| lotuspsychje | good morning | 03:26 |
|---|---|---|
| matt3 | is better opensource or closed ? ;) | 18:36 |
| tomreyn | that's impossible to tell because closed source is closed | 18:48 |
| ogra | well, not for everyone (someone has written it) 🙂 | 18:49 |
| arraybolt3 | Opensource generally has been higher-quality in my experience, presumably because more people are able to fix problems in it. | 18:49 |
| matt3 | yes, thank you, and ... | 18:56 |
| matt3 | i have done a lot of apps all open ... | 18:56 |
| matt3 | you can study inside them ... | 18:57 |
| matt3 | with closed no | 18:57 |
| matt3 | you can study inside the app => you can study the source code ... :) | 19:03 |
| matt3 | with opensource => you can study inside the app ;) | 19:09 |
| matt3 | with closed source apps => you can only use them, the apps ... | 19:14 |
| matt3 | closed apps => only use | 19:15 |
| matt3 | opensource => use + study | 19:15 |
| matt3 | opensource wins ;) | 19:15 |
| matt3 | opensource => use + study + modify + rebuild + redistributed + gratis xD | 19:21 |
| matt3 | with gnu license is ok ... | 19:32 |
| matt3 | RMS => please no money xD | 19:35 |
| arrayboltCBook | This isn't exactly within the topic of this room. | 19:35 |
| matt3 | ok | 19:35 |
| ogra | seeing teward's latest mail to -release i wonder why nobody packaged tor-browser as a snap yet ... feels like a natural candidate to lock into the snap sandbox | 19:43 |
| teward | *drops in from orbit* | 19:44 |
| teward | ogra: you could ask the Tor team | 19:45 |
| teward | they produce team browser | 19:45 |
| teward | tor browser* | 19:45 |
| teward | ffs autocorrect be sensible | 19:45 |
| ogra | lol, stop IRCing from android ! | 19:45 |
| teward | ogra: i could look into it but :P | 19:45 |
| arrayboltCBook | team browser - the final merge of MS Edge and MS Teams! From the Tor team. D: | 19:45 |
| teward | ogra: i'm not, i'm IRCing from my computer. | 19:45 |
| teward | and it has an adaptive keyboard on it :\ | 19:45 |
| teward | (tablet computer) | 19:45 |
| teward | aaaaaaaaaaaanyways | 19:45 |
| teward | ogra: i'd consider snapping it but the way Tor works under the hood is it writes a lot of data to its own work dir and i'm not sure if that worsk in the snap infra | 19:46 |
| teward | tor circuit caching, etc. | 19:46 |
| ogra | well, i guess they deemed it too hard ... browsers *are* non-trivial | 19:46 |
| arrayboltCBook | That sounds like a bind mount would fix that? | 19:46 |
| arrayboltCBook | Not sure if those work with Snaps though... | 19:46 |
| teward | arrayboltCBook: it wouldn't | 19:46 |
| teward | the other factor is | 19:46 |
| teward | torbrowser itself is designed to launch from userspace | 19:47 |
| ogra | as long as the dir is not a hardcoded path writes shouldnt be a prob | 19:47 |
| teward | so torbrowser-launcher takes into account that it writes to its own directory space | 19:47 |
| teward | and 'installs' torbrowser in userspace in the defined path in its launcher | 19:47 |
| teward | and sets up that path there | 19:47 |
| teward | it's a pain | 19:47 |
| arrayboltCBook | teward: This sounds more like it should be dropped from Debian since it's not even designed to work right in Debian and is unsafe. | 19:47 |
| teward | arrayboltCBook: Debian Privacy Team keeps it in there | 19:48 |
| teward | arrayboltCBook: you're talking about Tor Browser | 19:48 |
| ogra | well, if i have some spare time (in some other galaxy i guess 😛) i might take a look at it | 19:48 |
| teward | not torbrowser-launcher which in itself isn't unsafe | 19:48 |
| arrayboltCBook | Oh. | 19:48 |
| teward | torbrowser-launcher could theoretically be snapped and then it defaults to userspace (~/.torbrowser/) or some path for download/install | 19:48 |
| ogra | *at snapping it | 19:48 |
| teward | but that's its own hellhole | 19:48 |
| teward | ogra: if you manage to snap it make sure you get the OK from Tor beforehand | 19:49 |
| ogra | yeah, not sure that makes a lot of sense | 19:49 |
| arrayboltCBook | Maybe torbrowser-installer could be made as a Snap? | 19:49 |
| teward | and start with firefox snap as a base idea | 19:49 |
| teward | because it's technically Firefox rebranded | 19:49 |
| teward | and forked | 19:49 |
| ogra | i wouldnt release it ... just create a snapcraft.yaml and offer it to them ... | 19:49 |
| teward | arrayboltCBook: possibly. wouldn't solve the problem for those who've installed it with ebs | 19:49 |
