Interests: News, Finance, Computer, Science, Tech, and Living

  • 7 Posts
  • 521 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle








  • Supply chain attacks also show one reason that using older software like Debian stable may be a better plan for things that matter. All new software versions need some time to be tested and vetted.

    It also shows the importance of security in depth. That less is more in terms of code dependencies and complexity. That knowing dependencies is as important as knowing your code.

    I would consider the xz incident to be a success. The supply chain attack was found pretty rapidly. We have already seen many of these and we will see more. Ones I remember off the top of my head include Linux Kernel, NodeJS, Python PyPI.

    I would not over blow this. Security is an ongoing activity and all security is porous.


  • My wife and I have used GnuCash for 20 years. We used Quicken before that. Like GnuCash way better since it is actually double entry accounting. The major limitation of GnuCash is that it is not concurrent. So to people cannot be modifying the ledger at the same time. Not sure about viewing. It can be SQL database backed though I have never used that functionality. The other place where FOSS stuff probably lags is integrations.

    Edit: Another area in which GnuCash is weak is basis tracking. Fine on accounting for gains and losses but for tracking the basis is limited. At least my version is. I am on 3.x which is the version in the repos of my near end of life Debian 10 distro and latest is 5.5. At least my version there is no way to show true returns either.