Wait what happens once some government or state actor hacks rust’s install script rustup with its curl | bash
install procedure and relying on TLS certificates which are e.g. issued by the Russian government. (No, the rust project won’t use a Russian/Chinese/US Gov certificate but your browser will trust near all of them…)
- 48 Posts
- 193 Comments
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·8 hours agoThe thing is: You are using velocities v1, v2 which are relative to Earth. But none of the two vehicles collide with Earth - they collide with each other, thus the thing that matters is their relative speed, thus the difference of their velocities relative to Earth.
(That’s also why the speed at which both Earth, the car, and the motorized bike move around the sun does not matter - relative speed is all what matters).
The other thing is that a human colliding with an object of several tons weight with a speed of, say, 36 km/h is not “elastic”. 36 km/h is 10 meter per second, which is equal to about one second of free fall (accelerating with a= 9.81 meter per square second to the ground), which is equivalent to a fall height of h = a/2 * s ^2 or 5 meters.
Somebody falling from 5 meters hight on hard concrete ground will not bounce up but will likely have some broken bones, or a broken skull. What happens is that all parts of thier body is decelerated to a speed of zero within a distance of one or two centimeters, which involves massive forces that easily break bones.
And a speed of 14 m/s, or 54 km/h corresponds to a fall of ten meters depth - almost certainly lethal if hitting a two-ton concrete block.
The affected malicious packages are:
- librewolf-fix-bin
- firefox-patch-bin
- zen-browser-patched-bin
What a nice attack on privacy-friendly infrastructure.
And then, Arch AUR has such suspicious things like the Brave browser which claims to reduce tracking… and works together with advertisers.
To be clear, AUR is fantastic if you develop some experimental package and you want to give it to your friends to try it out easily. But not as a general distribution mechanism.
BTW python’s package index has roughly the same problem - but a far less technical, experienced and critical user base. NPM has this problem since years.
Expect these problems to rise with every percent more of new Linux users which never learned the difference between opening / viewing untrusted data, and running untrusted code, because Windows basically ignores this essential concept and Android tries to solve that with sandboxing each app.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish1·22 hours agoThere’s constant chatter about the potential risks associated with the rise in e-bikes, but little to no mention of regulating the existing menace. You want to talk about excessive power?
Of course this is worked on, it is an EU goal to reduce traffic deaths to zero - for example with speed limits for cars:
HaraldvonBlauzahn@feddit.orgto Open Source@lemmy.ml•Google Keeps Making Smartphones Worse1·24 hours agoSome of the UI isn’t open, otherwise it is Qt / Wayland / pyside with stsndard pkcon / rpm package manager and I program mine in Guile.
And the UI isn’t the serious issue. The serious issue is propietary firmware which prevents you from really running Android / whatever on a vendor phone and also that a phone does not have one but around five different processors and only the “OS” one can be controlled by your own software. An Intel Pocket PC is far better in that regard, except that it won’t work as a telephone.
HaraldvonBlauzahn@feddit.orgto Linux@lemmy.ml•Linux has over 6% of the desktop market? Yes, you read that right - here's how10·1 day agoMicrosoft has been making Windows worse. I feel more that this is Microsoft’s fault, they have abandoned the development of desktop Windows and the advancement of support for modern processor designs and gaming hardware.
Moores law is dead since a long time except for graphic cards and GPUs. This means you can’t keep adding things to desktop software in the style of “What IBM giveth, Microsoft takes away”.
Existing development paradigms don’t add significant qualities to many-processor hardware.
Which also explains part of the AI craze. It is investment money searching for a sensible use.
HaraldvonBlauzahn@feddit.orgto Linux@lemmy.ml•Linux has over 6% of the desktop market? Yes, you read that right - here's how8·1 day agoAfter getting to 1% in approximately 2011, it took about a decade to double that to 2%. The jump from 2% to 3% took just over two years, and 3% to 4% took less than a year.
Could be exponential growth.
HaraldvonBlauzahn@feddit.orgto Open Source@lemmy.ml•Google Keeps Making Smartphones Worse7·2 days agoSailfish works quite well. Especially if you are not heavily using privacy-hostile apps (it has Android emulation, so things like OSMand or public transport apps run well). Quite neat. I have been programming mine in Guile, and I also have a Sailfish PDA with a physical keyboard.
What you have to do is to think hard is what you really want from a phone or pocket computer .
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·2 days agoYou called it a bicycle, which is wrong and moreover confusing the discussion.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·3 days agoYeah I am, too, always astounded about posts like https://discuss.tchncs.de/post/22333342 or https://old.reddit.com/r/fuckcars/top/?sort=top&t=month .
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·3 days agoIs this what we call “Mofa” in Germany? What are the rules for it?
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish4·3 days agoGoing in a car, you necessarily interact with others, what you do and how you do it clearly affects their safety, their personal space and you can even easily kill them with a single wrong movement of one hand or one foot.
That’s by definition clearly the realm where your personal freedom ends - the fundamental rights of others give it limits. And this is good so.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·3 days agoNo, that’s not the case. What’s relevant, especially with a difference of mass so large, is the relative speed of the two objects, which is 30 km/h.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·3 days agoIt is very clear from statistics of traffic accidents between cars and pedestrians that risk of lethal injuries rises sharply with speed, even at speeds of 30 km/h. It does not make a difference whether a car crashes with 30 km\h into you, or you crash with 30 km/h into a car.
It is also very clear that riding light motorcycles is far more risky than riding a bike.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish2·3 days agoThe same way that limiting the work hours of truck drivers protects them and others. Without these restrictions, companies would simply demand even longer hours for less money.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish4·3 days agoMany/most urban city paths in Germany are already too crowded for S-Pedelecs which go at 45 km/h.
For example, you would need to be able to safely overtake a slower bicycle which on most German bike lanes is not safely possible. And of course, it is a different thing for Netherlands bike infrastructure - but you also have much denser bike traffic there.
HaraldvonBlauzahn@feddit.orgOPto Europe@feddit.org•Bosch manager in interview: eBike over-motorization is a risk to our business, because eBikes with more than 800 Watt power will lead to much stricter regulationsEnglish126·3 days agoBecause we don’t fall for whataboutism?
It’s no question that car speeds in cities are going down - and need to go down for safety. And that’s no reason at all to make e-bikes significantly faster and make things less safe.
And by the way: Further reducing the speed limits for cars, and making more space for normal bikes, including dedicated bike roads, would achieve exactly what most people which argue for higher e-bike speed limits presumably want: You get much faster to your destination. Again, the European bicycle capitals like Copenhagen, Amsterdam and Paris show how it is done.
That is why Debian uses digital pgp signatures for all packages. And the GNU project uses strong cryptographic hashes for install packages.