Hacker News new | past | comments | ask | show | jobs | submit | pabs3's comments login

See the why page of Monkeysphere, which was related to the RFC:

https://web.archive.org/web/20200830125308/https://monkeysph...


Trademark, not copyright.

The LWN thread says that they don't, but have separate proprietary licensing and co-marketing agreements with Grafana Labs.

https://lwn.net/Articles/1019686/#CommAnchor1019710


Thanks that interesting!

And in this case it means that it's not AGPL, but proprietary. Which kind of proves my point: they are apparently paying Grafana Labs to avoid the constraints of AGPL. If Grafana was permissive, they would surely not pay.


The LGPL/GPL/AGPL family of licenses don't require upstreaming, only passing source code downstream to end users.

In this case upstreaming replaced images wouldn't be useful to the author anyway, they are going to keep the anime image.


> In this case upstreaming replaced images wouldn't be useful to the author anyway, they are going to keep the anime image.

In this case, it would be, because (presumably) the new images are the property of the user, and they would hardly want (for example) their company logo to be accidentally GPL'ed.


That sounds a bit like what crowdsec does for SSH.

https://github.com/crowdsecurity/crowdsec


When you say bypass, do you mean disable DNSSEC on your own computer? Or are there known vulnerabilities in DNSSEC cryptography or software?

The stub resolver on your own computer doesn't actually speak DNSSEC. It speaks normal DNS to a recursing resolver, probably at your ISP or at Google, that itself does DNSSEC validation, and then just sets a bit in the response back to you that says "this is authentic".

Glibc supposedly has DNSSEC, but does anyone use it:

https://sourceware.org/glibc/wiki/DNSSEC


That page appears to be mostly about how to trust a real recursive cache from a glibc program.

I'd hate to be pointed to that page and tasked with designing and implementing a test plan.

The recursing resolver is on my local system, anything else is clearly madness.

Always fascinating to hear about how the standard configuration for every workstation Linux distro, macOS, and Windows 10 are "clearly madness". Do go on!

If I remove my drive from a dead computer and put in a spare one, it should boot up in the same state, including cookies in the browser. With a desktop computer and SSDs that could easily happen within the banking timeout. With Linux it is trivial to do as well.

Wait, so your use case here is that you login to online banking and while you are paying your bills or whatever your computer dies, you pull the drive from the computer that just died and put it into the new computer, boot it back up all within 10 minutes, and then expect to still be logged-in? That seems exceptionally unusual, and logging into one account seems a small inconvenience compared to replacing your entire computer. tbh I'd be amazed if it even works now. Does Linux restore the complete memory state of a dead computer when you install the drive in a new machine?

> Does Linux restore the complete memory state of a dead computer when you install the drive in a new machine?

Cookies are generally persisted to disk in one of your browser's many caches.


Bank logins use session cookies that are cleared when the browser closes. Unless RAM is preserved you'll need to re-open your browser, so they'll be lost.

Good point. How does that interact with "restore tabs" functionality?

I don't think it restores cookies. It just loads the pages again.

Personally I have more use for protection against session theft than I do for moving a drive to another computer and continuing to use the same online banking session within 10 minutes. I suspect most people are in the same category.

I have to log into my work accounts every single day. Having to login again on a new computer hardly sounds like a burden.

Look at the situation with mobile phones. Half my apps on Android are impossible to back up and restore on another phone.

If my phone is damaged, "logging in" again to my bank's mandatory app means I need to fly half way across the world and visit a branch in person with my new phone.

I don't want anything like that happening to desktop devices, regardless of how small the initial steps in that direction are.


None of the folks you list have, only other FOSS-adjacent movements like Fair Source etc.

The MIT license always allows you to fork/modify the project. You wouldn't be the copyright owner of the existing code in your fork, but you could be the owner of the project, and the copyright owner of any new code you add.

The OSD is basically a copy of the DFSG btw

Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: