Today, AI can be pointed at an open source codebase and systematically scan it for vulnerabilities.
Well, then do that.
iknowrite? If these magical scanners can find all the bugs in your code...... then why don't they use these magical scanners to find all their bugs in their code!??! 😂
Been daily driving Arch on my laptops for the last 10 years. It's been great. Getting the latest software has been especially handy for laptops, where the kernel sometimes needs time to catch up to the latest hardware.
I ran Guix for a few months when I had some extra time and I liked it, but it was very different and not all software I needed ran on it (or ran well). I ended up going back to Arch, but I brought Guix with me, as a package manager.
I also ended up trying Fedora for the first time (ok, I was unemployed) recently and was pleasantly surprised. Turns out Fedora is pretty close to how I configure Arch. And it's got some extra polish that was neat. I ended up installing Fedora Silverblue for my parents 6-8 months ago and it's been working out great for them.
Anyway, Arch has been my reliable companion for the last 10 years.
Definitely not WebOS. I have an Nvidia Shield that runs Android TV, which is nice because there's a wide selection of apps and you can install custom launchers, Tailscale, Jellyfin, SmartTube. The downside, as I recently learned, is that your parents probably will have a harder time switching between the TV's native OS and the Shield.
So I recently got a Google TV, which is (just?) Android TV, and that allows me to install Tailscale and Jellyfin, but since it's 1 system, it's easier for some folks to use. I also installed Projectivy Launcher for my parents to get rid of the default ad-ridden launcher. I haven't yet had time to try to install SmartTube, but I think I read it's possible...
He read the laws, decided compliance was the correct response, and went to work. Every objection the community raised went nowhere: that this enables surveillance infrastructure, that lying is trivially easy, that the laws themselves are unconstitutional overreach. He'd already accepted the law as legitimate and moved to implementation.
He read the law, took it at face value, and started writing code. The word for what that is sits somewhere past malice, something more insidious: an engineer who treats compliance as engineering, who sees a legal requirement the way he sees a technical specification, and will implement whatever the spec says regardless of who wrote the spec or why.
The reason to name him is the pattern. The surveillance state runs on volunteers: people who do the implementation work for free, out of genuine conviction, with no paper trail connecting them to the money that wrote the laws.
..... You know... yeah, that's true. One of the huge benefits of using some open source library is that you don't have to maintain it. But if you clean room it, then it's all on you.
Although, companies like Amazon will have the engineers to maintain it internally. But a lot of other companies won't.
But for the past several months, Wayland has been well supported out-of-the-box on upstream Electron. An Electron blog post this week outlined the technical work done for achieving good Wayland support.
Finally! Now to wait several years before all of the electron apps actually update their electron dependency.
What's your alternative?