@jakub@jirutka.cz
@jakub@jirutka.cz avatar

jakub

@jakub@jirutka.cz

System engineer and software developer based in Prague, AlpineLinux developer, open-source enthusiast, fan of technologies, science, movies. My opinions only!

This profile is from a federated server and may be incomplete. Browse more on the original instance.

jakub, to bluesky
@jakub@jirutka.cz avatar

Interview with Jack #Dorsey.

»#Bluesky was launched to become the open source protocol layer for social media platforms, but the team ended up “literally repeating all the mistakes we made” at #Twitter.«

»There’s “absolutely no way” social media companies remain censorship resistant without moving to open protocols. “We need to change the foundation everything is built on.”«

https://www.piratewires.com/p/interview-with-jack-dorsey-mike-solana

jakub, to random
@jakub@jirutka.cz avatar

I’ve never seen an “intelligent” building that is nothing but a nuisance to the people inside. 😠 A little wind outside and all outside blinds go up, the people inside go blind from the sun doesn’t matter. A little rain according to the weather forecast? Let’s close all windows and let the people inside suffocate. Manual override is unavailable. Yeah, I’m talking about office buildings. HAL 9000 experience.

jakub, to random
@jakub@jirutka.cz avatar

If were a Go or Rust dependency, you wouldn’t have a single copy of xz library on your system, but many, hidden in every executable that uses it. Distros would have to rebuild all packages using that lib (not just the lib itself), which could take days or weeks, and users would have to update them all, downloading tens or hundreds of megabytes.

If you install binaries directly from vendors/devs, it’s even worse – you wouldn’t even know which ones are affected and you’d (1/3)

jakub,
@jakub@jirutka.cz avatar

libraries it’s linked with!

Now do you see the value of distros and dynamic linking? Please, stop this insane “single binary” mantra and work with distros, not against them.

If wants to replace C, devs need to acknowledge this and start providing dynamically linkable libraries with stable ABI. (3/3)

jakub,
@jakub@jirutka.cz avatar

be at the mercy of the devs to provide the update. Not a group of active maintainers behind the distro, but many individual devs, some of whom lack the time or motivation and sustainability. The same goes for Docker containers, Flatpak and similar!

This is called static linking or bundling. Instead of rebuilding and updating a single shared library, you have to rebuild and update every single thing that links/bundles it. In the case of static linking, you usually can’t even tell which (2/3)

jakub,
@jakub@jirutka.cz avatar

doesn’t even support any kind of shared libraries by design! Each Go binary bundles everything, including a rather large runtime. Linux distros have to rebuild all packages written in Go several times a year because of security vulnerabilities found in the Go runtime or stdlib. Go is a (not just) disaster.
https://www.cvedetails.com/vulnerability-list/vendor_id-14185/product_id-29205/Golang-GO.html

jakub,
@jakub@jirutka.cz avatar

@ondrej How is autoconf related to this topic?
Autoconf is a legacy hell and we already have better build systems (e.g. meson).

jakub, to random
@jakub@jirutka.cz avatar

It’s no secret that I use everywhere – on bear metal, VMs, containers, my notebook, pager, a telegraph machine.
But I’m tired of musl. I cannot just fetch any binary from darknet and run it via sudo like everyone else. Even well-written backdoors like in xz don’t work on Alpine! I feel socially isolated – everyone is happily checking and updating their systems now, but I’m not. And apk won’t even give me a coffee break between system updates!
So I’ll switch to Ubuntu.

jakub, to random
@jakub@jirutka.cz avatar

xz 5.6.0 and 5.6.1 source tarballs are backdoored. Investigation found that no xz binary is affected.

  • stable branches uses xz 5.4 or older
  • edge uses unaffected tarball
  • the backdoor doesn't work with musl

https://www.openwall.com/lists/oss-security/2024/03/29/4

martijnbraam, to random
@martijnbraam@fosstodon.org avatar

After a lot of debugging and testing and debugging I've managed to bootstrap and chroot into an Alpine Linux installation without the need of superuser privileges :D Now I just need to figure out how to create an ext4 filesystem without superuser privileges and put the files in it.

jakub,
@jakub@jirutka.cz avatar

@martijnbraam I’m curious, how did you achieve it?

jakub,
@jakub@jirutka.cz avatar

@martijnbraam Aha, it requires setting subuid/subgid. I know about this option, but it’s too inconvenient for ordinary users, more than just running the script as root. However, I had a different use case than you.

xcabal05, to random Czech
@xcabal05@witter.cz avatar

Mám tady trhovou smlouvu z roku 1883 na dům číslo 316 v Rakvicích. Můj praprapradědeček František Šelle (1854-1935) a jeho manželka Marie rozená Suchyňová (1851-1924) tehdy koupili tento domek od Apolonie Turečkové.

Dům (postavený asi v roce 1860) tvořila jen tmavá kuchyň, tmavá komora, pokoj (světnice) a předsíň. Studna u domu nebyla. Pro vodu se tehdy muselo chodit docela daleko.

image/jpeg
image/jpeg

jakub,
@jakub@jirutka.cz avatar

@xcabal05 Dokážeš to písmo přečíst?

TodayInTwitter, to random
@TodayInTwitter@mastodon.social avatar

A little update on Twitter/X replacements: Meta's Threads has around 35 percent of the monthly active users of X (130 million vs. X's 450 million). It's been around for only about seven months.

