Open Source Software Community - it's about ethics in Code of Conducts

Cross posting this here since this seems appropriate. Some people here have probably seen Foone's stuff (viral tweets using unconventional keyboards and the like).

So I went looking for Foone Turing, to see what happened to him since I last looked in on him (all signs pointed to him heading down into troonism some years back but it was not explicit yet). Don't know where to cross-post this (Linux thread? Open source thread?) but wow.

Wasn't there also a dox on him some years back, where it showed his original name then a name change to Foone Turing THEN to "Alice Averlong" (his current name)?

Anyway. Full troon-out, how horrifying. Foone also mentioned being "a polyamorous transbian" on this Tumblr post. He had a wife Mrs. Foone, I don't know if they've divorced now or not. I can't imagine the marriage is necessarily happy.
Tumblr | Archive
GitHub | Archive
"My Resume" | Archive

View attachment 8674683

If I ever troon out, put me down like a dog (:_(
 
Loving the salt from the Linus Tech Tips new Linux challenge video.

I can grab screenshots if there's interest, but it's mostly random linux fans mad about it and going off in various comments sections. Their general arguments are the same.

  • LTT is scum and shouldn't ever touch Linux!
    • also he should use his platform to promote Linux! (This reminds me a lot of a similar outrage to the PewDiePie video)
  • He used the wrong distro!
  • He should just wait a few months/years until PopOS is in better shape.
  • He should use his industry contacts to fix all these issues for him (7:05 in the original video answers this question.)
  • Luke is the GOAT! He chose the right distro, didn't have any major problems.
    • Right until he chooses GRUB during install. Again, this is called out in the video when people gave him shit for choosing Mint in the previous challenge.
  • And the classic "he shouldn't want to play those games or use that software/hardware". Some even going as far to say wanting to watch video, work, and/or game is an outrageous ask. (What do Linux people do on their machines then?)
Linux people living up to the stereotype as always.

There's some react videos out there already. Some aren't bad tbh, but some are horrible. A favourite is a guy who's answer to PUBG not having Linux support is to use GeForce Now. (GeForce now is widely considered shit, and PUBG isn't on GeForce Now.) One I didn't watch has issues running a YouTube video in full screen.
 
  • He should just wait a few months/years until PopOS is in better shape.
Haven't watched the new one, but the "Yes, do as I say" incident was a 100% blunder on Poop OS developers as it was them who fucked up the dependency tree to the point installing Steam removes half the desktop.
 
It is kinda funny how a lot of open source people will take the concept of "some people don't care about formal copyright for their work and want anyone to be able to copy it without the people copying it then getting a monopoly over it," and warp it into "copyright is a lie, and the best programmers and engineers work for fun." "I won't buy your lovely product, You'll be broke, hackers, you'll be broke."

But... conspiracy time, what if modern infrastructure was deliberately designed to make programming look more like a "real job," helping to give more work to bigger teams of mediocre programmers who are in it for the money, who will constantly cut out more errors for each other with their stinky code?
 
I have a hard time believing this is a thing since I can't find any comments mentioning GRUB, nor can I think of a reason people would be mad about someone choosing to use it.
Even people getting mad at him using Linux Mint was a stretch. None of the comments they could find were even talking about him using mint outside a grand statement that bundled in Mint. Every comment they brought up was either a Linux snob or people talking about their own experience with Mint.

There is no one who would be angry at someone using GRUB, as its either that or systemd-boot, which only really got good a year ago, and limine, something only shipping on cachyos because of how new it is. The guy who brought this up is a nigger and is speaking out of his ass and every other talking points hes brought up is also retarded.

1773181637565.png

No one was upset at him using Mint when the first challenge was done. Everyone thought he was the one that wasn't retarded, and was having fun dunking on how retarded Linus was, and no one is even talking about Luke in this challenge, because hes not the retarded one this time either.
 
Loving the salt from the Linus Tech Tips new Linux challenge video.
Bazzite held up a lot better than I expected, I still think Linus using Pop OS is purely so he can be the heel in the video for better content, because, if you want a simple, easy, worry-free and fast installation, then yes, Mint or any other Ubuntu offshoot is the go to I'd say. He clearly has the capacity to go online and do basic troubleshooting, with how he found the fix for Left for Dead 2, so he can also just read any suggestion that is made to him.
 
