Hello from XMPP. Now you understand how we felt.

Well, Jia Tan waited several years before pushing malicious code. How can we know it is not the same person?

This only affects those who registered their account on piefed. It allows them to login into their account and interact with the website. If your account is on lemmy (which is the case for you), it does not affect you in any way.

Basically, lemmy uses 2 different APIs:

One (activitypub) is used for communication between instances. It is the same for both Lemmy and piefed, so no work is needed on this front.

The second one is used for interacting between lemmy core and applications (like boost, but also lemmy webui). Piefed for whatever reasons decided to make it incompatible with Lemmy, so all application have to do some work in order to add piefed support.

Voluntary for developer? Sure. Voluntary for the user who can't run software because it requires this shit? Not so sure.

So, basically, they want to do to Linux what google is doing to android and tried to do to web. No, thanks.

Ideological differences. Lemmy.world is liberal, while lemmygrad and hexbear are hardcore communists (aka tankies).

I hope none of mint maintainers share your sentiment. It would go against everything what mint is now.

They want to create a mechanism for software to determine on which system it allows a user to run itself. Google "play integrity" on android and google's proposal for web integrity API.

I do not care if it is connected to proprietary ecosystem or not. The freedom to decide what software am I allowed to run on my PC is important for me though. Any system that limits that freedom is evil by definition.

Well, we have a systemd creator and Microsoft employees here...

Rutracker used to have such rule many years ago but it is long gone.

@lemm.ee

Ironic.

I do not understand where does your optimism come from? In what little that we do know they describe the exact same system using the exact same wording as google. If they mean some other thing then they should spend a couple of hours and describe how is it different. And before that the worst should be assumed. It is to dangerous to treat it in any other way.

Which can be hosted on GitHub as well.

The language used speaks for itself. We already know what "integrity" means in this context.

the company wants Linux systems to be built so their correctness can be explicitly defined and continuously verified.

This does not seem vague to me. It explicitly states what they are creating.

Well, Russia would be even better.

Russian law requires for an alternative market and some goverment approved apps to be preinstalled. And since google refuses to certify certain Russian developers and is banned in Russia it would mean that smartphones would be required to be degoogled to be sold.

But saying that xbps-src is like the AUR is very misleading because it lacks the "U" part.

It is misleading because AUR is a repository, but xbps-src is not. It is a tool like makepkg in arch. One could argue that xbps-src is a more advanced tool as it also acts as a package manager itself. A repository that is most commonly used with xbps-src is void-packages which is maintained by void teamm one could build a repo for xbps-src like aur, but to my knowledge it has not been done and is unlikely to succeed any time soon due to a smaller user based compared to arch.

Wouldn't feddit.uk itself be categorized as a UK user for this purpose?

The funny part is that there was no attribution to beging with.

The problem is that this value can be compared to a list of "allowed" values. Therefore it opens the gate to creating software that would require only certain "whitelisted" systems to run it. Such list can be easily updated automatically once those "whitelisted" systems update. Therefore an argument "updates would break it" do not actually work.

This is precisely how play integrity works on android. And Poettering intensions do not matter much. His system can be used like that and therefore it will be used like that.