Unless I misunderstood your original question, you don’t trust the Docker signing process, so getting a cryptographically signed image from there seems to fail your criteria.

You could build a Debian base image in-house from scratch if you wanted to and limit your tools to Debian only signed packages.

Ultimately you need to trust something.

For example, how do you trust the microcode updates to your CPU?

I tend to build my own containers for anything that matters, but that might not be a viable option.

Microsoft continues to be the best advocate for migrating to Linux.

26 years ago.

https://lists.debian.org/debian-sparc/2000/09/msg00038.html

“That’s not a flaw … that’s a feature!”

Around the turn of the century I built a “middleware” layer for an Oracle to MySQL bridge which enabled legacy systems to keep running while modern and open source tooling could be built.

The biggest challenge was moving from columnar to row based data … that and compiling Solaris tools using Oracle libraries.

Oracle is like sendmail, user friendly, just very picky whom it makes friends with.

I’m getting flashbacks to debugging an Oracle connection file.

… and replace them with a whole new class of bugs.

Source: I’ve been writing software since 1982.

And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.

Seems like a valid use of the technology…

The website has a heading proclaiming that apparently it’s a bad year for the Linux kernel.

I have to ask … compared to what … the Windows kernel?

Wow … so I can finally have root on my own phone?

At the rate Microsoft is going, by the time we set up a community on Mars, everyone will have migrated to Linux 😁

You don’t need to go to Mars to deal with timezones … plenty of people right here who have absolutely no idea that half the planet is dark at any one time and still schedule global events in their colloquial timezone rather than UTC.

I think that unless you have some way to enforce accuracy, it’s meaningless and AFAIK automatic detection tools are no better than chance and to my knowledge, getting worse.

An AI bot operator isn’t going to tag their material as [AI], more likely than not they’d attempt to use [NOT AI].

I’d also point out that while lemmy doesn’t (yet) support hashtags, any “tagging” would probably benefit from using the existing method using a #tag.

Ultimately, you need to ask yourself, is undeclared AI that goes undetected by the community a problem, or the new “normal”?

I’ll note that I’m not a proponent of Assumed Intelligence and think that when the bubble bursts we’re going to be in a world of hurt, but with a little luck the billionaires will have lost their shirts in the process.

There’s nothing to host.

Create an iCal file and import it into your calendar application on your phone.

I think that this is symptomatic of a much larger issue at Mozilla, leadership, or rather, lack of leadership. AI, tracking, privacy, funding, the list of crazy coming from there appears to be just ballooning.

I see no evidence that they deal with actual bug reports, no evidence that they care about users and no clear path being forged, unless they want to enshitify their business, in which case, that appears to be going swimmingly.

This is GOLD!

Source: Debian user for 25 years.

I suspect that Meta suddenly requiring that the family Messenger account has a PIN is unrelated … right?

I can’t decide if this is real or an advertisement for the linked article service. I don’t see any CVE in the article which seems to be a good indication of the quality of the content.

I’m not saying that this is misinformation, but I’m extremely sceptical about the nature of this article.

If it helps, it’s the only thing I think of wherever I encounter it, bus lines, taxi numbers, number plates, street numbers, you name it.

So, yeah, I think it’s funny.