_euvw

https://en.wikipedia.org/wiki/Smallpox_vaccine

    > Is it like making smallpox virus available, so it can be studied?

You do realize that small pox was eradicated by introducing a malign version of small pox as a vaccine? Kinda like 'black hat medicine'.

_euvw

7 lat temudiscuss

This gave me words for that uncomfortable feeling:

https://www.theguardian.com/technology/2019/jan/20/shoshana-...

_euvw

8 lat temudiscuss

Or: the market does not (always) work. This too is an option.

_euvw

10 lat temudiscuss

You could call the Advertisement Code Commission. See: https://www.rijksoverheid.nl/onderwerpen/bescherming-van-con...

_euvw

10 lat temudiscuss

In te Netherlands, we have stickers that we cab place on our real-life mailboxes: "No ads. No unspecified recipient." The advertisers (mailmen) are not allowed to ignore this sticker.

Am I stealing money from advertisers?

There is no such rule for online adverts. So what is a parent to do?

By blocking them and obfuscating through clicking I am protecting my own sanity, and that of my children. This is my "No/No" sticker.

_euvw

10 lat temudiscuss

On a fresh Android, at first boot, it will ask you if you want to sync stuff. I always choose 'no'.

I then proceed onto the settings app, into 'accounts'. There, I tap 'Google' and lo and behold: App-data, Calendar, Contacts, Google Fit Data and People details are all ticked to sync.

I turn them off.

Then I open the default browser. It logs me into Google, by default. I have to explicitly tell it not to.

Google really really wants users to be logged in. That is my experience anyway.

_euvw

11 lat temudiscuss

My respons to the 'nothing to hide' argument is: "Why are you so scared of things that are hidden?"

That puts them on the defensive. Since now they have to justify their fear for the unknown. And then we're onto the real topic: fear.

_euvw

11 lat temudiscuss

You are correct on all points concerning the quality of code of Alpine Linux. I do not doubt it. But it is irrelevant to the discussion. The Linux kernel is not part of the containers that are based off of Alpine. That is the whole point of this level of virtualization: sharing the kernel.

Furthermore, the problem I have with Alpine-based containers is that using those as the basis of tooling used for building your own product, your own product will have a hard time becoming maintainable, sustainable an secure.

I've had developers doing make; make install in Dockerfiles just because Alpine doesn't have some library or version packaged.

Containerization brings all manner of sweetness to the table, but the current way it is used is a throwback to 1998.

Not having desktop software inside a small container does reduce the attack surface. Debian, Ubuntu, Centos can handle that requirement just fine. What is your point?

_euvw

11 lat temudiscuss

Why not? Let's run the numbers.

* http://wiki.alpinelinux.org/wiki/Special:ActiveUsers

14 active users. That is not a lot. In fact, that is tiny. Maybe their redmine has more? http://bugs.alpinelinux.org/projects/alpine says 16 users in the 'developers' group.

But maybe they're very pro-active on the mailinglist? Let's check their security announce list:

* http://lists.alpinelinux.org/alpine-security/

1 message. From 2009. Hmm. Well, their alpine-devel list then? 5110 messages in 10 years. 9 Messages per week. By comparison: the debian developers mailinglist had 492 messages in November 2015 alone.

So even though Alpine Linux looks nice and lean, it is maintained by a very small group of developers.

Now. If building your own container were very very hard, I'd sure understand grasping for something like Alpine.

But here's how you build an Ubuntu Trusty container:

     debootstrap --variant="minbase" --include="systemd-sysv" trusty ${TMPDIR} ${UBUNTU_MIRROR}
     chroot ${TMPDIR} 
     dpkg-divert --local --rename --add /sbin/initctl
     ln -sf /bin/true /sbin/initctl
     dpkg-divert --local --rename /usr/bin/ischroot 
     ln -sf /bin/true /usr/bin/ischroot

Just tarball it and throw it in 'docker import'. Your done.

Need to add or remove software? Use Ansible to configure specific containers with specific confgurations.

Need security-updates? chroot into the folder, apt-get update; apt-get upgrade.

Throw the new tarball into docker import again. You use long-term supported methods and systems. There are tens of thousands of packages. Bazillions of PPAs to use.

Edit: typo in codesnippet

Submissions

Everything Is Going Deep: ‘The Age of Surveillance Capitalism’

Grazing the Net (1994)

Developing countries send trillions more to the west than the other way around

comments