Choose style:

Author Topic: Sources and how to build peppermint  (Read 6199 times)

0 Members and 1 Guest are viewing this topic.

Offline murraymint

  • Trusted User
  • Veteran
  • *****
  • Posts: 1997
  • Karma: 344
  • soft boiled with a yolk of gold
    • View Profile
  • Peppermint version(s): 7, 8, 9
Re: Sources and how to build peppermint
« Reply #15 on: April 26, 2017, 11:29:12 am »
You get to choose whether or not to download certain proprietary components during installation. You've seen that, for example, graphics drivers and processor microcode can be proprietary, but they certainly help to run an OS. I suppose it's a compromise, isn't it?

Offline scifidude79

  • Global Moderator
  • Hero
  • *****
  • Posts: 4029
  • Karma: 863
    • View Profile
  • Peppermint version(s): Peppermint 9
Re: Sources and how to build peppermint
« Reply #16 on: April 26, 2017, 11:47:42 am »
Are you saying that the peppermint we download by default contains proprietary software?

Yep, it sure does.  Flash plugin.  I don't remember if there's anything else in the default package that's proprietary, but that definitely is.

Offline murraymint

  • Trusted User
  • Veteran
  • *****
  • Posts: 1997
  • Karma: 344
  • soft boiled with a yolk of gold
    • View Profile
  • Peppermint version(s): 7, 8, 9
Re: Sources and how to build peppermint
« Reply #17 on: April 26, 2017, 12:02:02 pm »
The Dropbox integration for Nemo as well. I don't use Dropbox so I've just removed that one.

Offline scifidude79

  • Global Moderator
  • Hero
  • *****
  • Posts: 4029
  • Karma: 863
    • View Profile
  • Peppermint version(s): Peppermint 9
Re: Sources and how to build peppermint
« Reply #18 on: April 26, 2017, 12:06:56 pm »
The Dropbox integration for Nemo as well. I don't use Dropbox so I've just removed that one.

Ah, I knew there was something else that I was forgetting.  Indeed, that is proprietary.  Funny, I remove both, but not due to them being proprietary, just because I don't use them.

Offline Slim.Fatz

  • Trusted User
  • Veteran
  • *****
  • Posts: 1812
  • Karma: 474
  • Where's the mouse?
    • View Profile
  • Peppermint version(s): Peppermint 7, 8.5 & 10 - 64bit
Re: Sources and how to build peppermint
« Reply #19 on: April 26, 2017, 12:33:34 pm »
Hi Ulysses_,

No. I'm not saying anything about that. In fact, I do not know. Nor do I really care ... but that is just the way I am.  :D

What I am saying, I have already said: it might be less hassle to start with a distro that ONLY has free (libre) software (including kernel modules) instead of going through the source and kernel searching for non-free software and kernel modules, removing them and building the whole thing again. If you do not trust the developers of the distros that I named in my previous posting, then you will still have to go through everything and check for non-free items.

It would be easiest to just ask another fanatic whom you trust (perhaps Richard Stallman) for a suggestion.  ::)

Regards,

-- Slim
"Life first -- Peppermint a close 2nd!" -- Zeb

Tread lightly: Fluxbox, JWM, i3, Openbox, awesome

Offline Ulysses_

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 0
  • New Forum User
    • View Profile
Re: Sources and how to build peppermint
« Reply #20 on: April 27, 2017, 06:07:37 am »
That's what I thought you meant, thanks. Missing the point though. With truecrypt for example, no one has been able to build the source code and get binaries identical to the published binaries. Then a story circulated that some German had done it, by fiddling with the compiler optimization options and other options, except no links to his work or supposed compiler options were given.

Any self-respecting three letter agency would take advantage of this fact that an identical binary is not trivial to build sometimes. Let the geeks audit the open source code as much as they like, it's not where the state actors hide their functionality. Hence the motivation to build Libre and not just check it.

