US sanctions force The Netherlands off Microsoft and toward alternative NixOS-based software ecosystem

13 days ago by tirateimas to c/technology

The U.S. imposed sanctions on the International Criminal Court, preventing it from using ubiquitous U.S.-based software.
schipelblorp 214 points 13 days ago

US: Let's sanction everyone everywhere all at once!

Also US: Why don't people want to be dependent on US systems? 😭

path: 0 26077347, hotness: undefined, score: 214, children: 16
CIA_chatbot 68 points 13 days ago

Yea we got a bit of the β€œinmates are running the asylum” situation over here.

In the immortal words of the joker(paraphrased) this country needs an enema

path: 0 26077347 26077536, hotness: undefined, score: 68, children: 2
SillyMe 17 points 13 days ago

we would lose about a third of our human biomass

path: 0 26077347 26077536 26079590, hotness: undefined, score: 17, children: 1
BladeFederation 16 points 13 days ago

Oh well

path: 0 26077347 26077536 26079590 26082474, hotness: undefined, score: 16, children: 0
ech 47 points 13 days ago

Couldn't undermine the country more if they tried, which makes one wonder.

path: 0 26077347 26080549, hotness: undefined, score: 47, children: 4
Jaysyn 69 points 13 days ago

Yep. Trump's actions are no different than what any bad actor would do if they wanted to destroy the USA without invading it.

  • Destroy our soft power... check!
  • Turn allies against us... check!
  • Destroy our economy... check!
  • Drastically weaken our military... check!
path: 0 26077347 26080549 26081681, hotness: undefined, score: 69, children: 3
phx 14 points 13 days ago

Destroying what (appearance of) democracy they had as well

path: 0 26077347 26080549 26081681 26085306, hotness: undefined, score: 14, children: 0
SeductiveTortoise 5 points 12 days ago

And I'm accepting that he does it because he's likely a Russian asset, but why the fuck are the rest of them playing along? You can't tell me they're all being bought.

path: 0 26077347 26080549 26081681 26087019, hotness: undefined, score: 5, children: 1
peathah 10 points 12 days ago

They want corporate slaves, if the us is governed by the rich and corporations, corporate cities/islands they are trying to build are not needed anymore.

path: 0 26077347 26080549 26081681 26087019 26087144, hotness: undefined, score: 10, children: 0
benjirenji 3 points 13 days ago

I wish. Organizations and countries/municipalities are far too lazy to make the change.

path: 0 26077347 26079943, hotness: undefined, score: 3, children: 7
shalafi 13 points 13 days ago

The time and money involved are both staggering. This isn't about you switching operating systems on your personal laptop.

Where are you going to get support staff anytime soon? All those Windows admins magically switching to Linux overnight?

Hell, Linux offers nothing remotely comparable to the power of Active Directory. That alone will keep Windows in the lead.

And more. This isn't about lazy.

path: 0 26077347 26079943 26080565, hotness: undefined, score: 13, children: 6
The_v 4 points 13 days ago

Time + motivation + money can overcome a lot of obstacles. It also helps that template of what is needed already exists in Active Directory. This changes the project from "innovating something new" to "a slightly better copy" and is usually a lot faster and easier.

All copyright/patents are also void because of the sanctions at least in practice.

path: 0 26077347 26079943 26080565 26085177, hotness: undefined, score: 4, children: 0
forkDestroyer 2 points 13 days ago

What is the alternative to AD, and are there currently companies running that, big or small?

path: 0 26077347 26079943 26080565 26081425, hotness: undefined, score: 2, children: 3
SparroHawc 5 points 13 days ago

At this point, a lot of entities don't need AD because their entire workflow runs in a web browser, and practically any SSO provider will work.

That said, accessing actual computer resources can be managed with groups and ACLs. Perhaps not as elegantly or as well-integrated as AD is, but that's the price you pay.

path: 0 26077347 26079943 26080565 26081425 26083257, hotness: undefined, score: 5, children: 0
timbuck2themoon 4 points 13 days ago

Red hat IDM, aka freeipa.

Depending on what youre doing you absolutely don't need active directory.

Hell, a lot of orgs are just going entra anyway. If you're using SSO like that or okta or keycloak you likely don't need AD.

path: 0 26077347 26079943 26080565 26081425 26084446, hotness: undefined, score: 4, children: 0
brimlar 1 point 13 days ago

I replied elsewhere, but our org has just been so happy with Jumpcloud.

path: 0 26077347 26079943 26080565 26081425 26086491, hotness: undefined, score: 1, children: 0
Valmond 1 point 13 days ago

I have worked in big company where linux and windows coexisted, but we were developers so maybe that's why (IT was very strict though).

path: 0 26077347 26079943 26080565 26081831, hotness: undefined, score: 1, children: 0
smiletolerantly 102 points 13 days ago

Finally. Been saying for years, NixOS is the obvious choice for a gov distro.

path: 0 26076998, hotness: undefined, score: 102, children: 24
Canajan 48 points 13 days ago

Now we need to convince Canada to do the same. If everyone leaves Microslop, that would make a huge impact.

path: 0 26076998 26078544, hotness: undefined, score: 48, children: 0
einkorn 21 points 13 days ago
Why?

Honest question.

path: 0 26076998 26077454, hotness: undefined, score: 21, children: 12
BrianTheeBiscuiteer 63 points 13 days ago

My guess would be the deterministic configuration management. If it's for a personal machine then do what you want to make it your own but if it's an organization (e.g. government) you want the machines to be as similar as possible to reduce maintenance. Think cattle, not pets.

path: 0 26076998 26077454 26077560, hotness: undefined, score: 63, children: 9
0x4f1 -2 points 13 days ago

Ansible is a thing though. It is also a more complete, mature and easily substitutable solution vs pinning your hopes on a single distro.

