blablabla123

I wonder though how a sensible architecture would look like. Sure it would involve HSMs but ultimately they need to support transactions and APIs.

Probably this draws the line to more traditional banks which are notorious for having so many layers of checks and firewalls.

I recently did some research for a project related materials to be used in a wet environment. The problem with resin is that it's hormone active. Tangentially, the same is true for standard epoxy from the hardware store. There are scary skin damages some people got that work daily with epoxy

Yeah, probably it doesn't make things better that the vendor is Lenovo. I think for some models fwupdmgr might work but not for everything.

The value of UEFI is surely dubious. I recently had to update my BIOS using Windows PE since there was no way of doing this on Linux. Of course my default boot was reset. The funny thing was though that I could repair my Linux boot using Win PE.

Before the only way was either fdisk /mbr to reset for Windows or boot a Linux system on stick/CD and rebuild grub/lilo. The latter has gotten unreasonably complex though so I rather wouldn't do this manually.

My verdict is that UEFI does something right, but created for the enterprise sector carries way too much complexity. Obviously so complex that everybody ends up using the original same code base.

Yes I also had this in Uni at some point. Just going through the homework can be a huge effort. If the course is small enough, you probably don't want to hand in obvious junk/slop, especially if you're asked to present "your" solution.

It's Microsoft 365 Copilot ;)

I'm having a blast with AoE I on Linux, in this case the Definitive Edition. I don't think it looks like Office though ;) But what is true, it's tricky to get running on WINE. With Proton which I use the configuration works by default though IIRC.

Programs installed in my home directory end up being run as my user. There is usually no clean way to do it differently.

But if programs are installed in the filesystem hierarchy and optionally split into multiple parts, they can be run as different or even multiple users.

I wouldn't consider selinux easy to use. apparmor is in a way even optional.

Most system installed software can normally not access everything because of the filesystem permissions. It works surprisingly well.

I think the problem is the trend of installing everything in the home directory. Ruby with rvm, Node with nvm/asdf/..., Rust with rustup, ... the list is long and of course related to rapidly changing ecosystems. If the underlying technologies were to strive for more stable designs, you could as well install them in /usr through the distribution's semi-outdated packaging system. In the past this was considered a hallmark of stability, now it's considered a limiting factor.

Of course all these innovations were mostly developed with servers in mind but not so much with Desktop usage.

The other problem with containers on Linux is that they are only sandboxes when configured correctly. Otherwise they can be even worse than no container.

Yeah that's an interesting point of view. In my studies I got comfortable with the fact that there's always someone smarter than me.

At the same time it should be considered that with physical labor workforces lost their income source numerous times. Ironically they are currently being considered a safe haven.

Ubuntu is surely controversial but no, security updates aren't paid. ;) Well, unless you need an LTS that cannot be updated for whatever reasons for 10 years. Or for people that need an extra FIPS approval.

I think this is now an interesting part about LLM based automation. The scientific community is quite strict on references. Even with its most advanced model ChatGPT isn't reliably able to tell me if an online shop has an item in stock. Then the other part is peer review which isn't optional either.