<aaronjanse>
<ehmry "aaronjanse: yea, if it works the"> This is pretty cool
<dckc->
aaronjanse, your responses look like they're coming to IRC via a bridge to something that groks replies. Is this so?
<pie_>
is that really sufficient <ehmry> aaronjanse: yea, if it works then I don't have to worry about access-control on the file-system, subsystems can only get stuff from packages that they know hashes of
<aaronjanse>
dckc-: Yep, I'm using Matrix. Hopefully It doesn't look terrible on the IRC side!
jpo has quit [Ping timeout: 272 seconds]
jpo has joined #nixos-exotic
<ehmry>
pie_: i think that it might be. you can still find out what packages are cached by looking at the latency of requests, so it would still be possible to detect if what software is present on a system
<pie_>
having a hash isnt necessarily the same as having the content?
<ehmry>
but I mean that not loading things from a file-system means there isn't an access control policy there, and that getting things by hash can be unchecked
<ehmry>
well the content has to be resolvable
<pie_>
then again this is compared against the world readable store i guess so to that extent its equivalent modulo brute force
<pie_>
i dont quite follow but smol brai and missing thought-traversals
<ehmry>
I have to make a bunch of stuff before there can be a practical tested, or do more analysis
<ehmry>
i'm probably not explaining some important details, which I may or may not\ have in my head