Programmers like NixOS because they are programmers.

path: 0 26076998 26077454 26077560 26077604, hotness: undefined, score: -2, children: 8
Godort 36 points 13 days ago

Ansible is US-owned. Even though it's open source, Redhat, a US company, is the one that controls its lifecycle.

NixOS is based out of the EU.

path: 0 26076998 26077454 26077560 26077604 26078198, hotness: undefined, score: 36, children: 2
NewOldGuard 16 points 13 days ago

I mean they sort of serve different purposes. You can build a NixOS ISO running your exact desired configuration that is good to go immediately upon install. Ansible would require post install configuration, yes it is scripted but it is additional overhead and time. I think a better alternative would be an OCI based distro with a Packer build pipeline, which could include Ansible steps higher up in the build process. But that's more complexity that Nix wouldn't require

path: 0 26076998 26077454 26077560 26077604 26078501, hotness: undefined, score: 16, children: 0
7EP6vuI 9 points 13 days ago

i used ansible some years ago and i'm using nixos currently and you can not compare those two.

i was not fluent in ansible and i'm not fluent in nixos. yes you have to leave your comfort zone for nixos, but your get so so much more.

the jinja templates in yaml feel like a big hack if you used nixos.

would really be interesting to hear someone talk who is comfortable to use both of them.

path: 0 26076998 26077454 26077560 26077604 26079174, hotness: undefined, score: 9, children: 2
BrianTheeBiscuiteer 8 points 13 days ago

It's close, but Ansible is often not deterministic.

path: 0 26076998 26077454 26077560 26077604 26078656, hotness: undefined, score: 8, children: 0
rozodru 21 points 13 days ago

from a sys admins perspective it's painfully easy to deploy across hundreds of machines. NixOS is declaritive and immutable. you can take one system configuration of NixOS and throw the same config on as many machines as you want. packages, dotfiles, whatever are all replicated the exact same way on each machine. You can lock all the packages/apps, configs, kernels, etc to a specific version therefore a sysadmin may only need to upgrade the lot once a year. if a user some how breaks their system it's as easy a fix as rolling back to the previous generation with a single menu option.

So basically say you have your computer and you want to replicate your exact setup to hundreds of other computers. with NixOS it's as simple as setting up a git repo for your nixos config, pushing to it, installing nixos on every other computer then cloning your repo to all the machines and rebuilding. done. now you have hundreds of other computers that all behave and work the same way your computer does.

If something needs updating or a fix needs to be rolled out all a sysadmin has to do is fix it on one machine, push the change, pull it for every other machine and rebuild. done.

path: 0 26076998 26077454 26080919, hotness: undefined, score: 21, children: 1
smiletolerantly 2 points 12 days ago

Or just configure all the machines to auto-update from the flake at the repo. Doing this for my VMs. I have a CI machine that builds my pinned flake from the repo tip, and about 30 other VMs check nightly if the repo tip has moved, and if so, rebuild from the new tip; which, thanks to the CI machine, means just downloading and activating a new generation, nothing compute heavy.

path: 0 26076998 26077454 26080919 26086924, hotness: undefined, score: 2, children: 0
kubok 13 points 13 days ago

I am curious, what makes NixOS such a good choice?

path: 0 26076998 26078856, hotness: undefined, score: 13, children: 8
Bluefruit 34 points 13 days ago

From the article:

Its use of the Nix package manager means that each package is installed in its own directory with immutable and signed contents. That alone means that the setup is incredibly easy to reproduce across multiple machines, something that is an obvious benefit when dealing with different facets of a government.

Id argue an immutable distro would likely serve the same purpose but maybe its also because nixos isnt as "locked down" so itd be easier to configure for a specific purpose?

path: 0 26076998 26078856 26079609, hotness: undefined, score: 34, children: 4
punkfungus 16 points 13 days ago

The big draw is probably that it's declarative, so you can define installations as code much the same way as you would do with Terraform. Instead of needing a pile of messy Ansible playbooks running custom scripts to change anything (and which can break if the target machine has an unexpected config), you'd just have one that pushes a new version of the config and runs nixos-rebuild. Rollbacks are just as easy if anything breaks. What's not to like?

path: 0 26076998 26078856 26079609 26082579, hotness: undefined, score: 16, children: 1
Bluefruit 2 points 13 days ago

Right so in that way, its very reproducible. That was my understanding and I appreciate you for the more in depth explanation but is there advantage to that versus an immutable distro? Wouldn't a immutable distro work in a similar way being reproducible among many machines?

Rollbacks can be done on immutable distros as well right? I'm just curious why Nix was the first choice and not something immutable.

path: 0 26076998 26078856 26079609 26082579 26086301, hotness: undefined, score: 2, children: 0
adarza 3 points 13 days ago

nix is on a whole different level than silverblue and other 'atomic' distributions.

path: 0 26076998 26078856 26079609 26082079, hotness: undefined, score: 3, children: 0
kubok 2 points 12 days ago

Thanks. I read Smiletolerantly's comment as a personal opinion, rather that a summary of the article. I read several articles in Dutch news outlets, but the main message was 'hurr-durr-Dutch'.

path: 0 26076998 26078856 26079609 26087215, hotness: undefined, score: 2, children: 0
schipelblorp 6 points 13 days ago

But not curious enough to read the article.

path: 0 26076998 26078856 26079270, hotness: undefined, score: 6, children: 2
FlashMobOfOne 1 point 13 days ago

You know, you could simply be helpful.

path: 0 26076998 26078856 26079270 26079426, hotness: undefined, score: 1, children: 1
schipelblorp 11 points 13 days ago

Sure.

