Comments by "Oded Arbel" (@guss77) on "Veronica Explains" channel.

  1. 48
  2. 11
  3. 5
  4. 3
  5. 3
  6. 3
  7. Great video! Tiny nitpicking: 2:17 - the remote server doesn't compare the private key and public key - the whole point of a secure key exchange is that the private key never leaves your computer and is never sent over the wire (where it can be intercepted). The technical details of an SSH authorisation are complex, but hand wavingly we can say that the server generates a "nonce" (a random arbitrary block of bits) which the client then signs using their private key and sends the signature back to the server. The server then tries to use any of the public keys it knows about to verify the signature, and if it can find such a key in the list of authorized keys - it will let you in. The server then does the reverse to prove to the client that it's the same server they've seen before (which is what the known_hosts file is all about - it is the reverse of authorized_keys). This is similar to how we did secure password authentication in ye old days - you don't send the password over, instead you compute a hash of the password and a nonce together and send the checksum. Using cryptographic keys as the "source of truth" allows you to use mathematical proven algorithms to verify the security of the process, and also - the security of an "asymmetric encryption algorithm" is robust enough that you can use the same system to securely exchange the session keys - after you verify the correct public key to use, each side can use the (authentic) public key of the other side to encrypt a new session key and be assured that when transmitted over the (still unencrypted) network connection - only the trusted other side can read it.
    2
  8. 2
  9. 2
  10. My notes: 1. I love KDE Plasma, and used to enjoy running Kubuntu , but unfortunately i cannot recommend Kubuntu to new users - their (understandable) choice to continue shipping Plasma 5 on the current Kubuntu LTS saddens me and I think that suggesting new users install non-LTS version is a recipe for trouble, and suggesting Plasma 5 in (almost 2025) is not great. Fedora - whose Plasma implementation I like a lot, is too much of an enthusiast OS and has some serious limitations for a new user - such as proprietary driver support and codecs, and their newish GUI upgrade process (that is a requirement due to the short 6 month release cycle) isn't yet robust enough and doesn't play well with Plasma. Unfortunately - and this is the sorry state we're in for the next 1.5 years - the best Plasma distro for new users is KDE Neon. 2. Fractional scaling - I wish people will stop calling HiDPI setups "fractional scaling". When you install Windows 10 on a 1080 display and it defaults to 120% scaling - nobody calls it "fractional scaling" (even though it's super fuzzy and looks and perform worse than any bad Linux HiDPI implementation). HiDPI just involves rendering the toolkit at a higher DPI than 96, and that should be easy (and always worked well on Qt based apps). If not for (a) X11 dropping Xinerama causing the inability to configure a display setup with multiple DPI settings; (b) GNOME seriously dropping the ball by completely ignoring flexible DPI support that already existed in GTK3, fixing everything to 13pt fonts on 96dpi during GNOME shell development, then being surprised by the prevalence of HiDPI displays and quickly hacking a workaround of having the window manager render everything at 200% and then doing "fractional scaling" back to whatever DPI the user wanted - which is both fuzzy and slow (not as slow or as fuzzy as Windows, though). The GNOME/GTK problem has been mostly fixed (there are still issues with flatpak and cursors), and with X11 going the way of the Dodo and Wayland built-in support for flexible DPI setups - there's no reason to not have any DPI settings you want on any display. My setup involves 100% (of 96dpi) on my laptop FHD screen, 130% on the vertical 4K screens, 85% on the vertical FHD (this does get a bit fuzzy - most apps aren't optimized to less than 96dpi, but I like the density I got on the 4K@130%) and a 200% horizontal "5K". 3. Desktop interoperability - yes, except GNOME. See any Wayland protocol discussion.
    2
  11. 2
  12. 1
  13. 1
  14. 1
  15. 1
  16. 1