Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Omarchy development practices lead to predictable security issues

blog.happyfellow.dev

Post reply on HN
Print view View original

341–350 of 480 posts

Re: Omarchy development practices lead to predictable security issues

#341

Post by 6P58r3MXJSLi »

ngcazz wrote: post #328
6P58r3MXJSLi wrote: post #259

Earlier quoted context omitted.

I don't think he's been literal about ethnic cleansing, even though I strongly disagree with his political views on the matter. Anyway, he also supports open weights models, which IMO is a good thing. So maybe separate the artist from the art? He's not running for elections, that's for sure, so as a citizen he can have the political views he likes, doesn't mean the software is bad because of them.

He supports systematic violence against marginalized ethnicities, but he also supports open weight models. or as dril put it drink driving may kill a lot of people, but it also helps a lot of people get to work on time, so, it;s impossible to say if its bad or not,

> drink driving may kill a lot of people, but it also helps a lot of people get to work on time, so, it;s impossible to say if its bad or not,

that's a non sequitur

"that guy is not against driving under the influence, but he also always wears seatbelts and always respects speed limits" FTFY

Re: Omarchy development practices lead to predictable security issues

#342

Post by thesuitonym »

CuriouslyC wrote: post #238
noir_lord wrote: post #189

Earlier quoted context omitted.

It's impossible to know what his politics was back then in fairness. People's politics do often (but not always) change as they age.

10 years ago Joe Rogan was basically a stereotypical Bernie bro.

10 years ago Joe Rogan was a well known douchebag far-right conspiracy theorist, what are you talking about?

Re: Omarchy development practices lead to predictable security issues

#343

Post by Arodex »

dijit wrote: post #315
TehCorwiz wrote: post #191

Earlier quoted context omitted.

See links further down: https://news.ycombinator.com/item?id=49448069

I'm becoming really upset at people whom I otherwise align with for taking absolute statements that don't make sense. DHH said some stuff you disagree with, incidentally while I have always identified with strong social systems, welfare, high taxes and things like free healthcare, I can't say I disagree with the core of what he tried to say, because there has been seizemic ethnic change within a single generation - a…

>there has been seizemic ethnic change within a single generation

There hasn't. Look at actual numbers, and what you see is the same hysteria that was directed against the Jews during the first half of the XXth century: foreign agents, traitors, parasites, nuisance... All for a tiny fraction of the population. All blown up by the same people who are the ones responsible for the misery of the majority of the population - yes, the "whites" are being screwed up by other "whites", not by the "brown" people.

>White English people have no right to exist in India, and White Dutch people don't have a right to live in Zimbabwe.

One: it was English people in Zimbabwe too, and two: they have the right to live there; the problem with them is that they took everything by force and decided the native people where subhuman. Pretending the situation is the same with brown-skinned low-wage immigrants coming in western countries is completely cuckoo crazy.

>it's racist to think anyone else is lesser than natives or to group "them" and treat an ethnic group as a homogenous bloc.

Which is exactly what DHH does. Thank you for agreeing that DHH is a racist.

Re: Omarchy development practices lead to predictable security issues

#344

Post by tolerance »

rbanffy wrote: post #326
fidotron wrote: post #3

This tumblr level of discourse is precisely what the Linux community needs to leave behind.

OTOH, fighting bigotry is something we should never leave behind.

If this comment is at all relevant to the post under discussion then we should all be championing OpenBSD as the premier Anti-Racist® OS of our time.

Re: Omarchy development practices lead to predictable security issues

#345

Post by MarkSweep »

donatj wrote: post #151
dborovikov wrote: post #120

“Full of security holes" - and two examples in the article have been swiftly addressed, ignoring that there is a whole dedicated security team https://omarchy.org/teams/ What kind of blogging is this?

The same kind as a similar recent post [1] where a person pointed out a bunch of problems with Omarchy's shell scripts as examples of it being terrible. Open a pull request. That's how this is supposed to work. Wisdom of the crowd and what not. 1. https://xn--gckvb8fzb.com/a-word-on-omarchy/

Thanks for sharing the link. I think it provides a lot of reasons why installing Omarchy or opening a pull request would be a waste of time. I can’t fix fundamental design flaws in a PR. I don’t want to try to fix apps written in Bash and QML & vanilla JavaScript. There are other ecosystems out there that are built on stronger foundations I can (and do) contribute my time to.

Re: Omarchy development practices lead to predictable security issues

#346

Post by well_ackshually »

Cakez0r wrote: post #40

"full of security holes" but the author could only name one (the two links in the opening paragraph are the same issue). Some people just hate DHH and can't separate the art from the artist

"the artist"

the man shat out a collection of half working shell scripts and bad synthwave background images and every wannabe VC bro felt like a haxxor installing it.

Fucking hell, even Hannah Montana Linux is of higher quality than Omarchy, the bar is low.

Re: Omarchy development practices lead to predictable security issues

#347

Post by bayindirh »

mattstir wrote: post #313
Retr0id wrote: post #26

Earlier quoted context omitted.

It's a political statement disguised as a FOSS project (which itself is fine, all software is political). The funders are not funding the development of a Linux distro, they are co-signing the political statement.

> which itself is fine, all software is political I don't mean to get distracted from the topic at hand, but is that really true? If I create my own software stack for the TRMNL display I received as a gift because I think it's fun and interesting, is that a political statement? What politics does that involve? If someone makes a small Rust library that implements some days structure and a few hundred people find it…

> It's exhausting to go through life if you think every field is a battlefield.

You don't have to think every field as a battlefield, but your choices are affected by and are about your beliefs and stance.

For example, some people believe that going all SaaS for everything in their life is not bad, and they can afford that, so they do that.

I personally don't trust companies much, and value my freedom a lot. So I self host the things I can and find valuable. I have my small infra which is not accessible from open internet, and I install services there if I want them to be unavailable to the public.

I mean, nobody will try to get my mundane code from my hands, but having it in a box in front of me makes me happier and feel better, so I do it.

Also, stances doesn't have to be loud/violent/up to the nose. You can be yourself with your own stance, and build it calmly and slowly. You can be just happy about achieving what you wanted to achieve.

On the other hand, software licenses are of course political and the issue can get heated and gets heated semi-regularly. We're humans and being opposed to each other in various forms is our base nature.

So, don't stay at DEFCON 1 all the time, but aware that range from 1 to 5 is always a possibility.

Re: Omarchy development practices lead to predictable security issues

#348

Post by qarl2 »

grey-area wrote: post #337
qarl2 wrote: post #220

Earlier quoted context omitted.

Come come, let's spec something real. You seem extremely doubtful, why don't you let me show you?

In all seriousness, if you have the time the money and the inclination, you should give yourself a challenge like this, and try to complete it. It would be an interesting exploration of the limits of current agents. You don't need someone else to do that for you.

Well - yes - I have. And the test came back positive.

But it's always possible I'm just being naive in some way. An external challenge makes it more robust.

I don't think I'd want to do an entire linux distro - it's needlessly large to test the hypothesis - but perhaps there's a part that you think would be an interesting challenge?

Post reply on HN