Slashdot Mirror

Thanks for taking the time to reply with such a reply response.

> Actually, I wrote chunks of that code, and work with the guys who wrote the rest, so I know *exactly* how the key is generated.

In that case perhaps you can clarify whether I'm misunderstanding or just didn't communicate clearly. My understanding is:

The symmetric AES key is generated ~once, then that key is encrypted based on the password or pattern.

It's generated once when the file system is first encrypted, yes.

By the time an end-user is using the device, the key has -already- been generated (or may have been).

May have been, but generally isn't. Usually the first time a device is booted is when the customer turns it on. Key generation and encryption happens at that point in time. This used to be a usability problem because dm-crypt didn't distinguish between in-use and unused blocks, which meant that when the user first turned on a device with on-by-default encryption, they immediately had to wait several minutes for the device to encrypt a whole bunch of empty space before they could use it. We fixed that so it only encrypts in-use blocks, and since there are very few of those on a new device, it's fast.

A related problem is the fact that the key is generated very early during first boot, when /dev/random's pool hasn't accumulated much entropy. So we do in fact end up leaning more heavily on the hardware RNG than I'd like.

Therefore the binary will not generate a new key, because it's already there in the footer.

Therefore even if the binary matches the source - it won't generate a key from /dev/urandom because the key is already there.

Therefore even if we knew that the binary matches the source, we don't know how the (pre-existing) key was generated.

In other words, everything about generating the key is conditional on there not already being a key. IF an OEM put a bad key in the footer, it would stay there.

I suppose, though I've never seen any evidence of OEMs shipping devices with keys in the footer at all.

If you want to fix this, though, there's a very easy way: Just factory-reset the device. That wipes all user data, including the crypto footer, so on next boot a new key will be generated. You can validate that this happened by looking at logcat.

On a somewhat different topic, it's nice to meet someone will similar interests. I don't really remember names on Slashdot, don't remember who said what. I don't know if you've noticed I post a lot on information security since that's what I've been doing for fifteen years.

I don't notice names so much, either. I post quite a bit on topics related to information security, and especially crypto. Though lately it seems like I post more corrections of erroneous assumptions/beliefs about Google than anything else. I should probably stop doing that.

Feel free to shoot me a message sometime if you ever care to - if you're looking for a job in the Dallas, Houston, Denver, or Cardfiff areas,

I'm quite happy at Google, but thanks.

or if you have an open source project that could use an extra hand.

Keyczar could use some assistance. https://github.com/google/keyc.... Theoretically I'm the lead maintainer, though I cringe to say that given how little time I put into it.

Have you played w/ the 'direct access' or 'file mapping'? I forget the term that is used by Emby. Instead of Emby processing and relaying the file, a link that is directly accessible by the client is offered. That sounds similar to how the NFS is working.

Through Googling, it's apparently called 'Direct Play'.

https://github.com/MediaBrowse...

Netflix and Amazon subscriptions + rip anything worth owning for me. Not bothering with OTA stuff at the moment.

In terms of the ripping/encoding, I use a combination of MakeMKV and Don Melton's transcoding scripts for my blu-rays and DVDs, since they allow me to preserve full surround sound and a high quality video image while encoding in a format that I can use across all of my devices without additional or on-the-fly transcoding (a la Plex) being necessary. I used to use Handbrake for the encoding, but I find that Don's scripts work much better for me and are a lot less fiddly in terms of their output. For now, I'm serving them up from a Mac Mini via iTunes Home Sharing to an Apple TV (and any of the Apple mobile devices in the house), since I found iTunes Home Sharing to be significantly more reliable and easier to manage and use than DLNA or other methods I've tried in the past, but I'm not averse to switching media servers in the future as my needs change, and since the files aren't DRM-encumbered, it'd be trivial for me to do so.

Otherwise, as far as the media hardware goes, I have my PS4, PS3, Xbox 360, Wii, Dreamcast, and Apple TV all in a closet and hooked up to an Onkyo A/V receiver (TX-NR609) that then goes to my TV. I use the Onkyo AVR's remote for both the AVR and the Apple TV (since the Apple TV can be trained to recognize other remotes in its Settings). Because I keep all of that equipment in the closet (i.e. not in line of sight for IR signals from remotes) I use a Next Generation Battery Transmitter Remote to transmit the IR signals via RF into the closet. Such an awesome product, since, unlike most IR transmitter/receiver devices, it effectively turns your IR remote into an RF remote, meaning that you don't have to have an ugly box sitting next to your TV to catch and retransmit the IR signal. Don't ask me how the thing works, since all I know is that you put the provided RF transmitter in place of a AAA or AA battery in your remote, and somehow it knows what to transmit to the receiving end. And the thing barely ever needs recharging, plus it even has a standard battery size you can buy at Walgreens for the user-replaceable, rechargeable battery it uses.

