Omarchy development practices lead to predictable security issues • Hacker News Board

Re: Omarchy development practices lead to predictable security issues

#471

Post by theshrike79 » Fri, Aug 28, 2026, 10:09 AM UTC

preg_match wrote: post #417

CuriouslyC wrote: post #366

Earlier quoted context omitted.

More stuff people actually use is installed by default with Omarchy, whereas Ubuntu packages a lot of stuff I don't think people use to try and come to checkbox parity to windows, while missing useful commercial software. Omarchy comes with vscode, 1password, obsidian, chromium, discord, docker, OBS, zoom, signal/whatsapp, etc pre rolled and configured.

1. These are trivial to install on any other mainstream distro. I’m talking one-click through discover or Gnome software. 2. Most of these are not even desirable for most people. Obsidian? 1password? Come on, these have vanishingly small amounts of users. It’s not chromium. 3. Any hand-rolled arch based distro is going to be more maintenance and higher friction than fedora, Debian et al. That’s just the name of the g…

And based on just on the list above that'd be at least 11 clicks (a lot more since you'd need to find the app in the software manager first before you can click install"

Re: Omarchy development practices lead to predictable security issues

#472

Post by theshrike79 » Fri, Aug 28, 2026, 10:10 AM UTC

cogman10 wrote: post #21

Hugsbox wrote: post #10

I'm somewhat out of the loop, and it's not really mentioned in the article, but what's with Omarchy getting this crazy amount of financial support from this list of fairly prominent individuals? Until a few weeks ago I'd never heard of it, then what I did hear is that it's being made by a very... uhh, eccentric(?) individual, and now it's suddenly got a crazy amount of funding. What am I missing?

Looks like nothing. It's arch with a bunch of pre installed apps and a few goodies on top. My guess is relationships and fame went a long way towards getting those funds.

And Dropbox is just rsync and cron =)

Packaging and marketing matters.

Re: Omarchy development practices lead to predictable security issues

#473

Post by busterarm » Fri, Aug 28, 2026, 4:28 PM UTC

em-bee wrote: post #463

busterarm wrote: post #441

Earlier quoted context omitted.

But Omarchy has no internal drama. It's entirely external drama around how noninvolved parties feel about DHH. That's way different than internal drama or upstream drama affecting your project.

what i meant here is people are criticizing the project or the project leader. that brings drama into the project.

It doesn't though because absolutely zero people working on Omarchy give a single f because they already know who DHH is and decided to contribute.

Re: Omarchy development practices lead to predictable security issues

#474

Post by spro113 » Fri, Aug 28, 2026, 5:01 PM UTC

The article seem biased against Linux. All major OS had a history of weird security issues. Ubuntu, the most popular Linux distro for desktop, had a lot too: CVE-2019-11482 CVE-2019-11483 CVE-2020-8831 all look like repeating the same mistakes over and over. And if you start digging you'll come over to really strange and bizzare ones like obvious attempts to sneak in exploits into popular libraries like openssl.

Re: Omarchy development practices lead to predictable security issues

#475

Post by baggy_trough » Fri, Aug 28, 2026, 5:31 PM UTC

the_gastropod wrote: post #468

zchrykng wrote: post #466

Earlier quoted context omitted.

The GP believes that countries deporting people and/or enforce immigration law is "ethnic cleansing"

No. I believe, for example, that singling out legal immigrants from Haiti, revoking their legal status, and deporting them back to Haiti, where the current state department's website says of Haiti: "Do not travel to Haiti due to the risk of crime, kidnapping, terrorism, unrest, and limited health care" [1], is an example of ethnic cleansing. To suggest this is just good ol' fashioned law enforcement is absurd. [1] ht…

Ethnic cleansing is when immigrants have to return to their home countries after the lawful suspension of a temporary program? That, frankly, is preposterous.

Re: Omarchy development practices lead to predictable security issues

#476

Post by the_gastropod » Fri, Aug 28, 2026, 9:14 PM UTC

baggy_trough wrote: post #475

the_gastropod wrote: post #468

Earlier quoted context omitted.