| arrayboltCBook | If it's designed to run in a user directory, then theoretically it should just download and install Tor from the official website and plop it into the user's home directory right? | 19:49 |
| teward | debs* | 19:49 |
| ogra | i got enough snaps in the store 🙂 | 19:49 |
| arrayboltCBook | teward: True. | 19:49 |
| teward | arrayboltCBook: again, doesn't solve the current bug | 19:49 |
| teward | it's already packaged as a flatpak | 19:50 |
| teward | so it should be capable to snap the launcher tool | 19:50 |
| arrayboltCBook | What is the bug? | 19:50 |
| teward | you should learn to check mailing lists :p | 19:50 |
| arrayboltCBook | (On a different computer without my email.) | 19:50 |
| ogra | yeah, the launcher would be trivial i guess | 19:50 |
| arrayboltCBook | teward: Not everyone can access their email without turning around and using the computer behind them... alright I'll stop being lazy. | 19:50 |
| teward | arrayboltCBook: https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/2000077 | 19:50 |
| -ubottu:#ubuntu-discuss- Launchpad bug 2000077 in torbrowser-launcher (Ubuntu Lunar) "Download URLs are broken" [Medium, In Progress] | 19:50 | |
| teward | the problem is the "fix" is invasive | 19:50 |
| teward | and isn't easy to nitpick | 19:51 |
| teward | because it's intermingled with a ton of other things | 19:51 |
| teward | it's one of those few packages where bugfixes and features come out at the same time in merges | 19:51 |
| teward | *sips caffeine* | 19:51 |
| arrayboltCBook | Blah. | 19:52 |
| ogra | lovely | 19:52 |
| arrayboltCBook | This is why Universe should be used carefully for anything security-conscious. | 19:52 |
| ogra | well, at least you get CVE fixes now | 19:52 |
| arrayboltCBook | With Ubuntu Pro, I guess? | 19:52 |
| ogra | yeah | 19:53 |
| arrayboltCBook | Does it cover Tor Browser? | 19:53 |
| teward | arrayboltCBook: i mean, technically, I'm all for getting this as an MRE exception | 19:53 |
| teward | but i don't think SEcurity would take it | 19:53 |
| teward | and put it in esm-apps | 19:53 |
| arrayboltCBook | teward: MRE? | 19:53 |
| ogra | if there would be an official CVE for it ... | 19:53 |
| teward | micro-release-exception | 19:53 |
| arrayboltCBook | Ah. | 19:53 |
| teward | there's usually not CVEs in torbrowser-launcher | 19:53 |
| ogra | yeah | 19:53 |
| arrayboltCBook | That personally sounds like it would be the best idea. | 19:53 |
| teward | but because this is an "odd case" I'm going a one-off MRE request here | 19:53 |
| teward | if that's approved it makes prepping the SRU's that much more easier | 19:54 |
| ogra | i think esm-apps is for CVEs only | 19:54 |
| teward | ogra: it is, and for Security team control | 19:54 |
| ogra | right | 19:54 |
| teward | it's also a PITA right now | 19:54 |
| teward | because users are being confused "Wait I need ESM to get any security updates now?" | 19:54 |
| ogra | it is still in its infancy | 19:54 |
| arrayboltCBook | Hmm. It will be interesting to see how this plays out, I'll keep my eyes peeled. | 19:54 |
| teward | (see the "apt integration is too much" bug) | 19:54 |
| ogra | yeah | 19:54 |
| teward | arrayboltCBook: yeah i use torbrowser-launcher so it's one of the things I keep an eye on | 19:54 |
| teward | it also takes care of *updating* tor browser too so | 19:55 |
| ogra | i'm rather worried what happens if yu dont opt in to pro ... imagine a 5y outdated install and the list of packages in the pro notice | 19:55 |
| arrayboltCBook | lol | 19:55 |
| ogra | likely multi-page output | 19:55 |
| arrayboltCBook | I mean wasn't this a thing back with Ubuntu Advantagetoo? | 19:55 |
| teward | ogra: "5 year old release, past standard support" = "Go upgrade ya ninny" on most platforms | 19:55 |
| arrayboltCBook | (add a space somewhere in there) | 19:55 |
| teward | arrayboltCBook: Ubuntu Pro == rebranded with othe changes Ubuntu Advantages | 19:56 |
| ogra | well, 4.9y then 😛 | 19:56 |
| teward | at the core ESM is still ESM | 19:56 |
| arrayboltCBook | teward: I think he meant, as a system gets older, the list of unsupported Universe packages could get looooooooong. | 19:56 |
| ogra | arrayboltCBook, universe security updates were never a thing ... best effort at most | 19:56 |
| teward | arrayboltCBook: that applies for things in Main too sometimes | 19:56 |
| arrayboltCBook | Imagine someone installing Kubuntu 20.04, updating, and getting a heart attack. | 19:56 |
