"security reasons", like... which ones?

[8/20/23 19:02] <tomman> "security reasons", like... which ones?

Give me a second.

About Azure security holes. Microsoft doesn't give a shit even though banks and governments are using this and are exposing private personal information on people and classified documents and stuff.

They don't consider it important as long as it's not widely known. They don't fix it until someone publicly shames them.

> Microsoft’s lack of transparency applies to breaches, irresponsible security practices and vulnerabilities, all of which expose their customers to risks they are deliberately kept in the dark about.

They are not a security company.

well, that's what happens with companies the size of Microsoft

they're too big for their own good

that makes them slow and useless

and the same crap is happening to competitors like Google

It would be better to do any computing locally if at all possible.

Or with any "Cloud" provider other than Microsoft if you absolutely must.

sadly many corporations see "computers" as a expense

eh, the competition is bad too

Microsoft has never proven that they can write anything competently.

Google is terrible, Oracle is even worse

and do you want to give more money to Amazon?!

the Four Big Clouds™ are terrible in their own wretched ways

Like I said, if you're thinking about the "Cloud" then the answer is "probably not". You should find some way not to do business with any of them, but especially Microsoft.

They had this man working at Azure.

tell that to CxOs

Give me a moment.

the ones that call the shots at most corporations are the most tech illiterate ones, usually

You're going to descend into the mind of a Nazi who was high on about everything who stabbed a coworker.

Then the media helped Microsoft cover it up.

...let's not go there

I wrote a long series about him until I ran out of material, which he kindly provided because of a very long text file on his public web site.

also, I have my reasons to distrust security researchers and companies, but this is not the place to discuss that either

Also, he's in prison now waiting his trial on Second Degree Murder.

But he worked at Azure and he said nobody there knew what they were doing and they were posting questions on Stack Exchange.

I do not thing Google is _that_ bad.

for me it's not bad, it's beyond evil

150 other employers already said they wouldn't hire him or never returned calls or emails before Microsoft got him through a "neurodivergent hiring program".

:)

right now, for me, Google is FAR worse than Microsoft

but again, not the place to argue that

I've seen plenty of the sausage making process at Microsoft to know not to go near anything from them.

I was somewhat taken aback by SeaMonkey and "Azure Build Server".

I guess I'm glad I use the RPMs. Who knows what could be thrown in at compile time on the "Clown computer".

In any case, I do not want to learn about "clown computing" either, even if that puts me at a disadvantage in the work market

but then, the entire IT industry has gone to hell

I believe this is partially what reproducible build data is supposed to solve.

but then building things from source is getting insane these days too

I probably don't even want to know. Like, with this rust garbage....

for example we went from "install these dependencies and run our buildscripts"

10 years ago you could just run firefox code through gcc on your laptop and out comes a web browser.

to "half of our repo is git submodules, how many copies of the SDL2 sourcetree do you want?"

Probably not so fast now.

One type of applications I build routinely from source is game console emulators

they have gone full insane with the git submodule thing

including complete repos of large libraries with thousands of commits as dependencies instead of just "hey, ensure you have libfoo version blah++ installed"

soon they will include Mesa, Wayland, and the entire Linux kernel as a submodule, I kid you not :D

basically reinventing the package manager in the worst possible way

not even Maven is *that* braindamaged

I think booting SeaMonkey off Bugzilla was petty. Maybe Mozilla plans to shut off Bugzilla and finish moving to Github?

One last relic. Kills off NNTP, MozNet, now the rest of their own stuff?

[8/20/23 22:29] <tomman> including complete repos of large libraries with thousands of commits as dependencies instead of just "hey, ensure you have libfoo version blah++ installed"

You probably mean people who didn't want to learn git, so they went to Microsoft for hosting.

When I forked the Linux kernel I used a local repo on my laptop.

I didn't want to give anyone else binaries because then I'd have to release source code and they'd start filing issues against it, and it was something I was only doing for my computers.

IsambardPrince: public shame, Microsoft? Have they already fixed the "true is false" (or was it "false is true") in VBA? :-P

Microsoft... also has people who can write and program and design, but at the same time seems to have had a culture that does not prioritize doing things so well when faced with usual business workflows. Doesn't blow up so visibly as far as they don't send their reps in suits to double-down about their not-100%-compatible Korn Shell being 100% compatible... in front of David Korn.

(... well, to be fair I have no idea if the MS rep was actually wearing a suit.)

lsmbardPrince For what it is worth we are still on Bugzilla. We are trying to work out a new agreement.

As for the great Microsoft vs. the world discussion. It is how big corporations work. The only thing I find sad is that 99% of the users don't care about anything. They can change it by not using services or buying from them. The other things I dislike is that computing goes in the direction of dumbing everything down. This goes for free software too. Just look at gnome. A white sheet of...

...paper is more usable than the gnome desktop :) Not much customization left.

And for discontinuing support for older OS. If you look at the stuff taken out from Gecko it is not that much. For macOS it is a bit harder but still manageable. Windos apis didn't change much after Vista. An api added there and a parameter changed there imho. Lately with Windows 11 it seems just chaotic and uncoordinated but nothing you really need to support unless you are a game developer...

...or a Windows shill imho. And Windows 8.1 in the form of server 2012 R2 is still supported for a few years. It is funny that Internet Explorer 11 is still updated for both Server 2008 R2 and 2012 R2 despite declared dead.

IE 11 is still possible to launch as a browser in Windows 11.

It's not gone. It's just hidden with a redirect to Edge.

About the only thing they do, I think, is keep the TLS stuff updated enough to connect to servers, and fix CVEs.

hi

why seamonkey removed from archlinux repo?

we have no influence over what distos do

actually this is usually because no one is willing to do the support of the package.

best entity to ask would be the distro

I notice SeaMonkey still uses .tar.bz2

anything wrong with that?

It seems there's probably a better compression format by now if you're looking to save a little on download costs.

I guess everybody and his dog gone with .xz years ago

For archival? Yes.

For stuff done on-the-fly? ZStd usually.

When the computer is constantly at it, to store things and read them back in real time, ZStd level 1 is pretty hard to beat.

The performance continues to be optimized.

So any older benchmarks you see are likely already outdated.

download or unpacking?

I'm not sure of bandwidth costs for the SeaMonkey crew, but for end users it may not matter if you're on 100Mbit fiber

at least I think bzip2 was a bit expensive space or time-wise (or both?) for decompression

it could matter a bit if you're on 3Mbit DSL, but then those links forge patience

(space, meaning resources, as in space complexity, so: memory)

in any case that would be interesting material for some research

Then there's the Wiki mess on mozilla's site.

A lot of that is wikirot anyway.