klankin

deleted by creator

As in they redefined the minimum requirements for CVEs to make the AI bubble float a little longer imo

And they just changed the CVE rules to include non-exploitable bugs too.

My theory is its to pump AI ‘discoveries’ numbers

Do you know if thats just for medium to large machines?

Kinda my dream to get some smaller ones to build a small printer/CNC farm

Removed by mod

How much of the codebase is AI generated? This just looks like Comaps ran through the slop machine.

(not a personal criticism, but if you can’t write something like this, AI isn’t ever going to suddenly make you able to)

On an SSD?

You should peek at systemd-analyze blame and banish some services

Oh god yeah, its just filtering through the slop that actually matters.

But like the XZ trojan that was only affecting Debian installs, each distro needs to individually have competent maintainers to ensure their store is safe.

If for exapmle I set a couple ‘bugfixes’ in the guix package file for emacs, I could reasonably infect a number of systems if a lazy maintainer just approved the request. (Or other attacks without even involving guix if I notied a bug in a package spelling and typo squatted it, or stole signing keys and pushed updates to the repo myself).

None of these would change anything to other distros maintainers, but because this distros AI maintainer could risk a large number of users devices.

Just mount /home and /var to an SSD, tempFS(If you dont care about your data), or network drive and this is a perfect purpose for USB booting.

Saves your hard drives from all the bootloader stuff, and should be faster than a spinning disk if the drive is 3.0.

Id even mount the USB as read only to ensure it isnt damaged, and use any ISO generator to manage updates from another device (Like create a new flash, shutdown this PC, plug in the new flash - bam update complete)

Distro package maintainers are different than software dev maintainers.

They mean no one can be reasonably be up to date on software security updates, and (ideally) ensuring all packages changes are not malicious (as well as the small stuff like properly integrating to the distro, but idk how void works enough to comment on that)

Cause like I can write a ton of guix configs that’ll probably run until the next ice age, but that does nothing about the dev who’s software I packaged, that now decided they’re personally god and need to spread christ as fast as possible.

(Also off topic but that’s the power and curse of nixos-like distros, its too easy to package so odds are the shit ain’t updated, and suddenly there’s 1000 Firefox packages in nixpkgs)

Literally just new game plus’ing it, now that you know all the strats

Nah that’s been around in US since at least the late 90s, at least for phone calls