sorrybookbroke

joined 1 year ago
MODERATOR OF
[–] [email protected] 3 points 4 days ago* (last edited 4 days ago)

The issue with that is potentially keeping software which has security bugs on your system for longer than needed. Also, if you install new software you'll have a partial upgrade which can degrade your system. If you don't install anything though, your system should work as it currently does without issue. Unless a particular app takes something from the internet which may need the upgraded software (say, discord, spotify, etc. as they're electron based.)

If that's what you want to do I would suggest switching to xubuntu, mint xfce edition, DSL, etc. as they'll still patch security updates in. You do you though of course as with your stated usecase I can't see any functional issue. I don't see the reason for arch though.

[–] [email protected] 2 points 4 days ago* (last edited 4 days ago) (1 children)

Sure, but that wasn't malicious code hacking your device just a simple phishing scheme. The aur runs arbitrary code each time which can do quite alot more on your system than any snap. That snap was just a fake app that sent your login to their server.

The aur is much more dangerous. Of course, when installing anything from anywhere be careful, but with the aur you need to be able to read the pkgbuild.

Thank you though for cautioning the snap store as you're right. Those apps aren't confirmed before they're placed on the store

[–] [email protected] 10 points 4 days ago (3 children)

I wouldn't suggest Manjaro. On a theoretical basis the distro is a good one but in practice, and with the current management of the distro, It's one of few I'd say is a bad choice. They're destructive to the general linux ecosystem, often make incredibly wild and unnecessary errors stemming from the highest level, do not properly maintain their promise of delaying packages until they're fixed, and give bad info which can harm a user. Their devs also help propagate the "toxic linux" stereotype by being just that.

I'm gonna list off a few but manjarno has some more, with context. This will be written by memory too.

Please, skip to the header that's most important to you.

Harming the ecosystem

The first thing you'll likely hear is that they've DDOS'd the AUR twice, the exact same way through their Pamac GUI. Now, to be clear, this was not on purpose. They made a mistake. However, like quite a few other issues, they made this mistake twice showing they did nothing to stop it from happening twice. Something else which will become clear is that they don't do these things due to malice (usually) but shear incompetence.

Next, their lead arm dev, the guy in charge of arm development, changed a version on a library on asahi linux (an arm fork) known to break X11 in a change which had nothing to do with that library. This shows he did not try running his code beforehand. The only reason it wasn't checked by the larger project is due to the trust given to this, supposedly, high end dev. This after the company made a large campaign claiming that "Manjaro runs on the m1 macbook!" months before asahi was ready shipping some random build, not the latest or a set release, which only showed a black screen. To be clear, this could have broken people who tried to run it's hardware. This is in no way a forced error.

Delayed package promise broke

This will be a short header, but it's important. The promise of Manjaro is that they delay their packages two weeks. This, to ensure that any issues which arise can be caught and Manjaro can skip the bad version. However, this is not always the case. Quite often there's an issue in a library or package where they wait the allotted time and still ship. These are CVE's mostly and quite often have a fix out which manjaro won't ship until the two weeks are up.

Delaying packages is another problem in and of itself too if you're using the aur. What is the aur? Well, if you don't know you shouldn't be using it for one. The next header will discuss this issue

The AUR

The aur, the Arch User Repository, is a collection of scripts which install an application in many different ways. To be clear, this script can do anything on your PC as it's just arbitrary code. This is user submitted, meaning essentially anyone can upload a script to the aur including a person names anus kiss. This is a danger in many cases as we've seen before. For a fun example, anuskuss uploaded an update to the most popular wii emulators aur package which included two calls to an IP tracking website and a list of people who can "go fuck themselves" including homophobic comments and, if I remember, incel rage. The aur will also be where any malaware on linux is most likely to come from and to be distributed there first.

Luckily though, if you know how to read these scripts, it's mostly fine. However, manjaro places the button to enable it right next to enabling snaps and flatpaks. Both of which are perfectly safe to install if not safer than average packages. You need to be able to read the AUR package scripts to be safe.

