Live data from Hacker News

Dotfile madness

0x46.net

371–380 of 534 posts

Re: Dotfile madness

#371
post #363
post #310

Earlier quoted context omitted.

>a few users are too lazy Running untrusted programs is the default way we do computing. No one has time to audit every single program they run. The current desktop security model comes from when people mostly ran the programs that came with the OS and programs they wrote themself. Its vastly inappropriate for modern computer usage.

> The current desktop security model comes from when people mostly ran the programs that came with the OS and programs they wrote themself. Even that isn't particularly safe.

It was good enough to stop bob on floor 5 from hogging all the CPU and preventing Jim's buggy script from deleting everyone's emails.

Re: Dotfile madness

#372
post #252

The real problem is that any app I run accesss all files I own with equal permissions. App1 and App2 shouldn’t write their data to my home, or read each other’s data, or, please, be able to write each other’s data. A video game can read my tax forms. WTF. Mobile & tablet OSs solve this. Everything has to follow. Until then, basically every app should run in a docker container. Then it can do what it wants.

This is a great paper on the subject. ALCs don't: http://waterken.sourceforge.net/aclsdont/current.pdf

Re: Dotfile madness

#373
post #370

Earlier quoted context omitted.

Fair enough but on multi-user systems you can surely see the value in separate save game folders?

when was the last time a gaming machine is a multi-user system?!

I'm currently typing this on a machine that's used for gaming by more than one person.

Re: Dotfile madness

#376

To me, the real problem is not the dotfiles, but the regular (i.e. non-hidden) files that applications surreptitiously create in my home folder. (Which the author does mention as being particularly bad.) dotfiles in the home folder are not a new thing on Linux (e.g. .bashrc, .profile, .emacs, etc.), even if it would be better if more applications used the XDG folders. And if I don't see them when I "ls", they don't b…

Snaps sound good in principle and aren't a horrible solution when they work, but despite the tagline ('Snaps are universal Linux packages') it's not clear that they work well outside of Ubuntu: they aren't sandboxed unless Apparmor is present, and despite their touted 'universality' have a hard (and unnecessary) dependency on systemd.

At this point, Guix and Nix seem the most promising for cross-distro packages.

Re: Dotfile madness

#377
This smacks of somebody looking for a problem. If it's not a problem when you don't look, and you have to go out of your way to look, how is it a problem?

Anything where your own way of seeing it creates the problem, and you can't describe the problem any other way, you're not ready to pitch it as a problem to other people. Find some harm independent of your perception, and then you've got a reason for people to listen.

Re: Dotfile madness

#379
And to Linux developers who've made the jump to macOS development or are making a cross-platform port, please use NSFileManager to find the paths for this or that, don't hardcode everything into Library/Application Support. Not only that, but a lot of stuff ported from Linux could stand to put things in .app bundles rather than _every bloody where_.
Post reply on HN