Less secure, yes, but insecure? I think not. Properly audited services should be fine being opened up. While you shouldn't let something on the open internet on a secure box until it has reached a certain level of security, something like apache 1.x or ftpd should be fine. There are only so many lines of code there, they've had time, they shouldn't have any holes in them. Or the openbsd approach of servers running in their own jail is enough. There is no reason a computer should not be secure opened up to the internet and running services there. Part of the reason they aren't is sloppy coding, part is an emphasis on making things featureful at the expense of security. Which is exactly the reason why MS ships so insecurely - features sell, security doesn't, or at least didn't until recently.
No, it's not windows-only, but it's windows-oriented. It's based pretty much completely around the windows api, and I can't imagine it will perform as well on anything but windows. It will certainly be significantly harder to implement on non-windows system. It is very much a thin wrapper, and deserves criticism. If it's just a question of bundling a dll, no need to worry about overwriting other people's installs, then there's no significant barrier to using Wx, which is a Good Thing, but still, you underestimate the power of the default. The default gui will be the most used one since it isn't completely braindead, and so it deserves criticism for being a thin wrapper around the win32 api rather than a nice to port generic api.
Yes, but with the default MS runtime that's the only way to get GUI. So that's what the majority of apps will use. Wheras with java, the gui shipped is a crossplatform one (which sucks, but that's another argument). Yes Wx# exists, but how many app makers are going to bother even looking for something like that when they have a toolkit there and don't care it's windows-only.
Yes, it does. A huge advantage, with any algorithm. Theoretically the advantage is still not enough with modern algorithms (a million years versus 10^24, or something on that scale). But many attacks only reduce the amount of bruteforce required, not eliminate it entirely, so their advantage almost certainly does tell on at least some modern (ish, anyway) algorithms.
That's crap. If you want to, you know, actually contribute to the internet, you need to have ports open, so you'll need holes in your firewall. If you don't, it would take a really braindead OS to be vulnerable without you having told it to run services, and a really idiotic person to turn on services they didn't want public, in which case they probably wouldn't manage to turn them on. (Personally I think everyone who stays behind a firewall should be taken out and shot. That ought to sort the IPv4 address shortage.)
Not on kde.org, on that independent windowmanager listing site. It didn't win, but kde was well above gnome. And have you bothered to actually look at Novell's offerings? Because I think you'll find they are suse and ship with KDE as the primary desktop, although gnome is also supported. (Interestingly, kde distros tend to support gnome but gnome ones do all they can to avoid including kde. I'm biased but the obvious explanation is that they're afraid to give their users the choice). Even if you look at number of users on primarily kde distros compared to those on gnome distros, I think you'll find they come out ahead.
This isn't funny, it's sad. People have been so brainwashed by MS that they believe it's normal for machines to not be safe if they have a direct internet connection.
If there was such a thread (and I am subscribed to kde-multimedia and didn't see it) I can't imagine it being about anything other than the practical problems mixing C and C++ causes. The primary, in fact pretty much only, reason I saw for not adopting gstreamer was its lack of stability, which is still a concern.
Anyway, the proof of the pudding is in what they actually do, and kde looks to be about to adopt gstreamer. Even if they don't, they have adopted plenty of gnome technologies e.g. DBUS, either because they are superior or simply for integration. Wheras I can't find a single case where gnome has adopted a kde technology. Gnome went beyond mere discussion and wrote esd from scratch because they didn't want to use arts.
The stuff is coming from the users who see it. I have actually tried my family on both, and those who notice prefer kde. As do I, because it looks far nicer and is much better integrated. Look at Linux Format's review of gnome 2.8 - they give it a high rating and the reviewer talks about having overtaken kde, yet if you read the whole thing all of the improvements he lists are things which have been in kde from 3.2 or earlier. And yet gnome is the only desktop which publicly recieves corporate support.
The APIs may get more attention but it has paid off. Gnome has three inconsistent apis to use for your widgets, and a lot of cruft and a not insignificant performance hit that comes from them. KDE has only one Right Way to do anything, but the APIs that exist are clean and very useable. Remember the mozilla port in 48 hours? And you can do more with them. So people build the apps, and they are good. Things like K3b; an independent project that works very well, looks good and is integrated properly.
Yeah, but if it's the difference between having to swap parts of the libs and only having to swap the apps, that's going to make a big difference. Not that I'm saying 3.1 doesn't need more power than 1.x, it may well do, but at that little ram you really need to compare on the same machine.
It's like running in treacle, but it's doable, even without much stripping down (I left services and things at their defaults). Be prepared to wait a while for things to load, and make sure you don't try and use more than one app at once.
I think he probably wanted them to rewrite things to be crossplatform. Java isn't a thin wrapper around the Solaris API, it's a completely redone API which uses Solaris as just one of many backends. It's not noticeably more Solaris-based than win32-based or anything else-based. By contrast.net is clearly completely based around windows, making it harder to port to other platforms, and arguably harder to use.
