ivn

Yeah, that’s the reason for the advice about changing them when they feel “flat”, do not wait for a visible deterioration.

They mean you should change them earlier, do not wait for the sole to completely wear off.

Yes, that’s why I ended with:

And your ISP still has other ways to see which site you visit.

Even with secure DNS they can still see the domain name with the SNI, which is probably more reliable than an IP address. Last I checked very few websites used ECH. I would still argue that it’s better to have encrypted DNS requests than non-encrypted ones.

Your ISP can see what websites you visit. But even if you change DNS server it can still see that if you don’t use either a VPN or DoH/DoT.

So it’s a good idea to use DoH or DoT. It’s an improvement but it’s far from perfect because the DNS server you’ll pick will see what site you visit, you have to trust them. And your ISP still has other ways to see which site you visit.

AUR ce sont des scripts (des PKGBUILD) fait par la communauté. Je ne sais pas si ça s’est amélioré mais quand j’utilisais Arch il y a quelques années ils manquaient un peu de standardisation et ils pouvaient être fait assez différemment les uns des autres.

La manière de procéder pour les gestionnaires de paquets classiques c’est de récupérer la source, de compiler les paquets et de distribuer le résultat. Ça permet d’être sur que le résultat correspond à la source. Pour AUR c’est différent, c’est fait par la communauté donc seul les scripts sont mis à disposition, il n’y a pas de dépôt avec le résultat, uniquement la recette. Maintenant comme ça peut être assez long de compiler il y a souvent un paquet avec le suffix -bin qui est proposé et qui va télécharger directement le binaire quelque part au lieu de télécharger la source et de la compiler. C’est le cas pour onetagger, il y a bien un onetagger-bin. C’est pratique mais c’est aussi un risque, ça veut dire qu’on doit faire confiance à la source de ce binaire, il pourrait avoir été modifié. Il y a déjà eu quelques cas de malware dans AUR. À toi d’évaluer les risques.

Dans le cas de onetagger-bin tu peux cliquer sur view PKGBUILD pour voir d’où vient le binaire, attention il peut changer lors de mise à jour. Je crois que certains outils comme paru permettent de voir la diff du PKGBUILD lors des updates, ça peut éviter les surprises mais aussi être assez long si tu en as beaucoup.

Attention pour Windows 10 il n’y a plus de mise à jour de sécurité si on a pas de compte Microsoft.

Ou la version LTSC peut être ? Mais j’ai jamais testé celle du 11.

It’s more famous for people that where around 15 years ago when disk space was more scarce.

Because the browser was just an example, this tool handles a lot of different softwares. Sometimes it can even be software you deleted that left cache behind.

I trust this tool as it has been around for a very long time, is well known and open source. But I haven’t used it in years as drive space is now cheap so I’m not trying to reclaim every last bit of it. It can still be useful in some situations but no need to use it regularly.

Depends on what you need a VPN for.

I don’t know them but they seems to be from Estonia marketing themselves for evading censorship. Are you in a country that censor VPN? If not why do you think the tradeoff might be worth? The 2 hops should have an impact on bandwidth and latency and there is probably no port forwarding.

Using a VPN is just moving your trust from your ISP to the VPN. Why would you trust a VPN you know nothing about giving them access to all your internet traffic?

I hope you’re right but I can assure you our government is very good at making grand announces not followed by anything, or even by the opposite. Also our far right, which might very well win the next election, is very much pro-Trump.

Our education ministry keeps signing huge Microsoft contracts, our health data is stored by Microsoft, our intelligence agency use Palantir, our government is mostly on X… I’m forgetting a lot of other things. They are also pushing hard for regulations against privacy, weakening encryption, chat-control…

There are some small nice things here and there like our Gendarmerie using Ubuntu, the DINUM making a lot of open-source tools… But it’s really a drop in the water.

That’s the Interministerial Digital Directorate, they are very competent.

https://github.com/cloud-gouv

That article is trash. Ministries have only been asked to come up with a plan of what’s possible to do to switch but I highly doubt most will switch. The education ministry recently renewed it’s Microsoft contract and I don’t think there is anything enforcing a switch, it’s only a “please look at what could be possible” thing. The only thing switching for sure is the DINUM, about 250 people, a lot of them already using Linux. But this is the start of an experiment where they are building some NixOS configurations that could be used if a larger switch was to happen. Believe it or not, they NixOS configs are names Sécurix and Bureautix.

Nah, the article is trash. There is no law, ministries have been asked to come up with a plan of what’s possible to do to switch but I highly doubt most will switch. The education ministry recently renewed it’s Microsoft contract and I don’t think there is anything enforcing a switch, it’s only a “please look at what could be possible” thing. The only thing switching for sure is the DINUM, about 250 people, a lot of them already using Linux. But this is the start of an experiment where they are building some NixOS configurations that could be used if a larger switch was to happen.

That’s not my conclusion, that’s just mostly coming from the Guardian article. I say mostly because you’re missing one part, we know how the LLM is used.

That’s why I’m asking you to source your “conclusion”.

It wouldn’t change anything and I’m confused as to why you think it would and why you think I’m “giving a huge amount of benefit of doubt”.

I’m just pointing at what we know, what we don’t know and what you are just making up.

There is nothing that indicates that Anthropic’s AI is used to analyze data, I’m not saying it’s not, just that we don’t know. I’m going to quote a smaller section of a quote I made earlier of the same Guardian article:

In late 2024, years after the core system was operational, Palantir added an LLM layer – this is where Claude sits – that lets analysts search and summarise intelligence reports in plain English.

But the term AI is an issue here, there are multiple, of different kind, made by different companies. There is AI used for targeting, no doubt, but it’s not Claude, it’s Maven and some other subcomponents. The fact that Anthropic joined the project late, after it was already operational, is a good hint that they do not bring a core feature, but that’s only speculation.

I’m just saying that, as far as we know, the Anthropic contract is about Claude and the targeting is not made by a LLM.

They only mention Claude, where is the source that “some custom AI system made by Anthropic”, not a LLM, “was in the kill chain”?

I mean, I get that you want to tie Anthropic to this, I don’t like them either but we should stay factual and avoid filling the gaps with some “probably”. It’s also counterproductive as Maven and Palantir are huge menaces and this shift the blame away from them.

Well you’ll need to source your claim. The wiki article you linked only mention Claude.

The Anthropic contract is also quite recent compared to Maven creation.