Plenty of things, but the most obvious being the two separate instances they had issues with renewing their certs.
Comment on Manjaro Linux Team Goes on Strike, Threatens to Fork the Project
rabber@lemmy.ca 2 days agoWhat happened?
Addv4@lemmy.world 2 days ago
chronicledmonocle@lemmy.world 2 days ago
It’s more than that. Broken updates. Failed hardware ventures. The project has been shambling along for a long time.
nymnympseudonym@piefed.social 2 days ago
and the certs lapsed again after volunteers built tooling to Prevent That
but somebody never set up the cron job to run it
MalReynolds@slrpnk.net 2 days ago
Well that’s confidence inspiring.
vaionko@sopuli.xyz 2 days ago
Don’t forget their package manageer DDoSing the AUR multiple times
harmbugler@piefed.social 1 day ago
You seem to have misspelled package mangler
chronicledmonocle@lemmy.world 1 day ago
Oh yeah. Forgot about that one.
njordomir@lemmy.world 18 hours ago
I liked Manjaro, they had a nice theme, it was in the direction of Arch, but still had some guardrails for the noobish.
Then my system kept breaking, then they screwed up their certs. If they want to fork it and go forward with a different focus/ideology, that’s fine by me.
victorz@lemmy.world 2 days ago
Could you please explain why not renewing their certs is such a serious betrayal? Like, if they fixed it, isn’t that okay? And even if it happened again, and they fixed it again, isn’t it human to err? Or why is it such a harsh offense?
Serious question, I don’t know the consequences of not renewing these certs. 😊
Addv4@lemmy.world 2 days ago
It’s the tls certificate that proves your website is legit. Without which, you can potentially be a malicious actor that can pose as the website, and when you download the iso, you could unknowingly download something malicious. It’s pretty hard to forget certificate renewal (most of the time there are plenty of reminders sent and warnings given), so the fact that it happened twice was very impressively bad.
dubyakay@lemmy.ca 2 days ago
It’s pretty hard to forget certificate renewal (most of the time there are plenty of reminders sent and warnings given)
Oh boy. Seems to be the opposite in real life. Especially when it comes to managing stored cert of businesses partners. It has gotten somewhat better now of course, but three years ago most of my company’s sev1 production issues were due to lapsing or unscheduled cert changes.
underisk@lemmy.ml 2 days ago
it’s the main way for software to verify the identity of a source. without it you let nefarious actors do something like hijack a DNS server and impersonate your servers to your users, which is a pretty big problem if you’re running a software distribution network! it is literally a breach of trust and massive security vulnerability. and it probably broke a ton of shit when software that uses the certificate found an expired one and suddenly (and correctly) refused to work.
rhubarbe@tarte.nuage-libre.fr 2 days ago
People are very harsh with Manjaro. There’s more than just a list of objective facts unfortunately. I suppose there were some bruised egos at some point.
The certs issue wasn’t a big deal, it didn’t change anything for me as a user. It just paints a bad image.
daggermoon@piefed.world 1 day ago
As a former Manjaro user, it has some issues. It has weird bugs that aren’t present in any other Arch-based distro. Pamac ddosing the AUR is pretty bad as well. I’m thankful I used it as long as I did though. It got me hooked on Arch based distros. Everything else feels antiquated now. Actually, Void Linux is kinda cool
kuhli@lemmy.dbzer0.com 1 day ago
Its not just the fact that certs expired, it’s them advising people to bypass warnings or change their system time and how many times they’ve had the issue.
exu@feditown.com 2 days ago
I think it’s actually 3 now. IIRC they did it again last year
RipLemmDotEE@lemmy.today 1 day ago
Failing to renew TLS certificates on time multiple times is enough to never touch it again, but there’s also been a lot of other problems with Manjaro.
When I used Manjaro, it never made it more than 6 weeks before something would catastrophically break and I’d have to roll back using snapshots.
Buddahriffic@lemmy.world 1 day ago
The manifesto mentions this and that tooling had been made by volunteers but leadership ignored or rejected it (wasn’t clear which). So it seems that they are firing their leadership for the same reasons you want to stay away, which is a good sign, at least. Like promising that they are willing to mutiny to stop the enshitification.
rabber@lemmy.ca 1 day ago
Yeah the last time I tried manjaro years ago it kept breaking but I thought that was just the linux experience at the time haha
brucethemoose@lemmy.world 1 day ago
+1
chemical_cutthroat@lemmy.world 2 days ago
The trust. It eroded.
ramble81@lemmy.zip 2 days ago
I mean, I think they were looking for a little more detail that that.
dubyakay@lemmy.ca 2 days ago
Over a hundred thousand years the ocean of distrust has eroded the cliffs of trust in a non-insignificant manner.
AmosBurton_ThatGuy@lemmy.ca 2 days ago
Keep the dumbass reddit style “jokes” to reddit. Either answer the question or stfu. You’re not funny and your lame attempt at a “joke” is just annoying.
justlemmyin@lemmy.world 1 day ago
You know what I am going to do it even harder dot gif
explodicle@sh.itjust.works 1 day ago
There shall be no mirth in this place!
BiteSizedZeitGeist@lemmy.world 16 hours ago
It’s not mirthful, it’s dreary and tedious.
Nelots@piefed.zip 1 day ago
And yet their “unfunny lame attempt at a joke” got 90+ upvotes, so clearly some people thought it was funny.
chemical_cutthroat@lemmy.world 1 day ago
I think your butt plug has gone sour. Time to change it.
1984@lemmy.today 1 day ago
So mean for no reason.