It's in the fourth paragraph, starting with

From a technical point of view...

and ending with

... would usually balk at.

path: 0 26076998 26078856 26079270 26079426 26079591, hotness: undefined, score: 11, children: 0
panda_abyss 4 points 13 days ago

The only thing is this doesn’t yet do online user directories, local users only

Which is a big constraint right now

path: 0 26076998 26078667, hotness: undefined, score: 4, children: 0
fodor 71 points 13 days ago

Foreign countries using Google, Microsoft, or Apple, would be suicidal not to change platforms. Right now, the U.S. has incredible leverage: it can turn off their government servers, delete their data, and is certainly spying on them right now.

The only reasonable move is some kind of self-hosted setup, at least for a large chunk of critical infrastructure, with some cloud options for backups, maybe, who knows, if the country is too small or centralized.

path: 0 26086370, hotness: undefined, score: 71, children: 2
Squizzy 14 points 12 days ago

I am in a large (couple thousand staff) company and I cant get why we dont selfhost everything. Like yeah it would have an upfront cost but the savings stack immediately. We spend like 30-50 a user for office access.

Copilot is so shit and we could build an alternative with relative ease and never pay again. It wouldnt be baked into teams but who gives a fuck.

path: 0 26086370 26088847, hotness: undefined, score: 14, children: 0
Appoxo 1 point 12 days ago

Yay Broadcom or something.

path: 0 26086370 26086994, hotness: undefined, score: 1, children: 0
CapuccinoCoretto 69 points 13 days ago

All middle powers need to align and collaborate on this. There is limited programming talent and gaps and especially security (ai) gaps need to be filled. EU, UK, Canada, Aus, NZ, SK, Japan should actively pool resources.

path: 0 26078763, hotness: undefined, score: 69, children: 0
FE80 68 points 12 days ago

The U.S. imposed sanctions on the International Criminal Court

...fuck this place.

path: 0 26089463, hotness: undefined, score: 68, children: 5
ADTJ 3 points 12 days ago

The US or the ICC?

path: 0 26089463 26095107, hotness: undefined, score: 3, children: 2
FE80 9 points 12 days ago

not the ICC.

path: 0 26089463 26095107 26097324, hotness: undefined, score: 9, children: 1
GreenKnight23 4 points 11 days ago

So the ICC won't let me be

Or let me be me, so let me see

They tried to shut me down on MSNBC

But it feels so empty without me

path: 0 26089463 26095107 26097324 26105589, hotness: undefined, score: 4, children: 0
JustEnoughDucks 1 point 11 days ago

Well the ICC isn't amazing either. Historically it has been used as a tool to "prosecute" African individuals in western courts and has prosecuted literally 0 western war criminals, completely ignoring European crimes abroad. Whether imperialistic/colonialistic or just trying to establish itself as legitimate by prosecuting easy targets, African countries (who were initially all for the ICC because of their history with instability and war and were some of the main case referers early on) are withdrawing because of how "unbalanced" the justice is.

The ICC has never once prosecuted a european national, EVER, for war crimes.

A lot of regimes seeking to get rid of western mega-corporation exploitation are resorting to getting rid of as much western influence as possible, maybe because the frequency of European, american, and corporate sponsored coups.

But the US never recognized the ICC because they commit so many thousands of war crimes.

path: 0 26089463 26107519, hotness: undefined, score: 1, children: 1
madcaesar 1 point 11 days ago

Yea whatever, they are being targeted becuase Trump wants to defend the war criminal Bibi and the Nazi state Israel

path: 0 26089463 26107519 26107549, hotness: undefined, score: 1, children: 0
ouch 66 points 13 days ago

US has been building soft power like this for decades, and Trump is pissing it all away.

If this process to get rid of dependency on US gets well underway, there's no turning that ship. US won't recover the position it had in fifty years or more.

path: 0 26082345, hotness: undefined, score: 66, children: 8
LilB0kChoy 22 points 13 days ago

US won't recover the position it had in fifty years or more.

This is not a bad thing. Over dependency on any one nation or even a bloc of nations is a bad thing.

I can’t help but think the dependency on the US that has been created played some role in what’s happening now.

path: 0 26082345 26085589, hotness: undefined, score: 22, children: 3
SabinStargem 7 points 13 days ago

Honestly, I can see that. America has been top dog for so long, it doesn't value what it has.

path: 0 26082345 26085589 26085639, hotness: undefined, score: 7, children: 1
LilB0kChoy 7 points 13 days ago

Not even that. I’m thinking too much money, power and influence all consolidated in one place.

The US has the most billionaires at 989 and I’m guessing of the remaining ~2400 billionaires in the world, a not insignificant amount have substantial interests in the US.

