Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC Debian maintainer has removed all network features

fosstodon.org

Post reply on HN
Print view View original

121–130 of 367 posts

Re: KeePassXC Debian maintainer has removed all network features

#121

Post by MatthiasPortzel »

Dah00n wrote: post #61
fallingsquirrel wrote: post #23

Earlier quoted context omitted.

Sure, but that doesn't change the fact that a point release suddenly broke everyone's workflows and is causing maintenance headaches. I don't think the technical minutia of how exactly things were broken is the issue. If Debian shipped a Linux kernel point release that disabled networking I think people would be similarly upset, even though it's also just a build option and intended to be a valid build configuration…

>If Debian shipped a Linux kernel point release that disabled networking That is not comparable. "If Debian shipped a Linux kernel point release that removed a risky networking plugin and some disabled-by-default plugins and made a -full version" that would be comparable.

It’s exactly comparable. The browser-autofill functionality in KeyPassXC is not a plug-in and it’s not risky. The person saying that is the Debian maintainer.

Re: KeePassXC Debian maintainer has removed all network features

#122

Post by arp242 »

trallnag wrote: post #76
arp242 wrote: post #42

Earlier quoted context omitted.

That Canonical guy is not coming off brilliantly there. I appreciate that reasonable people can disagree on the best way to package this, but these kind of strong absolute statements – together with calling useful features "misguided" and "crap" – is not great, to put it mildly. I'm pretty sure some compromise could theoretically be reached here. But not with that attitude. "It is our responsibility to our users to p…

What's the alternative to Debian / Ubuntu now that CentOS is gone?

AlmaLinux and Rocky Linux are continuations of CentOS; I have no experience with either but that would be the logical place to start.

Re: KeePassXC Debian maintainer has removed all network features

#123

Post by yjftsjthsd-h »

cjk2 wrote: post #82
worble wrote: post #79

Earlier quoted context omitted.

Well no, what the user is actually being given is a completely different application than the original one they downloaded, which is now increasing the maintenance burden upstream because THEY are they one getting all the bug reports because Debian decided to swap the packages out from underneath their users: https://github.com/keepassxreboot/keepassxc/issues/10725#iss... > This is now our fourth bug report because o…

It's not completely different. They patched stuff out. And I, as an end user, am absolutely fine with that, as a user of vim-nox package etc etc...

But vim-nox is a separate package with a clear name saying that it's got X removed; I don't think this would be nearly as controversial if they'd shipped a keepassxc-nonetwork package.

Re: KeePassXC Debian maintainer has removed all network features

#124

Post by nulld3v »

Dah00n wrote: post #61
fallingsquirrel wrote: post #23

Earlier quoted context omitted.

Sure, but that doesn't change the fact that a point release suddenly broke everyone's workflows and is causing maintenance headaches. I don't think the technical minutia of how exactly things were broken is the issue. If Debian shipped a Linux kernel point release that disabled networking I think people would be similarly upset, even though it's also just a build option and intended to be a valid build configuration…

>If Debian shipped a Linux kernel point release that disabled networking That is not comparable. "If Debian shipped a Linux kernel point release that removed a risky networking plugin and some disabled-by-default plugins and made a -full version" that would be comparable.

Hmm, excluding the comment about the missing "-full" version, I don't see how it is not comparable. There is nothing that makes the networking code in KeepassXC more "risky" compared to the networking code in Linux.

Re: KeePassXC Debian maintainer has removed all network features

#125

Post by Arnavion »

worble wrote: post #79
cjk2 wrote: post #72

Earlier quoted context omitted.

I think you'd have to actually ask the users about that. Not make assumptions based on some loud people on a Mastodon thread. What the user is given here is a choice.

Well no, what the user is actually being given is a completely different application than the original one they downloaded, which is now increasing the maintenance burden upstream because THEY are they one getting all the bug reports because Debian decided to swap the packages out from underneath their users: https://github.com/keepassxreboot/keepassxc/issues/10725#iss... > This is now our fourth bug report because o…

Users should ideally report bugs to their distribution, not to upstream. The distribution package maintainer then does triage to determine if the issue is specific to the distribution package or should be forwarded upstream.

That's how it used to be in the past (and still is for enterprise distros because you might as well use the support contract you paid for). But lately users have gotten more savvy about talking to upstream directly, especially since more and more upstreams are now on easy-to-use websites like GitHub instead of mailing lists. That's still fine if users do their own diligence to ensure the issue is with upstream and not with the distribution package, but alas they don't all do that, leading to these spurious reports.

Re: KeePassXC Debian maintainer has removed all network features

#126

Post by TheBicPen »

trallnag wrote: post #76
arp242 wrote: post #42

Earlier quoted context omitted.

That Canonical guy is not coming off brilliantly there. I appreciate that reasonable people can disagree on the best way to package this, but these kind of strong absolute statements – together with calling useful features "misguided" and "crap" – is not great, to put it mildly. I'm pretty sure some compromise could theoretically be reached here. But not with that attitude. "It is our responsibility to our users to p…

What's the alternative to Debian / Ubuntu now that CentOS is gone?

Fedora

Re: KeePassXC Debian maintainer has removed all network features

#128

Post by nulld3v »

kernal wrote: post #84

I like this solution. He reduced the attack vectors in the base application by removing features a large majority of people don't use. And if they want these additional features then download the full version.

> features a large majority of people don't use.

I would be shocked if this was true. I have recommended KeepassXC to many of my friends and family and they all use at least one of the features that was in the removed list. To be fair, none of them use debian, but some of them do use other Linux distros.

I don't use debian on desktop anymore on my main machine, but I did use BunsenLabs for a long time and even back then KeepassX (and afterwards KeepassXC) auto-type was a critical feature I used literally every day.

Re: KeePassXC Debian maintainer has removed all network features

#129

Post by yjftsjthsd-h »

trallnag wrote: post #76
arp242 wrote: post #42

Earlier quoted context omitted.

That Canonical guy is not coming off brilliantly there. I appreciate that reasonable people can disagree on the best way to package this, but these kind of strong absolute statements – together with calling useful features "misguided" and "crap" – is not great, to put it mildly. I'm pretty sure some compromise could theoretically be reached here. But not with that attitude. "It is our responsibility to our users to p…

What's the alternative to Debian / Ubuntu now that CentOS is gone?

It really depends on your usecase; I'm personally fond of OpenSUSE and Alpine Linux. OpenSUSE is more "conventional" like Debian/RHEL, and Alpine is a touch idiosyncratic (mostly, musl as its libc means 3rd-party binaries often won't work) but is tiny ant fantastic when it does work for your usecase.

Re: KeePassXC Debian maintainer has removed all network features

#130

Post by yjftsjthsd-h »

lawn wrote: post #87
trallnag wrote: post #76

Earlier quoted context omitted.

What's the alternative to Debian / Ubuntu now that CentOS is gone?

Arch Linux and Void Linux are both worth a look I'd say.

Rolling-release distros are unlikely to fit into the same usecase as a slow-moving stable-release distro.
Post reply on HN