Sorry for shilling out, but in case it wasn't already obvious, I really do love the little thing, even if it does look like a UFO.

As for OTA TV, meh. My wife has already told me she'll need the Olympics whenever they come around next summer, but NBC just launched a channel on the Apple TV, so I figure we'll just use that, or else we'll stream it via AirPlay to the Apple TV from one of the Macs or iPads in the house.

Hey don't knock those places! I live in Manila and my colleague lives in East Siberia. We joke that I work for rice in a sweat-shop while he shivers for porridge in a gulag . . . .

. . . in truth we live in nice fully paid off houses, and have decent lifestyles. Work life is good too. Because we don't have the overhead of maintaining traditional offices we can do a company meet-up once per year, either in the mountains of Siberia or the beaches, close to Manila

Also since we recruit based on skill, not location, and our operating costs are low, we are in demand. We can work on the kinds of projects that closely match our personal interests. And we spend a good portion of our time doing open source and other community work. Fuck working for the man in San Francisco! :P

Hey don't knock these places. I live in Manila and my colleague lives in Siberia (never know where you'll find a good coder these days). We joke that I work in a sweat-shop for rice while my colleague shivers for porridge in Siberia . . .

. . . In truth we live in nice fully-paid-off houses. Because we don't pay for a traditional office, we can meet once per year in the mountains nearby to my Omsk, Siberia or at the beaches nearby to Manila.

We're our own bosses, and work on the kinds of projects that match our interests. And we spend a good portion of our time working on open source projects and doing other community service work. Fuck working for the man! :P

Rust already has a whole lot of ARM support, not all of it official. Lots of tentative embedded work being done with Rust at the moment. Here's a more updated version of the page you linked with much more detailed support information: https://github.com/alexcrichto...

What you say was true of early releases of Rust. But they removed all traces of any kind of runtime for exactly this reason. It was a breaking change but it happened quite a long time before the 1.0 release. Here's the documentation for the change: https://github.com/rust-lang/r...

Here's a blog entry on using Rust for embedded. It dates from February and uses 1.0-alpha but of course 1.0 is out now:

http://spin.atomicobject.com/2...

In these days of LLVM, the portability story is good, even relative to C. No C portability gotchas.

* https://github.com/rust-lang/r...

Building from Source

Make sure you have installed the dependencies:

* g++ 4.7 or clang++ 3.x

Notes:

Since the Rust compiler is written in Rust, it must be built by a precompiled "snapshot" version of itself (made in an earlier state of development). As such, source builds require a connection to the Internet, to fetch snapshots, and an OS that can execute the available snapshot binaries.

#3 is spot on. We should all be switching to C+=!

I don't have a clear picture of what your organization will be doing, but your comment about "managing that data (=measurements + reports)" made me wonder if you will want to use the IPython notebook.

http://ipython.org/notebook.html

When people work to analyze measurements (make plots, etc. and make decisions) and then write new code, if they do so step by step in an IPython Notebook, and then other scientists can peer-review the notebooks, this might be even more useful to you than version control. It would give you a history of how the analysis was done and why the reports were made the way they were.

In my job, I do some analysis and work in databases, and I seriously want to start using IPython Notebook as my SQL client, and save my notebooks for later review. It would document the queries I ran and the results I got, so later I could find the queries again to re-run them, and see how they worked out before re-running them.

https://github.com/catherinedevlin/ipython-sql

Corporations are extremely paranoid about not offending everyone ever -- well, any liberals ever, anyway; Google came out in support of gay marriage. ANYway...

If you want to read an account of a project handling offense-seekers in exactly the right way, read this: https://github.com/opal/opal/i...

That project tells the vigilante thought police exactly where they can shove it :)

Git has what are known as hooks. Things that are run whenever you do something, like committing a file or trying to push to somewhere. It's how you get E-Mail notifications. These aren't anything new, so I think subversion offers something similar. The large difference is in what these let the maintainer do when it comes to integration.

Take a look at this page: https://github.com/OpenMW/open...
Click on the green check marks or red 'X's. This is something github has integrated into their system, but there are other options as well. The advantage is that developers could add a new feature, or fix a bug without committing directly to the master branch. The primary maintainer can easily view if the patches compile cleanly, and if the patch is acceptable or not.

