3·
8 months agoI remember playing Katamari, and it having really unique gameplay. I’ll have to check out the other ones you mentioned. They seem pretty cool! Thanks for the suggestions!
- 0 Posts
- 16 Comments
Joined 2 years ago
Cake day: June 10th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
0·8 months agoWhat about plus addressing which is supported by most major mail services for free? You can just use personaladdress+nameofshop@gmail.com for example.
1·9 months agoKubuntu and everything is good too but I don’t know what to do with it.
0·1 year agoWell you used the past-tense “happened”…
I’m not saying I disagree, but I had a different experience.
“you’re not going to carry a calculator with you everywhere”
So you’re saying that the biggest factor in people leaving religion is people leaving religion?
1·1 year agoSee my reply for some sources I found.
Found this file by user “arindas” on GitHub which seems to highlight a lot of the issues that I’ve been seeing. To summarize:
Package Management
Manjaro maintains a separate repository that is not in sync with Arch’s main repositories which means Manjaro is not just Arch. To add to that, even Manjaro wiki states that it is not Arch!
Source: https://wiki.manjaro.org/index.php?title=Manjaro:_A_Different_Kind_of_Beast
Manjaro claims to be stable just by delaying packages for a week. This is not an approach a stable distribution would take at all!
Say that a package in the AUR depends on a library, say libxyz. And libxyz is in the main repos, not in the AUR. The package is updated so that it relies on the new features introduced in libxyz’s version 1.1 however Manjaro delays packages so libxyz is still on 1.0 in Manjaro. If you update the package in Manjaro, it will break because Manjaro holds back packages. So the only way Manjaro can be stable is by literally forking all the Arch related repositories including the AUR and keeping them in sync.
However it is important to note that often these problems are isolated to single packages and not the system as a whole. Please read #25 (comment) for additional context.
Security
The Manjaro system updater used to have a serious security vulnerability [in 2018] which has fortunately been fixed.
Source: https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html
This is actually a core package, not an extra or community package. To quote the list,
I have discovered an issue with one of your core Manjaro packages, manjaro-system 20180716-1 and earlier. The issue allows a local attacker to execute a Denial of Service, Arbitrary Code Execution, and Privilege Escalation attack.
In an update, password less updates in pamac (Manjaro’s AUR helper) were sneaked in and from the look in the issue made concerning this, the change was made to look like a “feature”. This is a major security issue considering that packages in AUR are not checked by Arch Linux maintainers (and Manjaro does not maintain its own either). Some AUR packages were found to be malware in the past. So think about a casual user (Manjaro’s target demographic are not really power users) installing a harmless-looking AUR package that could potentially mess up their system!
Source: https://gitlab.manjaro.org/applications/pamac/-/issues/719
The post also mentioned an issue where the Manjaro updater used bad practices when updating packages such as using the
no-confirmflag. This appears to have been fixed from what I can tell.Manjaro let their SSL certificates expire not once, not twice, not thrice, but four times! The first time [2015], they asked the users to use a private window and/or change the system time.
Source: https://web.archive.org/web/20150409095421/https://manjaro.github.io/expired_SSL_certificate/
Changing the system time could have unintended consequences such as with cron jobs not running at the intended time. It’s also not a best security practice to use an incognito window to bypass the SSL expiry alert. The correct solution is to not let the certificates expire in the first place, which is not difficult and is done by all secure websites.
The second time when the SSL certificates expired [2016], they did the same.
Source: https://web.archive.org/web/20160528135123/http://manjaro.github.io/SSL-Certificate-Expired/
This time the Manjaro developers didn’t recommend changing the system time, but they still recommended creating an exception for the Manjaro website.
The third SSL certificate expiration was handled a little more sanely [2021].
The fourth time, HSTS was set but the website was still down [2022].
Source: https://web.archive.org/web/20221013234550/https://manjarno.snorlax.sh/expiry-2022-08-17.png
Sending Unexpectedly Large Traffic volume to AUR
I think some of the dates and sources in this section were wrong, but I did my best to correct them.
On 2021-04-26, the AUR (Arch User Repository) faced a huge web traffic spike from pamac clients, caused by a bad version of pamac, which is the default Graphical Package Manager for Manjaro
Source: https://gitlab.manjaro.org/applications/pamac/-/issues/1017
Manjaro developers have developed thorough technical solutions to mitigate the huge traffic spike from pamac installations [2021-10-02]. They have outlined the steps taken here #25 (comment)
Source: https://gitlab.manjaro.org/applications/pamac/-/issues/1161
On 2021-10-14, Pamac was once again blocked by the AUR for shipping another version that flooded the AUR with requests. However the updated version itself was meant to mitigate problems.
Source: https://gitlab.manjaro.org/applications/pamac/-/issues/1135
Additional sources: https://www.reddit.com/r/linuxquestions/comments/wqzrpl/did_manjaro_just_forget_to_renew_the_ssl/ https://www.reddit.com/r/linux/comments/q85t8n/deleted_by_user/
Thanks for the context :)
Could you elaborate on what you mean by Manjaro being “a known trap”?
Edit: See my reply for some sources I found.
Yea, no. That sounds terrible.
If you’re anything like me and are impatient and don’t mind a bit of tinkering, you could look into http://trinusvr.com/psvr. I haven’t tried it myself, but it should let you play steamvr games on your PSVR.
Have you checked out Tabletop Simulator? Sounds pretty similar to what you’re suggesting.
YouTube has human employees? I thought they were just all bots.
Our fellow Americans are protesting Donald Trump and Elon Musk because they are violating the exact things that our country stands for. While I can’t tell you the exact reasons each individual person was there, I can try my best to articulate at least some of the reasons why I was there.
I was there to stand for veterans who are scared about losing their social security benefits right now as 22 social security offices are scheduled to be closed this year. Social security is relied on by our veterans, some of whom are disabled from fighting for our country. I was there to stand for veterans who are scared of the 83,000 VA employees, some who are veterans themselves, that are slated to be fired this year by DOGE. I was there to stand for the men and women who died for our country that Trump calls “losers” and “suckers”.
I was there to stand for my elders who are scared about loosing the social security that they paid into their entire lives. Money that is rightfully theirs. Money that many who are disabled depend on to stay off the streets. I was there to stand up to Elon Musk who called social security a ponzi scheme. I was there to stand for my elders who are disabled who are scared that cuts will make it difficult to get the help that they need and deserve. I was there to give my elders dignity.
I was there to stand for the children of our country and their parents who are scared of how they will put food on the table with DOGEs cuts. I was there for the children who have disabilities and depend on government programs to receive the help they rely on. I was there for the children and hard working folks who depend on government programs to keep them off the streets.
I was there to stand for Rumeysa Ozturk who’s first amendment rights were violated when she was kidnapped off the streets of my country by plain clothes officers and illegally deported for exercising her rights. I was there to stand for all of the other immigrants who wish to seek a slice of the American Dream.
I was there to stand up to Donald Trump doing what amounts to a car commercial for the richest man in the world right in front of the house of my country, the White House.
I was there to stand up because despite all of these cuts and talks of more cuts, there has been no proposal for what will replace these things. No indication on what support will be provided for those who rely on it. No indication of any risk analysis, a plan, or anything of the sorts other than to give tax breaks to the wealthiest of us. Let me say that again. They are removing these government programs that help every American in order to give tax breaks to the wealthy few in order to privatize the government.
As the preamble of the constitution says “We the People of the United States, in Order to form a more perfect Union, … promote the general Welfare, and secure the Blessings of Liberty to ourselves and our Posterity”. My friend, Donald Trump and DOGE have shown to me that they do not wish for a more perfect Union. They do not promote the general Welfare. They do not secure the blessings of liberty to ourselves or our posterity. All that they have shown me time and time and time again is that they wish to destroy the very foundations on which our government was built, hurt its citizens and give tax breaks to the wealthiest of us. That is not what America stands for, my friend.