Starting my study of the `grub-*` commands...

There's a shellscript `grub-reboot` which parses commandline args with a couple util functions, verifies that a menu entry was specified, fills in a missing bootdir, verifies results from `grub-probe`, & invokes `grub-editenv` once or thrice.

Another shellscript `grub-set-default` works extremely similarly.

`grub-script-check` zeroes out several properties, performs some OS-specific init, parses commandline flags, ...

1/?

... reads the file line-by-line handing off to GRUB's internal commandline to interpret them, & cleans up reporting any errors.

`grub_render_label` performs some OS-specific init, zeroes out some options, parses & validates commandline flags, sets or reads in text, performs various initialization, & hands off to `grub_util_render_label`.

`grub-syslinux2cfg` performs some OS-specific init, zeroes out some values, parses & validates commandline flags, performs various init, ...

2/5?

... normalizes a filepath into GRUB syntax, defers to `grub_syslinux_config_file`, & cleans up reporting any errors.

`grub-setup` performs some OS-specific init, sets various values mostly to 0, parses commandline flags, possibly sets $debug to "all", inits the BIOS-disk, performs various initialization & some finalization, parses the given device-name or loads a couple fallbacks, defers to a choice of core-routine I've already studied, & cleans up.

3/5?

@garbados If I were Mark Ruffalo, I'd probably republish that text in full for people to review. I have a really hard time teasing out 'antisemitic tropes' -- the best I can see are references to wealth, to business conglomerates, and to genocide. Also, maybe to scariness? I don't know. They are all objectively factual statements (the Ellisons are rich, Paramount-Warner will be an international media conglomerate, Gaza is a genocide).

https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md#security

The Go team at Google will run the Go checksum database as a service to the Go ecosystem, similar to running godoc.org and golang.org. It is important that the service be secure.

me when i'm not backdooring you

The simplest possible approach, which we never seriously considered, is to have one trusted server that issues a signed certificate for each module version.

you literally are doing that though since you run the single source of truth for package integrity

But we don’t want to blindly trust a downloaded go.sum file, since that would become the next attractive target for an attacker.

yes, which is why google is telling everyone to "blindly trust" their checksums!!!!

But simpler proxies may wish to focus on serving only modules and not checksum data—in particular, module-only proxies can be served from entirely static file systems, with no special infrastructure at all.

so somehow serving raw file content is supposed to be easier than serving checksums??????

The go command will verify the log as it uses it, ensuring that every record it reads is actually in the log and that no observed log ever drops a record from an earlier observed log.

it would be SO fucking easy to VERIFY THE CHECKSUM AS IT GOES TOO!

RE: https://hachyderm.io/@datarama/117214107554538348

I am *so* here for watching people advocate for their favourite map projections. This might be my favourite type of nerd debate.

Thank you, Fediverse.

(Also: https://xkcd.com/977/)

computer science is to making computers as music theory is to making music.

having some computer science concepts under your belt can make it easier for you to make computers. knowing some music theory can make it easier for you to make music.

but neither is a hard prerequisite. full stop.

you can make computers without going all in on learning deep computer science stuff. it’s probably harder, but it’s provably been done. that’s where computers came from, right?

so, you got this. whoever you are, if you want to make computers, go with the blessings of Sundog and have a good heckin’ time.

@imalcolm it seems reasonably modern too! Maybe the last 20 years. Usually quite hyper loud bogans I’ve worked with. Most other folk know it as something some other strayans say.

Dear lazyweb, I need a proper set of fonts and font configurations for CDE. What I got in Fedora 44 is *not* working properly; I am in the middle of diagnosing a Segmentation Fault in the help viewer of CDE, and it is now in the realm of fonts not being properly loaded, because the fonts it wants to load don't exist. I have experienced something similar in CDE's terminal emulator, but that could be mildly worked around with a font override argument, which does not exist for the help viewer.

So, what I am looking for is the font directory configuration, the font alias configuration, and the fonts themselves (which will be either in BDF or PCF format). I don't care if they've been ripped out of an old copy of Solaris or HP-UX, I just need a known good working setup. (I'm going to ping @thomholwerda here since he's a HP-UX lover and maybe also @neal in case there is something I'm doing wrong and he can see it a mile away and he can yeet a brick at me over it)

/me suddenly is reminded of the Lucy Daughter of the Devil Burning Man episode.