It’s good the rest of the world is watching it happen. I hope they’re taking notes because it’s not stopping in America.

path: 0 26082345 26085589 26085639 26085727, hotness: undefined, score: 7, children: 0
fodor 3 points 13 days ago

Well of course. The whole point of US trade policy was to maintain global dominance. You don't think that politicians were sending money to other countries purely out of the goodness of their own heart, do you? ... Of course some of them have good intentions some of the time, but let's not pretend no other reasons came into consideration.

path: 0 26082345 26085589 26086438, hotness: undefined, score: 3, children: 0
Typotyper 21 points 13 days ago

Nope. The US isn't teaching people to fish, its forcing them to learn How to to feed themselves. In the past they handed them the fish so they could control them. That power is lost now.

path: 0 26082345 26082796, hotness: undefined, score: 21, children: 0
fruitycoder 1 point 12 days ago

I've been pro US imperialism for a while now, but honestly I'm glad that the rest of the world is shedding the worst of our power projection.

On one hand the heel position has really pushed a lot of the world in a positive direction, but there's gotta be a better fucking way then, like you said destroying half a century of international relations and cooperation. That's not to mention the bigger issue of US supported genocide in Palistein and the ethnic cleansing operation in the states, which I can't excuse for any 4d accidently good things on the geopolitical scale.

path: 0 26082345 26099634, hotness: undefined, score: 1, children: 2
madcaesar 3 points 11 days ago

Has it though? I used to believe the same thing as you... But seeing the shit that has happened I started to look through history without red white and blue glasses... And I'm not sure America was ever a global good...

So many overthrown governments... So many sanctions... So much pressure on people... And behind the scenes it was always to expand power for some mega Corp....

And then all the fucking wars... Wars on wars on wars... The USA is CONSTANTLY killing someone somewhere....

It's honestly a are we the baddies when you look back at history

path: 0 26082345 26099634 26107601, hotness: undefined, score: 3, children: 1
fruitycoder 1 point 11 days ago

There are no good countries in modern geopolitics but some times people do good things.

There were good cases. People hate but we have defended women and LGBTQ people around the world. There is a reason Iranian and Russian propaganda shows the US with the rainbow flag. There was a generation of girls that were able to get education in Afghanistan.

We were leading the defense and support of the Kurdish people.

The Marshal plan building the safetynets and basis for democratic socialism in the EU and Japan.

The ACLU, the EFF, the GNU project, TOR, Ammesty International, Doctors without Borders, human rights watch, the IWW, etc.

The global eradication of small pox. Heck all of the hate Elon deserves for the unconstitutional cuts to USAID are because millions were being helped.

International collaberstion on space exploration and development. The major contributions to the development of the global internet in general.

Leading the establishment and being the primary enforcement of international law.

The US also was the leader in the modern environmental movement! With the national park system, the EPA, pushing hard to save the ozone, the fight to stole wailing and other marine protections. Etc

If someone says this was solely the US they would be both factually wrong AND also missing the point that makes some of these great. The collaberation with the world aspects is what made they any sense of good. That said despite all of that it's easy to say it's a checkered score card (which after a ramble of great things should hint at how bad other things were). But I still supported us doing good things globally.

path: 0 26082345 26099634 26107601 26113068, hotness: undefined, score: 1, children: 0
chahn.chris 61 points 13 days ago

Windows is basically a zombie OS at this point, shambling along and eating brains.

path: 0 26079882, hotness: undefined, score: 61, children: 18
NaibofTabr 35 points 13 days ago

Windows as a home user desktop is definitely coasting on momentum, though it is also the OS deployed on most new PCs which keeps it going.

I think the only thing really keeping Microsoft relevant is Active Directory (and Azure by extension) because a lot of organizations are dependent on AD internally, and there still aren't really any good alternatives that check all the same boxes. You could probably cobble together a working solution for ~90% of it with open source software, but it would be clunky, fragmented and feature-poor compared to an on-prem AD system. It would require a lot more administrative overhead to configure and maintain it, and user management would be a mess.

path: 0 26079882 26080593, hotness: undefined, score: 35, children: 17
rumba 8 points 13 days ago

I'm starting to see non-AD companies cropping up. If you have to support Mac and Mac is absolute trash on AD, you need to run software to manage the macs which can already manage windows. With all the remote work, even RMM software is on the rise.

path: 0 26079882 26080593 26081634, hotness: undefined, score: 8, children: 0
chahn.chris 7 points 13 days ago

Sounds like there’s a startup opportunity here.

path: 0 26079882 26080593 26081179, hotness: undefined, score: 7, children: 10
NaibofTabr 6 points 13 days ago

Sure, but they'll have to catch up on almost 30 years of feature development (and feature creep). Active Directory is entrenched, by virtue of being the only game in town for decades.

Not that they're necessarily irreplaceable, but... a half-competent Windows Server admin can go from cold iron to running HyperV with a local domain (AD forest) with a SAN supporting 200 endpoints (assuming the hardware is already in place) pre-configured with end-user applications and all relevant network & security settings (via group policy), with a print server supporting local network printers, and be ready to enroll new users, in less than a day.

I've seen it done, I've helped get it done. And all of that can be done with point-and-click GUIs, and not a dozen different ones, just like 3 (one for server/HyperV deployment, one for HyperV config post-install, and then basically everything else can be done through Active Directory).

When you're a sysadmin for a large organization, that kind of operation at scale is non-negotiable. When I say that AD really has no competition, that's what I mean. You could accomplish all of the same things on Linux, but it would take you a week of punching through terminal commands just to get the server and the domain up and running, and once you were done the user management still wouldn't be as flexible or feature-complete as it is on AD (especially if you need things like auditing, or physical access token integration like badges for authentication, or remote desktop support, or video conferencing that is linked to corporate email accounts).


