• 4 Posts
  • 31 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle










  • We don’t need to trust anybody.

    Reviewing every change and discovering every issue is unfeasible on multiple levels. Even skipping that fundamental, base level requirement; you need to trust in trustworthiness from submitters and reviewers, and that people review. You need to trust those maintainers that can push and pull and merge. You need to trust the builders and publishers and distributors.

    I doubt you’re reviewing every code change and compiling or verifying reproducible builds on every software and patch version you run. You put trust in the chain. And the chain decided to cut at some point because of risk.

    Besides, the idea that employed developers with a Russian day job are a risk… but one fails to consider these were the honest ones who declared their day job.

    So you think people do only one job and have only one concern? Do you think people of sanctioned countries, contributing to an unjust war, more or less directly, are a bad place to start reducing risks?

    I feel like properly vetting commits to the kernel that does not involve the core contributors and maintainers too much is the way to go.

    I’m baffled you can make this point while at the same time not accepting their decision after review, assessment, and consequence. You’re asking them to review while not accepting their decision. From the same people.


  • Microsoft needs some serious regulation.

    Given their OS prevalence, their forceful push to cloud and cloud system user accounts is unacceptable. Optional suggestion would be fine; but they’re doing the opposite.

    OS upgrades forgetting other programs and other program file associations while at the same time making it much harder to change them is unacceptable. Offering or suggesting their own products in a non-intrusive manner would be fine; but they’re doing the opposite.

    There’s much more to criticize. But those are the worst and obviously unacceptable offenders to me.

    Some niches switching to FOSS won’t change their dominance or behavior. Only forceful regulation by state unions will.






  • https://floss.fund/

    Who can apply?

    Individuals, projects, groups, communities, or organisations can apply. The application can be for a specific project or an entity representing many projects or FOSS efforts. The applicant or the legal entity must have a bank account and the necessary tax documents (which vary between jurisdictions) to receive funds.

    Currently, our focus is on supporting existing, widely used, and impactful projects to specifically contribute to their sustainability. Very new projects or projects with minimal usage are not considered for the time being.