I’m just a random guy on the internet. Don’t believe what I say. Actually, don’t believe anybody says. Analyse, reason, and use trusted sources (= bbc.com, dw.de, pbs.org)

  • 2 Posts
  • 14 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle
  • Ronon Dex@mlem.a-smol-cat.frtoLinux@lemmy.mlThe LINUX DISTRO model is BROKEN
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    2
    ·
    edit-2
    1 year ago

    Although why you would not like or want the latest stable or your app, for example, is beyond me. It’s a stable version, you should want the new features.

    Call me an old man. But I like when things are stable. I don’t like starting my computer, and the software was updated to a new version, and some features disappeared or changed in behavior. This is why I hate the web where people update software right under my nose! With no control from my side.

    These repo contains thousands of orphan packages which are not maintained and will never get any update ever again (proceed to show a list of obscure go modules)

    Have ever checked if you checked how maintained are the dependencies/libraries of your favorite software? It’s a nightmare as well. The distro is not making anything worse.

    You get the duplicated work of maintainers, packaging the same app, multiple times, for multiple supported version of the distro.

    First, the work is not often duplicated. The first maintainer to package will usually upstream patches which make packaging easy. Packagers will look how other distros packagers packaged the app they’re trying to package.

    Also the duplication only happen a few time. Ubuntu just pulled almost all of their packages from Debian Sid. Same with RHEL/CentOS and Fedora. And so on, and so on

    Also you’re overestimating how hard packaging is, most of the time, it’s scripted. (golang modules in debian, are imported in an almost fully automated way)

    You know what distros bring?

    • Security. (My packages were vetted by packagers)
    • Uniformity. (All my software works coherently)
    • Stability. (My software doesn’t break at the will of some third party developer)


  • There has been a lot of discussion in the infosec community about “keepass being insecure” because of CVE-2023–35866

    In this official statement by the devs, they basically explain the criticality of the CVE is basically overblown:

    • You need local access
    • You need an application which was authorized to access your database

    That’s a lot of ifs, even though, theorically, this application with local access and which was previously authorized could change the master password of your database.

    A lot of people in the infosec community recommend 1Password, but IMHO, 1Password is the new LastPass.

    For context lastpass has suffered heavy hacks recently, and it was insecure from the bottom up. Lastpass then lied about the gravity of the hack

    1Password (like LastPass) is closed source and run by a for profit company. My advice:

    • Use KeepassXC
    • If you need sync use Bitwarden
    • If you’re ready to self host, use Bitwarden with Vaultwarden (preferably only accessible behind a wireguard VPN)


  • Unfortunately this is a nightmare to regulate. Whatever regulation a government will come up with, amazon (and all other big tech) will do everything to maliciously comply.

    Look at the french regulation on book prices. The french “directorate for competition, consumers, fraud punishment” told amazon that they could not sell books with free shipping. Books have regulated price in France to garantee equal access to everyone everywhere. The DGCCRF claimed that offering free shipping de facto lowered the price of the books and was unfair to small local book shops. The next day, amazon introduced €0.01 shipping for books…

    I’m all for regulating these assholes to ensure fair competition. But regulating them is not as simple as some people make it sound like. I would hate to be a lawmaker.


  • Calling whataboutism is a logical fallacy used to justify having different standards for yourself and your adversaries. Anybody using whataboutism in place of an actual can be safely dismissed as a troll. Meanwhile, western media is certainly no less biased than CGTN and has been caught lying about China repeatedly.

    What are you on? Whataboutism is not a logical fallacy. We are talking about the bias of CGTN, and you say “what about western media?” Yeah western media are also biased, but it doesn’t take away the fact that CGTN is a heavily biased media outlet, highly biased towards positive chinese news. I never mentioned any western media or said they were superior, but to avoid talking about this difficult topic, you change the narrative. Did I mention anything about western media? No! Because that’s not the topic.

    Whataboutism is not a logical fallacy. Far from it. Whataboutism has been heavily documented as a propaganda technique by many sociologists and rhetoric scientists:









  • Quand on voit la tendance à la hausse depuis sarko, c’est inquiétant…

    Je suis loin d’être un défenseur de la police, mais en cliquant sur des points au hasard (j’ai pas sélectionné), je tombe sur des trucs comme:

    29/08/2011, Neuilly-sur-Seine (Hauts-de-Seine) - La police se met à la poursuite d’un homme en scooter fuyant un contrôle. Il brûle un feu rouge, percute un véhicule qui, selon ses poursuivants, passait au vert. Il chute et meurt. Une enquête est ouverte.

    Qu’aurai du faire la police? Le laisser filer?

    07/01/2016, Paris (Paris) - Vers 11h30, un homme se rend au commissariat de la Goutte d’Or (18ème). Armé d’un hachoir, il aurait tenté d’agresser un agent en criant « Dieu est Grand » en arabe. Les policiers ouvrent le feu. Une ceinture d’explosifs factice est retrouvée sur le corps du suspect, ainsi que des références à l’organisation “Etat Islamique”. Plusieurs témoins contestent la version policière, affirmant que l’homme n’était pas armé et n’aurait pas crié. La famille du défunt déclare que Tarek Belgacem, de nationalité tunisienne, se rendait au commissariat pour actualiser ses papiers. La section antiterroriste ouvre une enquête à son encontre pour “tentative d’assassinat sur personne dépositaire de l’ordre public”. De son côté, son père porte plainte contre X pour “homicide volontaire”.

    Ça m’a l’air d’être clairement un suicide par policier.

    26/02/2019, Bourgoin-Jallieu (Isère) - Vers 19h15, un couple de retraité, Geneviève et Florencio, à bord de leur voiture meurent dans une collision impliquant six voitures près d’un rond-point à hauteur du boulevard Irène et Frédéric Joliot-Curie. L’accident est provoqué par un gendarme en dehors de son service conduisant sa voiture occupée par un collègue et deux enfants. L’homme vient de fêter des retrouvailles durant lesquelles il consomme plusieurs litres d’alcool. Le gendarme est mis en examen pour « homicide involontaire ». L’IGGN mène une enquête. Deux jours après les faits, le militaire est condamné à trois ans de prison dont dix-huit mois ferme par le tribunal correctionnel. Les enfants des victimes accusent la justice de faire un exemple pour couvrir les collègues du conducteur par une « enquête baclée ».

    J’ai un peu du mal à voir le rapport avec “mort suite à l’intervention de la police.” C’est juste un connard qui était ivre au volant, et qui travaillais comme policier. Clairement la famille dénonce un problème de corporatisme, ils ont surement raison, mais le corporatisme c’est pas que dans la police.

    J’ai l’impression que les nombres ont été un peu poussés.



  • The issue with streaming companies is the exclusivity. I would happily pay for Netfix if I could watch Ted Lasso (= Apple+) and Halo (= Paramount+) on it.

    But if you want access to original series you have to buy the platform. I pay around €45 total in VPNs, Seedboxes, Usenet indexers… per month. I would happily pay for Netfix if I had access to everything in the world for up to €50/month. But with netflix you get access to a shitty catalogue on only one device for €8/month… That’s not okay for me.