This fixed the problem for invidious, maybe RustyTube needs something similar https://github.com/iv-org/inv_sig_helper
@tux0r You are right that this mistaken definition is quite common. Smart person would try to correct the mistake, not defend it.
@gomp try comparing it with apt install
, not with downloading a .deb file from a random website - that is obviously also very insecure. But the main thing curl|sh
will never have is verifying the signature of the downloaded file - what if the server got compromised, and someone simply replaced it. You want to make sure that it comes from the actual author (you still need to trust the author, but that's a given, since you are running their code). Even a signed tarball is better than curl|sh.
@over_clox The lack of redistribution is what's causing projects to disappear and die, vendor lock-in, walled gardens, bricked devices.. you clearly have no idea what you are talking about
@over_clox Which means it's not open-source, silly, because open-source explicitly means you can redistribute it.
@jonuno graphs and numbers, but try to create your favorite solution and then see what it will cost: https://en-roads.climateinteractive.org/scenario.html?v=24.6.0
"source available" licenses are making the commons MORE ransacked by corporations. Which direction do you want to go?
@haui_lemmy Look, I think we all agree that the maintainer financing needs to be improved, but what you are suggesting is throwing the baby out with the bathwater. You would remove the whole "F" of the "FOSS" by adding restrictions on the freedoms. So we just need to keep looking, this is not it.
@haui_lemmy That's like saying "I want to fly but without losing touch with the ground" - it is possible, it's just called "walking". If you "don't want someone to make money off of your invention" then that's called "proprietary".
@birdcat they do this to all new accounts now, especially the mostly inactive ones. I think one way to get around the phone requirement is to use a proton email and setup 2FA immediately after creating the account. Then again, proton is flagging new accounts with signup confirmation emails too, so... yeah... leave github asap