The backdoor of the xz utils program(s) was in the tarball release, but not the main source code:
https://en.wikipedia.org/wiki/XZ_Utils_backdoor
If debian had dodged the upstream tarball, then they wouldn't have been affected by this.
I have been using your stuff since they were called toolpacks.
https://moonpiedumplings.github.io/playground/ape-experiments/
Welcome to Lemmy, Azathothas. It's nice to see more and more usernames I recognize show up here.
Well, I can't read I guess.
At least I linked to the code, since the article doesn't seem to do that. The twitter thread it linked to probably does, but I can't view the replies without logging in.
Some software is so complex and difficult that Debian does not maintain it on their own, and instead follows the upstream release cycle.
Browsers are one such example, and as you've discovered for me, Thunderbird is probably another.
Also, please do not recommend testing for daily usage. It does not receive critical security updates in a timely manner, including for things that would effect desktop users. Use stable, Sid, or another distro. Testing is for testing Debian ONLY, and by using Debian Testing, you are losing the advantage of immediate security fixes that come from literally any other distro.
Yeah. this was in high school, in my math class, and we were playing a math game.
The way it worked, was that every table was a team, and each team had a "castle" drawn up onto the whiteboard. A random spinner was used to determine a team, who would then solve a problem the teacher assigned. If you successfully solved the problem, you could draw an X on another teams castle. 3 X's mean that you are out.
My team was out. But, since this was a class, we could still solve problems, and still draw X's. Our table got selected to solve a problem, and I did successfully. I looked at the board, and realized that only two teams had a single X, every other team had either two or three. In other words, I could choose who won the game, even though I could not win.
So, I started trying to get bids. I tried to get real money, but someone tried to scam me with some "draw the X first" nonsense. But, the other team offered to pay me four of the school's fake money, and I accepted that and allowed them to win.
I may not have won the game, but I certainly felt victorious that day.
As an alternative suggestion, consider using a linux laptop with a drawing tablet.
I use a wacom intuos s with bluetooth to takes notes on xournal++, although rnote should work as well.
Disabling javascript increases security, and offers a little bit of privacy. Those are both separate from anonymity, but people conflate the three often.
For example, javascript can be made to do arbitrary websoccket or http connections to any ip/hostname your computer has access to — even local networks or localhost.
I use the browser extension Port authority to block it.
Of course, port scanning is used by ebay to scan users computers, and discord.
Disabling javascript prevents websites from tracking exactly what you do on each site, or what local ports you have open. This is definitely an increase in privacy, as it relates to hiding what you're doing. However, you noted it comes at the cost of anonymity, as you become uniquely identifiable.
I guess someone is super happy they saved a few hundreds kilobytes of disk space though.
Yes. All the people basing docker images off if debian, and trying to get them as small as possible. The splitting up of packages, allows people to only pull in what they need.
Probably not an issue, but you should check. If the port opened is something like 127.0.0.1:portnumber, then it's only bound to localhost, and only that local machine can access it. If no address is specified, then anyone with access to the server can access that service.
An easy way to see containers running is: docker ps, where you can look at forwarded ports.
Alternatively, you can use the nmap tool to scan your own server for exposed ports. nmap -A serverip does the slowest, but most indepth scan.
These requirements are really specific. Whites parts of black pictures in particular, I can't think of anything that implements that.
Anyway, these probably don't have everything you want, but I use Librera:
website: https://librera.mobi/
Github: https://github.com/foobnix/LibreraReader
No material you theme, but I know it has font selection, and dictionary/translation integration.
The website claims it supports custom themings, and CSS. I can find the options in my app, but I haven't touched them.
It also supports custom fonts, including user added ones.
It supports sync between librera instances (Google Drive has first class support), but not with Foliate.
It defaults to "book mode" which is page
rclone, but i don't know if there is is a desktop application for it that does everything (is that what you meant by interface?)
There is https://github.com/kapitainsky/RcloneBrowser, but it seems to be unmaintained, so I don't know if it supports rclone's "crypt" feature.
However, there is a web gui: https://rclone.org/gui/
moonpiedumplings
joined 2 years ago
It powers lichess.org, who have made multiple blogposts about how happy they are with it.
Lichess is a FOSS chess server that somehow manages to compete with chess.com proprietary, distributed, milticloud kubernetes setup from a single VPS. According to them, scala helps.