That 450 million number is also an estimate; it could be lower. (It most likely is lower.)

jakub,
@jakub@jirutka.cz avatar

@TodayInTwitter Aren’t they counting also Instagram users? I noticed that I sometimes see some Threads widget in my feed (and I don’t have Threads account).

jakub, to random
@jakub@jirutka.cz avatar

Do you use or other voice assistant?

I still find it weird and inconvenient talking to a computer, so I’m not a fan of voice assistants. However, voice control can be very useful when riding a motorbike, for obvious reasons.

But most of the time when I tried it, I end up dialing a wrong contact (instead of e.g. navigating to a location) and panicking how to quickly cancel the call. There’s no confirmation before dialing. I don’t understand how can ppl use this, it’s unreliable af.

rootcz, to random Czech

Ubuntu 24.04 LTS bude mít podporu 12 let, prodlouží se i podpora starších vydání https://www.root.cz/zpravicky/ubuntu-24-04-lts-bude-mit-podporu-12-let-prodlouzi-se-i-podpora-starsich-vydani/?utm_source=rss&utm_medium=text&utm_campaign=rss

jakub,
@jakub@jirutka.cz avatar

@rootcz To je absurdně dlouhá doba, ale slibem nezarmoutíš, že… Háček nejspíš bude ve smluvních podmínkách, co ta podpora skutečně zahrnuje.

jakub,
@jakub@jirutka.cz avatar

@ondrejkolin @rootcz V článku píší: „Podpora se nebude týkat jen základu systému, ale všech 30 000 zdrojových balíčků.“

jakub,
@jakub@jirutka.cz avatar

@ondrejkolin @rootcz @sesivany To je jednoduché, nemají.

hynek, to random
@hynek@mastodon.social avatar

Looks like https://hynek.me/articles/pull-requests-branch/ tends to evoke two reactions:

  1. “Finally someone spells it out.”
  2. “Let me explain to you how smart I am. ”

It’s kinda sad that even Lobste.rs has #2 clientel. It’s. So. Tiresome. To not be able to create ANYTHING without some bro using it as an I’m-very-smart stepping stone.

jakub,
@jakub@jirutka.cz avatar

@hynek FYI, there’s a better and faster alternative to lazygit: https://github.com/extrawurst/gitui

rootcz, to random Czech

Firefox pro Android má k dispozici více než 450 nových rozšíření https://www.root.cz/zpravicky/firefox-pro-android-ma-k-dispozici-vice-nez-450-novych-rozsireni/?utm_source=rss&utm_medium=text&utm_campaign=rss

jakub,
@jakub@jirutka.cz avatar

@sesivany @michal @rootcz Jaké rozšíření na to používáte?

ncopa, to random
@ncopa@fosstodon.org avatar

I just pushed Linux kernel 6.6.6 to edge and v3.19.

jakub,
@jakub@jirutka.cz avatar

@ncopa If I boot it, will it create a portal to hell? 🤔

dalias, to random
@dalias@hachyderm.io avatar

Some thoughts resurfaced via another thread here, on meat.

I'm not particularly militant, nor vegan, nor do I judge people for their decision to eat or not eat meat or animal products.

But there is one thing I feel pretty strongly about, and would encourage others to really think about too: giving meat to children before they understand enough to make a decision for themselves.

jakub,
@jakub@jirutka.cz avatar

@dalias What about killing plants? You shouldn’t give children any food before they understand enough to make a decision for themselves!
This is really ridiculous. Humans need animal food for good development. Not giving meat to small children for “ethical reasons” is the most militant and dangerous veganism I’ve heard of.

jakub, to linux
@jakub@jirutka.cz avatar

After almost a year, I’ve released a new version of swaylock-effects, a fork of with fancy effects and customization options. Swaylock is a screen locking utility for compositors with ext-session-lock-v1 protocol support.

New features: unlock on SIGUSR1, allow to display image in indicator and change the state texts.

Thanks to all the contributors, especially @PeterCxy, who fixed a major bug that I couldn't fix myself!

https://github.com/jirutka/swaylock-effects

jakub, to random
@jakub@jirutka.cz avatar

Tip: , a book-summarizing subscription service based in Berlin, now offers 85% discount for one year subscription – just 290 CZK (12 EUR).

jakub, to ChatGPT
@jakub@jirutka.cz avatar

Why is it disrespectful to talk with about sex? 🤔 These prude content guidelines are ridiculous, stupid and apparently don’t even work.

jakub, to microsoft
@jakub@jirutka.cz avatar

The reality behind 🖤 is nasty. They follow the Embrace, Extend, Extinguish strategy and we are already in the extinguish phase. Microsoft has never really changed at the core, it was just well planned long-term trap, as always. The same as Google and other big corps. It’s not surprising though.

https://ghuntley.com/fracture/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • tacticalgear
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • osvaldo12
  • ngwrru68w68
  • GTA5RPClips
  • provamag3
  • InstantRegret
  • everett
  • Durango
  • cisconetworking
  • khanakhh
  • ethstaker
  • tester
  • anitta
  • Leos
  • normalnudes
  • modclub
  • megavids
  • lostlight
  • All magazines
    •