Hacker Newsnew | past | comments | ask | show | jobs | submit | demomode's commentslogin

Swap files are very fragile if you are using hibernation. For FDE I prefer LVM-over-LUKS and a dedicate partition

MacOS seems to have no problem with hibernating and it and its predecessor NeXT have been using swap files for over 30 years.

MacOS has no problem with hibernation because hardware and software are designed together: it uses TPM to manage swap encryption. I assume "BIOS" is also optimized to enable fast boot on sleep.

Linux can work with TPM but it's never as smooth. (Unless I guess you make it custom for your specific setup.)


These days with cryptenroll and friends, using the TPM is hardly an issue anymore. LVM and swapfiles both work well if you just create one large "everything but EFI" encrypted volume.

You'd need to keep secure boot on, preferably with your own keys loaded, to get all of the benefits, and that's a bit harder to automate.

Windows does all of this and more. It's harder on Linux because of a lack of tooling/interest/business incentives, and because on average Linux users want more control over their hardware than Windows users.


Windows has no problem with hibernation and FDE and it uses a swap file.

Windows and Linux run on the exact same hardware. Windows hibernation doesn't rely on secret bios features.

Unreliable hibernation is 100% and undeniably a Linux problem, there is no secret advantage or conspiracy to keep it down. It's just that nobody cares enough to make Linux not suck.


I have FDE with keys in the TPM. It's pretty smooth bit required a one time additional step in Fedora. It's also probably not very secure, but my threat model is simple theft.

What's the benefit of using the TPM compared to a simple passphrase at boot, in that scenario?

A person wouldn't be able to pull the disk to get at the information

Assuming that the person pulling the disk doesn't have the passphrase, what's the difference?

Assuming things are configured correctly, the TPM would only provide the key to unlock the drive if the correct OS has been booted. Attempting to boot from a live usb to have a look at the data wouldn't work, since the TPM wouldn't present the key required.

You can see https://wiki.archlinux.org/title/Trusted_Platform_Module#PCR... for an example of doing so


Sorry for the late answer: the benefit is that I don't have to enter my passphrase at boot.

Isn't that the purpose of `restic mount`?


> "we can draw our UI with additional webviews. The main reason we want to write UI using Servo itself is that we can dogfood our own stack and verify that it […]"

It's XUL again.


XUL was a different stack. This is using the same stack.


A general superpowered UI framework is the primary purpose of a browser, I don't see why it ever needed a second UI framework just for the chrome. Maybe HTML/CSS just wasn't up to snuff at the time.


You are right, the "HTML-is-the-UI" confused me. Related but different.


Godot says the UI is Godot code but doesn't feel like it.

This is a great thing! Custom browser UI is just a custom web page!


FYI. There is a XDG checker called "xdg-ninja"[1]

> A shell script that checks your $HOME for unwanted files and directories.

> When xdg-ninja encounters a file or directory it knows about, it will tell you whether it's possible to move it to the appropriate location, and how to do it.

1. https://github.com/b3nj5m1n/xdg-ninja


Indeed. Although this tool looks like a way to work around those holdouts which refuse to provide an official customisation point


Also: consider using overlayfs to make root fs read-only


They mentioned making the root fs read-only which (if they are using the config tools) does use overlayfs:

https://raspberrypi.stackexchange.com/questions/124628/raspb...


There's so many things wrong with this stuff, from the motivation of the project to the (dangerous) implementation


> What's even more insane is at the command line when you Tab to autocomplete the thing makes network requests and hangs! It's the only CLI app I know what requires the internet to autocomplete!

I'm pretty sure that it's a bash-completion feature / "fault".

No command is really executed while your are typing in a terminal until you press "enter".



Well, technically is still bash who does the tab-completion, flatpak just provides a helper.

Try tab-completion under pure sh or powershell


I used and created libraries using g-i (gobject introspect), also bindings for an app to develop plugins in python.

g-i is algo available for JavaScript, in fact gnome-shell it's written in JS

It's extremely easy if you stick to Gobject convention (this is a good thing).


I can only recommend to take a look at https://yadm.io/


You should take a look at Gstreamer, it has all the bells, whistles and codecs of ffmpeg (it integrates ffmpeg directly as a plugin). It's designed around the concept of graph pipelines and command line interface it's a little more verbose that ffmpeg's but more easy to understand.

https://gstreamer.freedesktop.org/documentation/tools/gst-la...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: