HaraldvonBlauzahn

joined 1 year ago
[–] HaraldvonBlauzahn@feddit.org 2 points 7 hours ago* (last edited 7 hours ago)

What's also worth mentioning is that Guix packages are also an excellent way to distribute new FLOSS software for Linux/POSIX - your packages do not need to be part of the Guix distribution.

You can just put your package definition on your Codeberg or github page and users can pull that. Pretty much like Ubuntu PPAs or flatpaks but since everything is defined from source, people can inspect what they get, which fosters trust.

And it works for any distro that works with Guix, without modification, because the Guix dependencies give a 100% reproducible base.

[–] HaraldvonBlauzahn@feddit.org 3 points 7 hours ago

Bestes Fahrradwetter heute, das wird bestimmt Spaß machen!

 

Hm. Vielleicht hätten wir doch keinen Merz wählen sollen, der frühlingshafte Dinge verspricht , sie aber nicht hält...

[–] HaraldvonBlauzahn@feddit.org 2 points 7 hours ago (1 children)

Well, it has only 31,000 packages for now, and quite limited npm support ;-)

But more serious, the user interface is still being polished. The documentation is top notch though, including the parts how to define own packages!

[–] HaraldvonBlauzahn@feddit.org 1 points 8 hours ago

AUR is not Arch maintainer vetted repo tho.

Oh, of course. I didn't repeat that, because this is is clearly stated in the docs and should be well known now.

[–] HaraldvonBlauzahn@feddit.org 1 points 8 hours ago (3 children)

Here is an explanation for that - I think it is valid for Debian, too:

https://wiki.archlinux.org/title/Guix

[–] HaraldvonBlauzahn@feddit.org 2 points 8 hours ago

I solved that one by buying an AMD radeon card. Zero fuss since then.

[–] HaraldvonBlauzahn@feddit.org 1 points 9 hours ago* (last edited 9 hours ago)
Without the AUR Arch becomes a third world country distro because the official repos have only the basics.

Arch has 17,000 packages and is one of the largest distros. If you want more, you can use Debian, (or maybe NixOS, but you won't get the same quality).

And what do you need so many packages for?

[–] HaraldvonBlauzahn@feddit.org 2 points 9 hours ago (2 children)

I’m using Tumbleweed, the one issue of rolling release (things occasionally breaking) [...]

My 5 cents is the risk of breaking is overblown in many cases. Of course, you don't want important servers to break. But I am running Debian since 15 years and in fact, for me it broke more often than Arch, for example because of GNOME issues, or NVidia issues. And well that's a biased sample because I use Debian for a larger proportion of time. I think for desktop users, it matters more to have a backup system.

[–] HaraldvonBlauzahn@feddit.org 0 points 9 hours ago* (last edited 9 hours ago) (1 children)

This doesn’t take away responsibility away from the Arch team.

The Arch team is not responsible for this code.

And to add, demanding to do more work from volunteers which already do a lot of work for free is rude. If you want something done - do it yourself.

[–] HaraldvonBlauzahn@feddit.org 1 points 9 hours ago (2 children)

I don’t understand any code so does that mean I shouldn’t use any software? that is 99% of the world.

Not from AUR.

 

This is for making "pip install" safer, so that dependencies of your packages cannot change under your feet.

However, keep in mind that third-party PyPi packages are not vetted or reviewed for security before they become available. So, they are subject to the same risks for compromise as Arch Linux AUR packages.

A safer alternatve would be to use GNU Guix, which has vetted packages, builds everything transparently from source, and has great support for cross-language projects.

[–] HaraldvonBlauzahn@feddit.org 2 points 9 hours ago (4 children)

OpenSuSE also comes in two flavours, Leap (a stable release) and Tumbleweed (which is rolling release and sligthly less bleeding edge than Arch).

You can even run Opensuse stable, and in a VM on top Tumbleweed to have a system where you can safely try out new stuff.

[–] HaraldvonBlauzahn@feddit.org 1 points 10 hours ago (6 children)

Maybe maintenance of packages shouldn’t just be handed over to newly created accounts. This is a design flaw on AUR’s part.

That is the whole purpose of AUR, users can create and share packages with minimum fuss. That does not mean that it is a good idea to run the code of some random guy on your computer.

But open source has always worked like that, by code sharing and collaboration - on tapes, on FTP servers, on Sourceforge or github and today on codeberg. The way the Arch User Repository (this is AUR spelled out) makes this easy is great!

Just don't run random code that you don't understand, and cannot reasonably trust.

 

In multiple ways, we are seeing the end of the oil age.

Change is coming.

 

This is an article that is now over twenty years old.

And yet posting it seems like a worthwhile refresher for the "Agentic Age" .... because very basic principles are being thrown overboard.

One is: There has to be a clear separation between code that controls actions on your computer, and untrusted data.

Looking at agentic systems - what do you see?

 

Osmanovic Thunström and her colleagues made it very obvious, sprinkling the fictitious studies with things like funding from the Galactic Triad and Lord of the Rings, as well as appreciation of colleagues at the Starship Enterprise and Professor Ross Geller, per “Science Quickly.” At least one of the papers even explicitly stated, “This entire paper is made up,” reports Nature.

Ultimately, the project confirms that these LLMs take their information from the internet, and the internet contains a lot of misinformation. Humans, therefore, should be more critical of A.I. outputs.

“Misinformation has always existed,” write Goodman and Rashid for the Conversation. “What’s new is the speed at which it spreads, the tools that generate it and how convincingly it mimics the real thing.”

view more: next ›