• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle


  • What are you on about? Nothing you say has any relevance to what I said or to what Vaxry said. Go back and read my comments. I said this:

    Vaxry is making it as clear as possible that he will make zero commitment to oppose toxicity in his community and people took his word for it. The idea that he was punished solely for a couple of comments that happened years ago and are definitely “fixed” is Vaxry’s own misleading interpretation.

    And then I quoted Vaxry’s own posts showing exactly that. I didn’t claim that he is a nazi and I don’t have to prove to you that he is. No one cares. Welcoming nazis into his community and advocating that we should all be doing the same is the problem. Whether he is a nazi or a “dense idiot” is a question only you posed. By his stance alone he is creating exactly the type of unsafe and toxic community other people want nothing to do with. That’s all that needs to be said. Your statement that this was only a “Discord dumpster fire that was thankfully put out months ago” is plain false. My comment was a statement of fact. Nazi salutes and proof of malice are irrelevant to any of this.

    Seriously, what even is this level of strawmaning?

    You’re saying that he is secretly saying “hurr hurr I am a nazi and this is how I get away with it.”

    You need to work on yourself if this is how you react to people online simply saying a fact that annoys you.

    Also, don’t bother writing another long meaningless comment. I don’t care to convince you. It’s clearly impossible, anyway. My previous comments were to bring Vaxry’s actual quotes and political stance into this thread because I knew people would either lie or genuinely not know about it. And now this one was to point out the dishonest debate tactics that most pro-Vaxry comments use, where they try to “win” the argument by moving the goal posts, misrepresenting the facts (deliberately or not), and twisting other people’s arguments. Now that all of this is in the open (in this thread at least), there’s nothing to talk about.


  • There are only so many ways “I don’t care if Hitler is active in my community as long as he doesn’t talk about the gassing in my discord” can be interpreted and “I just want to code” is not one of them. For starters, the practical issues of moderation and whether he wants to do it are never relevant to his argument throughout the blog post. He’s saying that “we should not care about people’s political views on a community unrelated to politics, as long as they do not use it to spread their agenda”. The words “we”, “should”, and “care” are pretty clear. This is a moral statement.

    There are many more quotes that make it clear he is not talking about moderating his own community. His point about Hitler is clearly used to demonstrate his thoughts on how communities in general should be run, and why FOSS communities are getting it wrong.

    Inclusive communities, in the eyes of such advocates, are often the opposite of inclusive. They will try and find things that you do outside of your proffessional persona, or often infer, guess, meddle with, or lie about what you say and stand for. Then, once they have the “ammo”, they will ostracize you. Ban, kick, call for removal, censorship.

    Unlike those people, I stand by my stance that even if you are something that the country I live in disagrees with, you still are free to use, contribute to, and be a part of the greater FOSS community.

    It’s also sad to see that the inclusive communities for which such people “fight for”, are accepting this type of, ultimately hateful and bigoted, behavior

    Bonus points for explicitly listing LGBT issues as a topic one might disagree with.

    It’s important to note that there are many people who disagree on topics like religion, economic systems, LGBT issues, geopolitics, and other

    It’s all unambiguous. Vaxry is at no point talking about the practicalities of keeping Hitler out of his community. He is explaining why he thinks Hitler should be welcome into his community and the FOSS community in general, just as long as he doesn’t use these communities to further his goal of gassing people. If there was ever any confusion over whether Vaxry doesn’t care about the toxicity or just can’t deal with it, this blog post definitely clears it up. He doesn’t care. He’s welcoming evil and harmful people in his community and in all communities and he takes a stance against the people who have an issue with this.

    Your interpretation doesn’t work unless you ignore all the words he uses, the logic of his arguments, and even the fucking title. Not to mention all the other times he’s talked about these issues. In so many blog posts about how his community is unfairly represented and how his ban was unwarranted, Vaxry has not once just simply stated in any terms that he is not okay with evil and harmful people in his community, or that he even acknowledges trans rights. The only thing I’ve seen him say on the incident of harassing a trans person by editing their profile to change their pronouns is that it was “unprofessional”. No mention of ethics or possible harm done.