Secondly, the AUR packages assume ARCH Linux. This means, when you install an aur app, it's assuming dependancies which may be up to two weeks out of date. Either that, or it'll install packages up to two weeks early. Now, if the first happens the AUR package risks breaking. Which is mostly fine. The latter though means system packages can fail. This is not good.

Sure, many people never have a problem with it, but that's not an excuse. This should be much more clear.

Bad info

Please don't use sudo pacman -Syyu to install packages. This will put a heavy load on the arch repositories for no benefit. Please, don't randomly install aur packages. The AUR break your system? Yeah, according to them you fucked up and it's all your fault. I'll admit this is all I can remember here.

Random points

Ever find a site and when you try and go to it firefox says a secure connection cannot be established? That's an expired or non existant SSL cert. They've let their SSL certificates run out 5 times. This is something you can update in less than 5 minutes, and can set up to update automatically in less than 10. It should not happen twice let alone 5 times. The first time they gave users a command to run in a terminal which set their time back in order to trick the system into thinking the cert was good.

Imma stop at this point. Way too long man, and it's way too early for me. I should probably save this somewhere to copy paste when someone suggests the distro

[–] [email protected] 26 points 4 days ago* (last edited 4 days ago) (6 children)

Absolutely. Here's three options

Fedora updates every, or around every, 3 months. This is very stable but very up to date.Most professional devs particularly ones working in Linux projects use it fornit's relative stability while having modern packages.

There's also PopOS! which is a rolling release, updating daily, but much more delayed than arch thus being much more usable.

Now for my favourite, OpenSuse Tumbleweed. Same style as PopOs but with a KDE, or gnome spin or of the box. A bit more sleek too. It also has YAST which is the best GUI based managment system on Linux.

I use arch (btw) but have a second duel booted tumbleweed install for work related stuff in order tonensure stability

[–] [email protected] 6 points 6 days ago* (last edited 6 days ago)

Absolutely not thankfully. I'm in a similar position here personally which is why I love inktober. No matter your skill level, you're always welcome.
To be clear that's the case for the entire event not just this community. It's quite a nice event

[–] [email protected] 10 points 6 days ago (1 children)

As am I, there's some amazing creativity on lemmy.

As for the prompts looks like they're up now on this site: https://inktober.com/rules

 

cross-posted from: https://sh.itjust.works/post/25621677

With permission from @[email protected] the mod of ArtShare

Why this community?

In 8 days inktober starts. I'd like to have a place were people can see others results and discuss their experience daily. After failing to find a community for this event I've created one myself. I'd love to hear peoples thoughts on how this should run though.

What is inktober?

Inktober is a yearly art event intended to improve your inking skills. Every day, there’s a prompt which everyone will draw with either ink on paper or digital inking. You may also dedicate yourself to a half marathon style Inktober by inking every second day.

To be discussed:

My suggestion is that we have a daily round up thread where yesterdays art is collected in one place and, if wanted, vote on our favorite piece to be included at the end of the month in a "community favorites" meta post.

Any suggestion on how this should be run, anything we can do to make this more fun, or something not listed would be greatly appreciated.

Want to help the community?

I'll admit, I don't have the most time. I'd heavily appreciate it if some of you would be willing to become mods so you can make the daily roundup post, pin it, unpin yesterdays, and update a list of these posts. Of course, enforcing the rules and cleaning up spam would also be kind but I understand we all have time issues

[–] [email protected] 4 points 6 days ago

I just love cinnamon orange, but I at one point had some beautiful hot pepper tea too which I wish I could find again

 

This is a place to share your Inktober pieces and to discuss the the prompt, event, or anything related to inking. See this post for more information:

https://sh.itjust.works/post/25621677

Strictly positive as the point is to force ourselves to do this daily with the hope of improving our skills through repetition. Constructive criticism welcome if you can phrase if positively.

