@Lemmchen no, just the sentence in the readme

@MigratingtoLemmy you are wrong though. They are adding tokens and signatures, without them the videos aren't playing. But I just updated my invidious and it's playing fine again => it's not an IP block (yet), it is a change in the youtube media api, so the players need to be changed too = effectively a player block.

@Kasupke are we recommending proprietary software here in the open-source lemmy community?

@gomp Yes but the point is that it comes from a different place and a different time, so for you to execute a compromised program, it would have to be compromised for a prolonged time without anyone else noticing. You are protected by the crowd. In curl|sh you are not protected from this at all

@gomp You mean, as seldom available as every apt install ever? https://superuser.com/a/990153

@gomp Why would you be taking the signature from the same website? Ever heard of PGP key servers?

@Hadriscus I wonder if anyone at SolarWinds or Mandiant would notice a 300ms delay. They didn't even find it in June after the FBI contacted them.

@xigoi Is that something you do?

@jeena And absolutely nothing can go wrong by downloading random files from the internet based on contemporary hype, making them executable and starting them...

@BRINGit34 Oh, not to be confused with another "Paisa", personal finance manager, also made in India https://github.com/ananthakumaran/paisa

@sylphio @lascapi

> Beeper Clients
> Native iOS and Android clients (closed source forks of Element iOS and Android)
> Mac OS, Windows and Linux clients (closed source forks of Element Web/Desktop)

How can they make a closed source fork of an open source (Apache-2.0) project?