Hacker Newsnew | past | comments | ask | show | jobs | submit | alias_neo's commentslogin

I'm in the same boat as OP.

The question I'd ask myself is; who would _I_ trust to implement privacy preserving verification?

The only answer I can come up with right now is; myself. I would trust myself.


It has legal implications, as others have expressed.

It means your position was made redundant, and it allows you to be terminated with little legal complication, but on the understanding that the same position can't be re-hired for within a period, I think it's 6 months.

Of course in reality it's not that simple, you get "made redundant" then they rephrase the job title a bit and hire someone else.

Redundancy in the real, proper form is a consultation process where they will try, if possible to relocate people into other positions, government does it all the time when there's cuts, and they'll often offer voluntary redundancy where they pay you X amount to quit, it's usually a reasonable sum and should leave you with more than enough cash in "normal" circumstances to find another job comfortably, or see you through to retirement if you're pretty close.

Sometimes it's just a way to get rid of people who are shit or you don't like.

If you're gonna lose your job, being made "redundant" is the way you want to do it.


I’ve been involved in this once. There were two of us in the QA department that did subtly different jobs. They wanted rid of the other guy, but as we had very similar roles I had to be involved in the consultation process. What they did is very specifically outline the differences and that his were the ones that were redundant. My manager and friend pulled me into a room beforehand and told me ‘you’re gonna go through some shit but trust me you’re keeping your job’. It all left me with a fairly sour taste in my mouth and to this day I’m not entirely sure it was all above board. If a company wants you gone, they’ll figure a way to do it.

Yeah, I went through it 3 times in the first decade of my career, two of them were just like yours, I was told "look, this has to go like this, so you're gonna have to go through the stuff, but don't worry, we're promoting you so you won't be affected". After the second one, I left because it just becomes a shitty place to work. The good people who weren't given a hint they're safe end up leaving because of the risk and hit to morale, then the morale for the rest of you drops.

The third one was a little different, they just said this entire country is redundant were moving operations abroad. So everyone was gone.


I'm almost certain this was to win some sort of grant, award, subsidy, exemption, green credentials....something, and then once they had it, immediately forgotten.

I've seen this happen plenty where companies start campaigns for reasons and then ditch it as soon a they've achieved the thing from the list above.


They're also holding the photos that are left hostage; unless you pay them, you can't download the photos you have left there.

I thought it's that and they have them behind a paywall but no - they just somehow don't have them

maybe I will check again

edit: yep they have only my latest 50 photos (from 2014).

edit2: ah they did that in 2024 apparently. oh well whatever.


It replaces a proprietary component of your system with an open source one.

Reading https://libreboot.org/#why-use-libreboot might provide further enlightenment.


This answer is "do it out of principle". OP is looking for the practical considerations.

As far as I can tell, this is the only reason, you'll likely lose a bunch of functionality (that's been my experience); so "principle" is the only reason I'm aware of (or minimalism, but that's a principle too is it not?).

I suppose if nothing else, you can run a more up to date firmware if the vendor stopped supporting yours, but I have no idea what that means in a practical sense.


I don't really feel like I've lost any functionality, personally?

If I weren't using binary blobs in the firmware, I think I would have more trouble, but that is Canoeboot to my knowledge, not Libreboot. ^^


That still doesn't answer the question of why it's better. Unless you're paranoid about an OEM backdoor, I think this is cool but not worth the effort.

I think firstly is the FOSS obsession and backdoor paranoia from evangelists, and secondly and the more practical one is that the proprietary IBM BIOS is full of bugs and anti-consumer blacklists and whitelists designed to limit repairability and upgradeability, which stil boggle my mind on how those laptops got such a good image on that front.

I mean, maybe paranoia is the wrong word.. it's not something that I'm personally worried about, but stuff like that has actually happened.

>but stuff like that has actually happened

Yes, if you live and organize your life around things that are unlikely to happen to you, but only because they've happened ONCE to someone else, typically a high value target by state actors, that's called paranoia.

Most people are not gonna be targeted via BIOS hacks. From state actors to online scammers they all have easier ways to getting your data remotely.


> Most people are not gonna be targeted via BIOS hacks.

This is not really true:

https://www.techdirt.com/articles/20150812/11395231925/lenov...


That was once in 2014. How often did that happen? What damages did the users incur from that attack?