This is a consequence of how easy it is to branch and merge using git. I know subversion has branches, but they can be harder to deal with and it's hard to spin up a branch for every feature and patch. Combine that with git's local storage and swapping/reverting branches is a sna

I recommend git. It's fast, it's easy, it's decentralized so code cowboy can't burn your project. And there are gui's for it for windows as well: https://git-scm.com/download/g...

Since IT has set the policy to a Windows operating system only server, you've had your hands tied as to what technology you can use. Fortunately for you, you can run Docker on Windows: https://docs.docker.com/instal..., which means you'll have access to tens of thousands docker containers for various purposes such as gitlab: https://github.com/sameersbn/d...

For basic test on the code (Syntax errors, pytest/nose/or alike with coverage (of tests), check coding style) it sounds like what you're looking for might be jenkins: https://en.wikipedia.org/wiki/... and you can create a docker container for running jenkins on your server: https://github.com/jenkinsci/d... or https://wiki.jenkins-ci.org/di...

I recommend git. It's fast, it's easy, it's decentralized so code cowboy can't burn your project. And there are gui's for it for windows as well: https://git-scm.com/download/g...

Since IT has set the policy to a Windows operating system only server, you've had your hands tied as to what technology you can use. Fortunately for you, you can run Docker on Windows: https://docs.docker.com/instal..., which means you'll have access to tens of thousands docker containers for various purposes such as gitlab: https://github.com/sameersbn/d...

For basic test on the code (Syntax errors, pytest/nose/or alike with coverage (of tests), check coding style) it sounds like what you're looking for might be jenkins: https://en.wikipedia.org/wiki/... and you can create a docker container for running jenkins on your server: https://github.com/jenkinsci/d... or https://wiki.jenkins-ci.org/di...

The only way to get around a bunch of these major attacks is by requesting new IPs for your servers and trying to mask those from being leaked.

If you use Akamai, you can turn on the G2O feature and configure your servers to check for it. Apache, Nginx, F5 load-balancers, IIS, and Varnish all have extensions to support it (though the last one is not, unfortunately, open-sourced — for purely bureaucratic reasons, I might add).

Then, even if the enemies find your origin, all their hits will cost you is computing a digest of the requested URI and issuing a 403 or whatever — no file-lookups, no database-lookups, very little bandwidth. I suppose, your server can still be punished, but it certainly raises the bar quite a bit for any attacker.

You'd need to ask the Pale Moon maintainer on his forum -- this is the only person who will "know for sure". The odds are 50/50, as unnecessary as that is to say. But here's why I say "you need to ask him":

The Pale Moon author has a tendency to backport changes from present-day Firefox *extremely* selectively. I read the PM Release Notes, and most things he isn't backporting at all. For example, for some reason he chose not to backport improved CSP specifications (Mozilla has long since implemented these) which in turn broke usability for at least one major site: Dropbox. Read the thread (see screenshots) for how this manifested itself -- end-users literally had no clue what was going on despite all troubleshooting available. Note that the forum post I linked to is from November 2014. It wasn't until Pale Moon 25.6.0, released August 27th 2015 -- 9 months after the report -- that the issue was fixed.

This is one of the biggest problems there is with Pale Moon -- it's continually behind Firefox in every way. Pale Moon is proclaimed on the Internet as "Firefox without the Dumb Stupid UI (Australis)", but it isn't -- it's literally "a fork of Firefox 24.9" that is in many regards (not all but many) stuck with the "technology" of Firefox 24.9. If you read the PM Release Notes slowly you'll begin to notice what I describe.

Similarly this is why add-ons (not plugins) that are for Firefox 25 or later won't install on Pale Moon. This sounds trivial until you realise how many Firefox add-ons require something more recent. A good example is the BTTV add-on for Twitch -- you're instead forced to install the UserScript version (missing features + ridiculously slow), which requires installation of Greasemonkey, which has its own weird problem (and that problem makes me want to never install Greasemonkey ever again, particularly due to this response from a maintainer (who's wrong in his statement -- the GM folks are who maintain the addons.mozilla.org entry for their software! It isn't some random end-user or Mozilla themselves!)). Instead, to get GM 1.5.1 installed, you gotta know exactly what URL to go to.

There are also several other commonplace behaviours on the web now that don't work in Pale Moon. One that still bugs me to no end is animated GIF playback stopping mid-way until you do something in the UI (like try to drag/move the GIF or something) which seems to fix it for that particular session. Odds are this is some weird Firefox bug that the PM author never backported (or possibly introduced himself through some other change, I have no idea).

Despite all the above and my overall negative tone, I am still an active Pale Moon user (it's my primary browser). I've tried twice to switch back to Firefox but there are still several things in Pale Moon which there are not replacements for in Firefox (i.e. all the UI tweaking and "classic" add-ons for present-day Firefox still can't get you the exact same UI as Pale Moon or older Firefox).

