Magiilaro

Oh the app completely doesn’t load on a unlocked bootloader, this is on a locked bootloader system where I just activated Developer Mode to show the message of the app. I know that I can deactivate it again 😜

Unfortunately I don’t have a system with unlocked bootloader right now to show the message that comes up then.

Unfortunately I have to use the app to be a able to take card payments for my business.

It is mostly payment options that are affected from it, for example the Zettle App by PayPal

Trust me, it is not fine.

I have at least one app that disables major functions when Developer Mode is active in my stock android, even with a locked bootloader and without root.

That is already the case on Android phones with unlocked bootloader. Banking apps (in my experience) will either completely not work or only with limited functionality when run on a unlocked phone.

When I got into the company I was allowed to use Linux. But a few years ago the company was bought and merged with a much bigger company and the new IT policy made Windows mandatory.

Never heard of this, but it sounds very interesting. Thanks for mentioning it.

Never heard of this, but it sounds very interesting. Thanks for mentioning it.

I have a Postscript 3 compatible ipp network color laser printer for about 15 years now and it works without any issues with Linux, way better then it does from Windows. So I never understood way they say that printing is cumbersome with Linux.

Unfortunately many of the routers provided by ISPs I have seen where not configured that way by default. They only used NAT as firewall, so without configured port forwarding nothing could be reached with IPv4. But for IPv6: If you know the IPv6 for any system on the local network it is free available on all ports. It is the first thing I check when someone asks me to check their network or configure their internet, and only Fritz!Box have a sane default for IPv6 (but to be honest my other experiences are mostly with shitty Vodafone and german Telekom routers so it is a very limited set, and I really hope that most others are better.)

Yes, but exactly that was/is the issue of this bug. cups-browsed was attaching itself to every available IP on the system. And cups-browsed can’t only be bind to localhost, it would defeat the whole purpose of that tool. For it to be able to find other printers in the network it needs to be bound to a non-localhost-IP address. So, not much to sandbox

No port forwarding needed when the ISP provides a proper IPv6 subnet. Normal IPv6 router advertisement will then provide a public reachable address for every IPv6 capable device.

But with the size of IPv6 it makes searching for that not really easy, so it only a small attack vector.

I have cups (but not cups-browsed) installed, but I only start the service when I need to print something a few times a year. Until then it is only a binary sitting in a folder, nothing more.

I don’t know if I would like to have my personal data that I needed to print out on any system in a print shop. Printers and Copy machines in print shops often have internal HDD where the files are stored for caching reasons, often for months or even years (depending of the size of the HDD and how much the device is used) until some internal cleanup process deletes them.

I fear that the situation will not be better after nearly a decade.

Just read http://judecnelson.blogspot.fr/2014/09/systemd-biggest-fallacies.html and I see now that I was in error with my claim. So yes, I accept all the down votes in shame.

You do know that systemd is modular and every part of it does only one thing? Don’t see a real conflict with the Unix Philosphy

Sounds like you want savapage https://www.savapage.org/

It by default runs on its own port but that is easy fixable with a reverse proxy.

The structure is changing, many distributions already are merging more and more of the duplicated subdirectories in /usr/ with the counterparts in / but it takes time to complete that and at the moment those subdirectories are often still there but as symlinks to be compatible with older software (and sysadmins).

Yes, that is true. I was speaking in the context of very early Unix/Linux before initrd was a thing.

And I still don’t know what’s the point in separating /bin, /sbin, /usr/bin and /usr/sbin.

This goes back to the olden days when disk space was measured in kilo and megabytes. /sbin/ and /usr/sbin have the files needed to start a bare bone Unix/Linux system, so that you could boot from a 800kb floppy and mount all other directories via network or other storage devices as needed.