And that is why I don't understand why anyone in their right mind would run cups-browsed. The (tiny) convenience benefit it offers is not worth it.

To quote the blog post:

QuoteDisable and remove the cups-browsed service if you don’t need it (and probably you don’t).

The other recommendation is also something that I have been wondering about basically ever since those services were introduced:

QuoteI’m also removing every zeroconf / avahi / bonjour listener.

That stuff is nearly useless and increases attack surface.

View this comment - View article - View full comments

Without knowing anything about the game:
Let me guess, Unreal Engine?

View this comment - View article - View full comments

Quoting: Purple Library GuyYou know, 20, maybe even 10 years ago I might have gotten into this. But these days I just wouldn't have the heart--not that I think nobody should be making such games, but for me personally, even pretending to be an oil producer would just make me itch.

I feel the same. I already had a bit of a guilty conscience playing it back when it was released...

Once I had actually started playing, I found myself enjoying the gameplay a lot though. I just needed to remind myself from time to time that it's just a game, and that drilling for virtual oil won't pollute the real air any more than playing any other game.

So I think I will buy the DLC once they release it on GoG.

View this comment - View article - View full comments

And with perfect timing too. Autumn is around the corner, and this game has the perfect mood for shutting all doors and windows, turning up the heating, and drinking a hot cup of tea.

View this comment - View article - View full comments

Quoting: Claude_LibI have Windows on a separate drive for rare occasions when I need it. The only clue two systems have about each other's existence is that Windows messes up the clock because I keep forgetting to set the RealTimeIsUniversal registry key.

This update might break exactly such setups. The list of revoked keys is stored in an EFI variable (-> mainboard memory), and if Windows is unaware that there is a Linux installation, it will happily update that list - making Secure Boot prevent the execution of GRUB versions signed with the now-revoked keys.

View this comment - View article - View full comments

Quoting: syxbitIs this also built with Unity?

As a game-dev I would bet it's even built mostly from the same codebase.

View this comment - View article - View full comments

Quoting: dimko

Quoting: soulsourceI was aware that some distributions disable ICMP for regular users, but this is the first time I am wondering why they actually do that.

Does anyone know?

Quoting: soulsourceI was aware that some distributions disable ICMP for regular users, but this is the first time I am wondering why they actually do that.

Does anyone know?

I think it does something else compared to what you think it does.
https://wiki.archlinux.org/title/Sysctl#Allow_unprivileged_users_to_create_IPPROTO_ICMP_sockets
I am not a native english speaker, but way I understand it works(suspect) is this:
Their server or whatever sends a ping/packet/whatever from itself to client machine on some port 1-1000(which in linux is a restrictive set of ports, that is ONLY allowed to be opened by default by a root user, by default on most Linuxes anyway).
And by receiving this packet on some port, client machine OS send back a ICMP reply. Which later on that reply is being judged for some glitch/network delay exploit detection.
If set permission is not set an default policy of OS is not to respond - ICMP reply will not be generated/send. Hence it breaks their anticheat.

Its all speculation of course.

The docs you linked sound more like how I understood it though. The setting seems to be about user group numbers, not port numbers:

Quoting: https://wiki.archlinux.org/title/Sysctl#Allow_unprivileged_users_to_create_IPPROTO_ICMP_socketsping_group_range determines the GID range of groups which their users are allowed to create IPPROTO_ICMP sockets.

Also, the docs directly talk about being able to ping other machines and receive their replies

Quoting: https://wiki.archlinux.org/title/Sysctl#Allow_unprivileged_users_to_create_IPPROTO_ICMP_socketsThe IPPROTO_ICMP (icmp(7)) socket type adds the possibility to send ICMP_ECHO messages and receive corresponding ICMP_ECHOREPLY messages without the need to open a raw(7) socket

Furthermore, the server cannot assume that it will be able to ping the user's computer (via ICMP), as many users' computers are behind firewalls and/or NAT, so imho it only makes sense for the user's computer to ping the server, and not the other way.

View this comment - View article - View full comments

I was aware that some distributions disable ICMP for regular users, but this is the first time I am wondering why they actually do that.

Does anyone know?

View this comment - View article - View full comments

Quoting: Villian

Quoting: soulsource

Quoting: poke86the Linux version is an AppImage and

My conclusion from this is that AppImage does not make the dependency situation better. If at all, it makes it more annoying.

the only conclusion you can take from that is tha flatpak is a lot more distro independent than appimage and gentoo is annoying

Yeah, Gentoo is so annoying, it even manages to cause the same issue with libcurl on Steam OS.

Quoting: melkemindSo, I just tried it on my Steam Deck and got a missing libraries error, specifically libcurl-gnutls.so.4. On my desktop, running Manjaro, it started right up with no problem.

View this comment - View article - View full comments

Quoting: poke86

Quoting: soulsourceit does not work out-of-the-box on Gentoo, because the AppImage does not contain all dependencies

Have you reached out to the devs about this? They should fix this.

Not yet. I need to check if they have a proper bug-report form or something... (I only downloaded it yesterday and didn't even play - just tried to launch it.)

Also, I don't think the World of Goo devs can do much about the libfuse dependency. That's a dependency problem introduced directly by AppImage and can only be fixed by the AppImage devs.

View this comment - View article - View full comments