• 1 Post
  • 210 Comments
Joined 4 years ago
cake
Cake day: February 15th, 2021

help-circle

  • I don’t understand the posh stylistic decisions around padding, rounded borders, etc. How do those things make the UI better exactly?

    As someone who used low resolutions for most of my University years (I did my thesis in a tiny ultralaptop), I relied heavily on a custom gtk2 theme I had to write to remove most of that padding that made the UI feel so unnecessary and my screen so cramped.

    Gnome now pushing for removing theming completely and relying on just color scheme customization feels totally backwards to me. I don’t have an answer for OP sadly… other than just using terminal / tui apps more whenever possible.



  • True. Same for Android. I feel some form of that should be part of the approach. Splitting it carelessly would likely either:

    A) result in no real change: ie. instead of allocating budgets within Google, they’ll just exchange money through deals and partnerships, as separate companies, but still having pretty much the same relationship between projects and level of control (Android & Chrome would continue favoring Google interests, even as independent companies), and they’ll keep being monopolies each within their own fields (I don’t see how that’s being addressed with the split).

    B) result in independent projects that push for monetization and shady schemes to try and be profitable on their own (although, to be honest Mozilla has proven that being non-profit is not a shield against this either). This actually might be a good thing if the enshittification manages to get people to switch away from Chrome to a better alternative… but I wouldn’t be so sure of that (both that they would move, or that they’d choose a better one …as opposed to say MS Edge which has just as bad of a ruler).


  • It’s true that they say both things out of comfort.

    Though to be completely honest, both statements are not contradictory. They are not necessarily accepting that they do have something worth hiding, but just stating that hiding is too difficult these days anyway. That does not mean (sadly) that they would start doing it were it easier, just that they have even less of a motive to care about it now that hiding is so much harder (to the point of almost being “a myth”).

    I’m not saying they are right, I’m saying that lack of consistency is not the problem with that attitude. It’s not a “shift”, just a consistent continuation of a lazy attitude towards comfort.


  • Stock Android does not have tools to do that verification. Just verify it from the desktop and then send it to your Android device.

    But I don’t see how verifying the apk signature would help if your concern is that “you have bare to none knowledge how it works”. The only thing that would fix that would be if you actually learn how it works.

    Luckily, unlike other stores that are closed source and actively and purposefully hide from you what they do, F-Droid is open source, so anyone can go to the repo holding their source code and learn how it works, or build their own themselves, as long as they wanna spend that much effort.



  • FerktoPrivacy*Permanently Deleted*
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    2 months ago

    You share public keys when registering the passkey on a third party service, but for the portability of the keys to other password managers (what the article is about) the private ones do need to be transferred (that’s the whole point of making them portable).

    I think the phishing concerns are about attackers using this new portability feature to get a user (via phishing / social engineering) to export/move their passkeys to the attacker’s store. The point is that portability shouldn’t be so user-friendly / transparent that it becomes exploitable.

    That said, I don’t know if this new protocol makes things THAT easy to port (probably not?).


  • FerktoOpen SourceSoftware as a public good
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    3 months ago

    I’m ok with not considering it “public good” when something has a license that sets conditions and it’s under Copyright of a particular private person/entity. But if you do need to ask consent to a private party for the use of something in a derivative work of certain conditions, then I don’t think it makes sense to call it a public good.


  • FerktoGamingNintendo files lawsuit against Palworld
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    3 months ago

    Yeah, it protects Jimmy from having to unconditionally contribute to society & its many organizations.

    It allows Jimmy to set conditions and control who can use it and who cannot. For example, he can ally with one particular big corpo (or even start building one himself) so they can hold that thing hostage and require agreements/fees for the use of that thing for a long long time.

    So now, instead of all people, including big (and small) corpos, having free access to the idea, only the friends of Jimmy will.

    The reality is that if it wasn’t for Jimmy, it’s likely that Tommy would have invented it himself anyway at some point (and even improved on it!). But now Tommy can’t work on the thing, cos Jimmy doesn’t wanna be his friend.