All of that said, if you happen to know of a group that's actually working on a competitor for on-prem AD (not Azure AD/EntraID, the cloud system is very different and not really comparable) I would be very interested. It's a problem that's been on my mind for awhile now, and I'd love to get paid to actually work on it.

path: 0 26079882 26080593 26081179 26085761, hotness: undefined, score: 6, children: 8
brimlar 3 points 13 days ago

You should check out JumpCloud. It frankly feels a lot like you're living in a cloud-first, Microsoft-free future. It's a dream to use and scales, manages Windows, Mac and Linux as equal citizens. We don't even maintain on-premises servers (including domain controllers) anymore, we just use IP addressing from the firewall and patch, control, manage all our computers from one pane of glass.

path: 0 26079882 26080593 26081179 26085761 26086434, hotness: undefined, score: 3, children: 4
ms_lane 2 points 12 days ago

Not to even mention the biggest of elephants in any MS room - Exchange.

path: 0 26079882 26080593 26081179 26085761 26088317, hotness: undefined, score: 2, children: 0
chahn.chris 2 points 12 days ago

Hey I didn’t say it would be easy, you’re right there’s a ton it’s doing.

Rebuilding what it’s doing though wouldn’t take 30 years, they’ve figured out the requirements which means a startup can start fresh and build something even cleaner that works full on premise but seamlessly leverages cloud services if you want them for backup / recovery situations in the event that your on premise systems have a failure.

I don’t know anyone working on this but the fact that it would be hard means it’s actually not easily replicable and would be a good business for a startup to capture. The value prop is high for companies, if they could save a huge amount of money on licensing and get improved operational cost without sacrificing what they get from on premise it would be worth it.

It would definitely be hard to get companies to switch but the potential savings and country independence parts might be enough to make them interested in paying the switching costs.

path: 0 26079882 26080593 26081179 26085761 26091127, hotness: undefined, score: 2, children: 1
Valmond 2 points 13 days ago

I heard OVH is at it. Maybe among others.

path: 0 26079882 26080593 26081179 26081854, hotness: undefined, score: 2, children: 0
Kissaki 7 points 13 days ago

EntraID also seems corporate established. For a modern with system, with zero trust etc, you use EntraID instead of AD now.

Of course, legacy AD systems, if they exist, are also lock-in.

path: 0 26079882 26080593 26081252, hotness: undefined, score: 7, children: 4
InFerNo 2 points 12 days ago

Over 10 years ago I deloyed Zentyal, which is a Linux OS that works as a drop in replacement as a domain controller. Active Directory, Outlook mail server and file server out of the box. I can only imagine it got better.

path: 0 26079882 26080593 26081252 26089006, hotness: undefined, score: 2, children: 0
NaibofTabr 1 point 13 days ago

EntraID is just a rebranding of Azure AD

Azure AD, the cloud version, still isn't as feature-complete (or possibly feature-bloated) as the original on-prem AD, which is a big reason large organizations won't switch away from it.

path: 0 26079882 26080593 26081252 26085818, hotness: undefined, score: 1, children: 2
Kissaki 2 points 12 days ago

AD is a security nightmare. EntraID requires internet but at least allows zero trust with diverse configuration and importantly without storing or holding session tokens or passwords locally.

For my company, the only blocker is file share, which can be migrated. All our with integration use ldap and can be migrated to openid. Luckily we don't have more AD integrated stuff.

path: 0 26079882 26080593 26081252 26085818 26092902, hotness: undefined, score: 2, children: 1
personalhel 43 points 12 days ago

never trust the americans again

path: 0 26092270, hotness: undefined, score: 43, children: 7
sanzky 27 points 12 days ago

I will be so pissed off when a democrat is elected and every single EU country will try to go back to business as usual

path: 0 26092270 26095181, hotness: undefined, score: 27, children: 6
73ms 7 points 12 days ago

I think that's very likely over. You could argue and people did that one Trump term was just an anomaly. Two is much more difficult to explain away like that and I think Europe gets it now.

path: 0 26092270 26095181 26100013, hotness: undefined, score: 7, children: 1
tabular 2 points 11 days ago

Trump, and worse to come, seems an obvious outcome when looking at the unrepresentative two-party system used to divide Americans. Places in Europe use a more representative voting systems, so Europeans aught to know it's a question of when Americans notice 2 options at the ballot is only 1 better than Russia.

path: 0 26092270 26095181 26100013 26107271, hotness: undefined, score: 2, children: 0
PerogiBoi 3 points 12 days ago

Dont worry that will never happen again.

path: 0 26092270 26095181 26099624, hotness: undefined, score: 3, children: 2
Son_of_Macha 3 points 11 days ago

Yeah that's exactly the phrase no-one in the world will believe again for 15+ years

path: 0 26092270 26095181 26099624 26105372, hotness: undefined, score: 3, children: 0
GreenKnight23 1 point 11 days ago

the Nazis could never take power, it just won't happen again.

-- average person around 2014

path: 0 26092270 26095181 26099624 26105555, hotness: undefined, score: 1, children: 0
GreenKnight23 2 points 11 days ago

most things will, I doubt this will though.

it's surprising that most countries didn't see this as a national security threat to begin with, but here we are.

I think before the end of the current trump administration we'll see a ban on using Linux within the US out of spite.

them not realizing or caring that 90% of the internet runs on *nixos derived software will only make things more chaotic.

path: 0 26092270 26095181 26105536, hotness: undefined, score: 2, children: 0
LogicOverFeelings 40 points 13 days ago

Neet, if NixOS get used more and more then the skills I acquired making my config will become marketable.

path: 0 26080257, hotness: undefined, score: 40, children: 1
Wooki 3 points 12 days ago

Flakes and home-manager is unmatched. ❀️

path: 0 26080257 26089599, hotness: undefined, score: 3, children: 0
thefluffiest 36 points 13 days ago

And nothing of value was lost

path: 0 26080910, hotness: undefined, score: 36, children: 1
reksas 29 points 13 days ago

in fact, things got better

path: 0 26080910 26081374, hotness: undefined, score: 29, children: 0
im_fine_sandy 32 points 13 days ago

This might just be the best thing that happens in tech (for me) all year.

