6 ms·

Wonder how these play out against the https://github.com/X11Libre/xserver https://github.com/X11Libre/xserver base, would be interesting to hear from that end a

Wonder how these play out against the https://github.com/X11Libre/xserver https://github.com/X11Libre/xserver base, would be interesting to hear from that end as to how these things are handled. My understanding is that they address any sec issues that arise on x.org but it would be fascinating if the issues are already mitigated since XLibre updated their xserver port with 1000s of issues that were never addressed on the x.org side of things.

richard_todd 11mo ago
On their github you can see all three changes identical to x.org's happened on October 28th (same day as the advisory). So, they were not already fixed, but the fixes were applied immediately.
throw83940404 11mo ago
[flagged]
- alsothrowaway 11mo ago
  [flagged]
  - pkulak 11mo ago
    [flagged]
    - blastersyndrome 11mo ago
      [flagged]
  - asveikau 11mo ago
    An X server code base is such a niche topic, do you honestly think Xorg or any other project is capable of being a "woke" X server? It sounds more like this one guy has some issues and is trying to blame something he is already bitter about.
    - alsothrowaway 11mo ago
      [flagged]
themerone 11mo ago
That project is a pipe dream. They don't have what it takes to continue X11 alive once X.Org pulls the plug.
- mmcgaha 11mo ago
  I bet you are the life of the party. Seriously though, what makes you write that so matter of factly?
asveikau 11mo ago
That's the fork where the primary cause was to be "anti-woke", right? Honestly it seemed like it was just because that one guy was a little unbalanced, and he happened to be channeling that energy into an X server fork.
- nofriend 11mo ago
  no the primary cause was that the main xorg project wasn't accepting the devs patches any more.
  - theamk 11mo ago
    ... because this dev's patches broke master, multiple times. I feel this is an important detail to keep in mind while choosing a fork.
    - nofriend 11mo ago
      which mattered because everyone pulls from master, because xorg stopped doing proper releases. it's certainly something to bear in mind if you intend to run xlibre though.
      - theamk 11mo ago
        I don't think "everyone" pulls from master - "everyone" run the distributions, and they always pin to the specific git commits. Only people who run xorg master are the ones who want bleeding edge, and those would be using it no matter release or not. And it's not like metux will suddenly become more careful just because he does not have to worry about other anymore. If anything, I expect there to be much faster changes and much more breaking things... Here is a great quote [0] > @metux that you've had to fix this bug twice (!1844 (merged), !1845 (merged)) shows a lack of attention and care. This was a known regression, with clear reproduction steps, and at first glance, it does not look like you tested your PR at all. > And that goes in general; I really haven't seen the level of care and attention I would expect to see in these patches; several of them had obvious buffer overflow issues that would have easily been caught if tested. [0] https://gitlab.freedesktop.org/xorg/xserver/-/issues/1797#note_2805680 https://gitlab.freedesktop.org/xorg/xserver/-/issues/1797#no...
forgotpwd16 11mo ago
XLibre looks nice with lots of work happening in only 5mo.
- immibis 11mo ago
  The problem with XLibre is political, not technical. When they came out they made a big deal of being the anti-woke free-speech no-vaccine-mandate alternative to woke cancel-culture Xorg, which instantly ruined their reputation before it even began.
  - alsothrowaway 11mo ago
    [flagged]
    - RealStickman_ 11mo ago
      Your comment is missing how the project initially presented itself and the main dev being an anti-vaxxer certainly puts those words into a bad context. [1] https://github.com/X11Libre/xserver/blob/fea8b78358a169238a288952b77e15422837e8a5/README.md https://github.com/X11Libre/xserver/blob/fea8b78358a169238a2...
      - alsothrowaway 11mo ago
        In essence, that's not a lot different different from the section I linked to in the current version. But I appreciate that the dev could have curbed his emotions while writing the README.md, if for no other reason, then to cater to public appearance. As for the lead dev's stance on mandatory vaccination, that should not play a role in assessing the need for and the technical merits of the project. Attempting to cancel a project based on such personal views of its maintainers is exactly my issue here.
    - seethedeaduu 11mo ago
      Yet another transphobic throwaway? Color me surprised!