Offline murraymint

  • Trusted User
  • Veteran
  • *****
  • Posts: 1997
  • Karma: 344
  • soft boiled with a yolk of gold
    • View Profile
  • Peppermint version(s): 7, 8, 9
Re: Sources and how to build peppermint
« Reply #21 on: April 27, 2017, 06:17:16 am »
Now windows is becoming spyware so I want to switch

This is the bit I find somewhat amusing, that you're only just (over?)reacting to this problem now. When do you think Windows will "become" spyware?


Online VinDSL

  • Global Moderator
  • Hero
  • *****
  • Posts: 5438
  • Karma: 957
  • Peppermint Mod
    • View Profile
  • Peppermint version(s): Developmental Builds
Re: Sources and how to build peppermint
« Reply #22 on: April 27, 2017, 06:37:47 am »
Heh !  Read between the lines ...

Webroot 'mistakenly' flags Windows as Malware and Facebook as Phishing site

Quote
Popular antivirus service Webroot mistakenly flagged core Windows system files as malicious and even started temporarily removing some of the legit files, trashing user computers around the world.

Basically, Webroot got too smart for itself and flagged Facebook as phishing site, and winders as malware.   8)

Online VinDSL

  • Global Moderator
  • Hero
  • *****
  • Posts: 5438
  • Karma: 957
  • Peppermint Mod
    • View Profile
  • Peppermint version(s): Developmental Builds
Re: Sources and how to build peppermint
« Reply #23 on: April 27, 2017, 07:01:58 am »
Look, I'm as paranoid as the next person - probably the most careful person you know, but I have good reason(s).  It's a matter of survival.  I don't want to end up on the bottom of the Caesars Palace swimming pool, or 'accidentally' slipping and falling off a high-rise parking garage.

I don't own a cell phone, and I never discuss anything of importance on the web.

That said, I've had my identity stolen twice - not because of anything I did.  Both times, it was because of stolen records from medical insurance companies.

IMO, the greater issue is, 'everyone else' already has your information from cradle to grave, and THEY aren't taking care of it.

If you're trying to prove anything and everything is corrupt, you're right. 

All you can do is feed 'the machine' false information.  It's easier than you think ...  ;)

Offline Ulysses_

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 0
  • New Forum User
    • View Profile
Re: Sources and how to build peppermint
« Reply #24 on: April 27, 2017, 07:23:32 am »
This is the bit I find somewhat amusing

Here's some more for your amusement.

Microsoft Admits Windows 10 Auto-Spying Canít Be Disabled

http://21stcenturywire.com/2015/11/04/nsa-partner-in-crime-microsoft-admits-windows-10-auto-spying-cant-be-disabled/

Terms and conditions for windows 10:

"Microsoft collects information about you, your devices, applications and networks, and your use of those devices, applications and networks. Examples of data we collect include your name, email address, preferences and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage."


Offline zebedeeboss

  • Global Moderator
  • Hero
  • *****
  • Posts: 3132
  • Karma: 567
  • Life first... Peppermint a close 2nd :)
    • View Profile
  • Peppermint version(s): P10 / P9 Respin
Re: Sources and how to build peppermint
« Reply #25 on: April 27, 2017, 07:26:50 am »
Hi Ulysses_,

What murraymint meant was,  Windows 10 HAS been spyware from Day 1, nearly 2 years ago now. yet you are just posting now ?

Regards Zeb...
« Last Edit: April 27, 2017, 07:30:26 am by zebedeeboss »
Be Kind Whenever Possible...   It is Always Possible - Dalai Lama

Linux User #565092
P10 x64 Desktop - AMD Threadrippe 2950X - 64Gb RAM - NVIDIA RTX2080Ti 11Gb - 1 x 43" 1 x 27" 4k 3840x2160 - 1 x 34" 5120x2160
P10 x64 Laptop - i7-7700HQ - 8Gb RAM - Nvidia GTX1050 4Gb - 15.6" HD 1920x1080

Offline Ulysses_

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 0
  • New Forum User
    • View Profile
Re: Sources and how to build peppermint
« Reply #26 on: April 27, 2017, 07:42:02 am »
Hoping so. All windows versions from vista onwards are being updated with windows 10 features. Many people are disabling updates for this reason, but rumor has it that updates occur whether you choose it or not.

