• 0 Posts
  • 60 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle
  • V2/V3/V4 are the microarchitectures to enable e.g. glibc to search for optimum libraries for the target platform.

    x86-64 was drafted in 2000 and up until like 2020 or something, there was no way to discern microarchitecture differences to optimise compilation. So v2 is basically just anything since 2008.

    Why Red Hat are moving on from “v1” - likely because they’re spending huge amount of resources maintaining binaries for that old microarchitecture and the cost dwarfs the revenue they’re making from continuing to support it.

    With the security vulnerabilities found in older chips that require either a revised architecture or otherwise take huge performance penalties to mitigate (e.g. Meltdown and Spectre), most enterprise customers upgraded their hardware older than 2008 in recent years.

    Thankfully this is Linux so while RHEL is moving on, Debian are still maintaining support for old architectures!

    Whereas Windows 11 23H2 onwards killed x86-64-v1 support entirely.












  • If you’re mandated or regulated to implement MLS or MAC etc, SELinux is a security control that enables you to comply through expanded and expressive policy controls.

    When I hear dislike for it, it’s usually because people are using SELinux as a “make my personal computer safer” tool rather than the “we’ve hundreds of thousands of differently classified sensitive documents and thousands of employees with different clearances”.

    MAC/DAC/MLS isn’t designed for personal computing and if you think SELinux is the solution you personally need, you might need to reevaluate your threat model (as any external actor will seek to bypass kernel controls entirely e.g. CVE-2025-0078).






  • I’m not a Mac lover, it’s just the term; Spyware is data gathering in secret without the user’s knowledge. Apple seems to have it all documented and controllable vs say Windows where you can’t turn off telemetry gathering, just set it to “Basic/required”.

    More a semantics thing. I assumed you meant there was something you can’t turn off in Apple shit and it’s done secretly (another commenter has highlighted a daemon that’s doing exactly that!).

    I wasn’t part of the downvote brigade either. I don’t get why people downvote stuff that’s more a point of discussion. You didn’t say anything shocking nor blatantly incorrect.