richard_todd 11mo ago

On their github you can see all three changes identical to x.org's happened on October 28th (same day as the advisory). So, they were not already fixed, but the fixes were applied immediately.

throw83940404 11mo ago

[flagged]

alsothrowaway 11mo ago
[flagged]
- pkulak 11mo ago
  [flagged]
  - blastersyndrome 11mo ago
    [flagged]
- asveikau 11mo ago
  An X server code base is such a niche topic, do you honestly think Xorg or any other project is capable of being a "woke" X server? It sounds more like this one guy has some issues and is trying to blame something he is already bitter about.
  - alsothrowaway 11mo ago
    [flagged]

themerone 11mo ago

That project is a pipe dream. They don't have what it takes to continue X11 alive once X.Org pulls the plug.

mmcgaha 11mo ago
I bet you are the life of the party. Seriously though, what makes you write that so matter of factly?

asveikau 11mo ago

That's the fork where the primary cause was to be "anti-woke", right? Honestly it seemed like it was just because that one guy was a little unbalanced, and he happened to be channeling that energy into an X server fork.

nofriend 11mo ago
no the primary cause was that the main xorg project wasn't accepting the devs patches any more.
- theamk 11mo ago
  ... because this dev's patches broke master, multiple times. I feel this is an important detail to keep in mind while choosing a fork.
  - nofriend 11mo ago
    which mattered because everyone pulls from master, because xorg stopped doing proper releases. it's certainly something to bear in mind if you intend to run xlibre though.
    - theamk 11mo ago
      I don't think "everyone" pulls from master - "everyone" run the distributions, and they always pin to the specific git commits. Only people who run xorg master are the ones who want bleeding edge, and those would be using it no matter release or not. And it's not like metux will suddenly become more careful just because he does not have to worry about other anymore. If anything, I expect there to be much faster changes and much more breaking things... Here is a great quote [0] > @metux that you've had to fix this bug twice (!1844 (merged), !1845 (merged)) shows a lack of attention and care. This was a known regression, with clear reproduction steps, and at first glance, it does not look like you tested your PR at all. > And that goes in general; I really haven't seen the level of care and attention I would expect to see in these patches; several of them had obvious buffer overflow issues that would have easily been caught if tested. [0] https://gitlab.freedesktop.org/xorg/xserver/-/issues/1797#note_2805680 https://gitlab.freedesktop.org/xorg/xserver/-/issues/1797#no...

forgotpwd16 11mo ago

XLibre looks nice with lots of work happening in only 5mo.

immibis 11mo ago
The problem with XLibre is political, not technical. When they came out they made a big deal of being the anti-woke free-speech no-vaccine-mandate alternative to woke cancel-culture Xorg, which instantly ruined their reputation before it even began.
- alsothrowaway 11mo ago
  [flagged]
  - RealStickman_ 11mo ago
    Your comment is missing how the project initially presented itself and the main dev being an anti-vaxxer certainly puts those words into a bad context. [1] https://github.com/X11Libre/xserver/blob/fea8b78358a169238a288952b77e15422837e8a5/README.md https://github.com/X11Libre/xserver/blob/fea8b78358a169238a2...
    - alsothrowaway 11mo ago
      In essence, that's not a lot different different from the section I linked to in the current version. But I appreciate that the dev could have curbed his emotions while writing the README.md, if for no other reason, then to cater to public appearance. As for the lead dev's stance on mandatory vaccination, that should not play a role in assessing the need for and the technical merits of the project. Attempting to cancel a project based on such personal views of its maintainers is exactly my issue here.
  - seethedeaduu 11mo ago
    Yet another transphobic throwaway? Color me surprised!