• 0 Posts
  • 73 Comments
Joined 4 years ago
cake
Cake day: March 20th, 2022

help-circle





  • We have Monero and Bitcoin, both are Free Software and public infrastructure that have been running for over a decade with little to no issues at all. I have donated myself to many projects over the last 4 years using these methods.

    But FOSS advocates and leftists hate money so much they prefer donate through centralized, data-mining, corporate-owned, KYC-ridden, transaction-censoring payment processor that freezes funds on a whim like PayPal, GitHub or Patreon using state issued currency that funds wars like petrodollar is…





  • Sonalder@lemmy.mltoLinux@lemmy.mlmac or linux
    link
    fedilink
    arrow-up
    2
    ·
    3 months ago

    Asahi while being an incredible project, that I fully support the people working on it, is not very usable.

    It’s running, sure, but you will miss very important hardware features such as hardware acceleration and speaker. You cannot tell someone “Buy a supported mac and install Asahi on it!” it’s not honest about what how your software will utilized your hardware.


  • Sonalder@lemmy.mltoLinux@lemmy.mlmac or linux
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    3 months ago

    You can use nixpkgs and brew on macOS.

    I have both kernel (GNU/Linux and XNU/darwin(macOS)) and even if there is tons of stuff I don’t like with macOS and their non-repairable hardware I have to admit that battery life, trackpad feeling, monitor, speaker and build quality are very hard to beat.

    But unfortunately due to the undocumented arm architecture of Apple Silicon you will have hard time running GNU/Linux on M macs.

    My MacBook is my last non-linux based machine as of today and I have difficulties switching it even if I want it very bad, some of my software don’t run well on Linux even through Wine/CrossOver and the battery life and idle power are the main reason why I am still using a lockdown OS on one of my laptop.




  • I never said that GitHub was better. I just don’t feel like using a package maintained by a stranger with no tied to neither the software I want to install nor the distribution packages repository.

    Of course installing random code from stranger is never great advice regardless of the distribution source. But AUR is simply not for me, and many users don’t understand the risk or let’s say responsabilities it involves while installing packages from that source.



  • isn’t enough to call it open source

    I never said that ProtonDB was open source.

    you would still have a diverging dataset if you allow people to insert new records in the new app

    An Open source WebApp would not prevent this from happenning either. A community-led fork is nothing if “new entries” are all going through the main open source tool extending the “old” database.

    It would only benefits from having the same code base. Same problem, doesn’t solve it.

    The ProtonDB owners could just decide to not export that data any longer whenever they want.

    I haven’t read the whole license myself so I don’t know all the legal aspect if they were going to do this.

    But if they chose to close the database future entries, I’m pretty confident that the Linux Gaming community will organize themselves to quickly get another app, forking the open database previous from the closing decision. Allowing them to quickly move to a new common place. ProtonDB will probably lost reputation and usage as time goes but this is not a prediction scenario.

    You also can’t change the data being Steam specific when the app is closed source and not accepting contributions

    That’s another (valid) point. But nothing prevent you to build a webapp that periodacly imports from ProtonDB database to show Steam games data while also lists other titles that are not available through Steam creating a new database with your users entries for other platforms.

    Open Source is a way to organize people around a project. ProtonDB author doesn’t seems to want their code to be publicly available for consulting nor for improving or modifying by external people. And that’s their rights to do so. For now, it seems that their projects is benefiting the Linux gaming community and the open license of the database is appreciated. If the project goes in an unexpected direction, people can fork the database which is the most valuable data, more than the code of the webapp.


  • I think OP means that the community feeds a database using a platform they have no real control over, as the source code of the website/WebApp is not public.

    However it is good to remind people that ProtonDB database is published under the Open Database License ODbL at this GitHub repo. To me having the db under an open license is more important than a WebApp (especially now that anyone can build such a website in a probably insecure way, using a 20$ monthly LLM subscription).

    I haven’t digged into the db myself, maybe it does not come with the comments and so and only the borked, silver, gold, platinum labels.

    So yes the website doesn’t seems to be open source but the database is. So anyone could rebuild an alternative from its database (which is probably the most precious part of ProtonDB). If nobody already did it yet, it’s probably because no one felt the need for, as ProtonDB already offer a valid, great and free user experience with currently no reasons to distrust the project.


  • AUR is community-maintained packages intentionally designed to shift security responsibility to users. Without pre-installation vetting, meaning anyone can submit anything on there, making it perfect for malware distribution.

    Of course all code is visible for inspection, community voting exists, and malicious packages can be reported and removed which limit malicious action.

    But now we have LLM that can generate (and distribute) malware and do pretty good code obfuscation so I am not convinced by this model. Honestly I never felt comfortable using AUR (so I avoid it) because I’m not technical enough to review all the code my machine runs.


  • AUR has never been a good idea. I don’t use it and this news proved me right.

    Does that mean a distro official package manager would be immune to infections? Of course not, but they do offer a more secure distribution system and build greater trust. Minimizing the chance of malware being spread through their means.

    Edit: If you have the knowledge and time to inspect the AUR packages you install, AUR might be good for you. I have none of these, that’s why I stick to my official distro packages (and sometimes also some flatpak but from official sources)