't help with ucode packages, you can ultimately download it from intel/amd/whatever. And the same applies for the hardware firmware in general.

So it's true that some hardware won't properly work out of the box by using libre-linux, but nothing prevents you from getting the required firmware from other packages or sources. Granted that doesn't make things easier. And granted that might defeat the purpose of using linux-libre, but you might at least only add only strictly required binary blobs for your current hardware.

[-] kixik@lemmy.ml 3 points 1 day ago

linux-libre is harder because if you want cpu ucode plus hardware firmware support in general so that you can make your bad citizen hardware work, you'll need to add it out of the linux package.

Someone mentioned Guix as a gnu + linux distribution was hard, and in general that's true, but not because of linux-libre since there's a non official Guix repository providing non libre/free cpu ucode plus hardware firmware, see:

https://gitlab.com/nonguix/nonguix

The complex part of Guix comes from it being a inmutable distribution based on the ideas from NixOS, though it's not a fork from Nix since it's even based on Guile rather than the Nix language, but their packages and configurations are quite different than any other distribution, the same as its inmutable system and I believe on both reproducibility is a thing...

But bottom line, for Guix you can even get packages to make linux-libre work with your hardware provided you find the corresponding firmware in the non official repo, and in general (not just Guix) as long as you find the firmware somewhere else (not in linux-libre) you would be OK, and depending on your distro that might be a really hard task.

I use Artix, and though I haven't explored it yet, I've been wondering how hard it'd be to install linux-libre, and get the strictly required firmware from the AUR, perhaps it's possible. The package is actually offered from AUR:

% aur search linux-libre
aur/linux-libre 6.11.9-1 (+37 0.35%)
    The Linux Libre kernel and modules
aur/linux-libre-docs 6.11.9-1 (+37 0.35%)
    Documentation for the Linux Libre kernel
aur/linux-libre-firmware 1.4-1 (+3 0.00%) (Orphaned)
    Firmware files for Linux-libre
aur/linux-libre-headers 6.11.9-1 (+37 0.35%)
    Headers and scripts for building modules for the Linux Libre kernel
aur/linux-librem5 6.6.57-1 (+0 0.00%)
    The Linux kernel for Purism Librem 5
aur/linux-librem5-docs 6.6.57-1 (+0 0.00%)
    The Linux kernel for Purism Librem 5 (documentation)
[-] kixik@lemmy.ml 3 points 3 days ago

wow:

We use specifically crafted messages that trigger delivery receipts allowing any user to be pinged without their knowledge or consent

That makes think that 1st, perhaps it would be a good idea to avoid "return receipts" on any messenger, though that breaks ability to know if the destination has actually received, and if the destination has actually read the message.

Perhaps another thing, even though your messenger doesn't identify users with phone numbers at all, still block the messenger to have access to your contact list. Not sure if this affects, for example if a xmpp client has access to a broader contact list, if it can only relate to xmpp addresses it wouldn't pay attention to phone numbers, but I can't really tell.

And of course, don't use any messenger which tights users with phone numbers, no matter if to share among contacts now usernames are used instead of the phone number, when the phone number is still the way to identify the user.

[-] kixik@lemmy.ml 1 points 4 days ago* (last edited 4 days ago)

True, but not entirely, signature spoofing needs OS support, and LOS and divestOS don't, whereas murenaOS (/e/OS) and lineageOS for microG do. Other than that microG's own f-droid repo makes it easy to keep microG's component up to date.

That's why I mentioned it would be nice to upstream divestOS bootloader lock/unlock at will solution, so that not just LOS, but derivative ROMs can inherit that solution. As some people don't like the tight integration from murena (/e/) with all of its rebranding, LOS for microG is a very appealing option, if wanting full microG's support. Actually LOS for microG was there quite before /e/ was created.

[-] kixik@lemmy.ml 1 points 5 days ago* (last edited 5 days ago)

That's great if not having to use any proprietary apps depending on google services, including push notifications, since part of divestos unsupported stuff includes:

Google Apps or microG or Sandboxed Play Services are NOT supported.