Normal people don't live in constant fear daily over something that happened once and caused no losses.


I'm not sure that's paranoia (as others have pointed out, OEM firmwares have had security problems before), but sure, let's ignore security problems for a moment.

1. Firmware contains bugs. Old proprietary firmware tends to not get fixes. If you switch to an open source version, you can get the bugs fixed.

(Edit) 1.a. Old proprietary firmware also doesn't tend to get new features, and open source replacements can cover that. (eg. booting over HTTP(S) or security features to help against Evil Maid attacks)

2. Libreboot claims to be faster to boot than the vendor firmware. Depending on the particular device/firmware, that wouldn't surprise me at all.


Yes, I said in another comment that I might have used the wrong word. It's still not something I have a lot of motivation to do something about. At least not until the process is easy.

> Unless you're paranoid about an OEM backdoor

Lenovo does have a history with installing a very obvious spyware rootkit on their consumer PCs[0].

[0]https://support.lenovo.com/us/en/product_security/ps500035-s...


I think you've pretty much summed it up.

As far as I'm aware, it has less functionality than the OEM, so you use it to _remove_ features (good and/or bad).

Aside from that, I suppose it means you can run a more up to date firmware if yours is no longer maintained, but I'm not sure what that means in practical terms.

There's also the "hyper paranoid" fork "canoeboot" which has no proprietary blobs, and presumably _even less_ functionality.

The short answer is; if you don't know why you want it or need it, you probably don't.


"Forgejo was initially created in December 2022 as a fork of Gitea. The fork occurred after a for-profit limited corporation ran by the lead maintainer of the project, Lunny Xiao, silently transferred Gitea's trademarks and operations to the company and began to establish an open-core model."[0]

[0] https://en.wikipedia.org/wiki/Forgejo

Also see: https://gitea-open-letter.coding.social/

EDIT: HN discussion on the latter: https://news.ycombinator.com/item?id=33372471


One of the first PC games I ever played, I was single-digit years old when this released. Fond memories.

Will have to have a play of this web version and try out Overload, thanks.


Deja Vu.

I read this article a few days ago I'm sure, word-for-word, but it wasn't on this site in OP? It stood out because when it mentioned textbooks and said "including ours" I looked at the site and thought to myself "they do textbooks?".


> and thought to myself "they do textbooks?".

Indeed: https://systemsapproach.org/books-html/

If you are cheap on money, but you do have time, and like to get into networking, I can only highly recommend https://book.systemsapproach.org/



This submission was made three days ago and bumped two hours ago: https://news.ycombinator.com/submitted?id=drbruced


What's the use case for Zai/GLM? I'm currently on Claude Pro, and the Zai looks about 50% more expensive after the first 3 months and according to their chart GLM 4.7 is not quite as capable as Opus 4.5?

I'm looking to save on costs because I use it so infrequently, but PAYG seems like it'd cost me more in a single session per month than the monthly cost plan.


If you pay for the whole year, GLM4.7 is only $7/mo for the first year. And until a few days ago, they had a fantastic deal that ran for almost 2 months where it was less than $3/mo for the first year. I grabbed it, and have been using it exclusively for personal coding since. It's good enough for me.

The other claimed benefit is a higher quota of tokens.


> What's the use case for Zai/GLM?

It's cheap :) It seems they stopped it now, but for the last 2 month you could buy the lite plan for a whole year for under 30 USD, while claude is ~19 USD per month. I bought 3 month for ~9 USD.

I use it for hobby projects. Casual coding with Open Code.

If price is not important Opus / Codex are just plain better.


You seem to have missed a couple of things that have caused you a bit of a headache here, I'm hoping I can encourage you to try again with a little bit of info. I've been using Linux for as long as it has existed, I'm also a backend-dev that works on a Linux machine and targets Linux-based platforms for deployment, even my kids use Linux. Windows went downhill for me after about Windows 2000 and Linux has only gotten better.

> yet it still is not there in usability

I want to wholeheartedly disagree with you. Nothing comes close to Linux in terms of usability for me, but a lot of it is about what you're used to, I've used Window's, I've used Mac, Mac I could live with, but I'll never intentionally use Windows again.

> To be specific what irked me today when I tested them was installing new programs. On Cachy, I wanted to test jetbrains IDE

Ok, let's begin; this one is partly JetBrains' fault, and partly yours.