It's really too bad Mozilla turned their UI into an ugly mess.

You'd need to ask the Pale Moon maintainer on his forum -- this is the only person who will "know for sure". The odds are 50/50, as unnecessary as that is to say. But here's why I say "you need to ask him":

The Pale Moon author has a tendency to backport changes from present-day Firefox *extremely* selectively. I read the PM Release Notes, and most things he isn't backporting at all. For example, for some reason he chose not to backport improved CSP specifications (Mozilla has long since implemented these) which in turn broke usability for at least one major site: Dropbox. Read the thread (see screenshots) for how this manifested itself -- end-users literally had no clue what was going on despite all troubleshooting available. Note that the forum post I linked to is from November 2014. It wasn't until Pale Moon 25.6.0, released August 27th 2015 -- 9 months after the report -- that the issue was fixed.

This is one of the biggest problems there is with Pale Moon -- it's continually behind Firefox in every way. Pale Moon is proclaimed on the Internet as "Firefox without the Dumb Stupid UI (Australis)", but it isn't -- it's literally "a fork of Firefox 24.9" that is in many regards (not all but many) stuck with the "technology" of Firefox 24.9. If you read the PM Release Notes slowly you'll begin to notice what I describe.

Similarly this is why add-ons (not plugins) that are for Firefox 25 or later won't install on Pale Moon. This sounds trivial until you realise how many Firefox add-ons require something more recent. A good example is the BTTV add-on for Twitch -- you're instead forced to install the UserScript version (missing features + ridiculously slow), which requires installation of Greasemonkey, which has its own weird problem (and that problem makes me want to never install Greasemonkey ever again, particularly due to this response from a maintainer (who's wrong in his statement -- the GM folks are who maintain the addons.mozilla.org entry for their software! It isn't some random end-user or Mozilla themselves!)). Instead, to get GM 1.5.1 installed, you gotta know exactly what URL to go to.

There are also several other commonplace behaviours on the web now that don't work in Pale Moon. One that still bugs me to no end is animated GIF playback stopping mid-way until you do something in the UI (like try to drag/move the GIF or something) which seems to fix it for that particular session. Odds are this is some weird Firefox bug that the PM author never backported (or possibly introduced himself through some other change, I have no idea).

Despite all the above and my overall negative tone, I am still an active Pale Moon user (it's my primary browser). I've tried twice to switch back to Firefox but there are still several things in Pale Moon which there are not replacements for in Firefox (i.e. all the UI tweaking and "classic" add-ons for present-day Firefox still can't get you the exact same UI as Pale Moon or older Firefox).

It's really too bad Mozilla turned their UI into an ugly mess.

Does that mean I should remove https://github.com/letsgetrand... from my codebase now?

Pale Moon is trademarked, https://github.com/MoonchildPr... If you fork it, you have to change the name, just like the original Firefox, and also Truecrypt.

A 72mhz ARMv6 from STmicro

Why do you keep bringing up ARMv6? ARMv6 is a CPU architecture and uses complex caches, TLB units and a virtual MMU. I don't know of anyone trying to use these for flight controllers. The Cortex-M architecture, which is the basis for all of the common ARM based flight controllers (OpenFlight, BrainFPV, Naze, etc.), is not ARMv6. I don't think you understand what you're talking about.

Floating point isn't actually a good thing in flight controllers, fixed point is preferred..

PID controllers using floating point are available now in Cleanflight. Read about them here. Other code bases, such as BrainFPV and OpenFlight use the floating point units as well. Fixed point is preferred only by fanbois using MCUs without floating point units.

Super scalers make execution timing unpredictable

No, they don't. Out-of-order pipelines and elaborate branch predictors do that. Cortex MCU pipeline is in-order and the branch predictor is designed by ARM to be conservative and not cause lengthy pipeline stalls so the Cortex line remains suitable for real-time MCU applications. The timing characteristics of every instruction in every mode of Cortex devices is well known. This `problem' of unpredictable timing with ARM MCUs is a fiction inside your head.

Mission creep. Your init system now has a logon shell, and handles DHCPD tasks. Why is init handling logons and dhcpds?

...Because it should. When the system's done initializing, I want a logon shell available. If something fails, I want a shell as a fallback. / As for DHCP, it's about time.

Once upon a time, if something failed, you booted in single-user mode. And you got a shell, not the "One True and Non-Replaceable Shell". Systemd takes away the flexibility to configure things optimally for your specific needs.

