Forgot your password?

typodupeerror

Comment: Re:Why Debian? (Score 1) 191

by KugelKurt (#43645997) Attached to: Debian 7.0 ("Wheezy") Released

Sure, sure, the recent 100% CPU load on screenlocking bug on KDE 4.10.x for some people was really fun, I suppose.

No idea what you're talking about. I tried googling it but found nothing.

I have no idea what kind of "crucial for productivity" you need to update that often from the damn desktop /environment/.

I was referring to PIM applications. If you could read, you'd knew that.

As for the PIM if you value your crucial thing - just don't use KDE PIM period. It's just that bad.

Kontact 4.10 is great: http://www.muktware.com/5567/future-and-kde-pim – 4.8 however was only the second release with the new foundation. It contained bugs related to mail filtering. These bugs are all fixed in 4.9.x or 4.10.x, as far as I'm aware.

Evolution 3.6 also bought nice improvements.

As for non-PIM productivity applications: GNOME Boxes 3.4 is a mere tech preview. 3.8 is the current and much better release. GNOME Web is now based on WebKit2 which is a great improvement security-wise.
As I previously wrote: QtWebKit 2.3 has also been released with many important bug fixes but Debian 7.0 sticks blindly to QtWebKit 2.2. EVERY Qt-based application that uses WebKit to render some content has grave security risks with 2.2.

Comment: Re:Why Debian? (Score 1) 191

by KugelKurt (#43640393) Attached to: Debian 7.0 ("Wheezy") Released

You've got a choice here.

1. Always new, only new. Welcome your new bugs every so often by impaling yourself on them (no idea how that works, really).

2. Might be not latest but you don't need to fix random bugs out of nowhere. If there were bugs you deal with them once and forget about it until next release.

Second one is Debian stable. It might not have appeal to you, but it does for many of us who don't feel like fixing random upstream bugs _all the time_. And those DEs, they sure as hell do have those.

As if you would fix any bugs...

GNOME 3.4, KDE SC 4.8, and Xfce 4.8 are End Of Life and don't receive any bugfixes at all any longer and all those releases fixed more bugs than they introduced regressions. Dot-0 releases are the ones with regressions and these are gone by dot-1.

Claiming that the fixed bugs are not important is simply denying reality. Especially in KDE land where 4.7 introduced the new generation KMail and 4.8 is only the second release with it. 4.9 and 4.10 fixed loads and loads of bugs in that area and PIM is not some unimportant game or so -- it's crucial for productivity.

Comment: Re:Why Debian? (Score 1) 191

by KugelKurt (#43636389) Attached to: Debian 7.0 ("Wheezy") Released

And webkit is explicitly cited in the wheezy release notes as something that is not covered by their security guarantees. The only webkit browser that receives security attention is chromium; if you want to use some other webkit browser, you do so at your own risk. This is a reasonable stance to take for an organization with limited resources, particularly considering how niche the affected browsers are.

QtWebKit is not a single browser, it's the HTML rendering used by almost all KDE applications (excl. the few that still use KHTML).
And I don't see any reason in refusing to ship an important bugfix release that does not need any cherrypicked backporting. It simply proves that Debian is not as secure as masternerdguy claimed.
Considering that QtWebKit 2.2 is the version Debian users are stuck now for the next two years without any update in sight, Debian can be considered extremely dangerous.

Comment: Re:Why Debian? (Score 3, Interesting) 191

by KugelKurt (#43635103) Attached to: Debian 7.0 ("Wheezy") Released

Well, debian does backport all relevant security bugfixes.

No. Wheezy’s QtWebKit is stuck at version 2.2. QtWebKit 2.3.1 is out since a while featuring many important bugfixes of which none were backported: http://patch-tracker.debian.org/package/qtwebkit/2.2.1-5

Debian stable focuses in being a bugfree distribution, not a distribution comprised only of bugfree software.

That's not what masternerdguy wrote.

if you campare it to, say, Fedora 17's or even Kubuntu 12.04's KDE 4.8, you'll realize how marvelously quirkless Debian's KDE is and why it pays to have stabler distributions.

And when you look at openSUSE, your whole argument falls apart: openSUSE is also relatively conservative but still manages to bring recent GNOME, KDE SC, and Xfce releases to its users. That's because the openSUSE maintainers decide on a case by case basis (eg. they waited a while to adopt systemd or Plymouth) instead of blindly picking only old software.

