mdeslaur
Joined 15 years ago
Karma
437
Submissions
60
Member since
Dec 15
Recent submissions
Comment · 1 year ago
So I expect to pay less for his product now that his biggest cost has been cut in half.
Comment · 1 year ago
So it's "political" to show tariffs, but it's not "political" to show sales tax?
Comment · 2 years ago
Bug was filed here: https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/20...
Comment · 3 years ago
Comment · 3 years ago
In the past, Universe packages only got security updates if a member of the Ubuntu community submitted a fix for sponsoring. The community can still do this, but additionally, Ubuntu Pro exists which also updates universe packages.
Comment · 3 years ago
Ubuntu Pro covers Universe packages, which weren't previously covered by official security updates. All the packages in main still get the same security updates as before without requiring Ubuntu Pro.
Comment · 3 years ago
I don't understand how anyone manages to use a touchpad after getting used to how great trackpoints are. I have to use an external mouse on laptops that only have touchpads.
Comment · 3 years ago
Oh no, our terrible secret is out! :)
Comment · 3 years ago
> Ubuntu has never seemed to take security particularly seriously.
I haven't heard that before. Care to elaborate what we do that makes you believe we don't take security seriously?
Comment · 3 years ago
> where Ubuntu just unilaterally reverted Mozilla’s removal of a cert in their package, because it was breaking nuget… Note that this was early 2021 — Mozilla removed Symantec from their trust store in October 2018!
Mozilla actually removed the certs from their trust store in February 2021: https://hg.mozilla.org/projects/nss/rev/9718a34c84429b1e5dc6...
Debian and Ubuntu had jumped the gun by a few weeks and there were certificates still being used that had not been renewed yet, so we had to revert temporarily.
Mozilla had used the CKA_NSS_SERVER_DISTRUST_AFTER tag with a date to specify newer certs issued by that CA were not valid, but as the article above states, the crypto libraries being used in Linux don't support that kind of thing.
Comment · 4 years ago
Yes, this.
Comment · 8 years ago
Can a device still be wiped when this happens? I'm wondering how to recycle or recover locked devices if the USB port is disabled...
Comment · 10 years ago
Actually, Ubuntu 16.10 is listed as not-affected (4.8.0-11.12).
The "needs triage" you're seeing for Ubuntu 16.10 is for the "linux-goldfish" and "linux-flo" kernel packages for specific android devices.
Comment · 11 years ago
I will remove it in our next updates.
Comment · 11 years ago
I don't see any Unity-specific patches in the glib package in Ubuntu. What are you referring to?