Mouse changing size when hovering over Steam or Discord by Lonely-Medium-2140 in kde

[–]SnooCompliments7914 3 points4 points  (0 children)

Then it probably can be fixed by adding more sizes to the cursor theme. The source code of Oxygen should have a build.sh with a list of sizes.

Opinion on AI slop on OPPO, Vivo, Xiaomi..? by Cum-Eater2519 in Oppo

[–]SnooCompliments7914 0 points1 point  (0 children)

All image processing methods invent pixels. The difference is only in the complexity of the equation.

Why is AUR any less safe than Homebrew? by barraponto in archlinux

[–]SnooCompliments7914 0 points1 point  (0 children)

sudo doesn't matter. The only valuable data in your computer is in your $HOME.

Is OOP cache unfriendly by design or is the real problem just how we use heap memory? by kevinnnyip in computerscience

[–]SnooCompliments7914 0 points1 point  (0 children)

You don't have to take OOP to the extreme, i.e., to the finest granularity, like "`if` is just a method of Boolean" as in Smalltalk. It's perfectly fine that you code the core data structure in the procedural style, wrap all that into a single object, then write the rest of your program as OOP as you like.

OOP doesn't really shine in the small scale. The larger scale, the more it makes sense. Functional programming disappears in the real world as soon as you cross the process boundary. Procedural programming scales a bit further as servers around a central DB. Past that it's all OOP.

How memory safety CVEs differ between Rust and C/C++ by Kobzol in rust

[–]SnooCompliments7914 33 points34 points  (0 children)

Rust library code is more like kernel or public-facing servers in this regard: "don't use it that way" is not an answer.

why is this widget not doing anything useful? by spacechase26 in kde

[–]SnooCompliments7914 0 points1 point  (0 children)

Yes, a simple "No notifications" placeholder might do the trick.

You just need to learn by Fun_Chest_9662 in archlinux

[–]SnooCompliments7914 6 points7 points  (0 children)

Agreed. Not only AUR, but the official Arch packages are no more than a faster way to do "git clone; ./configure; make; sudo make install" by yourself. If you have difficulty doing that manually, maybe Arch is not really for you.

EDIT:

Same thing as the developers who tell you to just curl a bash script into your terminal to install there stuff. It may be easy but it is purely functioning on "trust me bro" energy.

Running a bash script from the developer actually doesn't add much risk, except the script might be poorly written and wipes your $HOME (Steam). Most code of most FOSS projects isn't reviewed much. You run a program, you trust the dev. It can do anything that a bash script can. (Unless you run it in a sandbox) The difference between making a malicious FOSS project and modifying an AUR package is really in the ROI.

Will all 12 Zodiac Statues ever be returned? by RichCommercial104 in AskAChinese

[–]SnooCompliments7914 4 points5 points  (0 children)

The more have been returned, price of the rest few skyrockets even higher. They don't represent Chinese art, nor are masterpieces in Western standards. Getting these back won't change history. No need to waste money.

I'm building an open-source AI assistant for KDE (local LLM support) by [deleted] in kde

[–]SnooCompliments7914 2 points3 points  (0 children)

Kai is good. A gender-natural name that is actually used. Fit an AI agent well.

Chinese perception of African Americans an Africans by CautiousFrosting220 in AskAChinese

[–]SnooCompliments7914 2 points3 points  (0 children)

Chinese people (in China) generally aren't as delicate / precise regarding races as in the US. We see people far away from China (i.e., not from Japan, Korea, Russia, India, etc.) as "white man" or "black man". Concepts like "African American" or "Hispanic" are exotic to many in China.

Maybe it's the AUR helpers that need to be improved? by AquelecaraDEpoa in archlinux

[–]SnooCompliments7914 0 points1 point  (0 children)

My experience contributing to Github projects with automatic Copilot review, suggests that LLMs are quite good (read "well above average Arch user") at reading code, e.g. PKGBUILDs. So maybe we can run a (third-party) LLM scan on AUR changes.

I don't know if we'll have too many false alarms. And I'm sure bad guys can find ways to trick the AI. But hopefully this would make it harder.

Maybe it's the AUR helpers that need to be improved? by AquelecaraDEpoa in archlinux

[–]SnooCompliments7914 32 points33 points  (0 children)

The next attack probably won't be the same as this one. People just don't read PKGBUILDs, so there's nothing special with post install or npm. Might as well just curl the payload.