    So not only does it protect Jimmy from having to contribute to society without conditions, it also protects society from improving over what Jimmy decided to allow (some) people access to. No competition against Jimmy allowed! :D

    Even without patents, if the invention is useful I doubt the inventor will have problems making money. It would be one hell of a thing to have in their portfolio / CV. Many corpos are likely to want Jimmy in their workforce. Of course, he might not become filthy rich… but did Jimmy really deserve to be that much more richer than Tommy?


  • FerktoGamingNintendo files lawsuit against Palworld
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    3 months ago

    There are many games that had that mechanic before Arceus.

    In particular, Craftopia (which is from the same developers of Palworld) had capsule devices that you can throw to enemies in a “virtual space” while characters “engage in combat” before Arceus was a thing.

    Just because they wrote a patent does not make it enforceable… patents don’t really mean anything until they are actually tested in court so they are just tools to try and scare people away whenever a company wants to bully with the prospect of a lawsuit.

    I feel that Palworld is likely to win this, this actually is an idiotic move from Nintendo and a win for Palworld… now they will get more publicity, perhaps another spike in sales, and they are finally given the opportunity to prove how they are in the right, so they can shut up all the naysayers who complained about it. I’m hoping all the paranoic empty claims about “blatant asset theft” will be settled once and for all.


  • Yes, that’s why im saying that this kind of problem isn’t something particular about this project.

    In fact I’m not sure if it’s the case that the builds aren’t reproducible/verifiable for these binaries in ventoy. And if they aren’t, then I think it’s in the upstream projects where it should be fixed.

    Of course ventoy should try to provide traceability for the specific versions they are using, but in principle I don’t think it should be a problem to rely on those binaries if they are verifiable… just the same way as we rely on binaries for many dynamic libraries in a lot of distributions. After all, Ventoy is closer to being an OS/distribution than a particular program.


  • Yeah, it definitely is more appealing from a marketing perspective.

    I do understand why some projects might wanna use the term, it’s to their advantage to be associated with “open source” even if the source code itself has a proprietary license.

    The problem is that then it makes it harder / more confusing to check for actually openly licensed code, since then it’s not clear what term to use. Already “free software” can be confused with “free as in free beer”.


  • That discussion concluded essentially the same thing I said: that both the OSI and the FSF have essentially the same conditions and that “merely having the source available is not enough to meet what the OSD defines as open source” (sic).

    Don’t police perfectly innocent and common use of language please.

    Using “open source” for all kinds of source, regardless of how restrictive its license is, is definitely not a common use of the term.

    People aren’t gonna start using “open source” like that just because a few people find it more convenient for the marketing of their projects. To me it sounds like they are the ones policing to push for a particular language standard against what people commonly use, which is what makes language prescriptive, instead of descriptive.



  • According to the definition from the Open Source Initiative, “open source” also requires free redistribution. See the first point (emphasis mine).

    1. Free Redistribution

    The license shall not restrict any party from selling or giving away the software as a component of an aggregate software distribution containing programs from several different sources. The license shall not require a royalty or other fee for such sale.

    It also requires freedom to distribute modifications:

    1. Derived Works

    The license must allow modifications and derived works, and must allow them to be distributed under the same terms as the license of the original software.

    CC-BY-NC-ND is not “open source” (both due to the NC and the ND), it’s more of a “source available” type of license (when applied to source code). The difference between “free software” and “open source” is more ideological than anything else, they both define the same freedoms, just with different ideological objectives / goals.



  • That’s ok if we are talking about malware publicly shown in the published source code… but there’s also the possibility of a private source-code patch with malware that it’s secretly being applied when building the binaries for distribution. Having clean source code in the repo is not a guarantee that the source code is the same that was used to produce the binaries.

    This is why it’s important for builds to be reproducible, any third party should be able to build their own binary from clean source code and be able to obtain the exact same binary with the same hash. If the hashes match, then you have a proof of the binary being clean. You have this same problem with every single binary distribution, even the ones that don’t include pre-compiled binaries in their repo.