Which is fine, if you don't need to use such apps. An alternative to /e/os, which now a days is actually murenaOS, is lineageOS for micro G, which does sort of monthly releases based on whatever is available as nightly releases on lineageOS. It does provide you with microG and also with F-Droid with privileged extensions installed and already set for you. This might be more suitable than divestos if in need for some such apps.

[-] kixik@lemmy.ml 6 points 6 days ago* (last edited 5 days ago)

Yup, divestOS allows for booloader lock though unfortunately they don't support microG. I hope they somehow help upstream their relock solution to LOS. I use LOS for microG instead, since I need stupid bank apps and also for the office some stupid proprietary multi factor authentication apps... If only LOS for microG could lock the bootloader at will (it needs to be unlocked for major upgrades, like on regular LOS), that'd be great.

There's as well CalyxOS, which uses microG and also locks the bootloader, however I do prefer LOS since the strategy from CalyxOS and GrapheneOS trying to deGoogle pure Android in my mind sound like having some limitations, as opposed to LOS approach to be based on AOSP instead. Though that's just in my mind, I'm sure those guys in Calyx and Graphene are the best at security and privacy.

[-] kixik@lemmy.ml 25 points 1 week ago

Quick question, why not considering lemmy as your "blog" provider? If the "community" concept wouldn't apply, perhaps creating your own "community" and becoming its "mod", disabling posts from others except yours, wouldn't that work? Lemmy already provide RSS feeds so others can follow/track your posts without any lemmy account, just like with any blog providing RSS/atom feeds, and you get "blog" feedback through lemmy, but the same applies to other blog providers, only the ones subscribed can provide feedback.

I was looking for an anonymous blogging mechanism with digital signature (not to identify the author but to verify its authenticity). Long story short, nothing out there seemed to really fit into what I was looking for, but among the suggestions lemmy was there as an option. You can avoid following anything, and looking into lemmy's default from page, just use it to post and get feedback, forgetting about the social networks characteristics of lemmy, and make it work as your blog provider...

[-] kixik@lemmy.ml 23 points 2 weeks ago* (last edited 2 weeks ago)

Neither servo rendering engine (like gecko), nor verso (an actual rust based web browser based on servo) are quite ready for prime time. But I'm hoping they will be there sooner rather than later. I don't use Firefox directly, but rather wrappers based on it, Librewolf for the desktop and Mull in part because I'm lazy (I prefer the ankerfox stuff and other to be done for me), and if I want to avoid chromium based browsers, dominating big time (MS browser edge is as well chromium base, electron is chromium in disguise, and now a days QT web engine underneath is chromium as well) well there's no option yet.

On the other side, nothing guarantees servo and verso (or whatever other servo based browsers in the future) will care about net free advocacy, neither user freedoms, just be concerned about being better technical solutions, :( But I still have high hopes as you might...

Just being a good technical alternative is not good enough now days, :(

[-] kixik@lemmy.ml 97 points 2 weeks ago* (last edited 2 weeks ago)

This is sad, not just because it's a trend on Mozilla, but because it shows how mozilla has embraced the corporative kind of mindset. The advocacy team was fundamental for net free principles.

Mozilla based browsers keep being the only practical alternative to web browser dominance, but it itself has degrading its status of resisting bad practices against users and the web in general. And emerging alternatives are also technical alternatives only, with no intention of net freedom advocacy, GPL sort of principles to protect the user and so on.

Sad days indeed, :/

8
submitted 2 weeks ago by kixik@lemmy.ml to c/fdroid@lemmy.ml

cross-posted from: https://lemmy.ml/post/22214348

Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that.

Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure.

There was apkgrabber, but it was not working since so long, and finally it got archived on github.

Is there some FLOSS app similar to apkupdater, other than aurora store?

Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.

1
submitted 2 weeks ago by kixik@lemmy.ml to c/floss_releases@lemmy.ml

Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that.

Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure.

There was apkgrabber, but it was not working since so long, and finally it got archived on github.

Is there some FLOSS app similar to apkupdater, other than aurora store?

Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.

37
submitted 2 weeks ago* (last edited 2 weeks ago) by kixik@lemmy.ml to c/fdroid@lemmy.ml

I'm long K9 user, and I was aware of it becoming Thunderbird, but I need to clarify what should I do to easy eventual transition, hopefully without having the deal with all my K9 settings...

