takluyver

6 ms·

31.
by takluyver 1y ago
The umbrella organisation signing apps is not impossible, as far as I know. But it would need to be pretty cautious, because if Google revokes its registration, that could block all the apps it has signed at once. It's hard to see how
32.
by takluyver 1y ago
The implied context for that is that whatever information you have in the apps should be kept in sync between devices and between people. Classic desktop applications are more like offline-only. Web 2.0 traded that approach for data living
33.
by takluyver 1y ago
I think governments funding software development could be a useful counterweight in an industry dominated by a few giant corporations, similar to how lots of countries have state funded media alongside commercial options. But the EU forking
34.
by takluyver 1y ago
And those apps get developed only if there are enough users. Catch 22. Microsoft didn't manage to make Windows Phone a viable competitor against Android & iOS, and they're about an order of magnitude bigger than any Linux-focu
35.
by takluyver 1y ago
People definitely care about applications they use a lot, and MS Office is a big one - even if LibreOffice would work just as well for many use cases, people are hesitant to give up what they know works. The OS does make some difference, bu
36.
by takluyver 1y ago
AppImage is, in fairness, a clever idea. But it's also yet another option. It only solves the mess of competing formats if it wins , if it becomes the normal way to publish user-facing software on Linux.
37.
by takluyver 1y ago
This is absolutely not a solution. It more or less works for a few big widely used applications like Firefox & Libreoffice, but more niche applications can't realistically get someone in every major Linux distro interested in packa
38.
by takluyver 1y ago
> As for religious wars over init systems, desktop environments and package managers, competition is making the options stronger, not weaker. Competition can definitely improve things, but it's not universally positive. In particula
39.
by takluyver 1y ago
Definitely, yes. That's a prime example of how corporate friendly open source has been massively successful. By contrast, the first entry on the FSF's high priority projects page is a free phone operating system. They point to Rep
40.
by takluyver 1y ago
I don't think Stallman is an effective spokesperson or campaigner for his own cause , though. Corporate-friendly open source has got enormously popular, to the point where the biggest open source collaboration platform, Github, is own
41.
by takluyver 1y ago
There are so many ways one could work around this (apparent) limitation. Liberty software, unbound software, modifiable software. Go all in on libre rather than putting it in an awkward 'free/libre' combo - languages borrow w
42.
by takluyver 1y ago
That seems to be looking at tracking and data collection libraries, though, for things like advertising and crash reporting. I don't see any mention of the kind of 'network sharing' libraries that this article is about. Have
43.
by takluyver 2y ago
I wonder if part of the "no big deal" view comes from the difference between tech companies as they're most visible now - 'move fast and break things' - versus all the other industries that rely on computers. It&#x2
44.
by takluyver 2y ago
Conda package recipes have a preprocessor using "selectors" in comments to conditionally exclude certain lines in a YAML file. Not that this is particularly more ugly than other YAML DSLs, but it has been used.
45.
by takluyver 2y ago
As I understand it, the point of these attestations is that you can see what goes into a build on GitHub - if you look at the recorded commit on the recorded repo, you can be confident that the packages are made from that (unless your threa
46.
by takluyver 2y ago
The 2FA requirement doesn't need a smartphone. You can generate the same one time passwords on a laptop. I know Bitwarden has this functionality, and there are other apps out there if that's not your cup of tea. Sorry that you fee
47.
by takluyver 2y ago
If there is time for someone to work on local uploads, a good starting point would be a nicer workflow for uploading with 2FA. At present you either have to store a long lived token somewhere to use for many uploads, and risk that it is sto
48.
by takluyver 2y ago
I believe you that token uploads will continue to be possible, but it seems likely that in a couple of years trusted publishing & attestations will be effectively required for all but the tiniest project. You'll get issues and PRs
49.
by takluyver 2y ago
I think there's been some concern that people compare the speed of Firefox with a bunch of random extensions against Chrome with none. I wonder if the 'refresh' is an attempt to get away from that at the point where someone m
50.
by takluyver 2y ago
> after a decade I still can't do what I can do on a closed source thing that came free with my computer I don't know the specifics, but there's a good chance that your issue is ultimately because Nvidia wants to keep stuf
51.
by takluyver 2y ago
> I’m arguing for truth in advertising and labeling, so that counterfeit, fake, and adulterated products are eliminated from the market. It's not a counterfeit, fake or adulterated product, though. It's balsamic vinegar, as alm
52.
by takluyver 2y ago
> Any other vinegar product that uses blends of grape must and wine vinegar... isn't really in the spirit of balsamic vinegar. To sell such a blend and labeling it as balsamic vinegar feels like selling blended whisky as single malt
53.
by takluyver 2y ago
The BBC article especially is conflating two kinds of 'fake'. The balsamic vinegar most of us buy is not the super expensive 'Traditional balsamic vinegar', which is what they're describing aging in barrels for 12 y
54.
by takluyver 3y ago
Flathub does allow the 'build' to download and unpack a pre-built tarball. This is obviously not as convenient as directly uploading it, but some of those enthusiastic users might be happy to get the manifest set up for you, and t
55.
by takluyver 3y ago
That makes sense. But I think that's a money problem, not a technology problem - if the money was sloshing around desktop applications, I think we'd get a lot of locked down desktop applications tracking us. We kind of have that o
56.
by takluyver 3y ago
Ironically, that decision to run Javascript without a prompt was probably a huge step forward for the security of most users. The 'do you trust this' model of security doesn't work well in practice once you can download progr
57.
by takluyver 3y ago
> It doesn't (need to) get packaged by a distribution until a program using it is packaged. I think this is a key difference in approach. In languages with their own packaging systems, you routinely package libraries before there ar
58.
by takluyver 3y ago
Users install from there, so long as they're using Linux, a Debian or Red Hat based distro, and have sudo access. As you say, not such a nice answer. For certain kinds of software, this approach is getting more viable, thanks to contai
59.
by takluyver 3y ago
In fairness, there are standardised protocols for a lot of these things already, even if they're not all part of one giant meta-protocol. Cameras in particular have mostly appeared as a folder full of files, with no need for special dr
60.
by takluyver 3y ago
I'm on Android rather than Apple, but I could install the HVV app on my UK phone and buy tickets using my UK card with no particular difficulty. Maybe other transport associations are more difficult, but I'm not sure why they&#x27

More ›