    And if the far-right is bad (“you’re either with us or against us; death to you!”), the far-left is bad too (“you’re either with us or against us; cancelled!”)

    Ah yes, seeking people to harm because of their race and innate characteristics and banning people from your platform because of their morals and behavior. Equally bad things. I see the rights and wrongs of both sides now.


  • I’ve also read Vaxry’s response and it’s complete nonsense. It’s even apparent in your condensed version.

    Uh, we don’t have a CoC

    Exactly. This is more than “an incident” as you put it. It’s a long-lasting pattern of Vaxry refusing to commit to any standards of behavior. He explicitly calls “upholding any value” nothing but an inconvenience. His only reaction to his community ridiculing the concept of a CoC is to say “nice one”.

    What’s funny is that the person who opened the issue said “Instead of attacking the post, could you provide some evidence against it? (e.g. say “Trans rights are human rights”)” and it was completely ignored. See, the CoC is not about the text itself. It’s about taking an open stance against bigotry. Vaxry can cry all day about how this one incident is misrepresented and how moderation has become more strict now, but nowhere in this discussion or the FDO emails or his own blog about the issue have I seen him take an actual moral stance on the issue.

    we don’t belong to your organization

    What does this have to do with anything? FDO, a space that aims to be LGBTQ+ friendly, banned a bigoted person from participating, as they should. It’s such a stupid childish argument to say “but I didn’t out myself as a bigot in a commit message I submitted to you, checkmate!”. No-one cares. You can’t leave your “fuck trans people, lol” sign at the door and walk in, mate. You’re still a toxic asshole and you’re still a threat to the LBGTQ+ people we want to participate in our community.

    He also said that the misrepresentation got to such point that a another transgender coder made a contribution to Vaxry’s project, expecting that it would be rejected, and got surprised that her PR got merged.

    This is just so funny to hear from Vaxry himself. After people have repeatedly tried to explain to him that not enforcing any code of conduct on a toxic community is going to make it an unsafe space for LGBTQ+ people, Vaxry is shocked to find that LGBTQ+ people are afraid of being discriminated against!

    Oh, but no, you see it’s because of the “misrepresentation”! Vaxry’s had made it so clear through his words and actions that trans rights are human rights and that bigotry is unacceptable, so it can’t possibly be on him. Even as he’s posting pictures this conversation where he’s accused of being a transphobe, and a trans person is expecting to get rejected, does he point out how he’s not a transphobe and how he respects all human rights? Nope, he only says that he only cares about the code.

    But that’s just me picking apart his comments in a few specific discussions. What if he has in fact taken a moral stance, but just not in these particular discussions where’s he’s felt attacked and pressured into making a statement?

    He did post this in one of his blog posts:

    With that, I believe that every human’s opinion is valuable and important, and most crucially, equal. There is no point in having some people’s opinions be more important than others. That is the essence of discrimination.

    Hey, that’s not bad. There’s mention of equality here and he seems against discrimination! Now let’s read the rest of this Inclusive community activists are harming FOSS blog post and see what it’s really about! Oh no, the above statement was only to set the stage for accusing SJWs of not understanding that not everyone agrees with them and how they shouldn’t “cancel” us for “saying bad words”. So he does think to talk about equality and discrimination, just not in any of the above discussions. But he’ll do it here to defense people acting like assholes on the internet!

    And then he says this:

    if I run a discord server around cultivating tomatoes, I should not exclude people based on their political beliefs, unless they use my discord server to spread those views. which means even if they are literally adolf hitler, I shouldn’t care, as long as they don’t post about gassing people on my server

    that is inclusivity

    So there you have it. Vaxry will literally accept Hilter into his community, just casually interacting with Jewish people (presumably he doesn’t ban them from participating). It’s all fine, just as long as the gassing happens outside his own platform. Gosh, I wonder why people are feeling unwelcome in his community. Surely it is the misrepresentation of his views.

    Here’s an archive link for the above article just in case: https://web.archive.org/web/20240511145845/https://blog.vaxry.net/articles/2023-inclusiveActivists


  • And now in the r/linux thread about these news people are defending Vaxry, misrepresenting what the ban was about, and hating FDO.

