• 0 Posts
  • 79 Comments
Joined 3 years ago
cake
Cake day: July 2nd, 2023

help-circle






  • Tetsuo@jlai.lutoSelfhosted@lemmy.world•[AIT] The Codeberg ban on LLM content
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    3
    ·
    2 months ago

    https://malus.sh/

    AIs already pillaged all the code in the world. This is fighting a lost fight. We won’t manage to force big AI firms that literally props a country to stay afloat to make their AI “forget” or “untrained”.

    Regulators let the pillaging happen so now AI does know how to code. They dont imitate they truly code.

    But IMO the real fight is about things like malus that are the real dangerous and malevolent actor here. They will take your open source code and resell it to big businesses.


  • I’m the only linux user in my group of friends and fortunately my switch didn’t change anything.

    I never was late or anything to play because every game starts well now. My controller only works when steam is started though so I think I still can improve that by installing the steam compatibility driver package thing.

    Honestly dont give up OP. Once you will have completely setup your games and got to know your system better it will run fine.

    I also hated Windows so much I moved to cachyos earlier this year and I’m not turning back. Also I have never played as much video games since my switch to cachyos. The change of OS and the fact that I again feel “in control” of my computer again had somehow reinvigorated my fun playing games with friends.

    Basically, OP, dont give up! If I can make it everyday with my group of friends, you can manage it too with yours (even if they sound rather immature). Honestly once you will have setup games on proton so many times you will be able to avoid most problems in a matter of minutes.

    IE we bought and played a game on a whim with 4 players. It wasn’t working on cachyos-proton so I quickly changed it to my emergency GE-Proton compatibility and it worked right away.






  • Either Linux’s built-in display drivers are black magic or microslop is incompetent

    Why not both :) ?

    I just realized that since switching to cachyos 4 months ago I have never had to install any driver or driver updates (outside of just running the system update).

    Even during initial setup I don’t think I installed anything driver related.

    It’s really a step up from Microslop. Last time I installed my W10 I had to prepare all the necessary drivers and collect them on each manufacturers websites.

    It is so much more streamlined on Linux.


  • They could also put a checking tool into CachyOS Hello, which is shipped and pops up by default.

    What would this “checking tool” look like? What would it check?

    I personally have deactivated the opening cachyos Hello a long time ago. Why would I need that popup once I setup everything?

    And I’ve definitely gotten “urgent” text notifications that all-but-required manual action through pacman.

    Pacman has no idea if it is installing something malicious. It notifies you only on functional actions that are required.

    Basically, none of the suggestions you make would have avoided the AUR attack to work. Nor a future one?

    The only thing I would maybe agree is for some notification system that let’s the cachyos maintainers send an urgent message but that would mean they would have to sign that message in some way. If that signature verification ever fails someone could send malicious notifications to all cachyos users and that would create another threat.

    And even then if the malicious package is noticed after a few days, if you already installed/updated it, it’s too late. You could receive a notification giving guidelines to cleanup but that’s too late. The infection could disable these notifications or worse.

    And if you have an emergency notifications systems, is it a “pull” or “push” notification? Is it your computer that checks if there is a notification? How long between pulls? If that’s a push then the notification servers basically has a full list of cachyos IPs which would suck too.

    Sorry if I look nitpicky but I just want to illustrate that this is a very very complex problem to solve while respecting user privacy and “sovereignty” over their system. Supply chain attacks are extremely difficult to defend against and open source projects have increasingly numerous dependencies…


  • How else would you have wanted to be warned ?

    In my opinion that’s the other side of the privacy coin.

    What happens on my system is only for me to check. And in that case that means I’m on my own to be aware of its current state.

    I mean the cachyos devs or the AUR maintainer have in some way by design no way to reach me. And creating some kind of malware monitoring or scanning tool included by default would be against the ethos of the OS…

    So it’s up to each user to determine if they want to use random scripts or just read the blog of their OS and do everything manually. There isn’t an adequate universal solution there.



  • I think you understand correctly.

    Your setup seems quite insecure considering your keyring seems to be always open and that you use a password that is already used to login.

    On the other hand a keyring can be unlocked only when used and could also have it’s own dedicated password for it. Security is more a gradient than something binary.

    Also if you store keys that are particularly sensitive in it they are as vulnerable as the container that stores them.

    Not blaming you of anything of course, I think you are asking the right questions. 👍




  • I suspect the AI use is the problem.

    AI are very keen on recommending deep modification of your system. And then they quickly forget they asked you to recompile your own kernel based on a 2014 forum post. I’m fairly knowledgeable on Linux and if I would have naïvely listened to Deepseek I would have destroyed my system many times. And that’s even with prompts asking the AI to avoid outdated sources and to ask me for current configs.

    I believe you would boot a liveUSB of cachyos, install that terrible idea of a browser and it would work straight away. Well if you ask AI on how to install it then it will probably recommend you to compile it yourself etc… Or to use some weird AUR repo… So maybe that’s the right context to actually use the Arch Wiki on an arch based distro ? But please, enough improvisation with AI, you breaking your system in a subtle but critical way is just one AI hallucination away.

    So basically my advice is to try on cachyos without ever using AI. Just the wiki for cachyos, then the Arch wiki and finally the cachyos forum asking politely and in a detailed manner for help and being patient.

    The very premise of all of this is still crazy though. There is no feature in Brave that would justify tossing a whole operating system for…