• 0 Posts
  • 39 Comments
Joined 8 months ago
cake
Cake day: January 12th, 2026

help-circle
  • Oh god yeah, its just filtering through the slop that actually matters.

    But like the XZ trojan that was only affecting Debian installs, each distro needs to individually have competent maintainers to ensure their store is safe.

    If for exapmle I set a couple ‘bugfixes’ in the guix package file for emacs, I could reasonably infect a number of systems if a lazy maintainer just approved the request. (Or other attacks without even involving guix if I notied a bug in a package spelling and typo squatted it, or stole signing keys and pushed updates to the repo myself).

    None of these would change anything to other distros maintainers, but because this distros AI maintainer could risk a large number of users devices.



  • Distro package maintainers are different than software dev maintainers.

    They mean no one can be reasonably be up to date on software security updates, and (ideally) ensuring all packages changes are not malicious (as well as the small stuff like properly integrating to the distro, but idk how void works enough to comment on that)

    Cause like I can write a ton of guix configs that’ll probably run until the next ice age, but that does nothing about the dev who’s software I packaged, that now decided they’re personally god and need to spread christ as fast as possible.

    (Also off topic but that’s the power and curse of nixos-like distros, its too easy to package so odds are the shit ain’t updated, and suddenly there’s 1000 Firefox packages in nixpkgs)


  • Not killing customers is also technically a limitation on companies, doesn’t inheritly mean it stops them from maximising profit.

    Hell the reason companies don’t kill and do dei are the same reason, public perception (and also why there’s not a sneeze of either of those in poor countries)

    But also… genuinely you thought I meant they like physically tear the logo off the back of every customers laptop and replaced it, only for a month, every single year?

    Cause you know what fuck it, you’re right I do believe this 100% - you’re telling me Tim apple doesn’t visit you yearly??? man you gotta get your money back


  • I could be from alpha centuri for all it matters, storing your data in an american companies servers is still subject to american laws, that was kinda the whole point of the cloud act.

    A European company on the other hand isn’t subject to such laws, and is why many tech companies open up in France/Switzerland, they have laws to protect their citizens privacy instead of outlaw it.


  • I got an even better question for you: Is that relevant here?

    Cause I don’t think it is at all, but to answer anyways I think DEI is a valuable tool to assist picking the best person for a job, independent of race - as there is a racist bias in many hiring positions. I don’t think its perfect, but honestly I don’t think anything in US is.

    And I think apple cares about DEI cause their marketing team said it makes money. Full stop.

    People love when their obsession might align with their morals, but its important to remember if 2028 goes Republican in US they probably won’t even do a logo change that pride month, cause all rainbow capitalism ever is is marketing.



  • Not security patches no, debain is quite up to date on these. (would be a kinda awful choice to run the internet otherwise, unpatched security updates are essentially free login credentials to the whole WAN)

    New features they tend to be behind on though, in case they introduce any new vulnerabilities.




  • They’re still a public company, and Im sure the heat is on their C suite cause they haven’t had any successful hardware releases since the M series processor was first released.

    Not selling “anonymous” data would look to shareholders as thrown away profit, which they’re even able to sue for.

    So I’d be insanely surprised if they weren’t surveiling their users - but unlike google and all, they own their entire closed-source software and hardware empire, so the likelihood of catching them is also valuably low.