Discussion post is live with the intent of talking about how this should be run with my current goals. Feel free to join up and hope into the discussion.

Link to Inkober 2024 community: https://sh.itjust.works/c/[email protected] [email protected]

 

Why this community?

In 8 days inktober starts. I'd like to have a place were people can see others results and discuss their experience daily. After failing to find a community for this event I've created one myself. I'd love to hear peoples thoughts on how this should run though.

What is inktober?

Inktober is a yearly art event intended to improve your inking skills. Every day, there’s a prompt which everyone will draw with either ink on paper or digital inking. You may also dedicate yourself to a half marathon style Inktober by inking every second day.

To be discussed:

My suggestion is that we have a daily round up thread where yesterdays art is collected in one place and, if wanted, vote on our favorite piece to be included at the end of the month in a "community favorites" meta post.

Any suggestion on how this should be run, anything we can do to make this more fun, or something not listed would be greatly appreciated.

Want to help the community?

I'll admit, I don't have the most time. I'd heavily appreciate it if some of you would be willing to become mods so you can make the daily roundup post, pin it, unpin yesterdays, and update a list of these posts. Of course, enforcing the rules and cleaning up spam would also be kind but I understand we all have time issues

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago) (3 children)

Huh, I'm always happy to proven wrong. thank you for bringing this up.

Is this still relevant however with blood testing becoming more prevelant? The main reasons listed are due to harms caused by probing both physical and psychological along with false positives which out-weigh the positives of a 0.128% life saving outcome. It's been 6, nearly 7 years now and prostate testing is both more accurate and non-invasive

Either way, this body is currently in the final research plan stage of updating the recommendation.
https://www.uspreventiveservicestaskforce.org/uspstf/draft-update-summary/prostate-cancer-screening-adults
I'd agree we should stand by the current assessment though until it changes. Thank you for the correction

[–] [email protected] 77 points 1 week ago* (last edited 1 week ago) (14 children)

This is the perfect opportunity to recreationally infect yourself with rare short term diseases. Try breaking your arm or nose so you have a story. Self harm has never been so cheap.

Edit: See evasive_chimpanzee's comment here, as the following seems to be incorrect information

Seriously though get checked for prostate cancer. Especially if you're over 25 it's very possible and catching it early will be a massive difference.

Same for everyone reading this. I doubt it's that expensive so please look into it and get checked if affordable where you are.

[–] [email protected] 4 points 1 week ago

Cock rings and vibrators are my dark horse bet

 

Welcome to week 30 of Reading Club for Rust’s “The Book” (“The Rust Programming Language”).

“The Reading”

Chapter 19 (continued):
https://rust-book.cs.brown.edu/ch18-03-pattern-syntax.html (the special Brown University version with quizzes etc)

The Twitch Stream

Starting today within the hour @[email protected] twitch stream on this chapter: https://www.twitch.tv/deerfromsmoke

https://www.youtube.com/watch?v=ou2c5J6FmsM&list=PL5HV8OVwY_F9gKodL2S31czb7UCwOAYJL (YouTube Playlist)

Be sure to catch future streams (will/should be weekly: https://www.twitch.tv/deerfromsmoke)

 

I'll be clear, quite embarrassingly I bit my tongue hard last night and haven't been talking right all day. Hurts to talk, hurts to eat, and worst of all hot tea is undrinkable. How will I live. Now I know exactly what it feels like to be soldier wounded in combat.

Will resume next week in full force. In the meantime however please feel free to read ahead. Or, alternatively, try out a few leetcode\advent of code questions. This what I'll be doing tonight.

66
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

Saw this a bit ago but didn't think to post about it

To be clear, this doesn't mean coreboot is available now and what is working for devs includes quite a few binary blobs. It's still progress though and good to see.