Comment: Re:Why Debian? (Score 5, Interesting) 191

by KugelKurt (#43634361) Attached to: Debian 7.0 ("Wheezy") Released

Debian places a strong emphasis on stability compared to most distros. Instead of being on the bleeding edge they are conservative and try to provide a stable, bug free, and secure system

That generalized claim is wrong. Three prominent examples:

The KDE Workspaces/Apps releases 4.8.4 are less stable than 4.10.2. The 4.8.x releases as well as 4.9.x reached End Of Life quite some time ago and don't receive any bugfix any longer. 4.10.2 contains many bugfixes upstream doesn't bother backporting to older releases (at least not 4.8.x which is two versions behind).

Same with GNOME. I could understand if the package maintainers decided to use 3.6 instead of 3.8 because 3.6 still includes the Fallback Mode but 3.4 is old and unmaintained.

Xfce 4.10 is already a year old and 4.12 should be around the corner. 4.8 just unmaintained and lacks many crucial bugfixes from 4.10.

Not being cutting edge means not blindly jumping towards the latest dot-0 release. It means sticking to software with long term support (eg. Mozilla's ESR versions which regularly receive bugfixes).
However skipping releases that contain many bugfixes just for the sake of shipping >1 year old software has nothing to do with providing stability or security. On the contrary.

Comment: Bruce Schneier facts (Score 5, Funny) 149

by KugelKurt (#43632263) Attached to: Bruce Schneier: Why Collecting More Data Doesn't Increase Safety

Bruce Schneier doesn't need to hide data with steganography - data hides from Bruce Schneier
Bruce Schneier knows who the Anonymous Coward is
Bruce Schneier can recite pi. Backwards.
Bruce Schneier can securely wipe any hard drive by shaking it like an etch-a-sketch.
Bruce Schneier knows Chuck Norris' private key.
Bruce Schneier can write a recursive program that proves the Riemann Hypothesis. In Malbolge.
Bruce Schneier can read captchas.
Hashes collide because they're swerving to avoid Bruce Schneier.
Bruce Schneier is the root of all certificates.
Bruce Schneier intercepts all your internal monologues by a man-in-the-middle attack.

http://www.schneierfacts.com/

Comment: Re:Typical Phoronix (Score 1) 147

by KugelKurt (#43615805) Attached to: AMD's Open Source Linux Driver Trounces NVIDIA's

I agree that the Phoronix benchmarks are mostly stupid but the site also covers lots of stories other publications don't. Michael reads through git commit logs, has subscriptions to mailing lists of exotic Linux-related projects, etc. and he reports what he finds.

Filtering out the benchmark stories is still easier than to subscribe to all those mailing lists and search for useful info.

I take Phoronix over OSNews any day...

Comment: Re:Open source FAIL (Score 1) 147

by KugelKurt (#43615683) Attached to: AMD's Open Source Linux Driver Trounces NVIDIA's

AMD releases hardware documentation but I have heard that especially for newer hardware it is not really complete

Due financial troubles, AMD had to fire many people, incl the majority of its Linux developers. Maybe that's why the docs are incomplete...

AMD allegedly has some code for the open source driver for power management and other stuff ready but they have always problems with legal review so they can't release it.

The Mesa wiki claims full power management support for almost all AMD GPUs. Can't verify that, though, as I'm currently on NVidia.

Comment: Re:In other words: (Score 1) 147

by KugelKurt (#43615571) Attached to: AMD's Open Source Linux Driver Trounces NVIDIA's

No shit. Fact is, Nvidia, with their closed-source binary-blob driver, STILL supports Linux better than ATI/AMD did/does. "Purity" is overrated, and variable, depending on who's doing defining it.

"Purity" means that the drivers work out of the box under all Linux distributions. The proprietary drivers must be re-installed every time a kernel upgrade is done which, depending on the Linux distribution, can be quite often.

Comment: Re:KDevelop 4.5 Released (Score 1) 97

by KugelKurt (#43586441) Attached to: KDevelop 4.5 Released

KDevelop3 was a good development environment. It supported many languages. KDevelop4, last I checked, supported C++ and C.

Syntax highlighting for a huge amount of languages is inherited from Kate/KWrite.
For everything beyond that KDevelop uses plugins. These are available:
https://projects.kde.org/projects/extragear/kdevelop/plugins
https://projects.kde.org/projects/playground/devtools/plugins/

You have all eternity to be cautious in when you're dead. -- Lois Platford

Working...