The crates I get told are good are five years old and lacking modern features (this happens all the time in GUI crates), or are just straight up not finished. When I tried to make an API for a service, I got pointed to three different crates
The NPM-ification of Rust is seriously its most bizarre feature. Nobody likes npm. Every web developer who I talk to hates dealing with it. They hate having to install like 400 packages to do anything with the language. They hate how it gives them a gigantic attack surface because it's impossible to audit 400 packages.

Rust's response to this is to literally beat-for-beat implement npm and all its warts and change nothing. Congratulations, your "memory safe" language is now at the mercy of random maintainers who will either suddenly abandon the package or push malware when the HRT finally cooks their brain into thinking they have to defend their package from "use by fascists."

They want to rewrite the entire Linux kernel with this shit by the way.
 
The NPM-ification of Rust is seriously its most bizarre feature. Nobody likes npm. Every web developer who I talk to hates dealing with it. They hate having to install like 400 packages to do anything with the language. They hate how it gives them a gigantic attack surface because it's impossible to audit 400 packages.

Rust's response to this is to literally beat-for-beat implement npm and all its warts and change nothing. Congratulations, your "memory safe" language is now at the mercy of random maintainers who will either suddenly abandon the package or push malware when the HRT finally cooks their brain into thinking they have to defend their package from "use by fascists."

They want to rewrite the entire Linux kernel with this shit by the way.
Someone already mentioned this but the epic new Tor rewrite in Rust just pulls in a bunch of random garbage from crates.io.
Great job!
 
Someone already mentioned this but the epic new Tor rewrite in Rust just pulls in a bunch of random garbage from crates.io.
Great job!
I thought you were joking so I looked it up. Arti, the Tor rewrite in Rust, pulls in SEVENTY-ONE DIFFERENT CRATES:
1773188665104.png

Seventy-one crates! That's like hundreds of transitive dependencies all at once, including POW schemes and crypto shit. I seriously doubt they're auditing all 71 and if one of these is compromised it could mean their users get compromised too.

Also it's under MIT/Apache because of course it is. Some state actor is gonna make a closed source fork of this and compromise a billion people.
 
The NPM-ification of Rust is seriously its most bizarre feature
While im no rust alog (I genuinely don't care about it), the ecosystem around rust makes it nigh unusable from a package maintainer's perspective. I use Guix (similar to NixOS) and write package definitions all the time just for personal use and occasionally to contribute upstream, and when it's finally time to deal with a rust package, I almost universally throw my hands up in defeat if the automatic importer can't just make it work out of the box from the genuinely absurd amount of dependencies.

Rust packaging is so asinine that guix's developers had to make a new packaging format just to deal with the shit just because of the disgusting amount of dependencies. The Guix repo itself has a revolting 7525 crate package entries at the time of writing as well.

I wanted to try out Niri on wayland because it looked interesting. I currently use lxpanel (the gtk2 version specifically) and since that's for xorg, I figured it'd be best to use another GTK theme respecting panel. I found Ironbar, a rust project, to try. When I tried to just do a simple, automated package import, it immediately pulled 467 dependencies! For comparison, lxpanel's guix package only has 23, and that's if you count dependencies only necessary for just building the package. I thought it was a bug at first, but no, that absurd amount of dependencies seems to just be the norm for even a relatively basic rust project!
 
Last edited:
Also it's under MIT/Apache because of course it is.
The Tor project has been under a BSD 3-clause and equivalent license since its inception, which makes sense because the US naval research laboratory would never ever fund something to then allow it to use the GPL. Arti(?) being in MIT/Apache is very consistent with that.
Some state actor is gonna make a closed source fork of this and compromise a billion people.
State actors are the ones running most of the Tor network currently and that is its intended purpose, i.e. to enable people living in foreign shitholes to get access to freedom news TM in an anonymous way.
 
Seventy-one crates!
All of these are folders in the source for Arti. The actual dependencies are hidden in the Cargo.toml files in these sub-directories. You can visualize them with "cargo tree". Running "cargo build -p arti --locked --release" (on their suggestion) downloads around 500 other crates. Make of that what you will.

On that note: "Arti is cleaner than our C tor implementation"
Arti is cleaner than our C tor implementation.  Although we've tried to develop C tor well, we've learned a lot since we started it back in 2002. There are lots of places in the current C codebase where complicated spaghetti relationships between different pieces of code make our software needlessly hard to understand and improve.
I'm not sure if dependency hell is preferable to spaghetti code. I know I would choose the latter. Also "we've tried to develop C tor well". As far as I can tell this was written by one Nick Mathewson, the co-founder of the Tor project. From what I know C tor only needs libssl and libevent. Maybe that's why Arti is cleaner, they're offloading all the difficult tasks to independent transvestites. Not to imply that they don't depend on them otherwise.

