Diseased Open Source Software Community - it's about ethics in Code of Conducts

[One Angry Computer]

This sounds like a problem that is easily solved by introducing a decentralized database system that is managed by thousands of independent parties (to avoid relying on one central authority). The parties that participate in this system could be rewarded with some sort of points for performing "work" to incentivise them to join this sort of scheme. The "work" would rely on some sort of a cryptographic proof that would also have the benefit of making the system much more resilient against tampering. I think I'd call this "proof of work" or something like that.

Proof of Work is a great way to solve the pitfalls of Proof of Stake, but then when the network matures, you'll need more computing power to solve the work that is needed. This inevitably ends up with central nodes doing much of the proofing as you need entire severs to verify.

Damn, there is no easy solution in following each approach, but the errors of one seem to cancel out the other. Perhaps mixing both would prove the better solution?

Just a thought, I'm perhaps too idealistic yet I can see there is merit to both systems.

 

[WhiteNight]

Just last week Daniel Stenberg changed the submission template for cURL bug reports because morons started submitting AI generated shit like "cURL can write outside working directory" (if you pass it a path with "../", perfectly valid use case) and "curl can use overridden CAs" which is also a normal feature of everything that uses TLS. They indeed can lead to privilege escalation if you are fucking stupid and don't sanitize user inputs.

I seem to recall that it looks good on your resume if you've submitted issues and PRs to open-source GitHub projects. Thus, many repos get flooded with frivolities, from mostly Indian usernames.

 

[Zeftax]

Some projects also offer bug bounties, so maybe they are trying to capitalize on that as well.

 

[The Real Slim Shady]

I seem to recall that it looks good on your resume if you've submitted issues and PRs to open-source GitHub projects. Thus, many repos get flooded with frivolities, from mostly Indian usernames.

A few years ago some company did a marketing campaign where you would get a hoodie/t-shirt/some other piece of clothing if you did 5 contributions to open source projects, which led to people ddosing the popular projects repos with meaningnless PRs. I dont remember the details, but I remember some indian making a tutorial how to make a change and a PR in github web UI, and the example repo he showed it on got like thousands of spam PRs in a few days. Maybe someone here has better memory and can post that.

 

[Troon Whisperer]

I seem to recall that it looks good on your resume if you've submitted issues and PRs to open-source GitHub projects. Thus, many repos get flooded with frivolities, from mostly Indian usernames.

This is pretty much the reason, a lot of recruiters now check if you have a public GitHub history, so you either have your own projects available or you "contribute" to others.

 

[The Mass Shooter Ron Soye]

Phoronix: New GNOME Executive Director Named: Steven Deobald (archive)

Last July it was announced Holly Million was stepping down as the GNOME Foundation's Exeuctive Director after less than a year at the helm. Richard Littauer took over as interim Executive Director while this week a new GNOME Foundation Executive Director was hired.

https://blogs.gnome.org/richardlitt/2025/05/02/so-long-and-thanks-for-all-the-fish/ (archive)

I am not, in fact, dying, although this does sound rather eulogaic. I’m just going to spend more time as a user now. I might even have time to post updates on this blog. I hope so.

P.S. It really is pronounced /gno:m/, it’s just so much more fun that way. And the foot logo should stay, alright, it’s a good logo.

https://blogs.gnome.org/steven/2025/05/06/introducing-myself/ (archive)

I built a graphical MUD before the term “MMORPG” was coined.

I have a crushed optic nerve, vitrectomy, and scleral buckle. (I suggest… not looking up example videos.)

A semi-permanent replacement for the Shaman.

 

[Mikoyan]

He looks infinitely more qualified than Million, but that is very not hard.

 

[khaine]

A few years ago some company did a marketing campaign where you would get a hoodie/t-shirt/some other piece of clothing if you did 5 contributions to open source projects, which led to people ddosing the popular projects repos with meaningnless PRs. I dont remember the details, but I remember some indian making a tutorial how to make a change and a PR in github web UI, and the example repo he showed it on got like thousands of spam PRs in a few days. Maybe someone here has better memory and can post that.

It was DigitalOcean's Hactoberfest This twitter account had screenshots of the shit PRs

This was the YouTube video that kickstarted the tsunami of shit, and a more detailed explanation can be found here

 

[El Goblina]

Daily dose of Lunduke Journal propaganda. https://x.com/LundukeJournal/status/1920832608478347322/

 

[Rancid Xylitol]

Old man yells at cloud, episode 459.