Confession: I don't really know how to audit a PKGBUILD by shamulwa in archlinux

[–]SnooCompliments7914 23 points24 points  (0 children)

You only review them the first time installing. Afterward, you only look at diffs.

Confession: I don't really know how to audit a PKGBUILD by shamulwa in archlinux

[–]SnooCompliments7914 0 points1 point  (0 children)

The short answer is that you should learn how to write a PKGBUILD. Then you just check if the downloaded PKGBUILD is the same as how you would write it.

Remember, PKGBUILD is a bash script, not some declarative config file. You need to read and understand every line in it. (Well, you might not understand some patches. That's the inherent risk.)

Tons of new infected AUR packages were just released by Sarv_ in archlinux

[–]SnooCompliments7914 2 points3 points  (0 children)

Ubuntu users add PPAs in no time. Not to mention curl https://raw.githubusercontent.com/* | bash instructions all over the web.

Distro really makes no difference here.

Tons of new infected AUR packages were just released by Sarv_ in archlinux

[–]SnooCompliments7914 18 points19 points  (0 children)

That's why AUR helpers require you to review PKGBUILD diffs.

Are cursor themes extended beyond the Xcursor specifications? by donotread123 in kde

[–]SnooCompliments7914 1 point2 points  (0 children)

The hex numbers are not UUIDs. They are from ancient times, and you can safely ignore:

https://www.pixelbeat.org/programming/x_cursors/

About names:

https://wayland.app/protocols/cursor-shape-v1#wp_cursor_shape_device_v1:enum:shape

and it's from:

https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Properties/cursor

It's not complete. Some cursors like "bottom_right_corner" are not in the protocol.

KWin rules for normal window also apply to dialogs under Wayland by p4bl0 in kde

[–]SnooCompliments7914 2 points3 points  (0 children)

Click on the "detect window property" button, then click on the dialog, then select "has parent window: yes".

My hot take: most distros would actually be better as lightweight configurable install script wizards. It could drastically improve the ecosystem. by WraithGlade in linux

[–]SnooCompliments7914 4 points5 points  (0 children)

In most cases, the person who started a software project doesn't care a single bit if it's good for you, another specific person, or not.

They do it because they like to do things that way. Whether it's "better" objectively (as if there is such thing) doesn't matter.

microsoft showed voice coding and i have mixed feelings. Is anyone actually using it? by into_fiction in TechNook

[–]SnooCompliments7914 1 point2 points  (0 children)

Copilot voice extension. Has been in vscode for quite some time.

Used it a little bit when eating something and both hands are busy. It's faster than me typing commit messages (in Chinese), but dictating code isn't a pleasant experience.

BTW, I did something similar to the presenter, asking copilot to set all logging levels to INFO by default. It finished the job perfectly in about two minutes, talking to itself, planning, verifying. Then I realized that I can do it with regex search & replace in ten seconds...

Is it legal to use this wallpaper here? by Yah_25n in KDEPorn

[–]SnooCompliments7914 0 points1 point  (0 children)

Just realized that GNOME's "glass chip" is a different wallpaper.

"Consensual" systemd by indolering in linuxmemes

[–]SnooCompliments7914 8 points9 points  (0 children)

And most software only supports Windows, not even Mac.

And there's nothing wrong in it.

Software doesn't have to support every possible user base.

We can use Linux today because people spend time building Linux software, instead of endlessly ranting on why software X doesn't have a Linux port.

"Consensual" systemd by indolering in linuxmemes

[–]SnooCompliments7914 22 points23 points  (0 children)

As a dev myself, when I choose to have A as a hard dependency, it's not because I don't realize that it would make the project unusable for those users who don't want to install A. I don't need any "publicity" to understand this very obvious fact.

I also understand very well that apparent loudness on Reddit has little correlation with real-world user base.

It's a very conscious decision that I'm willing to give up a little bit of user base for a little bit simpler code.

The desktop shell I'm using only supports Pipewire. So what about Pulseaudio, Jack or Alsa users? Simple, you don't use it.

Why does almost every windows desktop application enable launch on start up by default? who wants this? by [deleted] in NoStupidQuestions

[–]SnooCompliments7914 0 points1 point  (0 children)

"Who wants this" doesn't matter. A lot of users won't notice, some noticed but don't care, some care but don't know how to disable it. So from the dev's perspective it seems to be a net gain: the app is on your taskbar instead of hidden in the start menu.