You can open a terminal and type `paru jetbrains-toolbox`, hit enter a couple of times and it's installed. Don't know what `paru` is? I recommend reading the frankly excellent documentation from CachyOS[0].

> or extract(no option in dir manager or decompression program) the content in Cachy

You didn't specify which Desktop Environment you chose, this is important when helping newcomers because each comes with its own set of tools; but in Gnome's (what I use) the file manager, called Nautilus, I can right-click almost any archive type and will be presented with "Extract", "Extract to..." as well as a few other options. I just looked up how KDE does it, in case you're using that, the file manager is called Dolphin, and apparently you might need to install an archive tool first such as Ark and/or 7zip, gotta give you that one, I'm a little shocked, that's a pretty shitty OOBE in my opinion, but a quick search and you'll now probably be confused because the solution is here[1] but they say to use `apt install...` which you don't have on an Arch based distro. But once you know what the file managers you do have access to are, it should be easier.

> So I wanted to get 7zip but there was no linux version

There certainly _is_ a Linux version. `paru 7zip` and I get at least 3 legit options; the base package, an architecture optimised package, and a GUI for it, as well as a dozen or two community options. You can also try the standard arch package manager aptly named "pacman"; `sudo pacman -S 7zip` and it installs it for me after I hit enter to confirm, don't even need to choose the package. Wtf is `sudo`? That's how Administrator is typically done in Linux.

> Cachy has its own packages that can be opened(website) via its welcome screen(otherwise there is no program manager - no snaps, flatpacks

On Gnome there is "Software" which supports Flatpaks as well as other package types; don't worry about snaps, you don't want them, and there's Octopi from CachyOS. In KDE there's a GUI called "Discover". There are a bunch of others such as Bazaar which you mentioned.

Usability really isn't an issue in Linux once you know the way of your distro; If you're used to Windows, then it's _different_, sure, and in that case I'd suggest taking an hour to read the CachyOS docs; Arch Wiki (CachyOS is based on Arch) is also an amazing resource for all things Linux, and learn a little about how software management is different, we don't (usually) pull random crap from websites, we install from package managers, and sometimes compile the source ourselves.

If you didn't choose one of the two DEs I've mentioned (Gnome, KDE), I'd recommend giving them a go, they're both very mature and usable. If you're into Discord, I can suggest hitting up the CachyOS or another distro's Discord servers, there's lots of helpful people there willing to help, if you had any other questions give me a shout.

[0] https://wiki.cachyos.org/cachyos_basic/navigation-guide/ [1] https://discuss.kde.org/t/how-to-add-extract-here-right-clic...


>I just looked up how KDE does it, in case you're using that, the file manager is called Dolphin, and apparently you might need to install an archive tool first such as Ark and/or 7zip, gotta give you that one, I'm a little shocked, that's a pretty shitty OOBE in my opinion[..]

I think that's an artifact from running just the liveimage and not installing it fully to the VM. I'm 99% certain Ark is included in a default Cachy/KDE install.


This is precisely what it is, I hopped on my cachyOS install that I set up a few days ago and I can double-click the IntelliJ IDEA tarball from Dolphin and Ark pops up. I didn't install these manually, they came pre-packaged with KDE.


Thanks for the heads up, that makes sense.


Thanks for the reply. I used KDE. And sure, Gnome's Nautilus might have worked but I have huge distaste for it(it's pretty, but omg what a pain to set up to be an actual DE, let alone out of the box).

Anyhow.. "You can open a terminal and type".. yeah, no. This is exactly what I or any other Windows/desktop user does not want to be doing on a desktop computer. Linux always promised to get rid of this "just use terminal bro", which is what being a desktop OS is all about, but it never got there..it seems.

The premise of my test was to see whether the OS is ready out of the box(the main point of a linux distribution, after all). But neither was. Again, I am not saying it is not usable. I am just saying it requires more work to be put into it from the get-go than I am willing to put in, despite having the skill and knowledge to do so.


> Anyhow.. "You can open a terminal and type".. yeah, no. This is exactly what I or any other Windows/desktop user does not want to be doing on a desktop computer.

Then stay on windows. You'll have the same issues with MacOS from time to time.

If you're willing to learn things you have plenty of options. If not? You'll be limited. Tradeoffs.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: