Comment on public services of an entire german state switches from Microsoft to open source (Libreoffice, Linux, Nextcloud, Thunderbird)

• OldChicoAle@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  I don’t wanna “make it”. I just want fast, secure, private computing.

  source

  • jjlinux@lemmy.ml ⁨3⁩ ⁨weeks⁩ ago

    Agreed. However, more users (personal, institutional or business) equals more devs focused on the OS.

    source

    • OldChicoAle@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      We need enough, not more. The concept of “more” and “surplus” got us into this capitalist dystopia. I know this isn’t the point you’re making. I’m just making a separate point that I thought of reading yours. :)

      source

      • jjlinux@lemmy.ml ⁨3⁩ ⁨weeks⁩ ago

        And that’s fine. I agree. Becoming consumist hoarders is what got us to where we’re at. Or rather, what allowed companies and institutions to take us here.

        source
  • sugar_in_your_tea@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

    Same, I’m largely being facetious. But viruses come with success, and success also means more software and hardware compatibility. I think that’s worth a periodic scan every so often and some slightly inconvenient security systems in place.

    source
• brucethemoose@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  There absolutely are. I barely missed a linux virus from a hijacked python package what… two years ago?

  source

  • sugar_in_your_tea@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

    Sure, and they have been for decades. They’re still not that common though.

    What Python package almost got you?

    I wonder if I’ve been hit but just haven’t noticed because I tend to run things in containers.

    source

    • brucethemoose@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      Pytorch Nightly: pytorch.org/blog/compromised-nightly-dependency/

      theregister.com/…/pypi_pytorch_dependency_attack/

      The malicious binary would upload files ranging in size up to 99,999 bytes and send the contents to a specified domain.

      Was pretty scary from my perspective.

      source

      • sugar_in_your_tea@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

        That is scary. But it does require using a custom repository, so hopefully few were hit.

        We use poetry, enough which allows specifying additional package repos and it looks like we’d be susceptible to the same attack, but for our internal package index. Looks like I have something to fix this week, thanks for the link!

        source
    • brucethemoose@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      PyTorch Nightly:

      source