It's been 5 months but you did ask me to inform you of anything happening @[email protected]

Another link from that article shares more info: https://www.phoronix.com/news/Framework-13-AMD-Coreboot-WIP

More info tends to be posted here: https://community.frame.work/t/responded-coreboot-on-the-framework-laptop/791/428

 
35
submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/artshare
 

Created a while ago from a DnD session where the PC's were stalking a leonin man meeting some friends in a shifty alley, beside a bar using krita along with it's perspective tools. Using Muses brush pack, I'll send a link if requested. Very nice pencil and charcoal brushes.

 

This acts as a reminder that tomorrow Tuesday the 13th at 6:30 EST will be our second meeting, though you're welcome if it's your first time all the same. We'll be discussing what we've learned since last week, what we're doing this week coming, and reading the next two parts of The Book together. Along with that, we'll talk about a new (secondary and optional) stream possibly on Thursdays at the same time going through advent of code together in order to learn rust through code.

Hope to see you all there tomorrow but as always, the Vod will be available afterwards at the youtube channel listed in our Project Portal here: https://sh.itjust.works/post/14184272

11
submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]
 

Streamed Code Together

A streamed reading club focused on rust's The Book and becoming reasonably good rust developers through community collaboration. The end goal is to read the lemmy codebase and contribute to the platform we all love. This stream will serve as a club meeting where we read some of the content together, discuss previous topics, and write some code.

Anybody's welcome, whether you want to continue once we get to the code base or not. If you're completely new to rust this is a great place to start and if you already know the language we'd love to have you all the more. At the very least it's a good networking opportunity but you'll likely learn more than you thought.

Post Stream

After the stream, a discussion post will be made to This Community stating what we've gone over and what we're planing to read/code/do before the next stream. This will act as a place to talk about what you've learned, what issues you're having, how your post-stream learning is going, and to help your fellow lemmings. I strongly encourage posting a comment even if everything you've stated has already been said.

Timing

We will meet weekly at 6:30pm EST (New York Time) on Tuesday with a maximum length of two hours.

Hosting

For now, the host will be myself however if you're interested in hosting or co-hosting yourself please feel free to message me about this especially if you can stream at a time where people in a European or Asian timezone can join in.

Missed the stream?

A video will be available on youtube so you can watch at a later point and a discussion post will be posted here weekly which states what we've gone over and what we're going to do before the next stream.

Links

The weekly stream will be hosted on twitch with that site being our main chatroom. Vods will be available on Youtube after the stream along with a mildly edited version for those who couldn't join in but still want to keep up

Twitch: https://www.twitch.tv/deerfromsmoke

Youtube Playlist: https://www.youtube.com/playlist?list=PL5HV8OVwY_F9gKodL2S31czb7UCwOAYJL

Our Learning Rust and Lemmy Community: [email protected]

Original Post: https://sh.itjust.works/post/13993219

 

cross-posted from: https://sh.itjust.works/post/13993219

The concept

A streamed reading club focused on rusts The Book and becoming reasonably good rust developers through community collaboration. If you're interested, please comment so we know this's something you'd like to join in on.

A Begining

To begin, I'll be setting up a twitch stream where we read through the book together and solve some problems together related to the concepts provided. We'll be able to collaborate in chat, and talk about it here after each stream. This way, we'll be able to lean on each other or just hang out while we learn the language Lemmy uses for it's backend. Other hosts will be welcome as the end goal is to create a group of people whose goal is to support our collective growth as developers

Anybodies welcome of any skill set, whether or not they want to continue on once we get to lemmys code base. If you're completely new to rust this is a great place to start and if you already know the language we'd love to have you all the more. At the very least it's a good networking opportunity but you'll likely learn more than you thought.

Timing

Please comment your availability so we can find the best time and day to do this. As a stand-in and default though, 6:30pm EST (New York Time) on tuesday will be the start time. I'd be available on most days myself after 5pm Eastern Time (new york) though so don't hesitate to suggest another time/date.

Where?

For now, I'll be streaming this on a twitch channel I created a bit ago but never used. The link is here: https://www.twitch.tv/deerfromsmoke

Thank you @[email protected] for the idea.

 
view more: next ›