• 32 Posts
  • 71 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

  • Gecko@lemmy.worldtoLinux@lemmy.mlWhy does nobody maintain PPAs anymore?
    link
    fedilink
    arrow-up
    7
    arrow-down
    1
    ·
    edit-2
    3 months ago

    Jia Tan liked your comment

    Without the traditional distribution workflow […]

    You are aware that the xz exploit made it into Debian Testing and Fedora 40 despite the traditional distribution workflows? Distro maintainers are not a silver bullet when it comes to security. They have to watch hundreds to thousands of packages so having them do security checks for each package is simply not feasible.































  • As outline in the blog post, https://lemmyrs.org/ would lend itself best to avoid the case of one big instance de-federating from another.

    Discoverability can be an issue with smaller instances but I’d argue that can be bypassed by simply linking to it from official resources that previously linked to reddit. Same with linking to that instance from Reddit.

    One thing of importance IMO is that should lemmyrs.org be selected as the reddit replacement, there needs to be communication and more importantly help for that instance admin, so that they don’t have to carry the weight of supporting one of rust-lang’s communication channels.