• 0 Posts
  • 34 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

  • Gecko@lemmy.worldtoLinux@lemmy.mlWhy does nobody maintain PPAs anymore?
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    5 months ago

    Jia Tan liked your comment

    Without the traditional distribution workflow […]

    You are aware that the xz exploit made it into Debian Testing and Fedora 40 despite the traditional distribution workflows? Distro maintainers are not a silver bullet when it comes to security. They have to watch hundreds to thousands of packages so having them do security checks for each package is simply not feasible.











  • As outline in the blog post, https://lemmyrs.org/ would lend itself best to avoid the case of one big instance de-federating from another.

    Discoverability can be an issue with smaller instances but I’d argue that can be bypassed by simply linking to it from official resources that previously linked to reddit. Same with linking to that instance from Reddit.

    One thing of importance IMO is that should lemmyrs.org be selected as the reddit replacement, there needs to be communication and more importantly help for that instance admin, so that they don’t have to carry the weight of supporting one of rust-lang’s communication channels.






  • This. And even then there should be procedures in place to essentially make it impossible to send the wrong inputs.

    It’s like when an intern accidentally drops the production database. It’s not the interns fault for sending the wrong command. It’s the managements fault for not restricting access in the first place.