• 0 Posts
  • 13 Comments
Joined 3 years ago
cake
Cake day: June 10th, 2023

help-circle
  • That article has lots of issues:

    17% of the most popular Rust packages contain code that virtually nobody knows what it does

    That’s not true at all, the article where he got that information from says:

    Only 8 crate versions straight up don’t match their upstream repositories. None of these were malicious: seven were updates from vendored upstreams (such as wrapped C libraries) that weren’t represented in their repository at the point the crate version was published, and the last was the inadvertent inclusion of .github files that hadn’t yet been pushed to the GitHub repository.

    So, of the 999 most popular crates analyzed 0% contains code nobody knows what it does.

    He then lists some ways packages can be maliciously compromised:

    1. Steal credentials and impersonate a dev
    2. Misleading package names
    3. Malicious macros (this one is interesting, had never considered it before)
    4. Malicious build script

    And his solutions are:

    1. Bigger std library (solves none of the above)
    2. Source dependencies (solves none of the issues he showed, only the issue that happens in 0% of packages where binary doesn’t match the source and is detectable)
    3. Decentralized packages (which worsens every security concern)
    4. Centralized Checksum database (so a centralized package manager is bad, but a centralized Checksum index is good? How does that work?)

    Honestly I can’t take that article seriously, it grossly misinterpreted another study, presents problems that exist on every single package manager ever, doesn’t propose ANY valid solution, and the only thing he points to as a solution suffers from ALL of the same issues and then some.



  • I love my steam controller, but to me it wasn’t a good replacement for controller games. Don’t get me wrong, it’s great and the ONLY alternative to play non-controller games (and I put FPS games in this category), but trying to play most games that waere actually designed for a controller always felt off. The lack of a proper d-pad made it worse for pixel perfect games like Dead Cells, and while the track pad is great for aiming by emulating a mouse and adding gyro, most games also use the thumb stick for mini-games or something that feels weird with the track pad. And yes, I know I could setup layers to solve that, but it’s just easier to grab another controller.

    On the other hand, since I held my Steam Deck I’ve been wanting a controller that was the exact same thing. It works 100% like a normal controller, plus has 2 trackpads and 4 back buttons. They fixed every single issue I had with the OG controller, kept everything I loved about it, and even added some things I didn’t knew I needed (extra back buttons, capacitive gyro, etc).










  • Honestly that’s probably a good use case for LLMs, mostly because there are enough Linux forums that there will be enough content for it to scrape. Just be weary as it can hallucinate or worse use joke answers as real and tell you to run :(){ :|:& };: because someone made a joke saying that was the way to solve your issue in a forum.

    I agree with the man pages being very heavy, which is why I like https://github.com/tldr-pages/tldr there’s also a web app if you prefer that https://tldr.sh/ in short its a condensed man page to the most common cases for a tool. It’s less versatile than LLMs, but it might give you confirmation on the commands the LLM is telling you to run.

    Overall I think yours is a good approach, just be mindful about wrong commands.


  • Nibodhika@lemmy.worldtoLinux@lemmy.mlRTFM
    link
    fedilink
    arrow-up
    0
    ·
    1 month ago

    What are you talking about?, NixOS documentation is one of the best ones around, not to mention that with just being pointed to the approximate direction of something and having a good text editor you can figure out things quite easily and without risk of breaking your system. I’ve recently switched from Arch and honestly as good as documentation is on Arch, I prefer NixOS one.