No. I believe, for example, that singling out legal immigrants from Haiti, revoking their legal status, and deporting them back to Haiti, where the current state department's website says of Haiti: "Do not travel to Haiti due to the risk of crime, kidnapping, terrorism, unrest, and limited health care" [1], is an example of ethnic cleansing. To suggest this is just good ol' fashioned law enforcement is absurd. [1] ht…

Ethnic cleansing is when immigrants have to return to their home countries after the lawful suspension of a temporary program? That, frankly, is preposterous.

Here, boss, maybe read up on what ethnic cleansing is, then feel free to join the conversation with a less silly comment: https://en.wikipedia.org/wiki/Ethnic_cleansing

Also worth pointing out, apparently, “lawful” does not mean ethical. Owning slaves was lawful during much of U.S. history. Gassing Jews was lawful in Nazi Germany. The President, after spending years demonizing and lying about Haitians going on to unilaterally terminate Haitians’ legal standing in the country in order to “legally” deport them to their home country—a country we fully acknowledge is completely unsafe—is unjustifiable on any level. Do better.

Re: Omarchy development practices lead to predictable security issues

#477

Post by KetoManx64 » Sat, Aug 29, 2026, 5:26 AM UTC

aloisdg wrote: post #351

KeplerBoy wrote: post #137

Earlier quoted context omitted.

Isn't Omarchy very, very similar to cachyos?

Both are arched-based. CachyOS is not made by a fascist.

> Guy says he doesn't want peoples political beliefs barfed all over his project.

HE'S A FASCIST.

Re: Omarchy development practices lead to predictable security issues

#478

Post by qup » Sat, Aug 29, 2026, 12:38 PM UTC

majorchord wrote: post #406

threecheese wrote: post #306

Earlier quoted context omitted.

Disagree there; anyone who installs Omarchy does it because a social media creator they like suggested it, and there’s only a few degrees of separation between those creators. This isn’t like Slackware’s popularity in the 90s, peer to peer, this all top-down. I’d call it hype-driven, if they didnt have a neat product (which I’m not a customer of).

Also have to disagree with you there... there are other ways to find out about distros besides social media or people suggesting it. Back in the day, one of the only ways people even found out about new distros was through sites like Distrowatch who just reported on the facts of the distros and never tried to market them to people.

Exactly. I mostly read about distros right here in the comments.

I had no idea DHH was political. I don't follow Linux YouTubers, why would I?

Re: Omarchy development practices lead to predictable security issues

#479

Post by preg_match » Sun, Aug 30, 2026, 3:13 AM UTC

theshrike79 wrote: post #471

preg_match wrote: post #417

Earlier quoted context omitted.

1. These are trivial to install on any other mainstream distro. I’m talking one-click through discover or Gnome software. 2. Most of these are not even desirable for most people. Obsidian? 1password? Come on, these have vanishingly small amounts of users. It’s not chromium. 3. Any hand-rolled arch based distro is going to be more maintenance and higher friction than fedora, Debian et al. That’s just the name of the g…

And based on just on the list above that'd be at least 11 clicks (a lot more since you'd need to find the app in the software manager first before you can click install"

I guess we can compromise and say two clicks and some key presses.

On KDE: Press meta, type "discover", type "discord", click "install". Or, if you use KRUnner, press alt-space, type "discord", click "Get Discord", click "install"

Bear in mind this is how it works for all software in a proper desktop environment. Steam works the same way, or Zed, or whatever VPN you use.

Re: Omarchy development practices lead to predictable security issues

#480

Post by ergocoder » Sun, Aug 30, 2026, 4:16 AM UTC

dborovikov wrote: post #120

“Full of security holes" - and two examples in the article have been swiftly addressed, ignoring that there is a whole dedicated security team https://omarchy.org/teams/ What kind of blogging is this?

The kind where the author hates the omarchy creator, so every issue is a world-ending issue.