@paco @BenAveling it is just a stupid electronic device
-
@tiotasram
So the point of SGX is that there's an intel-signed key that's only accessible inside the SGX enclave than can be used to sign messages to a recipient off-device to attest that the code is running inside the enclave; it can be validated against intel's CA. The idea is good in theory, but in practice there have been too many SGX vulnerabilities for me to want to rely on it, hence my comment.
@paco -
@paco I'm about to get mine too, and thinking about buying two
-
@godofbiscuits Great. So at least we're on the same wavelength.
I don't want to provoke irritation in (or support a project that irritates) the very people I want to support. Perhaps what you're saying is that this is going to have low appeal to people who themselves are part of the LGBTQ community? I can understand that.
But is it bad? Is there a reason that well-intentioned folks like me should oppose it instead of support it? Is it more offensive than beneficial? I'm genuinely asking.
@paco i'm of the mind that it’s bad. Demurring/deferring to the idea that "gay" = even controversial coming from LGBTQ people themselves is a form of shame.
And shame has killed a lot of us.
-
-
-
@godofbiscuits Great. So at least we're on the same wavelength.
I don't want to provoke irritation in (or support a project that irritates) the very people I want to support. Perhaps what you're saying is that this is going to have low appeal to people who themselves are part of the LGBTQ community? I can understand that.
But is it bad? Is there a reason that well-intentioned folks like me should oppose it instead of support it? Is it more offensive than beneficial? I'm genuinely asking.
@paco you could just donate to LGBTQ causes directly.
-
-
@tiotasram
So, the claim with SGX is that if you trust intel to have done the implementation right and not have their keys compromised, then you can know the hash of the code that's running on the server and that that code is isolated from the rest of the OS and firmware. With open source server code and reproducible builds, you can then confirm that the server is running the code inside the enclave that it should be, and with ends to end encryption between you and the enclave (and keys held inside the enclave), that nothing in between you and the enclave has touched it. It's a good model, with two problems: the SGX code has to talk to the GPU and somehow keep all of that interaction inside the trust zone of the enclave, and intel and Nvidia need to have done their jobs correctly. The fact that they don't mention encrypted GPU memory etc. is the first big red flag for me. Even with that, though, SGX has had a lot of bugs over the years, and by most accounts Nvidia's attempts at GPU enclaves are much less secure.
@paco -
@paco Other things being equal I prefer a mix of genders on a planet.
-
@paco Other things being equal I prefer a mix of genders on a planet.
@floatybirb agreed. Now, if you asked me whether I would want to live on a planet that was governed by all women or governed by all men, I’d pick all women every time. But population? Yeah. Variety is better.
-
@davidculley I remember the stupid cryptocurrency thing, but I didn’t realise Moxie was driving that or that it led to him leaving Signal. I didn’t pay close enough attention. It all fits a bit better now.
-
@paco this goes beyond basic compute resources and is also applied to user attention and familiarity. things get changed constantly because the developers think a new design is better, without attaching any cost to user discomfort and the time/energy it takes to relearn the new way, or the time/energy that needed to be invested in learning the previous way.
modern Linux is rapidly following the same trajectory, unfortunately. in terms of sane alternatives we're basically left with the BSDs.
-
@paco Just checked and there’s still missing pictures on https://en.wikipedia.org/wiki/List_of_cetaceans that are worth checking out.
(Beaked whales) -
@paco Just checked and there’s still missing pictures on https://en.wikipedia.org/wiki/List_of_cetaceans that are worth checking out.
(Beaked whales)@tamonten
That was the inspiration for this. -
@paco
This is a good perspective.
Hm. In unix/linux I feel in control. Windows? For myself I try to avoid Windows out of self-respect. -
@paco this goes beyond basic compute resources and is also applied to user attention and familiarity. things get changed constantly because the developers think a new design is better, without attaching any cost to user discomfort and the time/energy it takes to relearn the new way, or the time/energy that needed to be invested in learning the previous way.
modern Linux is rapidly following the same trajectory, unfortunately. in terms of sane alternatives we're basically left with the BSDs.
@gsuberland I agree. And related to that, people often talk about liking Windows because of familiarity. Part of the argument is that using Windows at home and at work probably makes people better in both places. Frankly (a) I think the average person is less familiar than they think they are (Dunning-Krueger), and (b) this point you make: Microsoft is frequently taking actions that make one less familiar with Windows than they were.
-
@gsuberland I agree. And related to that, people often talk about liking Windows because of familiarity. Part of the argument is that using Windows at home and at work probably makes people better in both places. Frankly (a) I think the average person is less familiar than they think they are (Dunning-Krueger), and (b) this point you make: Microsoft is frequently taking actions that make one less familiar with Windows than they were.
@paco I personally use it because it can run the things I want to run, and Linux can't do that. for everything else, I'm on FreeBSD.
-
