teawrecks

joined 1 year ago
[–] teawrecks@sopuli.xyz 8 points 2 months ago (1 children)

I think this was Steve Jobs' primary skill. He could see a clear vision of the product people didn't know they wanted. Bottom to top, from the hardware to run on, to the typeface their apps used; he knew that the best user experiences happened when every level of the stack harmonized to create a very finely tuned user experience.

Unfortunately, the people who are that good usually don't work for free. We're very fortunate that Valve is choosing to open source their work and keep their SteamDeck platform an open one.

[–] teawrecks@sopuli.xyz 1 points 2 months ago (1 children)

Debian is the only one there I haven't actually tried myself as a daily driver, so idk if using the terminal is necessary. I've just heard it's solid and I assumed all normal user operations can be done via GUI in gnome or KDE like you can with Fedora.

[–] teawrecks@sopuli.xyz 19 points 2 months ago (3 children)

It's better to ask which distro is dummy proof. Some are made for noobs and windows users, others are not, and they're all based on "Linux".

Mint, Debian, and Fedora are all good starter options, and all are made to get stuff done without having to use the command line.

[–] teawrecks@sopuli.xyz 3 points 2 months ago

I agree. Specifying the same param twice like this feels like it should be idempotent. Sometimes a final cmdline string is built by multiple tools concatenating their outputs together; if each one adds --force without any way to know if it's already been added elsewhere, this could lead to undesirable behavior.

Even --forceforce would be better.

[–] teawrecks@sopuli.xyz 5 points 2 months ago

I remember when the mapping of virtual memory segments clicked for me. I think i said out loud, "that's so clever!". Now it just seems so fundamental to managing memory for user space applications, but I hadn't thought about how it was done before.

[–] teawrecks@sopuli.xyz 3 points 2 months ago (1 children)

As someone who majored in CS and is now in a software engineering position, the people in tech who come from a completely different field are always my favorite. On top of just proving people wrong about the "right" way to get into the field, they've been around, they know how to think about problems from other perspectives, and they're usually better at working with other people.

Honestly, I think more people should minor in CS, or if they did their undergrad in CS, they should have to do their grad work in something else. The ability to compute things is only useful if you're well versed in a problem worth computing an answer to, most of which lie outside of CS.

[–] teawrecks@sopuli.xyz 1 points 2 months ago

I'm actually not sure what TPM can guard against, but I think you're right, I think if a malicious OS borked with the bootloader, TPM would catch it and complain before you decrypt the other OS.

Yeah, physical access usually means all bets are off, but you still lock your doors even though a hammer through a window easily circumvents it. Because you don't know what the attacker is willing to do/capable of. If you only ever check for physical devices, you'll miss the attack in software, similarly if you only rely on Secure Boot you'll miss any hardware based attacks. It's there as a tool to plug one attack vector.

Also, my guess is the most common thing this protects against are stupid employees plugging a USB they found in the parking lot into their PC. If they do it while the OS is running, IT can have a policy that blocks it from taking action. But if they leave it there during a reboot, IT is otherwise helpless.

[–] teawrecks@sopuli.xyz 1 points 2 months ago (2 children)

No point in putting locks on your house, because an attacker can just drive their car through your front door.

The attacks you mention have their own ways of being detected: usually eyeballs. But eyeballs can't help you against something hiding in your bootloader. So Secure Boot was made.

And I don't really follow your dual boot claim. If you don't trust one of the OSes, and you boot it up on your hw, you're already hosed. At that point it can backdoor your bootloader and compromise your other OS. Secure Boot prevents malicious OSes from being booted, it can't help you if you willingly boot a malicious OS.

[–] teawrecks@sopuli.xyz 2 points 3 months ago

Cool, that's a good source to peruse, thanks.

[–] teawrecks@sopuli.xyz 5 points 3 months ago (2 children)

Yeah, afaik the tegra was only used for embedded, closed source devices though, no? Did they submit any non-proprietary tegra support upstream?

And afaik CUDA has also always been proprietary bins. Maybe you mean they had to submit upstream fixes here and there to get their closed-source stuff working properly?

[–] teawrecks@sopuli.xyz 1 points 3 months ago* (last edited 3 months ago)

I think you and I are using two different definitions of the word "powerful", or are at least applying them to subtly different aspects of the discussion.

  1. I don't know if you are familiar with basic finite automata theory, but a Finite State Machine is provably less "powerful" than a Turing Machine. This is the definition of "power" that I'm using, "power" as in "expressiveness". i.e. The fact that you can literally create a terminal as a sub-element within a GUI if you wanted means that a GUI is provably more "powerful" (or more expressive) than a TUI. And thus the best GUI for a tool will always be better than the best TUI for the same tool. (Comparing the worst GUI vs the best TUI is a waste of time).

  2. But you're using the definition of "powerful" as in a "powerful programming language". This is a common use of the term, but is much more fuzzy and harder to quantify. It's no longer synonymous with "expressiveness". Generally a language is "powerful" if you can get "a lot done" with relatively few characters or operations. Ex. Python is often considered more "powerful" than C because you can do in a single line what would take dozens or hundreds of lines in C. Similarly, you're saying that a developer can make a comprehensive TUI using less time and effort than it would take for them to make a GUI that's at least as good (including integration with other tools afforded by pipes and redirects).

And I agree with you. But hopefully you also agree with me that a GUI is objectively more "expressive" than a TUI, and in that sense has a higher ceiling for how useful it can be to a user.

[–] teawrecks@sopuli.xyz 9 points 3 months ago (4 children)

What's an example? I would have thought, back then especially, their driver (and maybe nvapi) was most of the software they shipped.

view more: ‹ prev next ›