I daily drive debian just because boring and reliable. However, fancy package managers like flatpak and appimages and nix have made debian much more vibrant - it's easy to install new versions of things now.

That said, nix package manager on debian is just freakin amazing. Being able to just nix-shell -p <obscure cli tool> and exit when I'm done with it is magnificent.

That's the gateway drug anyway. The nix based home-manager is pretty cool.

While I've been tempted to jump in with NixOS my experience with nix packages and home-manager has felt kind of bleeding edge or experimental. Loads of things that don't work as intended on debian.

A sophisticated well funded user base like a federal government has really good implications for the stability of the project in the future. I'm really stoked about this.

path: 0 26084216, hotness: undefined, score: 32, children: 2
AHemlocksLie 7 points 13 days ago

NixOS is great, but it definitely breaks things. It's the way it works, though, not whether the software is bleeding edge. Nix lets a package specify its own dependencies, even if those dependencies conflict with those of another package. It does this by breaking the traditional POSIX file system structure that many programs assume they can depend on. It puts all sorts of things where they "don't belong", and then uses a small army of environment variables, scripts, and symlinks to stitch it back together so that no individual package realizes what happened. If you only use software from the package manager, this is often (but not always) seemless, but if you download stuff from the web, none of the system libraries it traditionally expects are there. Likewise, if you're using Nix alongside something like Debian's apt, I wouldn't be at all surprised if the two package managers doing things in two different ways causes some issues that are hard to interpret to the uninformed.

path: 0 26084216 26086595, hotness: undefined, score: 7, children: 0
pruneaue 4 points 12 days ago

Personally id say try it in a VM*. Home-manager and nix packages (and even flakes at this point) havent felt like experimental features for a good 5 years for me on NixOS

Edit: while on Mac yes. Havent played with it that much on other distros

path: 0 26084216 26087504, hotness: undefined, score: 4, children: 0
corey931 23 points 12 days ago

US: You want to cut us off? No! We cut you off!

NL: How petty are you?

US: Yes.

path: 0 26087216, hotness: undefined, score: 23, children: 0
brsrklf 23 points 12 days ago

I'm in a local administration in France, it's rapidly getting closer to home... Our higher-ups somehow decided a thourough Microsoft integration was a good idea like 5 years ago.

Seems like we're just one political comment about support to the ICC to be in the same situation. And I mean, fuck it, we should be. But I am not happy about the shit we'll have to go through to purge it all now.

path: 0 26088843, hotness: undefined, score: 23, children: 1
ScoffingLizard 3 points 12 days ago

If I can sell my house, I'll do it. But I'm in the US. Sure do want out. My house has been on market for 5 months.

path: 0 26088843 26092274, hotness: undefined, score: 3, children: 0
DigitalNeighbor 21 points 12 days ago

I can explain a major reason why public services and administration are begrudgingly moving to FOSS or OSS at all. They need to apply security standards like ISO 27001 and when they start going through what the documentation requires they realize that most OSS let alone FOSS make it very hard to have any say in the development of the software.

How do you make sure that the security flaws are patched promptly? Do you open a ticket on GitHub and simply hope it gets picked up by the devs? I can tell you from experience that some OSS devs will tell you to make your own merge request if it's so important to you. GDPR makes having vulnerable public facing services very unattractive. What about support for the product when you need something fixed or have an issue with running the software?

You can definitely get a license for an OSS, or get a legal agreement for support from the OSS devs for money. I can guarantee you that when managers in public services look at either patching together and managing a bunch of separate OSS or using Microsofts integrated infrastructure, they see the advantages right away.

That is the sad truth... It's resource intensive and a regulatory problem to create and manage a whole infrastructure. It's much easier to use integrated and centralized solutions.

path: 0 26089418, hotness: undefined, score: 21, children: 8
Flipper 21 points 12 days ago

How do you make sure that the security flaws are patched promptly? Do you open a ticket on GitHub and simply hope it gets picked up by the devs?

No you dont expect free labour and pay them.

path: 0 26089418 26089798, hotness: undefined, score: 21, children: 0
CyberSeeker 20 points 12 days ago

There is absolutely nothing preventing them from hiring a firm to develop a feature in FOSS. Hell, they can even keep it proprietary if they wanted to.

path: 0 26089418 26091309, hotness: undefined, score: 20, children: 1
hasnep 6 points 12 days ago

they can even keep it proprietary if they wanted to.

Yes, with the caveat that it would have to be an internal piece of software, or if it's a public facing tool then it would have to be under a non-copyleft licence. But yeah, for 99% of use cases they could have a proprietary fork.

path: 0 26089418 26091309 26092063, hotness: undefined, score: 6, children: 0
phutatorius 15 points 12 days ago

With non-free software, you have no say at all.

path: 0 26089418 26091065, hotness: undefined, score: 15, children: 0
Aceticon 14 points 12 days ago

The problem you point out has been known in the Linux community for literally decades and is the reason why Red Hat Linux was created and any company can, right know, get an Enterprise version of it with an Enterprise support contract.

