For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | thom's commentsregister

Commits should have no information in them. Teams should be aligned on the design of their software, and all the information about that software should be apparent from its source code.

Not sure what my knot is called but it’s never come undone or gone wonky for me. At step five of the standard knot above, just pull the yellow loop into the empty space on the left and the blue loop to the right. Surely that saves you having to change hands?

It feels to me that a lot of the bigger ideas in KDE fell away over the years. In the 2000s I would log in every morning, open a KWord doc in one Konqueror tab, a KSpread sheet in another, and some browser tabs alongside them, then I'd launch Kate and open some files over SSH or FTP and get to work. It felt like someone had really embraced OO and applied it to every part of the desktop, and I assume something like KParts and KIOSlaves still exist. But for the most part, I use KDE now as a bog standard boring Linux desktop that just works. I am grateful that it hasn't been dumbed down quite as much as GNOME over the years, but I hope they have a few bold experiments left in them (and would love to hear what I'm missing if it's already there!)

I still find a decent amount of the integration, like KIO, is still there and works well - it puts MacOS and Windows to shame in terms of how I can just interact with files anywhere as if they're native within KDE apps.

It's kind of a shame that Konqueror fell to the wayside, but modern browsers are so complicated I cannot fault them for focusing elsewhere.


> It's kind of a shame that Konqueror fell to the wayside, but modern browsers are so complicated I cannot fault them for focusing elsewhere.

KHTML became webkit (Safari) and then blink (Chrome) so they created the foundation for quite many browsers ...


it kind of vaguely reminds me of the OpenDoc concept although tbh I didn't really understand what Apple was describing at the time

KDE-connect is my preferred cross-platform local clipboard/file/whatever sharing program when venture out of a walled garden

I feel the same. A lot of big projects fell by way side over time for various reasons. Goes with the nature of experiments, sometimes you win, sometimes you lose.

k3b - died with the cd-rom

calligra office - creation of LibreOffice stole the thunder

konqueror - maintaining a secure browser that isn't a fork of chrome is a tall ask these days

amarok / kmail - rewrite lost features, introduced bugs, and many existing alternatives filled the gap

That said there are still a lot of good ones still there that continue to improve every day. Kate, dolphin, KDE connect, etc.


> maintaining a secure browser that isn't a fork of chrome is a tall ask these days

> maintaining a secure browser that isn't a fork of konqueror is a tall ask these days

FTFY


Kmail worked great for years then one update akondai would no longer sync and that was the end of it.

All the development action went to the web. Dolphin's still pretty awesome.

KDE4 killed too much momentum; many promising features and apps disappeared for whatever reason or slowly faded out into irrelevance. Stuff like KIOSlaves is still around, but never really evolved beyond what it was 20 years ago.

Well, Trinity Desktop is alive and kicking and is a fork of the 3.5.12 series. over 16 years of steady releases now.

Isn't Trinity just maintenance and small improvements of KDE3? I don't remember to have heard about any revolutionary changes, or even just significant evolutionary improvements.

Definitely not revolutionary. Plenty of evolutionary changes - because linux itself has changed. the last major release brought

- LUKS encrypted disk support desktop-wide, - storage device hot plug/unplug - new Bluetooth GUI (tdebluez) - new media player (kplayer), - PulseAudio support - window tiling


> I use KDE now as a bog standard boring Linux desktop that just works

"bog standard boring Linux desktop that just works" is a low key major achievement - I love it !


Yep, I'm past my days of wanting my OS to be "exciting" :) now boring and functional is king.

And in case this comes off too negative, I don’t think anyone has mentioned KStars, my favourite KDE app for many years. All my early Linux experiences were eye opening and mind expanding about what computers could be, but somehow none more than that.

Still using Kate for all of my coding

Yeah we have one of these in our kitchen diner and it's excellent.

Was about to comment, anyone who finds themselves bouncing off Kerouac could do worse than read Miller. The latter is more like your first torrid love affair versus the former’s first giggling glimpse at a porno mag.

You don’t necessarily know when someone will decide to do a commercial release of an old game, causing it to disappear from various abandonware sites. Much simpler to grab eXoDOS once and use it for life.


iDOS 3 works perfectly on my iPad Pro for both DOS games and Win 3.11.


I first read this on an HTC Typhoon smartphone on my daily commute to my first job out of university. I must have felt pretty smug and futuristic at the time.


After all these years, we finally have enough eyeballs that all bugs are shallow, and it kinda sucks. How many times a week am I going to be updating my kernel from now on?


I haven't updated mine. I have a firewall and it's not exposed to the Internet. Need a key to SSH in. Same with my public facing server. Almost none of these exploits are "drop everything now and patch" unless you are somehow exposing yourself stupidly.


It's a "drop everything and patch" if you have a large multi-user server where you don't completely trust all of the users. Like say in a university with a server that students can log in to, like I have just had the joy of updating (and had RHEL break ZFS on me yet again).

But yes, in most other cases no it isn't a "drop everything" exploit - but it does mean one less layer in the multi-layer security, as unprivileged remote exploits now become root-access remote exploits.


> unless you are somehow exposing yourself stupidly

Or, y'know, offer some forms of compute as a service.


I understand where you're coming from, it's no reason to panic.

But this kind of thinking can be dangerous because it implies that your systems don't talk to the outside world at all, which they obviously do. I mean a very glaring example is container images, so it definitely takes more than a firewall and ssh keys to stay safe in general.


If you’re running any sort of CI you’re probably going to have a bad couple of days if everything goes well


To be honest, CI has always been a massive risk, I'm a bit miffed at how blasé some people are about providing runners.


unless you run pinned CI runners on hardware you control


I sort of always expect there to be an LPE to root on Linux tbh, if anything this is great news and Linux might be a useful multiuser system after all.


Updating your kernel isn't good enough, it never was.

Native unsandboxed execution == root. Only thing that's new is some people started making websites for their LPEs.

https://github.com/google/security-research/tree/master/pocs...


So you think someone is going to break into your house, find your default credentials somehow and get root access?


With physical access, root access is as simple as setting init=/bin/bash in the kernel parameters from a bootloader. No need for credentials or anything.


Secure boot and disk enryption are not that unusual nowdays


Secure boot doesn't provide security, just control for device manufacturers.

Physical access always means the device is pwned. You can install a keylogger or something similar.


Secure boot ensures the image you boot was not tampered with. You can't install keylogger without tampering with the image. If you wanted to install physical keylogger, you would need to open the device up, and at least my laptop provides detection of bottom cover removal, meaning the system will ask you for a bios password if the laptop was opened up.


I think when there’s a step change in our ability to find one type of vulnerability, other types of vulnerability are probably going to become more common as well. Let’s see where we stand at the end of the year.


With how things are going the question should be ‘is twice a day often enough?’


At the moment it doesn't seem to be.

Within an hour of be advised of, and running the mitigation for DirtyFrag, my upstream provider has blocked all WHM/cPanel/SSH/FTP/SFTP access with a heads-up on:

CVE-2026-29201 CVE-2026-29202 CVE-2026-29203

which look like a repeat of CVE-2026-41940 a week ago.


Same reason people muck about with knowledge management systems... to put off the day when you have to sit down at your desk and actually do something.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You