• 0 Posts
  • 395 Comments
Joined 2 years ago
cake
Cake day: January 26th, 2024

help-circle
  • Discover itself doesn’t care about security - it’s the underlying package manager(s) that do.

    Flatpak is perfectly safe IMO, as are the built-in repositories.

    Both Flatpak reviewers and Debian maintaniers do their due diligence when auditing the software they distribute.

    When using distros/repos which are less FOSS purist (such as Ubuntu), you could run primarily into privacy issues. When using smaller ones, the risk of a backdoor or voulnerability is a bit larger, as less eyes are on the code.

    That being said, the only way to be immune to untargeted cyberattacks is to be offline, which isn’t reasonable in this day and age. As long as you stick to your distro’s repo and Flatpak you should be perfectly fine, save for the “normal” voulnerability or two that unfortunately slip through every now and then. You could think of this as a kind of digital “herd immunity”.

    As long as you don’t add repos willy-nilly but think about who you trust, you should be fine.

    So yeah - you can assume Flatpaks and the Debian repos are safe. They have good security policies about adding stuff in and do do their due dilligence. Though, this might change in the future, alrhough it doesn’t seem likely. But for now - you’ll be fine.

    The only real risk is if a backdoor like the recent one in xz-utils does slip through the cracks, but then you’ll be one of millions of affected machines which, while not mitigating the vulnerabilities per se will at least mean the problem will get fixed sooner once it does get found.








  • What will likely happen is that if you try to log into your Facebook account you will get a message that says “Your Operating System is not currently supported. Your user experience will be limited to Groups labeled “Everyone”.”

    That’s basically it. Your personal user experience will be limited to “kid friendly” areas of the Internet. (Same with apps and games.)

    Well, that makes no sense because that means that using an unvetted machine is more beneficial for groomers and predators than a vetted one. Meaning they’ll be incentivized to use that, instead of some perfect system where they’d be easily trackable and held accountable.


  • All the “App Store” apps like Discover are merely frontends for your system’s underlying package manager (apt for Debian and derivatives, dnf for Fedora and its derivatives).

    The underlying package manager does the updating of packages: if you’ve installed it through the package manager (which is usually most stuff on an install) - it’ll get updated.

    Discover just gives you a nice, user-friendly way of interfacing with the package manager(s) on your system so you don’t need to bother with the CLI if you don’t want to (that’s what “frontend” means - a nice, friendly UI for underlying services).

    And yes, you can have multiple - for example apt and Flatpak. Discover and friends should update all.



  • Since when is UX the cause of a need for third-party plugins?

    LaTeX is an incredibly mature piece of software, since it exists for some 50 years and is (and was) incredibly popular. Of course newer players won’t have as much ready-made plugins, let alone first-party packages for most stuff.

    Latex surely had the exact same issue when it wasn’t as mature as it is today, but in time people wrote plugins and in more time they were included as defaults.

    Comparing them quality-wise on equal footing and proclaiming Latex better than the younger, less popular alternative with less developed community code is disingenuous at best.

    And UI/UX has absolutely nothing to do with styling: both are features, and one product happens to have one while the other happens to have the other. They’re not mutually exclusive in theory.

    However, I will give in that usually resource limits mean only one gets included. But that’s corellation and not causation: good UX does not cause bad feature parity. The core cause is both requiring resources and one is usually made the top priority.




  • Why lax the timelines? Companies have an army of employees. They can deal with the consequences, unlike individuals.

    Someone comes home dead from work. Someone’s close family passed away. Someone went to vacation and didn’t get the (snail) mail in time.

    A lot of things make the 10-ish day window of “raise issue now” impossible to honour.

    However, not for companies.

    If people are overworked - hire more.

    If someone’s family member died - there’s everyone else in the section to take care of stuff until they return.

    If the only person responsible for dealing with this stuff is out on vacation, it’s a managerial issue. One that shouldn’t have happened in the first place.

    While the reasons companies raise sound PR-friendly, they’re really not justifications - only mere excuses.

    A company is a system, and if it fails a 10-day deadline of dealing with their financial obligations (after months of failing to provide a core customer service on top), it’s a failing system. The only one whose fault it is is the company itself and its (clearly sub-par) management.

    Individuals can have the excuse of “life happened”. Companies cannot, as they’re not living beings. Especially since sooner or later, everyone is replaceable in their eyes, and because most can always hire more people without a single meaningful change in any KPI.

    About the deadlines: yes, they should be extended. Claimants usually don’t care much abd start the process after months of backlogged claims anyway. Even for a single claimee it’s beneficial - a slower buth more robust system has higher odds of honouring a request.

    However, companies have absolutely no ground to request an extension because they’re big. If anything, it should be shortened.







  • 2.) I’ve always wondered, but didn’t want to get flamed for asking: What if you have pet chickens? I don’t eat them, they live a great chicken life, but I end up with a ton of eggs that I give to people I know. Obviously those eggs are eaten. Does this count as some kind of horrible animal cruelty?

    Hard to say without context. While taking chickens’ eggs does sound (and inherently is cruel), not even animal rights types care too much. It’s just so ingrained in society.

    The difference is when we talk about factory egg farms. Y’know, when they put chikens into their own tiny cage so they can’t turn around in it, their head poking out into the feed box, and they can only lay their eggs into a hatch - no collection required.

    Then the eggs get inspected, worse sent for birthing new chickens, and better ones being sold.

    Then those for breeding chicken get inspected when the gender of the baby can be known, and 99.9% of male eggs get thrown into a fucking shredder (because you only need 1 rooster per 12-ish breeding hens).

    This is what most concerned people have an issue with.