IPv6 be like...

Ideal: IPv4 LAN addresses, DHCP and NAT have too much management overhead! If we use 128-bit addressing with a 64-bit prefix per network, management will be zeroconf and greatly simplified!

Reality: Not every network is on the Internet, some don't have any GUA, but they still need to work when routed. Other networks are switched, they don't use routers at all, like a LAN party.

Ideal: Easy. Let's define three kinds of addresses: a link-local address is an address reachable only from the same Ethernet hub or switch, a ULA address is an address reachable from a routed LAN, and a GUA address reachable from the Internet. Every machine will have three addresses!

Reality: But it gives each machine three addresses.

Ideal: It's not a problem, because everything is still zeroconf. Look! The link-local addressing is especially elegant, you plug machines to a switch and your LAN party games just work by default like IPX! You can also number all routers in every LAN as fe80::1!

Reality: But hardcoding IP addresses from the MAC allows user tracking, the same traveling laptop can be tracked across Russia, America, and Australia!

Ideal: If you worry about privacy, you can generate additional temporary addresses to cycle them, in addition to your sensitive EUI-64 address.

Reality: Not all ISPs hand out a 64-bit prefix per consumer, it may be managed in a pool externally. The same problem occurs when you run second-layer routers inside your 64-bit prefix, the prefix is no longer free!

Ideal: Let's add DHCP Prefix Delegation to the protocol. A router uses DHCP to ask for a smaller prefix it controls from the router above, this allows nested routing with global addresses, you can just cascade routers without creating double or triple NAT!

Reality: Exposing the whole network to the Internet is insecure, an accidental misconfig allows a worm to SSH in with password 123456!

Ideal: Global-routing doesn't mean "open all ports". Don't forget a firewall on the router works for the entire network. You can still open and close ports in your firewall config.

Reality: Now, a machine has 6 addresses, a link-local address, a ULA address, a GUA address, a DHCPv6 /128 address, a DHCPv6 delegated prefix for other machines below, and a privacy-extension address for outgoing traffic. When you add a server, select the address carefully via routing metric, and don't forget to "open" ports on your router's firewall - but at least you're not "forwarding" ports now.

It was so thoughtful of them to ensure that silence is encoded with Dolby Noise Reduction.

@GhostOnTheHalfShell @ChrisMayLA6 @economics_that_works

i watched this and i agree with the problem he describes anout "the left" and how they turn right sometimes or more elitist when they come in touch with power.

i get the feeling he just ascribes it to how ppl are or that it is because its so nice around power... but the mechanics are simple. its called bribing and its done woth printed money.

join us and you benefit from wealth 🙂

https://youtu.be/_z27ArNDzLA?si=3vdOiRWl1QBewKbO

My favourite map of the world is ... a globe.

My family was not wealthy, but when I was a child we had, not just a world atlas with its flat maps, but a world globe made of cardboard (from Reader’s Digest, I think). So I did not grow up confused about the size of Greenland versus Africa.

So, let there be more cheap, cardboard world globes. And online, let there be more animated and interactive images of the world as it actually is: spherical. I’m as fascinated as anyone by the merits of different map projections, but most people are not 15th century navigators having to choose a projection for their flat paper charts.

https://www.abc.net.au/news/2026-09-05/africa-bigger-us-smaller-united-nations-adopts-new-world-map/107119646

Of course I spotted someone pulling a wagon with a Tesla Coil in it around #CambridgeMA.

What's your local regional phrase most similar to "We're not here to fuck spiders"

Der Landtag in Sachsen-Anhalt verweigert dem Journalisten Mohamed Amjahid die Akkreditierung. Die Polizei hat „sicherheitsrelevante Bedenken“. https://taz.de/!6210440

@occult @blogdiva That's at least the second Tesla coil on a wagon I've seen. The first being this, via Jim Jarmusch: https://www.youtube.com/watch?v=sL9bq3YmHJo