21–30 of 239 posts
The cargo.lock file is 2200+ lines long. Did they spend a reasonable amount of time auditing these dependencies?
What would be a reasonable amount of time to audit the dependencies?
If Microsoft states that they don't have any for a project like this, I would be wary of taking it too seriously.
Earlier quoted context omitted.
grep 'name = ' ms-litebox-Cargo.lock | wc -l 238 edit: grep 'name = ' ms-litebox-Cargo.lock | sort -u | wc -l 221
I've always done 'sort | uniq'. Never bothered to check for the the unique flag to sort. Although 'uniq -c' is quite nice to have. -c, --count prefix lines by the number of occurrences
grep 'name = ' ms-litebox-Cargo.lock | sort | uniq -c | grep -v '1 name' | sort -n
Edit: Also, beware of the unsorted uniq count:
cat a
> a
> b
> a
> a
> EOF
2 a
1 b
2 aWith how buggy their flagship OS has become, why would I trust anything else they release to be better? Or even if it does work well now, why should I expect it to stay that way? Microsoft has burned through all possible goodwill at this point, at least for me.
The cargo.lock file is 2200+ lines long. Did they spend a reasonable amount of time auditing these dependencies?
* Many of them are part of families of crates maintained by the same people (e.g. rust-crypto, windows, rand or regex).
* Most of them are popular crates I'm familiar with.
* Several are only needed to support old compiler versions and can be removed once the MSRV is raised
So it's not as bad as it looks at first glance.
With how buggy their flagship OS has become, why would I trust anything else they release to be better? Or even if it does work well now, why should I expect it to stay that way? Microsoft has burned through all possible goodwill at this point, at least for me.
UI of Windows is buggy and inconsistent. Kernel and low level stuff are actually very stable and good.
This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users.
You can get something similar yourself at home running all the debloat tools out there but since they're not officially supported, either you'll break future windows updates, or the future windows updates will break your setup, so it's not worth it.
A library os to me would typically mean it's aimed at hosting a single user program on bare hardware. I don't see that here, but maybe I'm just confused
Consumers and businesses deserve better. It's crazy to me that in 2026 Notepad++ being compromised means as much potential damage as it does, still.
The cargo.lock file is 2200+ lines long. Did they spend a reasonable amount of time auditing these dependencies?
Earlier quoted context omitted.
I've always done 'sort | uniq'. Never bothered to check for the the unique flag to sort. Although 'uniq -c' is quite nice to have. -c, --count prefix lines by the number of occurrences
Yeah, to see the packages with multiple versions: grep 'name = ' ms-litebox-Cargo.lock | sort | uniq -c | grep -v '1 name' | sort -n Package windows-sys has the highest number of versions included, 3: 0.59.0, 0.60.2, and 0.61.2. Edit: Also, beware of the unsorted uniq count: cat a > a > b > a > a > EOF 2 a 1 b 2 a
Earlier quoted context omitted.
UI of Windows is buggy and inconsistent. Kernel and low level stuff are actually very stable and good.
>Kernel and low level stuff are actually very stable and good. This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users. You can get something similar yourself at home r…