Recent submissions

Comment · 2 months ago
I wish Haiku all the best. It's always great to see some diversity in the FOSS OS landscape. Hope it finds its niche eventually like the BSDs did after the lawsuit drama.
Comment · 2 months ago
Thank you for a valuable response; I did not know this.
Comment · 2 months ago
Obviously not, you misunderstood my point. And the election programs comparison makes no sense.
Comment · 2 months ago
The choices are oddly and not consistently worded. "Ban LLM contributions from Debian via Social Contract", "A cautious approach to generative AI", "Debian is created by humans" and "Avoid the use of LLM: climate destruction is a deal breaker" all in one list? Sounds like several people wrote them and did not agree on the form.
Comment · 2 months ago
I did this for a while when I was learning Spanish! I used Calibre's CLI on my Raspi which generated the epubs from RSS feeds I'd chosen (Spanish-language media like El País, ABC — I speak in the Peninsular variety) and sent it to my Kindle via e-mail. It did this every morning. Can't stress how much this has helped me with the language. Unfortunately, my Rapsi died some months ago and I haven't gotten around to somehow replicate this workflow without it.
Comment · 2 months ago
Sounds great, but doesn't this come at a price of maintaing the whole of MV2 support which is inherently insecure? If yes, then it's not a great look.
Comment · 2 months ago
This may also be affected my the conditions I've grown up with (lower middle class, borderline poverty at times) but I find myself to be much frugal by default when compared to my friends from Western Europe. For example: I barely every get coffee from a coffee shop because in Poland the prices are ridiculous (≈$4.5/€3.7 for a flat white cup is standard). If I'm desperate for coffee when out (and didn't bring my own) I look for the nearest vending machine or, at worst, a Żabka (a 7-Eleven equivalent). The people I know from Belgium but also Germany or France just go to a Starbucks or Costa without hesitation. Just little habits like this are what makes me feel the difference in both mentality and income. PS Sorry for the late response.
Comment · 2 months ago
I don't get the hype around nominal GDP at all – looks great, but tells you little to none about the actual living conditions. Living in Poland, I don't feel richer than an average Belgian person (and I've had contact with many of them across the years).
Comment · 1 year ago
In Polish it's called małpa (monkey). I always thought of this as weird — turns out the Poles were not alone in noticing the resemblance :D
Comment · 1 year ago
Comment · 1 year ago
The thing is, Gecko is really insecure when compared to Chromium. Its sandboxing is asinine. Additionally, due to lack of WebView implementation, on mobile you have to use Chromium either way, leaving you with two completely separate attack surfaces.

Quoting GrapheneOS developers[1]:

> Avoid Gecko-based browsers like Firefox as they're currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn't have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox's sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn't happening for their Android browser yet.

IronFox (an FF fork) developers[2]:

> While we do as much as possible to improve the situation, it should be noted that Firefox-based web browsers, including IronFox, have security deficiencies when compared to Chromium. This is especially notable on Android.

[1] https://grapheneos.org/usage#web-browsing

[2] https://gitlab.com/ironfox-oss/IronFox/-/blob/dev/docs/Limit...

An in-depth examination of this topic and a plethora of other sources can also be found here: https://madaidans-insecurities.github.io/firefox-chromium.ht...

Comment · 1 year ago
The thing is, Gecko is really insecure when compared to Chromium. Its sandboxing is asinine. Additionally, due to lack of WebView implementation, on mobile you have to use Chromium either way, leaving you with two completely separate attack surfaces.

Quoting GrapheneOS developers[1]:

> Avoid Gecko-based browsers like Firefox as they're currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn't have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox's sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn't happening for their Android browser yet.

IronFox (an FF fork) developers[2]:

> While we do as much as possible to improve the situation, it should be noted that Firefox-based web browsers, including IronFox, have security deficiencies when compared to Chromium. This is especially notable on Android.

[1] https://grapheneos.org/usage#web-browsing

[2] https://gitlab.com/ironfox-oss/IronFox/-/blob/dev/docs/Limit...

An in-depth examination of this topic and a plethora of other sources can also be found here: https://madaidans-insecurities.github.io/firefox-chromium.ht...

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton