No they probably wanted to hear how great some random Arch derivatives that does that thing 3 people are talking about
No they probably wanted to hear how great some random Arch derivatives that does that thing 3 people are talking about
I’m not comfortable that Fedora and derivatives give the same stability opportunity as Atomic distros
Atomic distros + distrobox/toolbx. Bluefin is a good start for general desktop or Bazzite for gaming (But Bluefin can be more stable, I use it for some games with steam in flatpak). If something breaks roll back to any release in the last 90 days with a single command. Install all of your packages in a distrobox (Arch if you need it). Otherwise in general Fedora is pretty good.
deleted by creator
exit
exit
I don’t understand how “appalled” being strong language is so controversial, maybe everyone here is just a rude little shit.
I would have worded it like so:
Hi, I’m concerned about the BLOBs used in this repo as they are a security risk, making the code less auditable. It looks like we could generate these BLOBs in a github action or something so we can keep the fast build process while making it easier to audit the code. I’m not exactly sure how to go about this myself but I’ve done similar things in other projects, maybe you could point me in the right direction as I am unfamiliar with the ventoy build process? Thanks for the really cool project, and hopefully we can sort this out easily. Looking forward to your response.
I did it with less anger and entitlement and in less words
I’m not saying don’t criticise it. It’s about communication. The language isn’t very good. See my other comments
Is this not rude:
I checked the code and I’m appalled. There are more BLOBs than source code
And this:
I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.
We didn’t like it when MS made an issue trying to direct ffmpeg
They should have opened with a complement or asked for directions if they didn’t know. In this message “Thank You” means fuck all
I didn’t say they’re wrong it’s the way they communicated which I found off-putting and Gordon Ramsay -esque
I mean if I got an issue that sounded that entitled and this is something I do in my spare time, I’d probably ignore it.
My point is they could have worded it better and it might have gotten a response. If you ask kindly about the BLOBs and maybe for some help to push you in the right direction instead of saying “I don’t know”, then it is fair to call the maintainer rude for ignoring it completely.
Stop and think about what you could be buying instead
I haven’t read to far into this but the issue is completely devoid of contributors and maintainers. I find the wording of the issue quite concerning:
Due to the recent XZ-Utils drama I checked the code and I’m appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/cryptsetup https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/Unix/ventoy_unix https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/DMSETUP
There is no reason to have those not be build in the release process. Of course it’s convenient, they are prebuild, it’s fast and nobody has a problem with it.
Recent events however showed that these BLOBs can contain everything and nothing. The build instructions would not produce the exact same executable for everyone. It’s better to have GitHub build it on-push and use them out of the build cache.
I would do it myself, but unfortunately I’m not familiar enough with the Ventoy build process to actually do it. I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.
Thank you for reading this and I hope for a productive conversation
This is free software, they don’t owe you anything and this kind of language sounds angry and entitled. You can’t just Gordon Ramsay on someone else’s codebase.
Binary Large OBject
Will we get high-speed rail before AUKUS subs?
I wish it were as simple as deleting my accounts with meta, Google and Microsoft. University requires I have MS, Android effectively requires I have Google and if get rid of Facebook I’ll lose access to marketplace, my local community and people will probably just not talk me
Also GitHub has full-text search and doesn’t filter profanities if you’re looking for material
Do Palestine/Israel next. It’s okay when our friends do it
100%. I’m not a child but I’ve learned so much about people through lemmy, getting to be a part of society without sharing any personal information
Yeah. Here I am 26 days later effectively repeating the meme because I’ve started writing a project on Rust