Today K9 turned into Thunderbird Beta for Testers, however there's already an app called that way Thunderbird Beta for Testers showing up on f-droid. Thoug the actual ID of each differ (com.fsck.k9 vs. net.thunderbird.android.beta).

What should K9 users do, to avoid losing its current settings (accounts, folder settings, encryption and so on)? Should we remain using the K9 app, and hope that when it goes away then the thunderbird app replaces it somehow automatically and pick all accounts and settings? Should this period when the two apps with the same name coexist be used to install thunderbird beta for testers, hope that it pick all settings from K9 up, and then remove K9?

It's somehow confusing, I was originally hoping at some point K9 just turned into thunderbird, but at once, automatically, without still having two apps, so I'm wondering what's next. For now I'm just still using the K9 app with thunderbird name...

Thanks !

Edit 1: Many thanks for those who replied, at least I don't have a google account, and no need to inherit the OAuth to google, or any other of such account for that matter, although I could remain to K9 I migrated to Thunderbird official release (no beta) without issues. It sounds like a good opportunity to migrate to Thunderbird.

Edit 2: It's sad that the OAuth can not be inherited, though understandable. For those who were just using TB or K9 for a long time with gmail, and the account gets into the infinite dependency loop of requiring a device already logged in, given the stupid security question has no answer, then perhaps it's time to ditch google and look for an alternative, I haven't found anything useful to help around there. Google actually sent a message indicated it has protected the user from herself, and inhibited her attempt to reach her own account. Meanwhile, just staying with K9 seems OK, since it's still there (just a metadata name corrupted but the app ID remained K9 still).

439
submitted 1 month ago by kixik@lemmy.ml to c/linux@lemmy.ml
443
submitted 1 month ago by kixik@lemmy.ml to c/linux@lemmy.ml
237
submitted 2 months ago by kixik@lemmy.ml to c/linux@lemmy.ml
[-] kixik@lemmy.ml 16 points 2 months ago* (last edited 2 months ago)

I have never bought the idea that free/libre SW in general is just not as easy, including GNU+Linux. I'll leave out open source initially, and come back to it later, not because it doesn't experience the same, but because corporate wide it doesn't suffer the same fate. And linux itself is one of the most widely used kernel if not the most, it happens similarly to openssl, and so many other open source components. So I see no issue with linux adoption, I can't think of any kernel more adopted than linux...

To me what has really affected free/libre SW is the monopolistic abuse of the corporations, plus their ambitions, and how in Today's world, they have created the illusion that being a technologist is the same as being a technology consumer, which gets into the hearts of governments and education systems (more hurting, public education systems). Let me try some practical examples:

  • Educations systems translate the need to educate students about technology into making them familiar with MS different SW, like the windows OS, MS outlook, MS office, MS project, MS visio. Even on the higher levels of education, colleges and universities prefer to use matlab over octave for example, even for just matrix operations scripting. Office covers spread sheets BTW, so people specialized on accounting know excel, but no other spread sheet.
  • On public education systems, where one would be inclined to think it might get more interest on developing the expertise to not depend on proprietary SW only, it's where corporate reach deeper offering "cheap" educational licences.
  • From the prior two keep in mind that educational licenses from proprietary SW usually means future professional and people depending on proprietary SW in general. They are meant not to educate, but rather generate the future dependent population.
  • Governments, whether local or nation wide, instead of adhering to open standards, for any kind of form submission, and even further to adhere to use of free and open source SW, to build the technical and competency expertise required to have a criteria about different technologies, about SW, infrastructure, DBs, and so, they prefer to require citizens to use non free or open source SW to create required forms, and prefer to pay for SW solutions which totally lock in the entire solution, usually coming from big corps, or other companies actually making use of SW and technologies coming from big corps.
  • In their effort to discredit free/libre SW, the idea that the fundamental principles behind free/libre SW hurt the SW industry, or that are irrelevant to Today's world or even worse than that, there were claims that the GPLed kernel was a great threat and GPLed SW a cancer. Now that open source usage has totally overcome free/libre SW, there are no such claims, but the damage is done. There's nothing wrong with people wanting some compensation from corps, when developing SW, and thus not using free/libre licenses like GPL-3+ or AGPL, but in the end that eventually might hurt the users rights protected by such licenses, which such corps don't really care that much (their profit has higher priority for sure), and experience shows that just because SW is licensed open source doesn't guarantee any compensation for the development whatsoever, so if volunteering SW, doing so as open source is not even close to get every developer a decent income out of their contributions. Well, except for the big corps backed SW, linux included, but that's not the majority of open source SW.
  • The discredit of free/libre SW, which allowed the eventual creation of open source, is such that the banning of individuals ends up being an attack to the organizations behind it and even their principles and motivation.
  • Moving away from the free/libre SW observations, even now with open source, from the big corps, which barely compensate the open source developers, complain about the open source supply chain, campaigning against not well maintained SW and such, there's the famous image of a complex and heavy structure depending on a weak and deficient leg. Whatever truth around that figure, it of course hides the overall picture of the developer of such leg not ever being compensated (not to mention paid) for his library or SW component, and perhaps that's one of the reasons the project got even abandoned, but now it's easy to blame such situation when talking about FOSS in general.