Seriously. If you already have kde loaded it will perform better than anything else. And it already has a database component, currently a separate project but it's there. And it works fine.
You forget something: the NSA has more computing power than the rest of the world. (Yes I'm exaggerating, but seriously, they have a helluva lot). This gives them a huge advantage in breaking encryption.
They want an algorithm that they can break but no-one else can. Since anyone can make a mathematical breakthrough, but they have far more computing power than anyone else, the simplest way to do this is to make sure it requires their level of computing power to break, but can be broken by them (CF DES). Nowadays we think good algorithms would not be breakable by even them with a key length easy enough to use on personal computers. So it's in their interests to promote an under-strength algorithm, but one that's not too weak, just under-strength in a very particular way. This is very different, but not impossible, and I wouldn't say that it's not what they're doing.
I think it's mostly pragmatism. KDE doesn't make boneheaded decisions out of zealotry or theoretical merits. And KDE people seem not to get as attached to their bad decisions as GNOME people, if they made a mistake they will fix it.
That's a 20% upgrade there, equivalent to probably 100mb on a modern system, and if it makes the difference between all the kde libs being able to fit into core and not, then it could easily give a 2x speedup. Anyway, there are many many more features in 3.x, but you at least get more "value for money" in terms of features/performance. It's being optimized but they are also adding more features.
Or there was 2.5. Yes 2.4 didn't have the latest drivers, but that's the price of being stable. A stable tree should be stable first and anything else second.
Gentoo is a community thing that is hardly employing anyone, but the things they do maintain for themselves are often good and distro-independent-ish. I use gentoo kernels on slackware systems. Suse may not be doing that much but they're now open sourcing all that they do, remember if you're considering the whole company you should look at all the ximian stuff too.
Fedora seems to have lost its focus, it's supposed to be community-oriented but comes out as just looking like red hat's beta that you're testing for them. Not saying it is, bu that's how it appears.
AMD64 is a bit of an arbitrary choice imo. Anyway, SUSE is easy to download for AMD64, yes it doesn't include a few things but they have to leave them out for licensing reasons, it's better than having an entirely separate tree for the freely available version. Mandrake has a few months' delay, again imo better than a completely separate tree. Gentoo is a free download with no problems.
Re:Good discussion on this last December
on
Fun Tabletop Games?
·
· Score: 1
Agree with most of those, but Mind Trap is stupidly easy for anyone of a vaguely hackish mentality.
Slashdot Mirror
Less secure, yes, but insecure? I think not. Properly audited services should be fine being opened up. While you shouldn't let something on the open internet on a secure box until it has reached a certain level of security, something like apache 1.x or ftpd should be fine. There are only so many lines of code there, they've had time, they shouldn't have any holes in them. Or the openbsd approach of servers running in their own jail is enough. There is no reason a computer should not be secure opened up to the internet and running services there. Part of the reason they aren't is sloppy coding, part is an emphasis on making things featureful at the expense of security. Which is exactly the reason why MS ships so insecurely - features sell, security doesn't, or at least didn't until recently.
No, it's not windows-only, but it's windows-oriented. It's based pretty much completely around the windows api, and I can't imagine it will perform as well on anything but windows. It will certainly be significantly harder to implement on non-windows system. It is very much a thin wrapper, and deserves criticism. If it's just a question of bundling a dll, no need to worry about overwriting other people's installs, then there's no significant barrier to using Wx, which is a Good Thing, but still, you underestimate the power of the default. The default gui will be the most used one since it isn't completely braindead, and so it deserves criticism for being a thin wrapper around the win32 api rather than a nice to port generic api.
Yes, but with the default MS runtime that's the only way to get GUI. So that's what the majority of apps will use. Wheras with java, the gui shipped is a crossplatform one (which sucks, but that's another argument). Yes Wx# exists, but how many app makers are going to bother even looking for something like that when they have a toolkit there and don't care it's windows-only.
Yes, it does. A huge advantage, with any algorithm. Theoretically the advantage is still not enough with modern algorithms (a million years versus 10^24, or something on that scale). But many attacks only reduce the amount of bruteforce required, not eliminate it entirely, so their advantage almost certainly does tell on at least some modern (ish, anyway) algorithms.
That's crap. If you want to, you know, actually contribute to the internet, you need to have ports open, so you'll need holes in your firewall. If you don't, it would take a really braindead OS to be vulnerable without you having told it to run services, and a really idiotic person to turn on services they didn't want public, in which case they probably wouldn't manage to turn them on. (Personally I think everyone who stays behind a firewall should be taken out and shot. That ought to sort the IPv4 address shortage.)
