Yonle: Notes
33 subscribers
709 photos
53 videos
4 files
197 links
A channel that created for no purposes. Used to post some of my personal projects, memes from other source, and some interesting topic.

You may also Follow WRS-BMKG (24/7) Channel that i made (Earthquake Warning Ch): @WRS_BMKG
Download Telegram
ding dong.
dear internet.

how 2 get myself working back on code
fuck every coding myth and beliefs.

time to code spaghetti code and fix all of the fucks later.
Suddenly i have the urge to use i3 again.
Just wrote my thoughts on something that several people rarely talk about. You may be interested.

- The Zen Browser so called "backdoor" drama: https://fedi.lecturify.net/notice/AuI5ldAeKSyE52vlXE
- The major flaw in most communities like Linux and Tech nowadays: https://fedi.lecturify.net/notice/AuIBgB9LgNJzS56cfQ
Yonle: Notes pinned «Just wrote my thoughts on something that several people rarely talk about. You may be interested. - The Zen Browser so called "backdoor" drama: https://fedi.lecturify.net/notice/AuI5ldAeKSyE52vlXE - The major flaw in most communities like Linux and Tech nowadays:…»
Yonle: Notes
Suddenly i have the urge to use i3 again.
and then updated the setup several weeks later coz i am bored
a: Yonle-
me: Use LTS kernel

a: I HAVEN'T SPEAKING YET 💢
me: oh sorry. what is it

a: ArchLinux is unstable on me, any tips please? 🥺
me: Use LTS kernel
I was about to use JWT, But then i stopped in the middle after seeing the chaos.

So i created HWT. A dead simple, Secure by design alternative to JSON Web Token (JWT)

https://codeberg.org/Yonle/hwt

making token:

var payload []byte // could be anything, including stringified json, etc
var salt []byte // random salt bytes. should be stored.

token := hwt.Sign(payload, salt)

validating token:
var salt []byte // the same salt that's used for signing before
var token string

payload, ok := hwt.Check(token, salt)

if !ok {
// not valid. not signed by us. don't do anything.
return
}

// check passed. deal with <payload>
so yesterday i wrote that i doas busybox --install in my new arch setup, and used clang instead of gcc compiler.

Why is it?

The GNU mascot just *got sacrificed* today.

Happy Eid al-Adha, everyone.
systemd is a monolithic init, consist of several components packed into one single init which could be controlled via systemctl and more.

pros:
- it got it's own set of tools
- it's all in one solution
- it's making things somewhat easy

cons:
- it's all in one solution, that may includes things that you don't actually need
- if one of the component has a vulnerability hole, the rest are affected

given the above info that i just wrote, if you ask me whenever it's good or not, i would say neither. it will be me that gives you a question, "do you prefer AIO or one task per program?"

the answer for that question will be the answer of your question. but remember, AiO also means some cost.

like an AIO PC, It's simple. Because everything is packed in one.

But then it became a big trouble once the screen is broken & the replacement is no easy.

The same applies to systemd too. Take the xz exploit as a example. One component of a monolithic program had the vulnerability, The entire system is affected

---

In summary:
- Monoliths make recovery harder.
- Minimalism makes management harder.
Yonle: Notes
systemd is a monolithic init, consist of several components packed into one single init which could be controlled via systemctl and more. pros: - it got it's own set of tools - it's all in one solution - it's making things somewhat easy cons: - it's all…
There are problems with the normal inits out here, Like one distro requires different step to accomplish one task, Or even different tools to accomplish a similar task.

systemd is basically created exactly for that matter. It's not perfect, Yes. But we couldn't deny the fact that it's what revolutionaries linux desktop nowadays.

---
To put it simply: Regular inits suffer from fragmentations.
Duality of Yonle