My windows host has been disconnected from the internet for some 10 years now, only VM's see the internet and only through a physical USB-to-ethernet adaptor that is virtually plugged into a VM.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26267
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Sources and how to build peppermint
« Reply #27 on: April 27, 2017, 07:59:54 am »
IMO, the greater issue is, 'everyone else' already has your information from cradle to grave, and THEY aren't taking care of it.

If you're trying to prove anything and everything is corrupt, you're right. 

All you can do is feed 'the machine' false information.  It's easier than you think ...  ;)

That right there is the only sensible course of action .. you can  build as many binaries as you wish yourself but unless you're planning on going through every line of code yourself (impossible) there's always some level of trust/distrust involved. And even if you somehow KNEW the source was clean you still have to worry as soon as you connect your PC to the outside world.

Ubuntu (like every other distro) does not author most of the software that's included in their distribution .. they may apply patches to the "orig" source, it's easy enough to check the contents of these patches, but if you think they are somehow being forced by some government agency to modify the "orig" source, then you have to apply the same logic further up the chain and you now start worrying if Xorg or the GNU toolchain, or CUPS, or Python, or the kernel itself has been compromised.

The best the open source world can do is have "many (and experienced) eyes" not so much studying the source code itself, but studying what their computer is transmitting .. THEN trying to figure out what's causing unexpected behaviour and letting the world know .. so far this approach seems to have stood everyone in good stead.

Unlike Microsoft who are not even trying to hide the fact they are spying on you because it would be impossible to hide (the network traffic is easy to spot if not read), if something was generating unexpected traffic in Linux it would be just as quickly spotted and the offending package and authors cut off and nailed to a cross.

At the same time you must recognise you cannot be 100% "secure" if you keep sensitive data on a computer any more than you were if you wrote the combination to your wall safe (or the formula to your successful burger sauce) down on a piece of paper, the best you can achieve is misdirection, obfuscation, flying under the radar, and being vigilant.

IMHO being paranoid about source code is a waste of time .. no single person can verify all the code that makes up a modern distro (or even just the kernel, or LibreOffice) .. it's not about the source code until unexpected behaviour points you in that direction, and there are a LOT of people watching Linux for unexpected behaviour, in fact most of the best system administrators in the world, universities, companies, banks, governments themselves, etc. and a generally security conscious community.
« Last Edit: April 27, 2017, 08:11:48 am by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Ulysses_

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 0
  • New Forum User
    • View Profile
Re: Sources and how to build peppermint
« Reply #28 on: April 27, 2017, 09:41:39 am »
Nothing like one person checking the source code of an entire o/s is suggested or needed because checking happens anyway when people add lines to existing code and sooner or later someone would notice something malicious, make big news of it, and destroy the reputation of the vendor. That's not good enough for bsd people so one of their flavours of bsd, openbsd, has been audited they say, which is minimal obviously, but minimal is what we want as a host for virtualisation. Except openbsd has no decent virtualisation that I know of, only containers. Building source code should be automatic in security and privacy oriented distros. Like you can build the entire source base of firefox with a single make command.

Offline murraymint

  • Trusted User
  • Veteran
  • *****
  • Posts: 1997
  • Karma: 344
  • soft boiled with a yolk of gold
    • View Profile
  • Peppermint version(s): 7, 8, 9
Re: Sources and how to build peppermint
« Reply #29 on: April 27, 2017, 07:05:05 pm »
All windows versions from vista onwards are being updated with windows 10 features
Funny, I was just thinking this morning "that's just what THEY would do". ;)

Quote
only VM's see the internet and only through a physical USB-to-ethernet adaptor that is virtually plugged into a VM.
Can anyone explain that to a "virtual n00b"?  ???