Binary log files (PUKE)

...which are really the first step towards a proper database holding log files, which I'd also love to see someday.

Fine. Although ELK seems to be the practical popular choice for that and it doesn't require total ownership of the kernel. If systemd offered plug-in loggers and one of them happened to be a binary log database, that would be OK. But systemd's designers apparently lack the skills to make a simple and flexible system.

Extremely poor documentation

Can't comment. I haven't had much to do with anything beyond the man pages.

Rushed to market with little objective testing

What, exactly, is "objective" testing for a completely different software architecture? The software managers I work with have been debating the essence of that question for the past few decades. That said, it's been out for five years. It is in active use, and working well enough for all normal purposes.

Well, in this case, it's that there was no "trial mode" for people to gradually evaluate, find bugs in, and accept/reject. Instead all of the sudden the familiar, functional (if imperfect) systems were all gone and systemd ruled everything. Since systemd isn't as flexible as what it replaced, you couldn't fall back to the old stuff in cases where it failed to satisfy or as an emergency solution.

Bugs pile up with no resolution in sight, they just keep going for another dameon.

...So it's like any other software project? New development is usually the priority once something works well enough. I'll also note that within the last month, 60 bug reports have been closed on systemd's github tracker, and only 44 opened. The oldest bug is from June.

OK. But the rate at which you "close bugs" is a meaningless metric. Were the bugs closed because repairs had been made or were they simply marked "WONTFIX"?

And then when you ask a fan of it why they like it, the response is "My system boots faster."

How about instead you tell me why systemd is so much better then everything we had before? And no cheating you dont reboot servers typically so boot time is meaningless.

No, you don't reboot servers, so your boot time is meaningless, but you have no justification to project that onto me. I actually work on a system with a requirement to cold-start the entire site in 15 minutes, from turning on the circuit breaker to being 100% ready for operation. My boot time is very meaningful.

If your system is so fragile that a single server being down is that critical, maybe you need to re-evaluate your architecture. For those of us to whom such things are essential, we have clusters, failovers, and other HA constructs so that the loss of a single machine doesn't hold the whole operation prisoner.

Yes, faster boot times are nice, but even at its worst, a Linux system boots significantly faster than Windows. You don't have the machine being thrashed by massive software updates and disk-burning virus checks on reboot. I like quick boots as well. But not enough to gain it at the expense of overall boot-time repair functions. And systemd is a royal bitch to run in its "repair mode".

I concur with the AC above me who justifies most of those, but I'll add my own opinions as well.

Mission creep. Your init system now has a logon shell, and handles DHCPD tasks. Why is init handling logons and dhcpds?

...Because it should. When the system's done initializing, I want a logon shell available. If something fails, I want a shell as a fallback. I also have a particular application where I need authentication before allowing the system to begin its automatic operations, but after certain services have started. Maybe this will help that, but I haven't explored the design enough to know.

As for DHCP, it's about time. DHCP has been a part of initrd and init scripts for many years, often with lots of implementation-specific bugs. It stems from Unix's history as an OS predating networks, and now DHCP is an add-on to most systems, where it was designed to be a central configuration mechanism (including options for pushing NTP, IRC, LDAP, and even time zone information from the server). By coincidence, a lot of my academic research and professional work involves centralized self-configuring systems, so seeing hope for DHCP is actually a very good thing, by my standards. I'd love to see computers stop duplicating configuration settings.

Binary log files (PUKE)

...which are really the first step towards a proper database holding log files, which I'd also love to see someday. Windows has its event service, which uses binary logs to fairly good effect, though it can get very slow for sorting and searching. A proper database is much better for that sort of thing, but I digress. As I understand, the binary format is trying to avoid being a full database, while still supporting filtering. It also seems to do a fairly decent job of separating user and system logs, and would allow filtering a single service or seeing the whole system's logs, without the current hassle of dealing with applications that don't properly declare who they are when logging.

Extremely poor documentation

This seems pretty subjective to me, so you'll need to do better for a complaint. When I've had to look up systemd documentation, it's been no worse (or much better) than any other GNU/Linux documentation.

Rushed to market with little objective testing

What, exactly, is "objective" testing for a completely different software architecture? The software managers I work with have been debating the essence of that question for the past few decades. That said, it's been out for five years. It is in active use, and working well enough for all normal purposes.

Bugs pile up with no resolution in sight, they just keep going for another dameon.

...So it's like any other software project? New development is usually the priority once something works well enough. I'll also note that within the last month, 60 bug reports have been closed on systemd's github tracker, and only 44 opened. The oldest bug is from June.

And then when you ask a fan of it why they like it, the response is "My system boots faster."

