Readit News logoReadit News
keysdev commented on AnduinOS   anduinos.com/... · Posted by u/TheFreim
sgc · 5 days ago
In the spirit of conversation I will give you my take on this.

Things I hate: Flatpak, Snaps, Docker containers, SystemD (different I know, but worth a mention due to the strong emotions nonetheless). Obviously too big a topic to talk about everything, but one common theme in all of them is they are often presented as the only way to do things by the developers that use them. The projects that use them tend to be harder to customize than they should be - sometimes much harder. Some of them, like Snaps and SystemD, get shoved down my throat so I hate them with a smouldering hate! And I won't use Ubuntu or derivatives any more. If you want to make a derivative distro, use Debian, use Arch, use openSuse, use RedHat.

I don't love it when I see so many projects on github where the project is a docker image or a flatpak - instead of writing an app that I can directly install on at least some flavor of Linux, with an optional wrapper / container / package. Of course I understand why its done, but it does feel a bit antithetical to the spirit of open source if I have to do a ton of arcane work to decouple your project from these containers (all of which have obvious downsides as well as upsides) just to use it directly in an OS - which is ultimately where all this type of software runs.

Why write beautiful or useful software, and lock it in a box? Technically, of course it remains open source. Yes, I can probably laboriously take it out of the box. No, locking it in the box in the first place is not as effectively open as if it had never been placed only there in the first place. Developers who want to do this are totally free to do so - just it will rub me wrong and I won't appreciate their work nearly as much. That is a trade off I presume they know they are making for many users, so to each his own.

Practically? I have opted to avoid all flatpaks and snaps, and to only use appimages - to avoid having a variety of these tools with their variety of performance, maintenance, and security concerns to deal with on my system. I chose appimage because snaps are terrible and I much prefer the fuller inclusion of dependencies in an appimage compared to flatpaks just duplicating what a repository already does - and sharing dependencies between apps. I only use appimage if I really need a piece of software and there is no other packaging available. Similarly, I only use docker off my main device, but there are a few projects that require me to use it. I will always prefer an LXC or a VM first if I can.

That's my own little world. I know it doesn't matter. But I would guess it fits pretty close to the sentiment and practice of a lot of people.

keysdev · 5 days ago
.deb should be fine too. It can convert to appimages pretty easily.
keysdev commented on SystemD Service Hardening   roguesecurity.dev/blog/sy... · Posted by u/todsacerdoti
jauntywundrkind · 6 days ago
Much better article with very real tips about what options to try than yesterday's (weirdly flagged/dead?) post on the topic. Which while I really enjoyed lacked substance; I was in the comments trying to provide a more useful basis with some real examples, but this is an exemplary list of awesome ways systemd can easily quickly readily provide aassive boost to isolation & security. Great write up!

Yesterday's, just in case: https://us.jlcarveth.dev/post/hardening-systemd.mdhttps://news.ycombinator.com/item?id=44928504

keysdev · 6 days ago
Maybe fix the certificate issue on the site. Some browser doesnt event let one go forward with a bad cert.
keysdev commented on This website is for humans   localghost.dev/blog/this-... · Posted by u/charles_f
martin-t · 11 days ago
It always starts with people doing real positive-sum work and then grifters and parasites come along and ruin it.

We could make advertising illegal: https://simone.org/advertising/

keysdev · 11 days ago
Some organization prohibit advertising doing their elections. Best idea ever. USA should try it. Saves a lot money and annoying ads.
keysdev commented on VC-backed company just killed my EU trademark for a small OSS project    · Posted by u/marcjschmidt
fakedang · 11 days ago
Is it possible to report B corps not working in accordance with the principles?
keysdev · 11 days ago
Yes
keysdev commented on VC-backed company just killed my EU trademark for a small OSS project    · Posted by u/marcjschmidt
kriro · 11 days ago
Good find. Might be worth to read this and consider filing a complaint. Seems pretty clear they are in violation of BCorp values: https://www.bcorporation.net/en-us/standards/complaints/

If it's worth it. OP needs to decide.

keysdev · 11 days ago
BCorp is just virtual signaling. There is no reason for small business or startup to be Bcorp
keysdev commented on One Million Screenshots   onemillionscreenshots.com... · Posted by u/gaws
keysdev · 14 days ago
Seems like a lot bootstrap like templat sites.

Not a lot melonking sites.

keysdev commented on Tor: How a military project became a lifeline for privacy   thereader.mitpress.mit.ed... · Posted by u/anarbadalov
apopapo · 16 days ago
Tor is nice, but I still prefer i2p.
keysdev · 16 days ago
But it is more difficult to run
keysdev commented on Tor: How a military project became a lifeline for privacy   thereader.mitpress.mit.ed... · Posted by u/anarbadalov
lenerdenator · 16 days ago
> All tor browsers instances have the same default window size, which prevents websites from tracking you.

Wouldn't that in and of itself be a possible clue that someone was using Tor?

keysdev · 16 days ago
Or a computer of that window size, and there a lot browsers that dont support js.
keysdev commented on Tor: How a military project became a lifeline for privacy   thereader.mitpress.mit.ed... · Posted by u/anarbadalov
neilv · 16 days ago
No. And when people share info on HN, I don't like to see speculation in the comments about things they obviously intentionally didn't say (assuming that they seem to be speaking in good faith). That person, and other people who see the dynamic, presumably are less likely to share in the future.
keysdev · 16 days ago
Thank you for pointing that out. Really appreciate you sharing.

To the parent, please do not try to lure info out of people it is just not cool online or in real life when people obviously are being generic for a reason.

keysdev commented on Ask HN: Have you ever regretted open-sourcing something?    · Posted by u/paulwilsonn
acheong08 · 18 days ago
Thank you! This looks like exactly what I needed
keysdev · 18 days ago
Yeah most pieces are there to ditch corporate software now days.

u/keysdev

KarmaCake day57May 18, 2025View Original