Live data from Hacker News

Omarchy development practices lead to predictable security issues

blog.happyfellow.dev

231–240 of 480 posts

Re: Omarchy development practices lead to predictable security issues

#231
post #10

I'm somewhat out of the loop, and it's not really mentioned in the article, but what's with Omarchy getting this crazy amount of financial support from this list of fairly prominent individuals? Until a few weeks ago I'd never heard of it, then what I did hear is that it's being made by a very... uhh, eccentric(?) individual, and now it's suddenly got a crazy amount of funding. What am I missing?

Been hearing about Omarchy for a while (past half a year if not more), but pretty much exclusively on LinkedIn. I don't remember if I follow DHH but I suppose enough of my connections do either way that I often get recommended posts about Omarchy. But I barely hear about it on reddit and I probably saw it mentioned a couple times here on HN

Re: Omarchy development practices lead to predictable security issues

#232
post #10

I'm somewhat out of the loop, and it's not really mentioned in the article, but what's with Omarchy getting this crazy amount of financial support from this list of fairly prominent individuals? Until a few weeks ago I'd never heard of it, then what I did hear is that it's being made by a very... uhh, eccentric(?) individual, and now it's suddenly got a crazy amount of funding. What am I missing?

omarchy is the new "i use arch, btw". I'm too altruistic (or dumb) to understand why you would pump money into a riced arch install. In some way I feel people just try to buy into "street cred" on the other hand omarchy could be a great launchpad for a distro that is customizable, easy enough to use and may provide a great MDM solution at some point.

What mean rice in this context ?

Re: Omarchy development practices lead to predictable security issues

#233

Earlier quoted context omitted.

It’s a really strong UX that’s rapidly improving without a profit motive and people are excited about it. Closest thing to the “it just works” experience that Mac was always known for and it runs great on older hardware. Even goes so far as to optimize the install time down to about 1 minute. I was running i3 when an Ubuntu update borked my entire setup so I made the switch. The difference is night and day in the lev…

> Closest thing to the “it just works” experience that Mac was always known for I see this repeated a lot, but the people I know who tried Omarchy were always fixing something or dealing with breakage from an update. The best argument I’ve heard for Omarchy that is actually consistent with what I’ve observed is that it ships with cool looking default configs for everything that make it feel fun to use. The belief tha…

The main case for Omarchy to me is the OOTB experience, which is more "good to go" than pretty much any other distro, also the hotkeys and config setup are both power user friendly. You are correct that updates have had brick-risk, though I think they've gotten better. I prefer some elements of plasma to the hyprland setup, but agents are very good at making config changes, it's much faster than navigating menus or finding lines in a config file (human work time, maybe not wall clock time).

Re: Omarchy development practices lead to predictable security issues

#234
post #227

Earlier quoted context omitted.

“Europe was better when it was more white” isn’t “conservative leanings”

unfortunately the current conservatives in the US do seem to align with those views

Sadly true. I just felt the person I was quoting was waving it away as if it was a harmless irrelevance. But you’re right, appalling views have become mainstream.

Re: Omarchy development practices lead to predictable security issues

#235
post #200

Look - I'm am the opposite of DHH fan -- that said -- they could fix all these bugs/security issues that same way they created them. It makes sense to some extent to create a product that emphasized what is different about it from a feature/UX perspective so people can consider if it would even be useful to them at all. If they can prove that they have created something useful - then they can fix all these issues. Fi…

They are amazingly good at creating hype (non-derogatory) and getting users.

Their docs say "Omarchy takes security very seriously" - I think that's straight up incorrect.

Saying "go and use it, wanting: its prototype quality and likely to have many security bugs" would be fair game.

That's not what they're doing.

Re: Omarchy development practices lead to predictable security issues

#236
> ... collection of security issues which I can only describe as regrettable (because I promised my mum I would swear less). There are bangers like video title bash injection or all notifications being able to run arbitrary bash on your machine.

Bash injection using video... Titles !? Moterfucking shit (mom's not there anymore to ask me to swear less, RIP)

Re: Omarchy development practices lead to predictable security issues

#237
post #39

Earlier quoted context omitted.

Is it? What's the statement?

That OSS has become too entangled with political activism and ideological gatekeeping, when it should be about making great software, giving people control over their computers, and rediscovering the joy of computing. I don't think Omarchy is anti-political so much as an attempt to revive the enthusiast/hacker ethos of the OSS community.

'OSS "became" too entangled with political activism'

Statements dreamed up by people who get gilliganed by a coconut every morning.

Re: Omarchy development practices lead to predictable security issues

#238
post #83

Earlier quoted context omitted.

Would have rails taken off if he was equally open about his politics back then?

It's impossible to know what his politics was back then in fairness. People's politics do often (but not always) change as they age.

10 years ago Joe Rogan was basically a stereotypical Bernie bro.

Re: Omarchy development practices lead to predictable security issues

#240
post #49

Earlier quoted context omitted.

[flagged]

>So a "hello world" program is now political? There's an implicit political statement in being able to write a simple one line hello world program and run it, using free software and information. Consider the counterfactual world where to even begin programming you have to pay for certification and training or specialized equipment/software. I know paid compilers, proprietary languages and closed specifications exist…

Also, the book that popularized "hello world" was very consciously advancing a programming-first pedagogical agenda, as opposed to building up a theoretical foundation first:

> The only way to learn a new programming language is by writing programs in it.

Post reply on HN