Paid SW might be more intuitive to use at times, I can understand that. There are paid developers making the UIs more intuitive and attractive, in the end it needs to be bought or massively consumed to get earning through its use. But if you look deeper, perhaps it's not just that free/libre or open alternatives are non intuitive at all, perhaps people gets used to that UI when attending basic or high school, or college/university. Perhaps even when exposed to mobile devices even when they can barely walk. Everything else, different in nature, will look alien to the future "technologists"...

On a sad (lacking hope) note, I don't think there's any indicator of things changing. My only hope is changes in educational systems, which are nowhere happening, and not the parents, as mentioned they are already convinced that using google, ms, apple, oracle or whatever prepare their kids for the future and will make them the technologists of the future.

On a funny note, I would answer the motivating question with: Linux is so good that it's actually most probably the most used kernel world wide, :)

16
submitted 2 months ago by kixik@lemmy.ml to c/privacy@lemmy.ml

Hello !

I'm wondering if there's some blogging mechanism which would allow some sort of unique digital signature (PGP perhaps) to prevent personification, but which allows non traceable and fully anonymous author. Not looking for blockchain like stuff (apart from the layer Monero adds, blockchains are totally transparent, traceable and non anonymous). Not looking for bigotry, attacking people or anything like that.

The idea is to be able to share ideas, even corporate related, without being afraid of retaliations whether at work, corporations or governments. Expressing something at pubic might bring unexpected consequences, particularly if not aligned by the corporation one works on if that's the case, or might provoke AI, bots, or paid/unpaid people looking around, to include anyone in a particular list, without even warning the writer about it.

So I was looking if such thing is possible, and if it exists. Social networks of course wouldn't be an option, they're not anonymous, and at contrary can be used to cross-reference and trace people.

If such solution doesn't exist, I'm wondering if something based on gnuNet might get close, although gnuNet is not meant to make users anonymous. Or perhaps something based on i2p.

Of course the digital signature should be used exclusively for the blog posting, and can't be associated to any real email, host, or whatever...

Feedback on the blog posts should also be allowed to anonymous people with their own unique digital signatures. But this is harder, since depending on the technology, not sure if moderation would be allowed, or even if it would make sense, in which case, no blog feedback should be allowed, though no feedback is really a down side for blog posts. Maybe allowing just the original post to remove feedback. Some other down side, but that's unavoidable, is the lack of non on thread feedback, meaning giving feedback through email or any other medium, since if that was available would make the writer non anonymous...

If such thing is not available, and eventually based on something like gnuNet or i2p, most probably clients would be needed to write blogs but another one that would offer some sort of RSS/atom functionality for the blog to be accessible from current RSS/atom readers.

14
submitted 6 months ago* (last edited 6 months ago) by kixik@lemmy.ml to c/lemmy_support@lemmy.ml

Hello, !xmpp@lemmy.ml was locked by my mods, and continued on !xmpp@slrpnk.net which is entirely fine given federation, so I guessed I could follow it on the lemmy sort of synced space/community, !xmpp@slrpnk.net, where I can post to the slrpnk community without having an account there. But for some reason recent posts on slrpnk real xmpp community are not showing on !xmpp@slrpnk.net, like if they're not syncing anymore.

