Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • > ... collection of security issues which I can only describe as regrettable (because I promised my mum I would swear less). There are bangers like video title bash injection or all notifications being able to run arbitrary bash on your machine.

    Bash injection using video... Titles !? Moterfucking shit (mom's not there anymore to ask me to swear less, RIP)

    by TacticalCoder
  • Pretty embarrassing, but its nice to see them actually putting effort into security. https://omarchy.org/security/

    Too few upstarts realize that proper security is core to a good experience.

    by 1GZ0
  • If they're going agentic and using the stack that they're using (qt/shell scripts?) they'll never patch it in full, if ever. The thing is almost certainly full of injection/forgery attacks, on top of being bloated to oblivion.
    by rfgplk
  • Isn't most of the security holes still there if used arch and installed the packages yourself. A lot of people complained ssh had security issues in omarchy because it used the default settings. That would still be the same on arch?
    by UK-Al05
  • Arch doesn't market itself as a newbie-friendly opinionated secure-by-default distro.

    An Arch package having less-than-ideal default settings is pretty normal: the user is expected to read the manpages and the Arch wiki when making any alterations to their system. They guide you towards making it secure, but if you want to leave it insecure because of reasons then Arch isn't going to stop you from shooting your own foot.

    by crote
  • Okay, but how cool is that this feature (hotkey to pass a video, that is open in the browser, to yt-dlp) exists and works out of the box?

    It's unfortunate, that it was developed in a weird, insecure way, but I think that the fact that it exists is very cool.

    I've heard about Omarchy long time ago, but didn't switch, because at some point in my life I started to prefer something that is rock solid and well supported (currently on Fedora Atomic with KDE) to new/shiny/bleeding edge. But still. I think that an overall good UX out of the box is composed of little things like this.

    by vova_hn2
  • Not very? Why would a TOS-violating feature like this be included as a default feature of an OS?
    by rideontime
  • Apparently the Omarchy plugin ecosystem is also a free for all like the Arch AUR, except the audience includes people who are new to Linux and less likely to understand the risks.
    by markstos
  • Given the choice between a walled garden like Apple's app store or this, give me something open and more risky any day of the week.

    It's easy enough for Omarchy folks to add "verified" or "trusted" developers down the line.

    by dcchambers
  • A lot of plugin systems are like that. (See the hyprland, noctalia, or vim/neovim's plugin systems).

    More generally, how else would a small project allow plugins that isn't "here is a way to add code" and then anyone can release the code they added? Hell, the linux ecosystem in general is a "free for all", and that is the nature of the platform

    by sophrosyne42
  • I have been seeing so many podcasts and YouTube videos about Omarchy in the past week or so. Must be a massive marketing push or just hype.
    by okinternets
  • It's been showing up all over YT for a while if you do any searches for Linux.

    I took a look at it when I kept seeing it, realised what it is and who it's by and carried on moving, putting aside DHH as a person, it doesn't really do anything I want or in a way I'd care about but then I'm also not the target demographic/user, after 30 years of using Linux, I don't need it.

    by noir_lord
  • Just hype, it's Kagi all over again. People said the same thing there, we're just too cynical, not used to people getting excited about really cool stuff anymore.
    by kristofferR
  • They just announced the new "Omacom foundation" last Friday, with $8 million of funding from prominent tech people. That's why it's getting current flurry of attention
    by arrowsmith
  • That feels very astroturfed, it’s just too much too fast
    by dgellow
  • There is this meme of a bell curve where the left side is some newbie trying to do something obvious, the right side is a "pro" trying to do the same obvious thing, and the middle is a someone trying to do cool/new/trendy stuff.

    The left side us Ubuntu/Fedora. The right side is Arch. The middle is all these tech-fluencer-wanna-bes custom-made-ai-enhanced distros.

    by fnoef
  • That's the midwit meme.
    by stavros
  • The right side is Nix
    by yza
  • I completely agree, except you've mirrored the X axis. Ubuntu/Fedora are on the right side; Arch is on the left.
    by 0xffff2
  • Your left side of the curve is missing people like me who use Fedora.

    Been using Linux since 1997, it's been my primary OS since ~2003 (except for gaming and Microsoft seem determine to end their streak on that one) and I use Fedora because I really don't care that much, it's a reliable tool, it has recent packages and I like that it's semi-rolling in that it's a straight forward update every 6ish months.

    I had my "I must customise and control every single part of my Linux install" phase early (Slackware and Gentoo et al) and then I realised I didn't actually care all that much, give me sane defaults with the ability to tweak if I want to and stability, I'm at the point where "If I have to think much about my OS it's failed in doing what I want" holds.

    by noir_lord
  • Yo, why is my blog post title editorialised? It should've said "Merchants of Insecurity". Rude!
    by thehappyfellow
  • No offense but your title is not informative at all.
    by joelthelion
  • Great title btw
    by mexicocitinluez
  • It was (my) main takeaway and I wanted it to be evident in the headline. I didn’t want to bury the lede; I’ll uneditorialize it because it seems it’s causing some fighting in the comments and I don’t really want to instigate anything, more just warn people using the distro. I don’t think it’ll reach the people who need to be warned if it’s not evident that there’s an issue from the start.
    by arn3n
  • Probably so people can understand what the post is about and can skip the rage-bait?
    by boesboes
  • This tumblr level of discourse is precisely what the Linux community needs to leave behind.
    by fidotron
  • People have taken 'everything is political' to mean 'politics must be discussed for everything'.

    I am old enough that I've been burned by both sides of the political aisle, often using the same rhetoric (think of the children, we're fighting for freedom, we're fighting against fascism, no true scoctsman, etc.)

    Maybe the day will come when we really will have to pick sides beyond the elections, like it's WWII, but that day isn't today. I just want to be left alone, away from political camps and the ugliness they tolerate because of they're fighting against the greater good.

    I just want my tech to focused on the tech.

    by preommr
  • Isn't the rise of AI basically turning software engineering into tumblr? Thats what I see; soon we'll have a forum that's just filled with roblox-but-for-adults.
    by cyanydeez
  • People need to read "Blogging, the Nihilist Impulse" by Geert Lovink (2007)

    https://www.eurozine.com/blogging-the-nihilist-impulse/

    https://web.archive.org/web/20240925180238/http://www.intell...

    by tolerance
  • OTOH, fighting bigotry is something we should never leave behind.
    by rbanffy