For someone who hates Ubuntu/Canonical so much they seem to live rent free in his head.
What's the latest event causing Lunduke's face to pucker up like an angry chihuahua at a vegan buffet??

Ubuntu replacing sudo with sudo-rs, a dangerous and "untested" alternative. It's unclear what "untested" means exactly.

Has no one tried it?
Are there no automated tests?
Does it not have as many years in the wild as sudo? (of course, no new replacement would)

He spends a lot of time whining but doesn't explain what exactly it would take to make this switch seem like a good idea. Maybe it's not, but Lunduke's case is more or less "new scary thing arrive and I am big mad".

I swear, this fellow just sits around reading Canonical changelogs looking for anything Ubuntu does and then has to figure out what face / clickbait headline he needs to cook up.

If sudo-rs is really that bad, Ubuntu will get severely spanked post-release and they'll yank it back. For anyone following along at home, Canonical does not care what you think about their new software. Snap was shoved into Ubuntu at the lowest levels despite some large number of people getting annoyed about it, along with a lot of similar user-hostile moves that remain in Ubuntu today.

The only thing Canonical actually cares about is selling more licenses for Ubuntu Pro, Juju and MAAS.

I guess it's fitting, because the only thing Lunduke actually cares about producing is clickbait videos. For someone who spends an awful lot of time complaining about how these various Open Source projects get nothing done, certainly Mr. Lunduke has a lot of accomplishments he can point to.

 

[AmpleApricots]

Just use doas.

 

[Rancid Xylitol]

Just use doas.

"doas" is missing one killer feature: the moral superiority of using Rust.

Why, one could write a whole article on "doas" without the term "memory safety" occurring anywhere!

After all, if C/C++ were really that great, I think we'd see a lot more programs using them.

 

[Max Weber]

After all, if C/C++ were really that great, I think we'd see a lot more programs using them.

Linux code is like 0.05% Rust, so, really, it's basically written in it. You know what isn't? Windows NT, and we all know it's bad. Checkmate, chud, Rust is the programming language in for current year.

 

[Kapitan Bomba]

Just use doas.

It doesn't have Defaults insults, which makes it basically unusable. Neither does the new rust implementation, by the way, and it's marked a wontfix.

 

[XMassAllYearRound]

Just use doas.

Have you tried using doas?
Legit question, I tried using it once and I don't know if it has gotten better, while it worked fine for some things when I tried more complex shit like managing LVs or attempt to run a stupidly long command it would always shit itself and I'd end up having to su.

 

[Rancid Xylitol]

It doesn't have Defaults insults, which makes it basically unusable. Neither does the new rust implementation, by the way, and it's marked a wontfix.

It does have Defaults microaggressionsthough:

$ doas apt update
[doas] password for frank:
You're trying so hard to be relevant.
[doas] password for frank:
Is it your first time hearing about social justice?
[doas] password for frank:
Maybe if you spent more time educating yourself, the password would come easier!
[doas] password for frank:
Did someone say "intersectionality"? Because I'm not even getting in the right box here.

 

[AmpleApricots]

Have you tried using doas?

It's what I use. I switched because of the needlessly complicated configuration of sudo.

 

[rapecel]

Can you niggers stop bringing up lunjewke
As for sudo-rs, apparently it has 139 unsafe codeblocks and is untested

 

[CryptoHermit]

DANIEL STENBERG OF CURL is seething about brown people spamming him with AI generated reports of security vulnerabilities of complete nonsense looking to pad their githubs.
LinkedIn Archive seethe post

The bug report that PUSHED HIM BEYOND THE BRINK archive

 

[HalHalliday]

DANIEL STENBERG OF CURL is seething about brown people spamming him with AI generated reports of security vulnerabilities of complete nonsense looking to pad their githubs.

Bro, AI is gonna 10x everything, like tomorrow. All it needs is a sprinkle of that VC fairy dust, you get me, bro. Trust me, exponential growth is basically guaranteed, bro. Just throw your cash in, sit back, and watch the magic. Productivity? Boosted into another dimension, bro. IPO? Already manifesting it. Externalities? Sounds like a sick new AI, bro. Just invest, bro. Just a little cash, that's all. Trust me, bro. Got this rockstar engineer in India, bro. We are gonna 100x this shit. We are literally replacing reality with an AI, bro. It's over. Singularity inbound, bro.