How about instead you tell me why systemd is so much better then everything we had before? And no cheating you dont reboot servers typically so boot time is meaningless.

No, you don't reboot servers, so your boot time is meaningless, but you have no justification to project that onto me. I actually work on a system with a requirement to cold-start the entire site in 15 minutes, from turning on the circuit breaker to being 100% ready for operation. My boot time is very meaningful.

Here's something for all you CI/CD volkswagon geeks out there.

https://github.com/auchenberg/...

Thank me later

perl6 is a complete overhall of the language. It isn't merely perl5++. They are similar, but they aren't compatible, which is why the perl5 interpreter will be maintained in parallel [so stated]. The perl6 interpreter [written in perl6, BTW], will be able to run perl5 code (e.g. it hooks on .pm or .pm6, etc.) and run a mix of the two. It will also be able to run python code, ruby, javascript, etc. if one wants to add the front end. So, in some ways, it's like .NET. You can run a program comprised of perl6, perl5, python, C, etc. all coexisting in one program.

Speaking of which:

- Inline Perl5 : hooks into the (still maintained) perl5 interpreter to run Perl5 code down to the latest bugs/weirdness.
- v5: (ab)uses the ultra flexible grammar and meta programming of Perl6 ('s interpreter - like Raduko) so that it can interpret Perl5 ('s language syntax).

perl6 is a complete overhall of the language. It isn't merely perl5++. They are similar, but they aren't compatible, which is why the perl5 interpreter will be maintained in parallel [so stated]. The perl6 interpreter [written in perl6, BTW], will be able to run perl5 code (e.g. it hooks on .pm or .pm6, etc.) and run a mix of the two. It will also be able to run python code, ruby, javascript, etc. if one wants to add the front end. So, in some ways, it's like .NET. You can run a program comprised of perl6, perl5, python, C, etc. all coexisting in one program.

Speaking of which:

- Inline Perl5 : hooks into the (still maintained) perl5 interpreter to run Perl5 code down to the latest bugs/weirdness.
- v5: (ab)uses the ultra flexible grammar and meta programming of Perl6 ('s interpreter - like Raduko) so that it can interpret Perl5 ('s language syntax).

One of the goal (longer term, so don't expect it fully working with this preview release. Maybe neither with the final at christmas) is to allow other language being accessible to Perl6.

To quote one of the links:

But Larry was especially proud of Perl's ability to drop down into other languages. ("This is why we say all languages are really just dialects of Perl 6...") Python and Lua are even included in the Inline library. And Larry pointed out a new library that adds Ruby-esque rules, so exclamation points and question marks can be used at the end of identifiers. ("If that's what it takes to make Ruby programmers happy...")

Example:
- Inline-Perl5/ - Wraps a Perl5 interpreter as a module in Perl6 with data passing. Means perl5 and perl6 mixed *TODAY*. Works with compatibility down to all perl5's bugs/weirdness. Might still suffer limitation when passing some weird constructs around, and some speed limitation.
- v5 - abuse Perl6's ultra flexible grammar and meta programming to teach perl6 (...'s interpreters - like Raduko) to understand perl5 (...'s syntax). Should allow perfect passing of weird constructs, without any speed limitation. But is a new implementation of perl5 interpreter so might break some legacy code which unknowingly relied on bugs of the actual perl5 interpreter.

These 2 modules exist already and are used in the wild.

One of the goal (longer term, so don't expect it fully working with this preview release. Maybe neither with the final at christmas) is to allow other language being accessible to Perl6.

To quote one of the links:

But Larry was especially proud of Perl's ability to drop down into other languages. ("This is why we say all languages are really just dialects of Perl 6...") Python and Lua are even included in the Inline library. And Larry pointed out a new library that adds Ruby-esque rules, so exclamation points and question marks can be used at the end of identifiers. ("If that's what it takes to make Ruby programmers happy...")

Example:
- Inline-Perl5/ - Wraps a Perl5 interpreter as a module in Perl6 with data passing. Means perl5 and perl6 mixed *TODAY*. Works with compatibility down to all perl5's bugs/weirdness. Might still suffer limitation when passing some weird constructs around, and some speed limitation.
- v5 - abuse Perl6's ultra flexible grammar and meta programming to teach perl6 (...'s interpreters - like Raduko) to understand perl5 (...'s syntax). Should allow perfect passing of weird constructs, without any speed limitation. But is a new implementation of perl5 interpreter so might break some legacy code which unknowingly relied on bugs of the actual perl5 interpreter.

These 2 modules exist already and are used in the wild.