| ogra | that is the actual great thing about pro | 19:56 |
| teward | but yeah universe security is usually ONLY community provided stuff | 19:56 |
| teward | but Pro doesn't covera ll of universe either | 19:56 |
| ogra | it will ovr time | 19:57 |
| sarnold | *was* | 19:57 |
| sarnold | in practice it was basically "otto prepped mariadb updates" but very little else | 19:57 |
| arrayboltCBook | But if you're not getting the Pro universe updates ever because you don't use Pro but apt keeps telling you about what in Universe you're not getting updates for, that will likely gradually get longer, and longer, and longer, and just clutter the user's screen and maybe even scare them. | 19:57 |
| arrayboltCBook | If it could be shortened to "You have community-supported packages with security updates in Ubuntu Pro, run "pro list esm-apps" for more info", that might be helpful and still let users who don't use Ubuntu Pro rest easy. | 19:59 |
| sarnold | but perhaps they shouldn't be resting easy | 19:59 |
| ogra | yeah, i guess that will need some work eventually | 19:59 |
| ogra | like not showing the list of package but a summary once the number exceeds a threshold | 20:00 |
| ogra | if you have not cared for it when the output takes two terminal pages, you are unlikely to care for it in the future 🙂 | 20:01 |
| arrayboltCBook | Not to pick on Canonical, they do a great job, but this seems like one of those things that maybe could have used some more forethought before publishing it. The fact that users think that their systems are being left insecure is an indicator that something needs fixed. | 20:01 |
| arrayboltCBook | Anyway, I'm sure they'll sort it out somehow eventually. | 20:02 |
| ogra | well, the users *are* unsecure ... | 20:02 |
| arrayboltCBook | Not any more than they've always been, and all of the important stuff has been taken care of, no? | 20:02 |
| ogra | so it is good if users think about it | 20:02 |
| arrayboltCBook | True, but they don't need to think we're strongarming them into using a freemium service that is actually optional. | 20:03 |
| ogra | not more than they have always been ... but now that is not necessary anymore and you *can* get them ... so it is good to tell them | 20:03 |
| arrayboltCBook | Anyway, my opinions are nothing more than opinions, Ubuntu is and for me always has been the best Linux distro, so I'll quit my griping and go back to doing more important things :P | 20:05 |
| arrayboltCBook | *for me Ubuntu is and always has been, I mean | 20:05 |
| ogra | well, the service has admittedly still rough edges ... and lots of room for improvement ... | 20:06 |
| ogra | prob is that you can no really do user testing like we do with other things during the non-LTS cycles | 20:06 |
| arrayboltCBook | AAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+C | 20:06 |
| ogra | so 22.04 is actually the test cycle for it | 20:06 |
| ogra | meow ? | 20:07 |
| arrayboltCBook | (cat learning to type) | 20:07 |
| ogra | 🙂 | 20:07 |
| arraybolt3 | (Fun fact that I learned thanks to the above incident, try pressing Shift plus an arrow key and see what happens.) | 20:10 |
| arraybolt3 | Shift+Up Arrow = A, Shift+Down Arrow = B, Shift+Right Arrow = C, Shift+Left Arrow = D | 20:11 |
| arraybolt3 | (At least on my two laptops that I'm using currently.) | 20:11 |
| sarnold | arraybolt3: it's staggering how many people are just *now* learning that we didn't support universe packages previously | 20:13 |
| arrayboltCBook | And people have been using Ubuntu without problems for years with that ignorance. | 20:14 |
| arrayboltCBook | I love the fact that Ubuntu Pro fixes that, it just seems it may be being pushed a bit too forcefully and in ways that cause technical difficulties. | 20:15 |
| arrayboltCBook | And tbf the forcefulness isn't even the problem, it's the "wow are users even going to be able to use apt without inconvenience now?" that's worrying me. | 20:16 |
| arrayboltCBook | Maybe they will be able to still use it without problems, but making our users have to wade through info they don't want to see to tell them about a service they don't want to use seems... unhelpful. | 20:17 |
| ogra | well, it is easy to quieten by dpkg-divert'ing one file | 20:19 |
| sarnold | arrayboltCBook: apparently that initramfs 'out of memory' thing is being fixed https://blog.jak-linux.org/2023/02/01/ubuntu-key-rotation/ | 20:51 |
| arraybolt3 | \o/ | 20:51 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!