Any way to remediate it?

[-] kixik@lemmy.ml 21 points 7 months ago

I would recommend using apkupdater for closed source apks, in particular enabling apkpure repo, rather than insisting on using google repo with aurora store or any other mechanism.

Also looking for FLOSS alternatives if possile (granted things like whatsapp and waze won't have alternatives for example).

Some metioned apkmirror as the more trusted repo for closed source apps, however it's currently formatting apks on multiple apks, and supposedly requesting for the apkmirror own instaler, so I recommend apkpure instead, which is also pretty well regarded, and they also in theory offer the same packages as the ones on google play...

For FLOSS apps, the different f-droid repos (official ones and non official ones such as izzy-on-droid) offer a good amount of them.

28
submitted 8 months ago* (last edited 8 months ago) by kixik@lemmy.ml to c/privacy@lemmy.ml

cross-posted from: https://lemmy.ml/post/12692350

Anyone aware of a conversations fork with support for unified push notifications? Or a similar xmpp android app with omemo (just the same as conversations' support) and unified push notifications support, available through the official f-droid repor or a f-droid repo if not available from the official ones?

BTW, I noticed !xmpp@lemmy.ml community was locked. Any particular reason for that?

Also, Converstions requests to set unrestricted use of battery, to use battery under background without restrictions. So it seems unified push notifications would help, though this github issue sort of indicates unified push notifications wouldn't help, so it just tells me there's no intention to include support for it on Conversations, but not that it wouldn't help save battery.

11
submitted 8 months ago* (last edited 8 months ago) by kixik@lemmy.ml to c/fediverse@lemmy.ml

Anyone aware of a conversations fork with support for unified push notifications? Or a similar xmpp android app with omemo (just the same as conversations' support) and unified push notifications support, available through the official f-droid repor or a f-droid repo if not available from the official ones?

BTW, I noticed !xmpp@lemmy.ml community was locked. Any particular reason for that?

Also, Converstions requests to set unrestricted use of battery, to use battery under background without restrictions. So it seems unified push notifications would help, though this github issue sort of indicates unified push notifications wouldn't help, so it just tells me there's no intention to include support for it on Conversations, but not that it wouldn't help save battery.

13
submitted 9 months ago* (last edited 9 months ago) by kixik@lemmy.ml to c/fediverse@lemmy.ml

https://disroot.org provides several decentralized federated services, as email and xmpp, besides other cloud services as well... But not sure if asking here is right or not, but don't know anywhere to ask either...

Is it having a license issue, does anyone know about it? Any status updates?

Websites prove their identity via certificates. LibreWolf does not trust this site because it uses a certificate that is not valid for disroot.org. The certificate is only valid for p1lg502277.dc01.its.hpecorp.net.
 
Error code: SSL_ERROR_BAD_CERT_DOMAIN

But also:

disroot.org has a security policy called HTTP Strict Transport Security (HSTS), which means that LibreWolf can only connect to it securely. You can’t add an exception to visit this site.

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

I also tested with ungoogled chromium and pretty similar thing...

Anyonea aware, and also about disroot saying on this?

Edit (sort of understood already, no issue with disroot at all): The issue only shows up under the office VPN. It seems like disroot is not recognizing the office's cert...

Edit: Solved. Yes it's the office replacing the original cert with its own, as someone suggested. Thanks to all.

23
submitted 9 months ago* (last edited 9 months ago) by kixik@lemmy.ml to c/linux@lemmy.ml

Hello !

As Mint is based on Ubuntu, I’m wondering if it will follow the missteps (to me at least) Ubuntu is doing to demote *.deb packages in favor of snaps?

Well that based on Ubuntu 23.10’s New Software App Will Demote DEBs (Apparently) post, and its lemmy.ml discussion.

From all ubuntu based distros, Mint seems not to follow those missteps, but I'm wondering if Rhino will do the same. Actually I don't like Rhino created a wrapper package manager which actually gets snap support as well as apt on the same bucket. But who knows, it might be they won't follow ubuntu on this.

Does anyone know?

My interest on Rhino comes from it being rolling release. But I don't want snap to become the source of common/important packages.

Thanks !

view more: next ›

kixik

joined 3 years ago