That makes sense, but what’s the alternative here? Linux is freedom, so that means freedom to run / install anything you want, including malware if you’re not careful. Maybe if you discourage people from using the AUR, they will install it through other means, like a developer-provided Flatpak or AppImage. But if that’s not available or doesn’t work, then it’s nothing (= sad user), or you’re back to “Google, then download an .exe the first thing you can run” or just curl | sh. Is that better? (Assuming we’re still talking about the kind of people who would skip vetting what they install.)
copygirl
Just a dorky trans woman on the internet.
My other presences on the fediverse:
• @copygirl@fedi.anarchy.moe
• @copygirl@vt.social
- 30 Posts
- 219 Comments
If I learned anything with Steam it’s to never install it as a Flatpak.
I keep hearing this claim online but the Arch bible (which you really should be familiar with if you use Arch) and pretty much everyone that knows anything will tell you that the AUR is useful, but not something to blindly use. I recommend everyone check the
PKGBUILD, verify the source URLs are correct, and check the diffs when updating. It’s not that much effort.And since it comes from a single (user) package repository, you’ll probably have hundreds of people doing the same, or even going a step or two further and looking into the code, reporting the package if anything bad is going on. Still miles better than downloading
.exefiles you find from a Google search, even if you were lazy and didn’t do the aforementioned checks. (But if you don’t do that, you should probably just use Flatpaks or similar.)
I already left !programming@programming.dev because I was sick of seeing AI related posts. I would appreciate it if this didn’t also become a place where people talk about AI constantly, whether it’s related to FOSS or not. My ask is: Move the AI related posts to an AI-adjacent community or create one. Perhaps I’m not the only one who shares this wish.
copygirl@lemmy.blahaj.zoneto
Programming@programming.dev•Separate community for AI coding?English
22·3 months agoNot a perfect analogy, but as far as a lot of people’s sentiment goes, it would be more in line with a world in which only vegan cooking methods existed, but some people discovered that you could also eat animals. In which case it would be very understandable that recipes involving meat should not be discussed in existing cooking related communities.
copygirl@lemmy.blahaj.zoneto
Programming@programming.dev•Separate community for AI coding?English
20·3 months agoI’ve been tempted to make my own thread on this. There’s too many AI related posts and I, personally, really don’t want to see them. So for me it’s really a question of whether to introduce a rule to disallow AI related posts (and move them to a dedicated community), or me having to stop participating in this community altogether.
copygirl@lemmy.blahaj.zoneto
QueerDefenseFront@lemmy.blahaj.zone•Trans Spider-Woman English
11·3 months agoThe entity formerly known as Spider-Man.
copygirl@lemmy.blahaj.zoneto
Linux Gaming@lemmy.world•Hytale has arrived in Early Access with Linux supportEnglish
23·4 months agoAnd according to their own server manual, they might be supporting in-game pay shops for servers in the future.
Future Additions – Integrated Payment System
A payment gateway built into the client that servers can use to accept payments from players. Optional but encouraged.
So I’m happy to wait to see how hard they’re going to be pushing this and MTX in general …
copygirl@lemmy.blahaj.zoneto
No Stupid Questions@lemmy.world•If you're a parent, how do you prevent your kid from watching AI slop?English
3·4 months agoWhile it’s nice to just avoid the clickbait while enjoying potentially genuinely good videos, I ended up uninstalling the extension. I want to explicitly avoid clickbait, and focus on encouraging and supporting creators that don’t use it. Also, if I end up unknowingly interacting with too many clickbait-y videos, I worry the algorithm will push me more of that.
copygirl@lemmy.blahaj.zoneto
Firefox@fedia.io•It just keeps getting worse - Firefox to "evolve into a modern AI browser"English
2·4 months agoNice straw man.
copygirl@lemmy.blahaj.zoneto
C Sharp@programming.dev•why the code is not working?English
6·4 months agoMy recommendations would be:
- Do not rely on
GC.Collect()in any real program code. Just let the GC do its thing. - If you need guarantees about when the destructor (or equivalent) is called, use the dispose pattern and use a
usingstatement or declaration explicitly soDisposegets called as soon as possible.
