Live data from Hacker News

Omarchy development practices lead to predictable security issues

blog.happyfellow.dev

151–160 of 479 posts

Re: Omarchy development practices lead to predictable security issues

#151

“Full of security holes" - and two examples in the article have been swiftly addressed, ignoring that there is a whole dedicated security team https://omarchy.org/teams/ What kind of blogging is this?

The same kind as a similar recent post [1] where a person pointed out a bunch of problems with Omarchy's shell scripts as examples of it being terrible.

Open a pull request.

That's how this is supposed to work. Wisdom of the crowd and what not.

1. https://xn--gckvb8fzb.com/a-word-on-omarchy/

Re: Omarchy development practices lead to predictable security issues

#152

Yo, why is my blog post title editorialised? It should've said "Merchants of Insecurity". Rude!

Probably so people can understand what the post is about and can skip the rage-bait?

How is my title a rage bait?

The current submission title is terrible, "Omarchy development practices lead to predictable security issues" would be much closer.

Re: Omarchy development practices lead to predictable security issues

#153
post #26
post #10

I'm somewhat out of the loop, and it's not really mentioned in the article, but what's with Omarchy getting this crazy amount of financial support from this list of fairly prominent individuals? Until a few weeks ago I'd never heard of it, then what I did hear is that it's being made by a very... uhh, eccentric(?) individual, and now it's suddenly got a crazy amount of funding. What am I missing?

It's a political statement disguised as a FOSS project (which itself is fine, all software is political). The funders are not funding the development of a Linux distro, they are co-signing the political statement.

[flagged]

Re: Omarchy development practices lead to predictable security issues

#154

Not following Omarchy, not even sure what it is trying to be compared to existing distros (other than an incredibly hyped up product). Not hating on DHH. But hasn't he become famous for developing a web framework (20 years ago), rather than for his technical prowess as a systems-level engineer? Seeing these kinds of bugs is not exactly unexpected.

It has nothing special compared to Arch. In fact, I would argue its just dotfiles for Arch.

Re: Omarchy development practices lead to predictable security issues

#157
post #44

Earlier quoted context omitted.

It's quite a loud one, but it's broadcast above 25KHz or so

wut? haha

Just to explain because not everyone is necessarily a native English speaker or gets the reference.

This is a reference to a dog whistle. Above 25kHz are sounds that dogs can hear but humans generally can't.

The term dog whistle is used to refer to phrases that racists use to indicate their racism, while sounding plausibly deniable. The idea is that it's a phrase that will make other racists realize that you are one of them, while not sounding openly racist to others.

DHH himself has gone beyond dog whistles. He's directly compared what he considers undesirable ehtnic populations to wolves who need to be shot. He's just openly calling for ethnic cleansing by now.

But support for Omarchy itself can be seen as a dog whistle. It's widely known that DHH is a fascist, but you have some plausible deniability by donating to Omarchy because you're just politically neutral and think it's cool tech, or something like that.

Re: Omarchy development practices lead to predictable security issues

#158
post #44

Earlier quoted context omitted.

It's quite a loud one, but it's broadcast above 25KHz or so

wut? haha

Beyond human hearing for a whistle but within the frequency a dog can hear a whistle, i.e. a slightly tongue in cheek way to call it a dog whistle.

Re: Omarchy development practices lead to predictable security issues

#159
post #10

I'm somewhat out of the loop, and it's not really mentioned in the article, but what's with Omarchy getting this crazy amount of financial support from this list of fairly prominent individuals? Until a few weeks ago I'd never heard of it, then what I did hear is that it's being made by a very... uhh, eccentric(?) individual, and now it's suddenly got a crazy amount of funding. What am I missing?

It’s a really strong UX that’s rapidly improving without a profit motive and people are excited about it. Closest thing to the “it just works” experience that Mac was always known for and it runs great on older hardware. Even goes so far as to optimize the install time down to about 1 minute. I was running i3 when an Ubuntu update borked my entire setup so I made the switch. The difference is night and day in the lev…

> Closest thing to the “it just works” experience that Mac was always known for

I see this repeated a lot, but the people I know who tried Omarchy were always fixing something or dealing with breakage from an update.

The best argument I’ve heard for Omarchy that is actually consistent with what I’ve observed is that it ships with cool looking default configs for everything that make it feel fun to use.

The belief that everything just works seems more like a belief perpetuated by the messaging push behind it. Every time real issues pop up they get explained away as being due to someone’s local config changes or forgiven because it’s a young project. Even in this thread there are dozens of comments downplaying security issues as not a problem because they will get fixed, which is a symptom of a project where the messaging has gotten ahead of the facts.

Re: Omarchy development practices lead to predictable security issues

#160

Earlier quoted context omitted.

That OSS has become too entangled with political activism and ideological gatekeeping, when it should be about making great software, giving people control over their computers, and rediscovering the joy of computing. I don't think Omarchy is anti-political so much as an attempt to revive the enthusiast/hacker ethos of the OSS community.

"Freedom to compute" cannot be separated from "Freedom to exist" as it explicitly depends on it. The authors of Omarchy pay lip service to the former while taking a stance against the latter.

[flagged]
Post reply on HN