The devs don't take an issue with the ticket being filed. They're irritated by one particular reply which sounds like "My million dollar product depends on this bug fix. Please do that for me". MS isn't offering a solution. They're asking for one.
To be fair MS offers an amount for the fix. Most companies just bully the devs instead. However, I don't think it's quite fair (though legal) to offer one time payments for a core library that they use.
The hack is still not fully understood and is being analyzed. It doesn't help that Github suspended everything, including the original maintainer's account (who is believed to be a victim of social engineering).
Anyway, you will eventually see a post mortem. I'm willing to bet that it's going to be as phenomenal as the hack itself. The case and its investigation is going to be a classic case study for all security researchers and security-minded users. Anyway, I doubt that the attackers will ever be found. Jia Tan, Jigar Kumar and others are going to remain as ghosts like Satoshi Nakamoto.
Considering venvs as bloat is being a bit harsh on yourself. True that venvs don't try to share packages among themselves. But storage isn't costly enough to justify the effort in saving there.
There are plenty of development tools that take up more than 5GB of space for no reason. Even there, the bloat comes from the network bandwidth needed to update them and the fact that they make it easy to hide malware. Hardly anything free software can be considered bloated on that account.
Exactly!
IRC would have been the best tool if it did session logging instead of requiring the use of bouncers. IRC is text-only, nonproprietary and completely distraction-free.
But you don't have to use IRC. There are more modern federated protocols like Matrix and XMPP that do session logging. There are quite a lot of FOSS communities on them that are very active.
However, the main complaint here isn't about Discord vs other chat protocols. It's about the use of Discord as a community support forum. Unlike forums like Discourse, Discord messages aren't searchable on the web. If a person asks a question on it and gets a solution, it's then lost forever. Another person with the same question has to ask again. It completely defeats the utility of FOSS - of reusing someone else's solutions.
The last part is happening. A lot of people switched to gogs/gitea/forgejo instances like codeberg when GH pulled a copilot on them. Lemmy went from being an obscure platform to a good one with lots of new users, better codebase and loads of clients when Reddit screwed its users. Mastodon was already healthy, but ballooned in size when twitter was trashed by Musk. YouTube is the only platform standing without a viable alternative, but people are trying after their adblock shenanigans.
Are the big proprietary platforms dead yet? No. Did they lose the audience - only a little bit. But it has made the alternative open platforms healthy and stronger. We are no longer in a condition where big platforms can just screw their users knowing that nothing will happen to them. Each transgression will cause more and more people to migrate. That's a good thing.
They could instead severely cripple or outright block Firefox users. Since we are the minority, it won't affect them. They will just blame it on Firefox and wash their hands off.
They can arbitrarily reduce the max number of the blocking rulesets, how often the extension can update the rulesets
The size is already just 50. Those who think that adblocking is possible with this are fooling themselves.
or even elect to skip running any rulesets that target YouTube or Google domains.
If anybody acts surprised when it happens, they're probably too stupid to be allowed on the web.
Facebook for all its nastiness was very much incompetent in influencing the direction of the web. Look at their failed attempts like free basics.
Google on the other hand has the web tightly in its dirty grip. At this point, they aren't even pretending to be nice. Even those plans that cause them reputational damage are brought back in some other name.
The only way to stop Google is for the regulatory agencies to put their foot down hard. They should be divided into at least a couple dozen companies that are not allowed to do business with each other.
Matrix is one option, if you just want a chatroom, similar to IRC. An online forum, like Discourse (not discord) is even better, since it creates a searchable history of past discussions. That way, most users who face any issue with your software can solve it themselves based on past discussions.
I hope they don't end up fragmenting the community or the ecosystem.
The kernel isn't a place to play politics. You can't just yank a component out like that on short notice, even if it has such a horrible story attached to it.
Back then, ReiserFS was mildly popular and its use would have been widespread (that includes me). The users of ReiserFS and probably even the other kernel devs had no idea that Hans Reiser was capable of such a crime. Infact, he was known as a computer prodigy back then.
There are plenty of users who don't have the luxury of migrating data on a short notice to a different filesystem. Disabling the filesystem would have left them high and dry. That's why the devs gave it a long deprecation period.