That said, over the years I worked in seriously large multinational companies which used Linux and other open source products like Apache extensively on the server side (pretty much all such machines had it) so at least on the server side things did change massively from back in the day when companies would get Sun servers with SunOS or IBM server with Minix rather than generic server PCs with Linux due to that rationale you stated.

In fact, it has also become a common thing in much smaller companies, though maybe not the small and micro-sized ones.

The reality on the ground at least on the server side and for infrastructure software is that companies did find a way to deal with the problem of not being able to get support contracts from many of the OSS apps makers, and did so either by just paying some company specialized in supporting it or by having their own developers - after all, it's exactly the thing with OSS that any developer can change it hence you're not limited to paying for support from a specific company that makes the software.

path: 0 26089418 26089882, hotness: undefined, score: 14, children: 0
NewNewAugustEast 7 points 12 days ago

Don't get me started about ISO. They can go fuck themselves.

But that particular standard doesn't apply to software. It applies to a company. Its a best practices, audited authoritative report. None of that means the software doesnt have backdoors, flaws, issues, its how they handle them.

Microsoft is a known ISO cheater, and will pay off companies or at least influence them, so I wouldn't trust ISO or the auditors.

So now, any company that is willing to take on the challenge of being certified can use open source software (which actually is audit-able as opposed to Microsoft's).

Seems like there is a path forward. Yes they may have to fund a project that helps audit, develop, or maintain critical software. If its open source, you have an entire world could also participate in securely developing software, in the open.

path: 0 26089418 26093947, hotness: undefined, score: 7, children: 0
fruitycoder 5 points 12 days ago

Commercial support or if it's critical enough infrastructure have a full time department/team to do it. Commercial support is the obvious choice for most countries starting out tbh.

Honestly SuSE, Ubuntu, and Hetzner all have good for enterprise support and its crazy that they don't have more major gov business in the EU now.

But honestly yeah, pay for labour to maintain things. It's not a breaking new idea. You can do that AND own the things instead of renting from private companies too. Also not a new idea.

The only thing new is that we are talking about computers and we have museums for them already so maybe get with the times, right?

path: 0 26089418 26099520, hotness: undefined, score: 5, children: 0
ScoffingLizard 1 point 12 days ago

Well fuck, if it so hard for them to do it, they can hire me and I can implememt DISA for them. They'll nees to bring in an old immigrant though.

path: 0 26089418 26092248, hotness: undefined, score: 1, children: 0
SabinStargem 17 points 13 days ago

Considering the Dutch have ASML, this seems an unwise move for the US. But then, the Dogey Confederates are working towards the destruction of the USA. πŸ˜’

path: 0 26085623, hotness: undefined, score: 17, children: 13
ms_lane 2 points 12 days ago

Considering the Dutch have ASML,

That's a card which only hurts ASML if played.

path: 0 26085623 26088279, hotness: undefined, score: 2, children: 3
willington 2 points 12 days ago

If ASML has many competitors, then yes.

path: 0 26085623 26088279 26091446, hotness: undefined, score: 2, children: 2
ms_lane 1 point 11 days ago

If ASML had many customers, then yes.

Intel is ASML's single largest customer, making up a full quarter of their income. TSMC is the next biggest, but all their current expansion is in USA, so they'd probably not be able to buy anything either.

Next then is Samsung who are also building out US fabs, but also new Korean fabs, so some of their business wouldn't be allowed.

Global Foundries would also be out.

ASML would have to survive losing 60% or more of their current income. They'd be gone in a year since EU countries don't/won't subsidise semiconductors. (see: The loss of Qimonda, Global Foundries stuck on 28nm in EU forever, etc)

path: 0 26085623 26088279 26091446 26106442, hotness: undefined, score: 1, children: 1
willington 1 point 11 days ago

ASML is the sole manufacturer of EUV machines in the world. Everyone needs ASML, not the other way around. There is no replacement for ASML.

ASML basically decides what they want to do. Right now they align with the USA export restrictions, but that friendly relation is not guaranteed to remain. Only China is banned. ASML can still sell their machines at will otherwise.

If ASML breaks with the USA it will be fine, but the USA won't be fine at all.

path: 0 26085623 26088279 26091446 26106442 26107239, hotness: undefined, score: 1, children: 0
MonkderVierte 1 point 12 days ago
path: 0 26085623 26089362, hotness: undefined, score: 1, children: 1
FudgyMcTubbs 6 points 12 days ago

Not OP, but I don't understand your question.

As a US citizen, I try to say "The States" instead of America when talking about my country. I do that out of respect for all of the countries that call these two beautiful American continents home.

I admit to defaulting to "American" instead of a cumbersome "United Statesian" or the above "US Citizen." But that's what we grew up calling ourselves and told to call ourselves and our fellow countrymen.

"Just another American Country" seems like it would be insulting to Canada, Chile and all of our neighbors in between. I'm not sure my fellow Americans would even pick up that you were talking about the States unless you really layed on thick context.

path: 0 26085623 26089362 26089616, hotness: undefined, score: 6, children: 0
bigmamoth 1 point 12 days ago

How much asml machine in the us rn ? That s not how stuff work

path: 0 26085623 26086973, hotness: undefined, score: 1, children: 6
Jiral 3 points 12 days ago

Tell us, how does "stuff work"? What up and running alternatives do the US have to ASML machines for latest generation high performance silicon? No matter where.

path: 0 26085623 26086973 26087051, hotness: undefined, score: 3, children: 5
bigmamoth 0 points 12 days ago

Look at asml client. Either us or Taiwan. They can't skip that market. U dont have alternative to asml yet but asml has no alternative for client either. Also fab are long term devlopement thoses contract are already lock. And asml play by american rule regarding ban export and so more. Asml is never gonna ban the us. The us can but it serve them no purpose. Asml is a public traded company. If u think they gonna loose their biggest client..... Idk what to say but that s unreal

path: 0 26085623 26086973 26087051 26088738, hotness: undefined, score: 0, children: 4
Jiral 0 points 12 days ago

ASML plays by US rules as long as things don't escalate badly. Your arguments only work during nice weather. When things get tough, ASML is squarely located in the EU and will comply with local laws and law enforcement. That is a substantial risk for the US if it were to go for all out economic warfare, like forcing Microsoft to boycott EU customers.

