JVM, ELF, Mach-O,… binaries are infinitely worse when the attack vector is “compromised dev machine”.

I’m not sure how anyone would even try to argue against that.

I just wanted to ask, how do they build C libraries in JAVA world? And if the answer is they don’t, they just ship binaries, then that’s infinitely worse. And you just confirmed that’s the case 😲😄.

X eyes

🤣

I didn’t know that meme was still going.

Thank you. I think I knew of disroot, but now I will bookmark them.

I also just remembered tangled, which would have been an interesting federated option, if a lot of people haven’t decided to hate anything that touched the AT protocol.

SourceHut

but he holds solid views ethically

😊

If I want to move away from GitHub, and I don’t like GitLab’s bloatiness, or Codeberg’s general vibe, what options do I have that are not run by someone in his basement?

I’m aware of radicale. And there is also a russian forge I saw some people flock to because of the DMCA mafia. But my repos are not that edgy 😉.

Fork zig as a side project, adopt the 6 weeks release cycle, create a roadmap with v1.0 to be released in 60 weeks, which is enough time for 3 alphas, 3 betas, and 3 release candidates.

Did Codeberg even have a slop repo problem?

I can’t imagine a person who chooses to use Codeberg will be bad at utilizing LLM’s in any case, especially since SlopHub is right there for the worst sloppers to publish in and maybe win some fake points.

This just feels like some people couldn’t stop themselves from doing some posturing!

To be fair, projects implemented in Rust and adopting the GPL/AGPL are just not that notable.

I mean, you can’t expect people here to have heard of, let’s say, that thing called Lemmy.

Fun is when you’re allowed to achieve what you want to achieve with less bullshit to worry about.

Or in more respectable technical terms, when you’re allowed to focus on core logic above everything else.

3. The bugs were always there. And some are just not happy with their incompetence getting surfaced/exposed.
4. 🟢 All of the above.

My friend just got dumped. And from what she’s telling me, he is the worst person ever.

kek

Is it just me, or is the “among others” in the title made it sound like an outbreak, instead of referring to other projects?

Dare I ask, what ssh thing?

Side Note: It was already believed that SSH encryption was broken by state actors since the first NSA leaks. So, people should at least always use it over another encrypted channel anyway.

Does it qualify as cognitive dissonance maintaining a fork of a partially vibe-coded product to remove vibe-coding tooling because you hate vibe-coding?

skill issue

People can distrust whomever they wish to. But hallucinating factually inconsistent and logically incoherent theories around that distrust is another matter.

What part does switching from dual-licensed software to GPL-licensed software to MIT-licensed software play in an evil plan? Are there sky angels out there preventing evil doers from adding backdoors to binary packages of AGPL-licensed software in particular?

My innocent self thought these “theories” only get purported by YouTube/X teenagers. I guess I was wrong.

sudo is not GPL software, chrony didn’t even complete a year as a default choice in Ubuntu, and gpsd actually adopts a BSD license. Read the comments @[email protected] wrote in this thread.

Waiting for imaginary events to happen is not needed. We already know how these things actually turn out.

It’s kind of funny how you didn’t pick up on the connection between 3 and 4 😉