• 3 Posts
  • 1.05K Comments
Joined 3 years ago
cake
Cake day: June 6th, 2023

help-circle
  • Probably the easiest place to start is appropriately reporting a bug that you’re impacted by.

    Take note of the version of the affected program you are using (likely depends on your distro). It could be that the bug has been fixed in a more recent release, and you don’t want to create noise for an issue that has already been resolved and hasn’t made it to you, or is specific to the build for your distro.

    Once you’ve figured out where the issue must lie, make a report with detailed steps on how to reproduce the issue. Don’t ghost the thread, if a dev asks followup questions, try to help give feedback.

    If you’re lucky, and they post a commit to fix the issue, take a look at it and try to understand what it is doing. Over time, you’ll start to get a feel for how open development works.




  • I would agree with you 6mo ago, but ever since their last Linux challenge, it feels like LTT is full linux-pilled now. Before, they seemed to exclusively compare capabilities vs mainstream OSes, and only focus on where Linux fell short, because realistically, that’s all mainstream gamers care about. But after the last Linux challenge, they all chose to stay with Linux on their personal machines, because they all felt like it was worth any compromises to not have to deal with windows.

    As Linus put it, if something doesn’t work in windows it’s because of bugs or lack of money. If something doesn’t work in Linux, it’s because no one in the community has been annoyed enough by it to fix it.

    As Luke put it, every time he’s had to fix an issue on Linux, he’s actually enjoyed it because it felt like he was learning about his machine.

    Linus recently did a call with Ludwig about the feasibility of non-tech YouTubers using Linux. Ludwig said “I just think it’s better to have more options, so everyone can use the option they want”, which is historically the line Linus goes with, except that he countered with “consider that windows actively uses their status to limit people’s options, does that change your mind?”

    Overall, I think the channel still has to be realistic about the general public’s adoption of Linux. They review the latest tech, and if the latest tech is built exclusively for windows, then they have to review it there. But they do seem to be much more critical of window’s enshittification, and openly advocate for people to try Linux in spite of a rocky transition. It’s been refreshing to finally see the self-professed tech nerds actually cross that threshold into owning their hardware. And whether you like it or not, LTT and Pewdiepie are driving orders of magnitude more people to Linux than we are.

    Edit: oh and Linus openly declared that It’s the year of the Linux Desktop, telling viewers it is ready for mainstream adoption.






  • Yeah, I do wish proton was more open about their tech. I do know that proton allows you to make free accounts without giving them identifiable info (which makes them a popular choice for scammers, which is annoying when services just block their email domain thinking it’s always nefarious). I don’t recall what the payment options are, but I’d be surprised if they didn’t have any crypto/anonymous ways to pay.

    I still haven’t made use of the proton VPN, mostly because, yeah, I don’t care for running a proprietary client for something like that, but also the last time I looked into it they did offer wireguard configs that would do the same thing. The client is just intended to be a familiar cross platform interface. No idea about this Stealth mode protocol, though. Seems like that would have to be run locally.

    If you do pay for their email, I recommend bringing your own domain. 99% of the time the proton.me domain works fine, but for the 1% of the time when a system has a problem, it does make me wonder if there’s somewhere in their system blacklisting their domain.

    with the cooperation with law enforcement proton has stated to do

    I’m curious what statements you’re referring to. For a company to continue operating, they have to comply with local law enforcement to the extent the law requires. They don’t have a choice. If you asked mullvad, they would say the same. But the point of all these services is that they (claim to) do their best to not keep any records by design, so that when law enforcement comes with a subpoena, they have as little as possible to hand over in cooperation. But yeah, as you said, at the end of the day we just have to trust that that’s how they operate.



  • The nice thing about proton is that they offer a suite of tools comparable to Google, but all privacy respecting (email, docs, drive, etc). So they’re an easy recommendation for people dependent on those services. I almost never use their VPN, but it is neat that I have the option of a paid VPN along with the rest.

    Also I only just noticed the other day that proton offers multi-hop VPNs now, so that your entrance and exit nodes are under different jurisdictions, is that just the standard for VPN services these days? I thought that was a pretty neat feature.


  • Right, I’m saying Dell doesn’t make displays. Generally LG makes the displays that Dell uses, but apparently they also use Samsung and AU Optronics. But even then, I believe there’s some Chinese middle-man OEM actually making the displays, and in certain countries (including the US) Dell buys those and slaps their Dell and Alienware branding on them.

    It makes sense to recommend an LG/Samsung/AUO monitor, it doesn’t make sense to generally recommend all Dell or Alienware monitors. Maybe a specific product worked well for you, but you can’t make broad statements about all their monitors because the only thing they are sure to have in common is the name brand selling them.





  • The AUR should not be thought of as a package manager repo. It should be thought of as a pastebin for pkgbuild scripts, i.e. build instructions. Running them without looking is the equivalent of blindly copying shell commands from stackoverflow.

    If you are thinking “I want to install this package I found, it doesn’t exist in any repo, but their build instructions are complex and don’t have instructions for arch,” a pkgbuild is a great resource. At the very least you can read someone’s pkgbuild to see what dependencies and build steps worked for them (in the same way that you can disect a shell script line-by-line to understand what it’s doing).

    The only official way to use the AUR is to manually download a pkgbuild file and use manually run makepkg to execute it. All the other tools that turn it into a convenient repo source (ex. yay, paru, pamac) are unofficial.


  • Does anyone know if yay gives me the ability to hook my own tool in to review pkgbuilds before accepting them? They argue that they don’t want to just give attackers access to a scanning tool, because all they’d do is just iterate on their pkgbuild until it reports “not detected”. But if yay gives me an easy way to hook in whatever tool I want, the attacker can’t be sure what tool to defeat. If thousands of people all run various tools, surely a few of them will spot the anomaly quickly.

    Edit: it looks like they’ve added this exact functionality in response to the attacks: https://jguer.space/blog/2026-06-15-yay-v13