    Indicatively, this blatantly wrong comment chain is upvoted:

    Is this the project where some red Hat dev started dropping legal threats from their corporate account over offline activities by third parties in unrelated communities years past?

    Sort of. You got some details wrong but essentially, yes.

    But this is downvoted and has replies telling them they’re wrong:

    Congratulations to the hyprland project, but I definitely will not be using or contributing to the project as long as it’s an exclusionary and intolerant space.


  • This was a Discord dumpster fire that was thankfully put out months ago.

    Right, but the original mail from FDO basically said “we know about these examples of bad behavior, we want to notify you that they are definitely unacceptable and we expect to never see something like it again”. And Vaxry had a meltdown over that. Among other things, he doesn’t get why he should be held accountable for behaviors outside FDO. He has also rejected and commented negatively on the idea of any code of conduct at all for his project. Vaxry is making it as clear as possible that he will make zero commitment to oppose toxicity in his community and people took his word for it. The idea that he was punished solely for a couple of comments that happened years ago and are definitely “fixed” is Vaxry’s own misleading interpretation.




  • For someone to work it out, they would have to be targeting you specifically. I would imagine that is not as common as, eg, using a database of leaked passwords to automatically try as many username-password combinations as possible. I don’t think it’s a great pattern either, but it’s probably better than what most people would do to get easy-to-remember passwords. If you string it with other patterns that are easy for you to memorize you could get a password that is decently safe in total.

    Don’t complicate it. Use a password manager. I know none of my passwords and that’s how it should be.

    A password manager isn’t really any less complicated. You’ve just out-sourced the complexity to someone else. How have you actually vetted your password manager and what’s your backup plan for when they fuck up?




  • This is great. Proton is getting a lot of testing just based on Steam’s userbase and it is backed by Valve. We also have a lot of data on proton’s performance and potential game-specific fixes in the form of protondb. Making sure that non-Steam launchers can use all that work and information is crucial to guaranteeing the long-term health of linux gaming. Otherwise it is easy to imagine a future where proton is doing great but the other launchers are keep running into problems and are eventually abandoned.

    One thing that I am curious is how this handles the AppId. If this AppId is used to figure out which game-specific fixes are needed, then it will have to be known. Do we have a tool/database that figures out the AppId from the game you are launching outside of Steam?


  • I think you misunderstood what I was saying. I’m not saying wayland magically makes everything secure. I’m saying that wayland allows secure solutions. Let’s put it simply

    • Wayland “ignores” all the issues if that’s what you want to call it
    • Xorg breaks attempts to solve these issues, which is much worse than “ignoring” them

    You mentioned apps having full access to my home directory. Apps don’t have access to my home directory if I run them in a sandbox. But using a sandbox to protect my SSH keys or firefox session cookies is pointless if the sandboxed app can just grab my login details as I type them and do the same or more harm as they would if they had the contents of my home directory. Using a sandbox is only beneficial on Wayland. You could potentially use nested Xorg sessions for everything but that’s more overhead, will introduce all the same problems as Wayland (screen capture/global shortcuts/etc), while also having none of the Wayland benefits.

    And given how garbage the modern state of sandboxing still is

    I’m not talking about “the current state” or any particular tool. One protocol supports sandboxing cleanly and the other doesn’t. You might have noticed that display server protocols are hard to replace so they should support what we want, not only what we have right now. If you don’t see a difference between not having a good way to do something right now versus not allowing for the possibility to do something in a good way ever, let’s just end the discussion here. If those are the same to you no argument or explanation matters.

    If you actual want to solve this issue you have to provide secure means to do all those task.

    Yes that exactly the point. Proposed protocols for these features allow a secure implementation to be configured. You would have a DE that asks you for every single permission an app requests. You don’t automatically get a secure implementation, but it is possible. There might be issues with the wayland protocol development processes or lack of interest/manpower by DE/WM developers, or many other things that lead to subpar or missing solutions to current issues, but they are not inherent and unsolvable issues of the protocol.


  • In theory, yeah, a bit more control over what apps can and can’t access would be nice. In reality, it doesn’t really matter, since any malicious app can do more than enough damage even without having access to the Xserver.