Of course ASML has no interest in such a thing, nor does Microsoft. The Single Market is a very big market for Microsoft. Also, blowing it up would not just pulverise that market, it would lead to a collapse of most of the business outside of the US in the mid term.

path: 0 26085623 26086973 26087051 26088738 26090469, hotness: undefined, score: 0, children: 3
Exeous 15 points 13 days ago

This great news! Away with USA!

path: 0 26078006, hotness: undefined, score: 15, children: 2
TheMadCodger 16 points 13 days ago

Next up, convince everyone to drop Meta, including WhatsApp and IG!

path: 0 26078006 26081122, hotness: undefined, score: 16, children: 1
FudgyMcTubbs 2 points 12 days ago

And then Google and Amazon, somehow.

path: 0 26078006 26081122 26089702, hotness: undefined, score: 2, children: 0
SocialMediaRefugee 14 points 13 days ago

So we did this because we didn't like what the court said not about us but Israel and its war crimes? This is the hill the admin is going to die (and drag us with them) on?

path: 0 26080218, hotness: undefined, score: 14, children: 0
Jaysyn 13 points 13 days ago

Microsoft: "No, not like that!"

path: 0 26081643, hotness: undefined, score: 13, children: 0
SeeMarkFly 12 points 13 days ago

Netherlands: "Let's make The Netherlands great again."

United States: "What have we done."

path: 0 26077396, hotness: undefined, score: 12, children: 0
Zeniv 11 points 12 days ago

I've been doing a project https://themildtake.com/... ever since Independence Day and I have been shocked by how insane the open-source tooling out there is now. NextCloud and Collabara alone solves 90% of company's needs. ERPNEXT covers a huge swath in mid-range needs. I combine it with a mailcow server and Authentik for SSO and I am not sure how much else most businesses need. The whole stack is zero cost.

path: 0 26089039, hotness: undefined, score: 11, children: 0
jadelord 10 points 12 days ago

The whole Netherlands? What....?

path: 0 26094936, hotness: undefined, score: 10, children: 1
adhdsergio 2 points 11 days ago

The government. Read the article

path: 0 26094936 26105909, hotness: undefined, score: 2, children: 0
roundabout 8 points 13 days ago

Phones when?

path: 0 26079688, hotness: undefined, score: 8, children: 1
Jiral 7 points 13 days ago

I've got a Jolla Phone this summer. Sailfish OS. Probably not something you can sell to the mainstream but it is a perfectly daily driveable phone for some target groups, and I belong to them.

The main issue to date is that security related stuff on phones is basically exclusively dependent on US American companies (Google, Apple), this is pretty much madness if we want to protect Europe against hostile actions by the US. So maybe things are starting to move.

path: 0 26079688 26081589, hotness: undefined, score: 7, children: 0
AntonioAndolini 3 points 13 days ago

Microsoft office is still their best product but many words apps such as only office are becoming comparable. Microsoft Access and excels cross compatibility with other office apps is unmatched

path: 0 26084047, hotness: undefined, score: 3, children: 3
xSikes 4 points 13 days ago

They don’t even need to be comparable. Majority of people just need the basics or what Office 2013 had to offer. Now Office does too much and now copilot… if anything it’s getting worse now.

path: 0 26084047 26084423, hotness: undefined, score: 4, children: 2
heartSagan5 1 point 13 days ago

Yup. I haven’t bought any new Office keys since like 2020, and I never will. Keep the CoPilot away from my thoughts, geesh. I feel like a schizo when I use them.

path: 0 26084047 26084423 26084701, hotness: undefined, score: 1, children: 1
xSikes 1 point 13 days ago

I’m on Mac Office Business 2019. I just found out that blocking Microsoft traffic on my firewall, stops the ability to save doc as PDF. I installed Collabora Office on OpenCloud.

path: 0 26084047 26084423 26084701 26084781, hotness: undefined, score: 1, children: 0
JigglySackles 2 points 11 days ago

Gotta love how all these cunt ass companies are objectively doing worse and losing business present and future for putting mango Mussolini in charge. They can all choke on their avarice.

path: 0 26120207, hotness: undefined, score: 2, children: 0
JustPlainDave 2 points 13 days ago

We never should have let that horse into the hospital.

path: 0 26079210, hotness: undefined, score: 2, children: 0
stumu415 2 points 13 days ago

So ironic after bending over time and time again for the US. Think ASML, think Nexperia. Fuck Rutte and Jette - mini Rutte wannabe.

path: 0 26083565, hotness: undefined, score: 2, children: 0
bigmamoth 1 point 12 days ago

Didn't vote for it but would have love it

path: 0 26086978, hotness: undefined, score: 1, children: 0
technology
technology

@lemmy.world

login for more options
88742
22214
14627

This is a most excellent place for technology news and articles.

Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


go to feed...