deadcade

joined 2 years ago
[–] [email protected] 3 points 9 months ago

Although "custom Windows ISOs" are a big security risk, AtlasOS isn't a "custom ISO" and running a random binary off some guy on YouTube is arguably just as bad. He has next to no knowledge of Linux, neither do any other "Linux YouTubers". Trusting someone like that with your Linux machine is risky at best.

[–] [email protected] 2 points 9 months ago

They do make other Android-based devices like the Meta Quest line of VR headsets, and Facebook was just an example, any other OEM fits in that statement as well, like Samsung, Google, OnePlus, etc.

[–] [email protected] 41 points 9 months ago (5 children)

Lets go through the summary and see if anything is wrong or misleading:

Linutil is a distro-agnostic toolbox designed to simplify everyday Linux tasks. It helps you set up applications and optimize your system for specific use cases. The utility is actively developed in Rust 🦀, providing performance and reliability.

  • It is not distro agnostic. There is Arch and Fedora specific code, which are not separated into modules, but part of other scripts. Outside of the package manager, it also relies heavily on systemd.
  • Installing "Diablo II Resurrected loot filters" is not an "everyday task". A lot of other scripts are similar, very specific, "one time use" things, not "everyday tasks".
  • helps you set up applications, maybe, but only if you count running sudo pacman -S networkmanager as "helping", even when it ignores existing network configuration.
  • "optimize your system for specific use cases", it does nothing of the sort. There's no kernel parameter tweaking, no other cpu scheduler, no IO options being changed, or anything remotely similar.
  • "The utility is actively developed in Rust" except for the ~70% that is shell scripts. (according to GitHub)
  • "Providing performance and reliability", which is not something that's determined by the programming language.

So lets revise the short description, to exclude any incorrect/misleading statements:

Linutil is a toolbox. The utility is actively developed.

Alongside all that, the "installation instructions" include the biggest sin of all:

curl -fsSL https://christitus.com/linux | sh

TL;DR Never trust Chris Titus, or any "Linux YouTuber", with your Linux machine. They do not know what the hell they're doing.

[–] [email protected] 12 points 9 months ago (4 children)

That indicator and the permission system are provided by the OS on your phone. If you trust your OEM not to abuse it, then it works. If the company that made your device is facebook, neither of those features prevent facebook from listening in 24/7.

[–] [email protected] 5 points 10 months ago

mount -o remount,ro /

[–] [email protected] 4 points 10 months ago (1 children)

I think the last thing you'd have to worrh about is your job when nearly all infrastructure collapses.

[–] [email protected] 4 points 10 months ago (1 children)

Louis Rossman's video describes his behavior in public spaces accurately: https://www.youtube.com/watch?v=4To-F6W1NT0

[–] [email protected] 5 points 10 months ago (1 children)

His activity on GrapheneOS repositories, issues, etc. indicates he's still very active in development and in the community.

[–] [email protected] 5 points 10 months ago

is clearly on the spectrum in some way

This is not an excuse to behave the way he does.

Very good decision from him to withdraw from social media

He hasn't, still on github, still on HN.

[–] [email protected] 8 points 10 months ago (1 children)

"Limited patience" is understandable, but the behavior of the GrapheneOS dev is completely different. I've personally interacted with them not too long ago, and nothing has changed since the public accusations from a year ago.

[–] [email protected] 4 points 10 months ago* (last edited 10 months ago) (20 children)

Lead dev of grapheneos is extremely toxic in communication. I don't trust someone like that developing the software running on a phone.

EDIT: This comment seems to be particularly controversial, with many people praising GrapheneOS as a project, while ignoring the developers views and actions. Although my opinion of the main developer is negative, the project itself and its goals are great. To clear up some confusion, I want to add to my previous statement:

At first, this seems like the standard "separating art from the artist", however, GrapheneOS is a ton of code, not just art. When it comes to other forms of art, like literature or paintings, an artist maliciously hiding their personal beliefs in their otherwise "unbiased" work might degrade the quality of the final result, but does not have much significant impact outside of that. When it comes to code, programs, OSes, this changes. The artist (programmer) changing their art (code) based on their personal beliefs is not just a degradation in quality, but a security risk for anyone running the code and trusting the developer. Having seen the way the GOS dev speaks about its community and even people in support of him (see Louis Rossman's video), it becomes clear that the mentioned "risk" of malware is very much present. Like many others, I don't have the time to verify the source code of an entire Android rom myself, which means I would have to trust the GOS dev to not insert anything malicious, after the statements he's made. I'd have to trust him after he's grouped a majority of his community into "people who are after him and are swatting him". It's a very real possibility that someone with beliefs like that would add malicious code to his project, and I'm personally not willing to run that risk.

Please note that I am not encouraging people to "go harass the dev", that is an immoral action nobody should be doing. I am trying to inform people of the developers behavior online, past and current, so they can make a decision for themselves whether to run his software on their personal devices.

view more: ‹ prev next ›