meanwhile Linus hounding down the google devs for making stupid pull requests
Do you have some context for this? I’m out of the loop.
I’ll allow it.
The trick is to stop giving af about demands from random assholes. Using software doesn’t entitle anyone to updates. Part of the point of open source is if you want it to be different, the source code is available for you to do that.
Yup. I’ve contributed to a number of FOSS projects (including lemmy) and try to always observe the proper etiquette. That means (IMO):
- read through the contribution guidelines and follow them to a T
- check for feedback at least once/day
- allow at least two days for initial feedback, and gradually back off (so bump after 2 days, bump again after another 3-4 days)
- if there’s no feedback after a week, bring it up on another channel (IRC, Matrix, email, etc)
- never demand anything, always ask how to help
None of that is written down anywhere, but to me it’s common sense. If you don’t want to do that, fork the project and maintain it yourself. Maybe they’ll pull your changes in if they’re good.
Well, it’s fun that they mention F-Droid, because the maintainers are bullies who bully their contributors and generally act very unpleasant. They like to make new rules on the spot.
I abandoned using the project altogether, not someone I want to support.
What rules?
That apps published there can’t be wrappers around a web application.
Good rule, those should be web addresses, not apps. Or even better, native applications rather than web apps, but it does depend on the context.
Eh… why? More to the point, it’s not mentioned anywhere in their guidelines, it was made up on the spot by the fella doing the code review.
They are inefficient and bloated.
And personally, I prefer good reasoning over good rules. If something comes up that is a bad idea but there’s no existing rule against it, the rules should be changed to address it. As long as the reasoning is sound, I think it’s a good thing, especially when we’re talking about something like a software distribution platform as opposed to say laws that determine freedom or imprisonment.
Also if you’ve made a web app, let it be installed as a web app. Both FF and Chrome let you install web apps in one click.
Inefficient and bloated describes 90% of all apps I’ve ever seen, regardless of technology used, so I fail to see your point.
If you really want to have it available on F-Droid, you can always put it in a separate repository. So I can see it being annoying that they reject it from their repo, but there’s still a reasonable path forward.
Well, I have the app on Google Play store, which was originally meant to be the alternative, now it’s the main store.
What’s a wrapper in this context?
An app that’s just WebView?
Not WebView, but a so-called TWA, aka Trusted Web Activity, a features specifically designed to wrap PWAs and give them full-blown app capabilities.
What additional capabilities does that give the app beyond using Firefox or Chrome to install it as a PWA?
Seems to me like they’ve done a pretty good job keeping their store free of malicious apps, I’ve never heard of any breaches like I have of every other store including Snap and Flatpak.
Maybe they’re pissing some people off in the process, but maybe it’s the right people to piss off. They’ve been able to hold it together in the FOSS app space better than most.
I would simply deal with these bullies by telling them to fuck off and fork their own thing instead of bugging me to push an update on the main. This feels nore like it should be happening to closed source things where the only way to get a thing in it is to beg the dev.
Unfortunately, that’s the social element of social engineering. Not all developers feel that way and it’s possible to trick them.
Luckily, most developers are on the spectrum and aren’t affected as much by that type of social engineering.
deleted by creator
Completely a meme answer. IT workers including software devs in the past were seen as nerdy loner types
I think most people who are “on the spectrum” are undiagnosed, this survey asked about diagnosed autism.
And that’s pretty close to the average in the population of 1 in 36, or 2.8%.
It’s probably far more common than most people realize. Open source software doesn’t automatically make it secure, and in many cases can be less secure than closed source as it’s just one or two people doing it for free.
Much easier to be tempted to do something wrong or to get others to help in and take the weight off.
in many cases can be less secure than closed source as it’s just one or two people doing it for free.
Absurd take. How could having the source closed possibly enhance the security?
I think they mean that a lot of proprietary software (supposedly) has a large (or at least well-founded) team working on it
Hahahahahahahahaahaha
(I work for a software company.)
Weird that they would say something totally different from what they mean…
I mean, they didn’t though Theoretically, well-funded teams would be able to create more secure software and fix vulnerabilities faster than some random guy who works a full-time job and codes in his free time
You say they didn’t, and then go on to make a point they didn’t make…
They didn’t comment on funding whatsoever. Plenty of open-source software gets funding, and not all closed source software gets funding.
The issue is with bullying and burnout. Nothing to do with being closed or open source.
I’m sorry that I’m apparently not getting my point across to you
Proprietary software is often made by a corporation, who pays full-time developers. Those full-time developers are given a salary to work on that software. That salary is normally more than what open-source devs make off their software. The team who is paid to work full-time on the software will patch issues faster (theoretically)
I bet you’ll find something wrong with this, but I don’t care
There’s nothing wrong with what you’re saying, I’m not challenging the point you’re making here.
I’m challenging your ability to mind-read and ascribe that point to a different commenter.
Closed source software has the exact same bullying issue, the difference is instead of the bullies being random people on the internet, they are managers with power over you. They are at least as likely to make you do something dangerous as the randoms, but they don’t have to try as hard to hide it.
It’s not the same, but it can be.
Bullying in closed source software is a company culture issue. Bullying in open source software can come from anywhere, and a good CoC won’t necessarily fix it because outside community members can just bully from different accounts. But that also means bad company culture can’t be fixed as easily as playing whack-a-mole in a FOSS project.
I mean you can see the source code. You’ll know if anyone does something weird if you have two braincells.Edit: Clown here move along.
You’re manually reviewing the entire code of every open source product you use? Manually reviewing the code at every commit of every open source software you use?
Nope, I’m just a clown who doesn’t actually work in tech.
I forgot it wasn’t any of my business to ask. My bad
How do you qualify the security of a closed source code when you can’t verify it?
deleted by creator
This comment said:
Naturally closed source for profit software is so much better and would never contain anything malicious.
We know this for certain because the PR department affirmed us that there is nothing malicious or illegal within their code. There internal investigations found no proof of hacking from external sources, All code changes where done with the full legal permission of our Ceo and Overlord Marz Kucherberg ™
I mistook the post and didn’t know it was about bullying specifically so my comment was unwarranted
There have been other posts of late where my sentiment is more ontopic but here it only muddies the actual discussion.
Yeah but reading that shit was good. Especially the quote’s origin.
No need to be so defensive… unless you you the F-Droid team they are writing about. Are you?
Either way it is just whataboutism aimed at a strawman. No one is saying proprietary software is better.
Not sure why its still showing for you but i removed my comment seconds after posting as i misread and didnt know this was about bulling. I firmly stand against bullies of any kind.
Ever since the xz thing i have noticed a general increase in articles and clickbait titles spreading fear about open source software in general, its started to feel like intentional propaganda, for this post it was unwarranted.
Ps: please do confirm if my comments is removed by now on your end, i suspect comments may not always continue to sync between lemmy servers after the first initial postings.
No, I still see it. Not sure why, maybe because I commented on it.
I’ve had several comments behave the same way, unable to actually delete them, even after waiting a while for the delete to propagate.
The best thing to do is edit it to be just a period then delete. I can still sew deleted comments by hitting copy text
There’s always been FUD around OSS, this is just a fresh wave of it since the xz thing got quite a bit of publicity.