They also block archive.is
 
I use Guix (similar to NixOS)
Sell me on Guix / NixOS. I'm a current Arch Linux nerd and I want to become even more insufferable expand my horizons.

SEVENTY-ONE DIFFERENT CRATES:
That is just the "direct" imports, those crates will bring in other crates, and so on, so it is a far greater number unfortunately.

I will say, the only thing I liked about Rust and Cargo was the easy ability to cross-compile from/to all the three major OS's and architectures. I will admit I do not have a lot of experience in setting up C++ build setups to be fair. I am slightly retarded pls be patient. I always get stuck in some weird spot where I am passing the supposedly correct flags to the compiler, then it fails, and the only thing I can find online is to use some other compiler, then someone recommends a Docker container, then something breaks with cross compiling across architectures, then I decide I don't care anymore and I just build it for me on my machine. Maybe there is some mythical CMakeLists.txt that will solve all my issues but I haven't found it.
 
There is no one who would be angry at someone using GRUB, as its either that or systemd-boot, which only really got good a year ago, and limine, something only shipping on cachyos because of how new it is
I remember a while ago looking at bootloaders on archwiki (after EFI version of syslinux broke for some reason but that's another story), seeing Limine and thinking to myself why does a fucking bootloader need a Discord server.
Screenshot_20260311_101158.png
At least now they've switched to Matrix, but still.

rEFInd just works btw.
 
Sell me on Guix / NixOS. I'm a current Arch Linux nerd and I want to become even more insufferable expand my horizons.
So you know how dependency hell results from having many versions of the same software at different places in the dependency graph? What if instead of having to walk on eggshells around our dependency graph, we just put in the work to make it so different versions could coexist? So instead of having "/usr/lib/libc.so" or whatever you've got "/gnu/store/eqondrwneomgspaghettiqoedrnwp-glibc-2.41/lib/libc.so". This path (or more accurately, the path to whichever libc the package specifies as an input) gets hardcoded into programs at build-time via the RUNPATH. This general philosophy, of embedding references to runtime dependencies at build-time, is used wherever possible. It's conceptually like static linking, but libraries still have only one copy on the filesystem.

The advantage of this is that, basically, you can have pretty much any software you want without any conflicts or duplicate copies of dependencies. For example, different programs can be built with glibc or musl, and both be usable simultaneously.

The disadvantage of this is that it is very different from what most packages are used to, and packaging often involves patching and tardwrangling to do things like not use hardcoded paths such as /bin, /usr/bin, /usr/lib, etc. For some packages this is a lot more streamlined than others, so you may get a very different experience trying to package something using, for example, autotools (very easy, almost always works with no particular effort) vs something using something custom.

In general, guix has a strong focus on Doing The Right Thing™, even where it's extra work. This combined with the packaging model means that if it works in guix, it will probably work for the foreseeable future. This allows for features people normally turn to something like Docker for, but Done Right™.

This plus many other features can make for a powerful, very usable experience... if you stay on the beaten path. If you don't, you will quickly find that Doing The Right Thing™ is a lot of work, and appreciate the developers a lot more. If you decide to power through and try packaging off-the-beaten-path stuff yourself, you will gain a newfound burning hatred of modern developers and anything to do with Python or Rust or really most language-specific package managers. The widespread adoption of Rust and its consequences have been a disaster for guix.

And if you decide to wander off the beaten path even further and make modifications deep in the dependency graph, you will find yourself having to build almost everything locally instead of using binary substitutes. At this point you will discover that Rust is written in Rust, and there are around 20 versions between the most-recently-bootstrappable version and the current version, and you get to wait for all of them to build, back to back.

There are a bunch more details and features, but I think that sums up the general feel. If you're staying on the beaten path, it's great, and if you're not, it still provides very useful capabilities for that, it will just be more painful. If you want to get an idea of the kind of things that guix has been working toward, it might be useful to browse their blog. Just ignore the one where they try to cancel Stallman, the head honchos literally just woke up one day and posted "hey we're going to abuse the guix blog to get this on planetlibre" to the mailing list. It's not all trannies, but the normal people mostly just look straight ahead and try to stay professional.
 
Back
Top Bottom