Notices by Emil "AngryAnt" Johansen (angryant@mastodon.gamedev.place)

@andy_warb I'm really digging the approach of using external motors and then having a lot more freedom of choice in blinds/curtains. Having the tech dictate choice of blinds/curtain so close feels unnecessarily limiting.

@csp @andy_warb We use Adaptive Cover in the office: https://github.com/basbruss/adaptive-cover

Highly recommended.

@sinbad I think I prefer a homeopathic approach to the application of computers to any given context.

@sinbad Their mom does not yell as loudly as the lessons in public discourse they are being taught daily by The Facebook and Twitter.

@publicvoit @raboof Mitigations to avoid that initial foothold include:
- Having most systemd services configured via NixOS options run with DynamicUser set, enabling lots of system isolation: https://unix.stackexchange.com/questions/635027/systemd-dynamicuser-vs-user#635036
- The nature & implementation of the nix store precludes whole classes of common exploits like library/dll injection and malicious patching.
- You can comparatively easily add further isoation to potential entry points by declaring them in NixOS containers.

@publicvoit @raboof Personally I like to run my services in NixOS containers with private networking - often with their own network interface passed through.

@publicvoit @raboof Personally I had that same impression prior to taking on containers, but ended up concluding that this had been me over-estimating complexity.

It really is one of those areas where NixOS makes doing something complicated easy vs. other distros.

@khronos @codemonkeymike Yes. Guix forked nix and quickly diverged a ton by switching language and away from systemd. Same base principles still ofc.

They're nix compatible though - which one would need for accessing any non-FOSS software (guix is gnu).

@joenio @skry @report_press Usually I don't provide context for blocks here, but:

You really should meditate on the difference between wishing for transparency and participating in a doxing campaign - like you just did by surfacing that data from the HN thread.

@TomF @NanoRaptor I mean... have you _heard_ the pop scene he stotted into?...

@thanius @thelinuxEXP Uh. Citation highly desired?

@leftpaddotpy Seeing the board utterly cluelessly trotting down the path of increasingly publicly endorsing that company while evoking "professionalism" makes it aboundantly clear to other companies that being publicly associated with NixOS carries non-zero risk.

It is not even close to the primary issue, but the depth of the recursive self-own here is just so ludicrous. Such wild demonstration of incompetence only serves to further incentivize reduction of exposure.

@buonhobo @popey Over-simplified, nix & nixos has had very little explicit power structure since inception. That has resulted in lots of implicit power being passed around - such as that held by the benevolent dictator who habitually stops by to throw a wrench in procceses, relitegate, protect problematic community members, etc. - with most of their time spent at their heavily related business venture, stacked with undisclosed conflicts of interest.

Has been building for years, now overflows.

@fixatedpersonsunit The worries in this thread about a future with an internet filled with construct identities are quite interesting.

Treating misinformation campaigns separately, what would be so bad about such a future?

If your interaction is meaningful then what do you care?

@yoavlavi You can load a nixpkgs repository from an arbitrary URL and reference packages from there in addition to your default.

Often when I have a PR in a functional state I’ll immediately reference the PR url directly in my conf and use packages from there. Then once the changes make their way to whatever channel I’m on I can retire that reference and use the one from the main channel.

@MouseByTheSea @slembcke @Nifflas @mcc I never saw eye to eye with Perforce. I feel like it and I are from two different worlds and installing it feels like inviting in an adversary to fight for control of my files ;)

@MouseByTheSea @slembcke @Nifflas @mcc I... I think you have to put that kind of language behind a content warning?

Brr...

@Nifflas @mcc Using git all over the place for a decade and a half, in all sorts of projects & functions, with decent skill at juggling more advanced flows, I still don’t grok how someone can actually _like_ it.

I appreciate systemic aspects just like I might appreciate a database design. Still doesn’t mean I’d be doing data entry by query writing and liking it.

TLDR; Implementation is great, level of abstraction is ridiculous, people presumably have Stockholm syndrome?

@benjaminhollon @raboof https://matrix.to/#/#nix:nixos.org