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

that happens also after the reassignm. (not talking just about dr. Money) not accepting reality is the problem here

This douche jumped in to the convo earlier putting words in people mouths

That's because trans people are treated like shit. Constantly.

Which Elia responds

maybe that's just a (legit) opinion, I still fail to see how that kind of invasive surgery on kids can b cherished

anyway it's months that in Italy school after school sneaks genderism lessons in without parents consent. Not cool

I 100% agree with you transpersons need access to treatment, but gender reassignment surgery is dangerous and I think someone should have to at least be a consenting adult before they make that decision. It's a huge decision that children shouldn't just make on a whim as it's a lifelong commitment. On top of that, the suicide rate of people that HAVE had gender reassignment doesn't look that much better to me than those that haven't had it. On the flip side, the ones that survive are more satisfied with their lives.

That said, Elia's issue was with Italian schools using some controversial teaching methods and encouraging children to have reassignment surgery, which was all done without parents knowing about it.

Which apparently made him a transphobic bigot. His opinion, IMHO, is not that hateful or off the wall.

This krainboltgreene guy though https://twitter.com/krainboltg..., I started looking at when I was trying to understand what was going on. Guy is a major asshole troll, he uses the same name and image on several platforms (G+, Twitter, GitHub) and is consonantly starting shit with people.

He shows up in the branching issue a few times to basically pick fights with anyone that's arguing against accepting the suggested CoC.

https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...
https://github.com/opal/opal/i...

The conversation just continues to degrade with him. He spends a lot of time accusing people of not contributing to the Opal project, but he doesn't contribute either so I'm not sure why that should matter. One of his main projects seems to be a library that analyzes twitter conversations and determines how toxic it is https://github.com/socialkardi...

I almost think this guy is a parody account, because he fits exactly the type of person someone would say is an "SJW". White guy, acts like an asshole to other white guys, assumes anyone disagreeing with him is a white guy, obsessed with gender politics and incredibly quick to accuse people of being misogynists,

A good Samaritan did the heaving lifting... https://gist.github.com/atcuno...

RAID5 has n data disks plus one dedicated parity-only disk; ZFS distributes all data and all parity across all disks

RAID-5 also spreads parity among all component disks. Each stripe, the parity disk is switched. This is done to achieve higher throughput on reads, as without it, one disk would always sit idle for read workloads.

ZFS updates metadata before data

Actually, ZFS updates metadata together with user data, but the trick is that the update is never performed in place. So what happens is that we write user data along with nearly all the metadata needed to access it. Then, once everything has finished writing (and has been sync'ed to stable storage), we update the root block pointers to point to the new metadata tree and again, sync those. In this respect ZFS is much more like an ACID-compliant database than just a conventional filesystem.

I think you need to do a little more research into SJW history.

Just look at what happened to the Opal community to see why people have a major beef with "SJWs"

https://github.com/opal/opal/i...

Go back and read the twitter conversation that shit storm was started from

https://twitter.com/elia/statu...

He had an opinion on gender reassignment surgery being done on kids, that's not transphobic, but a couple SJW's started calling for his head. At first they were told to stuff it, so they went to twitter to drum up a mob

https://twitter.com/CoralineAd...

Which included attacking anyone on the project that disagree with them

https://twitter.com/CoralineAd...

Ultimately this Code of Conduct was merged into the project. Now check out who it was that wrote that CoC, that's right the same person that started the issue is the person that wrote the CoC that got shoehorned into the project of someone's opinion on kids having gender reassignment surgery.

What's worse is this line:

This code of conduct applies both within project spaces and in public spaces when an individual is representing the project or its community.

was added after the fact because by the original CoC, Elia Schito didn't do anything wrong.

Oh c'mon

https://github.com/exaexa/code...

https://github.com/chrisaljoud...
faster, more efficient, and doesnt have a guilty conscience about blocking ALL the ads.

while you're at it,
http://winhelp2002.mvps.org/ho...

block advertisers by null routing them.

Can anyone explain to me why Millennials are so gung-ho about "codes of conduct", and why they're so hypocritical about them?

To see what I'm talking about, read these comments about the creation of an open source code of conduct template.

It's unbelievable. A number of the participants in that discussion claim to be against discrimination, yet they're actively pushing for it to be deemed completely acceptable to discriminate against people who happened to have been born with white skin and a penis!

To many Millennials, a "code of conduct" isn't something to help keep social interaction civil. It's actually a weapon that they use against those whom they dislike.