    Complete nonsense. Moving away from a protocol that doesn’t allow every single application to log all inputs isn’t “a bit more control over what apps can and can’t access”. We’re switching from a protocol where isolation is impossible to one where it is.

    The notion that if you can’t stop every possible attack with a sandbox then you should not bother to stop any of them is also ridiculous. A lot of malware is unsophisticated and low effort. Not bothering to patch gaping security holes just because there might be malware out there that gets around a sandbox is like leaving all your valuable stuff on the sidewalk outside your house because a good thief would have been able to break in anyway. You’re free to do so but you’ll never convince me to do it.

    The solution is to not run malicious code

    Another mischaracterization of the situation. People don’t go around deliberately running “malicious code”. But almost everyone runs a huge amount of dubious code. Just playing games, a very common use case, means running millions of lines of proprietary code written by companies who couldn’t care less for your security or privacy, or in some cases are actively trying to get your private data. Most games have some online component and many even expose you to unmoderated inputs from online strangers. Sandboxing just steam and your browser is a huge step in reducing the amount of exploitable vulnerabilities you are exposed to. But that’s all pointless if every app can spy on your every input.

    Xnest, Xephyr and X11 protocol proxy have also been around for a while, X11 doesn’t prevent you from doing isolation.

    What’s the point then of a server-client architecture if I end up starting a dedicated server for every application? It might be possible to have isolation this way but it is obviously patched on top of the flawed design that didn’t account for isolation to begin with. Doing it this way will break all the same stuff that Wayland breaks anyway so it’s not a better approach in any way.


  • Disabling screen tearing for two or more monitors with different refresh rates is as far as I know impossible within the X11 protocol. This is especially annoying for high-refresh rate VRR monitors which could be tearfree with negligible cost in responsiveness.

    You also can’t prevent processes from manipulating each others inputs/outputs. An X11 system can never have meaningful sandboxing because of this. Maybe you could run a new tweaked and sandboxed X server for every process but at that point you’re working against the protocol’s fundamental design.



  • It’s not about “accomplishing” something that couldn’t be done with a database. It’s about making these items tradeable on a platform that doesn’t belong to a single entity, which is often the original creator of the item you want to sell. As good as the Steam marketplace might be for some people, every single sale pays a tax to Valve, and the terms could change at any moment with no warning. The changes could be devastating for the value of your collectibles that you might have paid thousands of dollars for. This could not happen on any decentralized system. It could be something else that isn’t NFTs but it would absolutely have to be decentralized. Anything centralized that “accomplishes the same thing” doesn’t really accomplish the same thing.

    It’s worth noting that this sort of market control would never be considered ok on any other market. Can you imagine a car manufacturer requiring every sale to go through them? Would you accept paying them a cut when you resell your car? Would you accept having to go through them even to transfer ownership of the car to a family member? If a car manufacturer tried to enforce such terms on a sale they would be called out for it and it would most likely be ruled to be unlawful. But nobody questions the implications of the same exact situation in a digital marketplace.



  • I don’t think Linux literally waits for you to unmount the drive before it decides to write to it. It looks like that because the buffering is completely hidden from the user.

    For example say you want to transfer a few GB from your SSD to a slow USB drive. Let’s say:

    • it takes about half a minute to read the data from the SSD
    • it takes ten minutes to write it to the USB
    • the data fits in the spare room you have in RAM at the moment

    In this scenario, the kernel will take half a minute to read the data into the RAM and then report that the file transfer is complete. Whatever program is being used will also report to the user that the transfer is complete. The kernel should have already started writing to the drive as soon as the data started being read into the RAM, so it should take another nine and a half minutes to complete the transfer in the background.

    So if you unmount at that point, you will have to wait nine and a half minutes. But if you leave it running and try to unmount ten minutes later it should be close to instant. That’s because the kernel kept on writing in the background and was not waiting for you to unmount the drive in order to commit the writes.

    I’m not sure but I think on Windows the file manager is aware of the buffering so this doesn’t happen, at least not for so long. But I think you can still end up with corrupted files if you don’t safely remove it.