[lug-nuts@bigbrie.com: Re: Re: [gary@garymcglinn.com: Re: Re: Snort]] - Lug-nuts

12 Aug 2022

There may be.  But I doubt if many apply to me.  However, on a whim, I
installed Fedora 36 on the new drive and it works great.  It's possible
that there was some other issue that was causing me difficulty in
upgrading.  One prime candidate is operator error.  Be that as it may, I
am now working on getting things working under Fedora 36.

I did some reading on UEFI and I have lots of philosopical
disagreements, primarily the same one I always have: It solves a problem
that shouldn't or doesn't exist and it is unnecessarily complex.  Is
this really the wave of the future?  I notice my Fedora 36 install
didn't use it.  Apparently the NSA thinks it is a good idea.  They go
all google eyed and mushy over secure boot.  On their
page they have a "call for action" and a disclaimer that they aren't
making a recommendation within 3 adjacent paragraphs.

UEFI looks like a WinTel boondoggle to me.  Putting a simulator of
Snoopy flying his dog house in a spreadsheet just has to be a good idea.

Apparently the NSA is now the old NSA calld SIGNT and the new NSA called
CSS.  I don't know how this all relates to DHS.

-Gary

On Thu, Aug 11, 2022 at 02:46:23PM -0700, Brian E. Lavender wrote:
...
  On Mon, Aug 08, 2022 at 09:39:34AM -0700,
saclug(a)garymcglinn.com wrote:
  My experience with the upgrade treadmill is that
it is a waste of time.
 By its own admission (if a concept can have that) the new versions will
 have issues and you need to upgrade.  If the issues with an older
 version don't affect you, then it is perfectly fine to use it.  Why
 upgrade and risk the fact that the new issues will affect your use case.
 The developers for Fedora 13 were no smarter or dumber than the
 developers who are writing Fedora 36.  Or pick your distro of choice.  
 There are probably a boat load of known vulnerabilities in F13. It's
 probably a script kitty winter wonderland, depending upon what you have
 installed/running! If you you want software that is secure proof, you
 have to run something like "Ironsides", written using SPARK/Ada.

 https://ironsides.martincarlisle.com/

 Beyon that, the best is to keep patching on a stable distro that doesn't
 have API changes, or minimal changes.

 Brian

 -- 
 Brian Lavender
 http://www.brie.com/brian/

 "There are two ways of constructing a software design. One way is to
 make it so simple that there are obviously no deficiencies. And the other
 way is to make it so complicated that there are no obvious deficiencies."

 Professor C. A. R. Hoare
 The 1980 Turing award lecture
 _______________________________________________
 Lug-nuts mailing list -- lug-nuts(a)bigbrie.com
 To unsubscribe send an email to lug-nuts-leave(a)bigbrie.com 
----- End forwarded message -----