• 0 Posts
  • 13 Comments
Joined 6 months ago
cake
Cake day: May 20th, 2024

help-circle
  • In an enterprise imaged Windows laptop they and you probably wouldn’t have superuser privileges in order to keep yourselves from doing stuff like deleting core Windows dependencies. Maybe they give you full administrative access at your company but if you deleted the Program Files folder to save time you’d be blamed by pretty much everyone.

    You guys obviously have root privileges or else you wouldn’t have been able to delete the system’s core Python2 installation. And frankly you must have literally manually deleted it because the package manager would have told you what havoc you were about to enact and made you tell it to do it anyway.

    But what’s even weird to me is that most python devs I know, including myself use python virtual environments (venv) to use different versions and package bloat control from something like pip but keep it all nice and neat.

    If you wanted python3 to be the default you have to change the PATH in Windows or if you don’t know what you are doing I guess reinstall whichever python with a .MSI an hope it does it for you.

    Meanwhile, in Linux you can just use the alternatives utility to literally pick your preferred versions and it takes care of the paths for you.

    And with the HDMI issue? You must not be using the same graphics drivers and someone is using proprietary graphics drivers (won’t have the issues you’ve described) and the other is using open source versions (you’ll have the issues you’ve described) because companies are shitty about their proprietary closed standards.

    Which brings up another point. You say you all use the same laptop model and OS but you don’t all use the same drivers? There’s no baseline? There’s no control?

    This sounds like a Hell of your own making. This is why users in general should never have full administrative privileges and they should be tailored down to just what you need. Epecially if they haven’t yet learned the basics of the OS they are using because they are at best a danger to themselves and at worst a vulnerable laptop inside the network.





  • This is true. If you have DMARC and your RUA set up (with a working email (or one that doesn’t bounce at least)) along with SPF and DKIM, Google and MS will accept your mail. The only time it won’t at that point is if your IP is in the same /24 as a known spammer but so long as the spam stops, you’ll fall off the list. Some of the common spamlists allow you to request your IP be removed by request and I can only recall one list that almost nobody uses that makes you pay for the removal though there may be more I don’t recall.


  • It does represent freedom.

    Kent can fork the kernel if he wants with all the fixes he wants in it and distribute it as he sees fit. This particular instance of the kernel (which happens to be original – the upstream), Linus has to balance allowing some fixes other developers want to include versus a ‘minor’ release of the kernel during this cycle (because it is a minor version release, not a major one). Kent could then also stop other developers from contributing to his fork but then those people could just fork his kernel fork and do what they want.

    You as a user are free to use any of them. You’re even free to take Kent’s PRs right now with everything done in the kernel at this point, compile it and run it yourself if you want. You could even market it as something and sell it all if you want for a profit if you can get the customers. You’re free to do all of that. You can do it right now if you want.





  • There are a couple of OEMs like System76 and Starlabs that sell laptops with Linux on them, provide tech support for customers and so on.

    And no, installing most distros aren’t hard. You just click the buttons to proceed and fill out the username and password box, select your time zone and select your wi-fi network if you’re using wifi.

    You can do manual partitioning but why would you if you don’t know what you’re doing?

    Installing software in the GUI is as easy as installing software from the Microsoft Store. Just search or look around and when you see something you want, just click the Install button.



  • I get the sentiment but defense in depth is a methodology to live by in IT and auto updating via the Internet is not a good risk to take in general. For example, should Crowdstrike just disappear one day, your entire infrastructure shouldn’t be at enormous risk nor should critical services. Even if it’s your anti-virus, a virus or ransomware shouldn’t be able to easily propagate through the enterprise. If it did, then it is doubtful something like Crowdstrike is going to be able to update and suddenly reverse course. If it can then you’re just lucky that the ransomware that made it through didn’t do anything in defense of itself (disconnecting from the network, blocking CIDRs like Crowdsource’s update servers, blocking processes, whatever) and frankly you can still update those clients anyway from your own AV update server which is a product you’d be using if you aren’t allowing updates from the Internet in order to roll them out in dev first, phasing and/or schedules from your own infrastructure.

    Crowdstrike is just another lesson in that.