I'm not sure about that. I have Keynote and PowerPoint installed (and OpenOffice and LibreOffice). For lectures, I still prefer Beamer (including syntax highlighted code snippets in anything else is painful), but Keynote has nothing like the SmartArt feature of PowerPoint, which makes drawing figures a lot easier. It also doesn't have as useful guides and makes it harder to produce useful templates. These days, I generally use PowerPoint for short presentations (though for some things I find the results of Sozi much more effective than anything else for a lot of things. It's still very new and unpolished though).

Basically, a developer for Opal made an off-color comment on Twitter, in his spare time. Because he had "Developer for Opal" on his Twitter profile, users that were offended made a bug report about it :

https://github.com/opal/opal/i...

From there after a long string of drama, Github introduced a Code of Conduct, but it contained language such as "We will not act on Reverse Racism" (aka, non-priviledge races making harassing/defaming comments about whites) and other bigoted "progressive" ideals.

They were massively called out on it, and it created a schism in the community between people who believe things like "Can't be sexist towards males/can't be racist towards whites" and people who call out such idealogies as Bigoted.

It ended with the CoC going into limbo :

https://github.com/todogroup/o...

All relevant issues opened about Bigoted language in the CoC are linked in that issue. You can basically thank the people behind Contributor_Convenant that are trying to poison the Open Source community at large with the same trite that happened to the Atheism scene in 2010-2011 and to Occupy Wallstreet.

Apparently, the words of Bill and Ted aren't enough anymore : Be excellent to each other.

Basically, a developer for Opal made an off-color comment on Twitter, in his spare time. Because he had "Developer for Opal" on his Twitter profile, users that were offended made a bug report about it :

https://github.com/opal/opal/i...

From there after a long string of drama, Github introduced a Code of Conduct, but it contained language such as "We will not act on Reverse Racism" (aka, non-priviledge races making harassing/defaming comments about whites) and other bigoted "progressive" ideals.

They were massively called out on it, and it created a schism in the community between people who believe things like "Can't be sexist towards males/can't be racist towards whites" and people who call out such idealogies as Bigoted.

It ended with the CoC going into limbo :

https://github.com/todogroup/o...

All relevant issues opened about Bigoted language in the CoC are linked in that issue. You can basically thank the people behind Contributor_Convenant that are trying to poison the Open Source community at large with the same trite that happened to the Atheism scene in 2010-2011 and to Occupy Wallstreet.

Apparently, the words of Bill and Ted aren't enough anymore : Be excellent to each other.

From the FLIF website:

FLIF is based on MANIAC compression. MANIAC (Meta-Adaptive Near-zero Integer Arithmetic Coding) is an algorithm for entropy coding developed by Jon Sneyers and Pieter Wuille.

That Pieter Wuille is known as "sipa" on GitHub; you can see his nascent FLIF work here. Pieter is one of the major contributors to the Bitcoin project, and he is a co-founder or early employee of Blockstream.

From the FLIF website:

FLIF is based on MANIAC compression. MANIAC (Meta-Adaptive Near-zero Integer Arithmetic Coding) is an algorithm for entropy coding developed by Jon Sneyers and Pieter Wuille.

That Pieter Wuille is known as "sipa" on GitHub; you can see his nascent FLIF work here. Pieter is one of the major contributors to the Bitcoin project, and he is a co-founder or early employee of Blockstream.

"Github does not charge to host projects." - Wrong. A number of github services require a paid account. (Primarily private repositories...)

https://github.com/pricing

Github does not charge to host projects. Github therefore must use one of these three methods to make a profit if they don't start charging for use.

It does: https://github.com/pricing

Only public projects are free. And this is IMO a fair model. If you want to hide your code from the public, it means in most cases that your software is closed source. And that usually means you make money with it, where its just fair to give github a small part of it, these are basic economic "supply chain" rules. Conversely, if your code is public, it most likely is open source as well. There is some public content on github which is not open source licensed, but most of it is.

And about learning git, it has a steep learning curve, but once you know it, its real fun. CVS isn't distributed, I really like git for its speed and features like git blame. Sadly many people think git == github.

If I want to hide my projects from the public I'm not going to put them on someone else's server.

Github does not charge to host projects. Github therefore must use one of these three methods to make a profit if they don't start charging for use.

It does: https://github.com/pricing

Only public projects are free. And this is IMO a fair model. If you want to hide your code from the public, it means in most cases that your software is closed source. And that usually means you make money with it, where its just fair to give github a small part of it, these are basic economic "supply chain" rules. Conversely, if your code is public, it most likely is open source as well. There is some public content on github which is not open source licensed, but most of it is.

And about learning git, it has a steep learning curve, but once you know it, its real fun. CVS isn't distributed, I really like git for its speed and features like git blame. Sadly many people think git == github.

Github does not charge to host projects.

GitHub's page listing their charges