class DestructorDemo : IDisposable { public string Name { get; set; } public DestructorDemo(string name) { Name = name; Console.WriteLine($"demo object {Name} constructed"); } public void Dispose() { Console.WriteLine($"demo object {Name} disposed"); } } using var obj1 = new DestructorDemo("obj1"); using (var obj2 = new DestructorDemo("obj2")) { Console.WriteLine("Press key to dispose 'obj2'"); Console.ReadKey(); // obj2 goes out of scope at the end of the block // this will automatically call `.Dispose()` on it } Console.WriteLine("Press key to dispose 'obj1' and exit"); Console.ReadKey(); // obj1 goes out of scope hereNote that this code is just to showcase the
usingkeyword (in relation toIDisposable). If you want to implement the disposable pattern properly you should look at the help article I linked. Such as making sure thatDisposeis called even if the object is naturally garbage collected, that is if you forget to useusing. (I also didn’t check the validity of the code but it should get the idea across.)- Do not rely on
copygirl@lemmy.blahaj.zoneto
Linux@programming.dev•Linus Torvalds is OK with vibe coding as long as it's not used for anything that mattersEnglish
464·5 months agoI can understand that way of thinking, but
- you’re at risk of becoming dependent, and not building the understanding you’ll need to make something that matters
- many things start out as hobby projects that end up mattering after all
Computers have become more complicated than when he learned to code and was “typing in programs from computer magazines.” Vibe coding, he said, is a great way for people to “get computers to do something that maybe they couldn’t do otherwise.”
But the equivalent would be to take tutorials, examples and small open source projects and tinkering with them, rather than asking a machine to do it for you, no? I guess we’ll have to see how this affects young / beginner programmers going forward. I’d rather be careful than just hoping it all works out fine.
Or worse, “nevermind, fixed it”.
Selhosting and a vpn are optional depending on your use case; the app works with niether to help users try it out and get started. Like all secure messaging apps, its better to selfhost given the option.
I’d say self-hosting is done for control over your data, not security. A typical end user will not know how to self-host, how to pick a privacy-respecting VPN, let alone secure their system. If your aim is to get to that same level of security, then I feel like the current direction is flawed, at least from what I took away from the readme.
Or, in other words, “self-hosting is more secure given the option” sounds kind of like “writing your own software is more secure”.
This project is aiming to create the most secure and private chat app. It will heavily depend on how you use it. Here are some reccomended security optimizations/advice to keep your data secure and private:
- Use a self-hosted instance of the app.
- Use a VPN to protect your data from being intercepted.
- Only connect to trusted peers.
- Validate public key hashes.
- You and your peer should use a secure device/os/browser with the latest updates.
- use general security practices like not sharing sensitive information, not clicking on suspicious links, etc.
These recommendations are bizarre.
- Is it really P2P if you need to a host your own instance?
- Use a VPN? So a company can now track you instead of the ISP?
- If it’s aiming to be safe, then why not share sensitive information?
If you want secure and private, then I would first look at Session.
copygirl@lemmy.blahaj.zoneto
Showerthoughts@lemmy.world•people who use AI a lot would probably be the most likely to get their exact wish from a genie.English
3·7 months agoAnd of course, that response cost you one wish credit.
copygirl@lemmy.blahaj.zoneto
Modded Minecraft@sopuli.xyz•Journeymap Waystone Beacon PickupEnglish
3·8 months agoI’m unsure why it changed since you moved to a server, but the config file
config/waystones-common.tomlhas a bunch of settings for balancing / restricting waystones, like for example making naturally spawned waystones unbreakable.
copygirl@lemmy.blahaj.zoneto
Transfem@lemmy.blahaj.zone•How did you settle on a name?English
12·8 months agoMy chosen name, Tess, was literally picked from a variable name from de-obfuscated Minecraft code over a decade ago. It said
Tesselator tess = ...or something like that. And I thought “that sounds neat”. Some time after, I found out it’s also a real name used by real people in the real world.
copygirl@lemmy.blahaj.zoneto
Modded Minecraft@sopuli.xyz•I lost all my items because I was dumb enough to try sleeping in the overworld [Compression]English
12·8 months agoTo explain: The world you spawn in in Compression is not the Overworld. It’s a trashdump between dimensions, which is why everything is broken, and why beds explode on use, as they would in the Nether or End. (Yes, it also got me when I was trying to sleep in a villager’s bed, not thinking hard enough.)




















Now add the music from the breakdancing cat meme.