Not on kde.org, on that independent windowmanager listing site. It didn't win, but kde was well above gnome. And have you bothered to actually look at Novell's offerings? Because I think you'll find they are suse and ship with KDE as the primary desktop, although gnome is also supported. (Interestingly, kde distros tend to support gnome but gnome ones do all they can to avoid including kde. I'm biased but the obvious explanation is that they're afraid to give their users the choice). Even if you look at number of users on primarily kde distros compared to those on gnome distros, I think you'll find they come out ahead.
This isn't funny, it's sad. People have been so brainwashed by MS that they believe it's normal for machines to not be safe if they have a direct internet connection.
Anyway, the proof of the pudding is in what they actually do, and kde looks to be about to adopt gstreamer. Even if they don't, they have adopted plenty of gnome technologies e.g. DBUS, either because they are superior or simply for integration. Wheras I can't find a single case where gnome has adopted a kde technology. Gnome went beyond mere discussion and wrote esd from scratch because they didn't want to use arts.
The stuff is coming from the users who see it. I have actually tried my family on both, and those who notice prefer kde. As do I, because it looks far nicer and is much better integrated. Look at Linux Format's review of gnome 2.8 - they give it a high rating and the reviewer talks about having overtaken kde, yet if you read the whole thing all of the improvements he lists are things which have been in kde from 3.2 or earlier. And yet gnome is the only desktop which publicly recieves corporate support.
The APIs may get more attention but it has paid off. Gnome has three inconsistent apis to use for your widgets, and a lot of cruft and a not insignificant performance hit that comes from them. KDE has only one Right Way to do anything, but the APIs that exist are clean and very useable. Remember the mozilla port in 48 hours? And you can do more with them. So people build the apps, and they are good. Things like K3b; an independent project that works very well, looks good and is integrated properly.
Yeah, but if it's the difference between having to swap parts of the libs and only having to swap the apps, that's going to make a big difference. Not that I'm saying 3.1 doesn't need more power than 1.x, it may well do, but at that little ram you really need to compare on the same machine.
It's like running in treacle, but it's doable, even without much stripping down (I left services and things at their defaults). Be prepared to wait a while for things to load, and make sure you don't try and use more than one app at once.
I think he probably wanted them to rewrite things to be crossplatform. Java isn't a thin wrapper around the Solaris API, it's a completely redone API which uses Solaris as just one of many backends. It's not noticeably more Solaris-based than win32-based or anything else-based. By contrast .net is clearly completely based around windows, making it harder to port to other platforms, and arguably harder to use.
Seriously. If you already have kde loaded it will perform better than anything else. And it already has a database component, currently a separate project but it's there. And it works fine.
http://en.wikipedia.org/wiki/Karma_whoring
You forget something: the NSA has more computing power than the rest of the world. (Yes I'm exaggerating, but seriously, they have a helluva lot). This gives them a huge advantage in breaking encryption.
They want an algorithm that they can break but no-one else can. Since anyone can make a mathematical breakthrough, but they have far more computing power than anyone else, the simplest way to do this is to make sure it requires their level of computing power to break, but can be broken by them (CF DES). Nowadays we think good algorithms would not be breakable by even them with a key length easy enough to use on personal computers. So it's in their interests to promote an under-strength algorithm, but one that's not too weak, just under-strength in a very particular way. This is very different, but not impossible, and I wouldn't say that it's not what they're doing.
Java is propriety but JDS isn't, which is what he is talking about.
If you think I'm clicking a link to "Horse.jpg"...
Actually, the warcraft porters just had to change names. There is a working version (works for me anyway) on sourceforge, under the name of wargus.
I think it's mostly pragmatism. KDE doesn't make boneheaded decisions out of zealotry or theoretical merits. And KDE people seem not to get as attached to their bad decisions as GNOME people, if they made a mistake they will fix it.
KDE is far more popular than gnome. (by votes, and by number of distros using it as default)
That's a 20% upgrade there, equivalent to probably 100mb on a modern system, and if it makes the difference between all the kde libs being able to fit into core and not, then it could easily give a 2x speedup. Anyway, there are many many more features in 3.x, but you at least get more "value for money" in terms of features/performance. It's being optimized but they are also adding more features.
I run kde successfully in 62mb of ram
Or there was 2.5. Yes 2.4 didn't have the latest drivers, but that's the price of being stable. A stable tree should be stable first and anything else second.
Fedora seems to have lost its focus, it's supposed to be community-oriented but comes out as just looking like red hat's beta that you're testing for them. Not saying it is, bu that's how it appears.
AMD64 is a bit of an arbitrary choice imo. Anyway, SUSE is easy to download for AMD64, yes it doesn't include a few things but they have to leave them out for licensing reasons, it's better than having an entirely separate tree for the freely available version. Mandrake has a few months' delay, again imo better than a completely separate tree. Gentoo is a free download with no problems.
Agree with most of those, but Mind Trap is stupidly easy for anyone of a vaguely hackish mentality.