Someone bribed the website operator to put them there. It happens more than you think.
2,504 karma · joined December 20, 2023
The rustc version will be fixed for compaibility at every release and all rust dependencies must be ported to apts.
In the debian context, the burden imposed by rust churn and "cargo hell" falls on debian package maintainers.
There's a non-negligble amount of "handed-down" refurbished hardware from developed to developing. PCs and servers that are already 5+yo and out of market at installation.
We also have PostmarketOS (alpine base) and Mobian (debian base) as frontrunners. Supposedly Arch Linux for ARM and openSUSE Tumbleweed are also used by some on mobile.
Last I tried NTFS on Linux it was stable but not fast, especially for writes. If it's not a notable difference between Windows and Linux then that's a big improvement from those days.
I think you could probably get a decent IO performance boost and reduce loading times by moving the library over to something like ext4 or xfs, at the cost of portability.
In practice the main thing to watch out for is TLS-stripping attacks where malicious exit nodes will try to downgrade your connection to cleartext HTTP. This will give you a warning in the browser. Don't allow it but ctrl+shift+L in Tor Browser to retry a new connection on a hopefully better circuit.
In general I'd also say it's unsafe to use tor with unencrypted unauthenticated cleartext HTTP since it allows exit nodes to do all sorts of shenangigans undetected. Make sure it's https://(...) or http://(...).onion (.onion Hidden Services are authenticated by cryptographic key and terminate straight at the endpoint without an exit from the tor network over internet so aren't subject to that as long as you make sure the domain name is correct)
I don't see anyone in thread arguing that.
The arguments I see are about regulating and restricting the business side, not its users.
If your buddy started systematically charging people for recorded chat sessions at the pub, used those recordings for business development, and many of their customers were returning with therapy-like topics - yeah I think that should be scrutinized and put a lid on when recordings show the kind of pattern we see in OP after their patrons suicide.
Absolutely not for production code in larger projects you expect to scale. You (or someone who can) actually do need to pay attention to the code there.
Yet the only source code on the linked github where "we can verify" is the markdown files backing the marketing website
> Our infrastructure is decentralized. Exit node registry is on blockchain (immutable).
Which blockchain? Is there a smart contract? How is the infrastructure decentralized, apart from using a blockchain for the node registry component?
> Even if our website is seized, clients can discover nodes from blockchain. Anyone can fork the code and run their own network.
There is no way this can be true since there is no public code.
> Decentralized by design: No single point of failure
> Even if our website is seized, clients can discover nodes from the blockchain. Even if we shut down, the code lives on.
Also a lie.
The "free forever, zero tracking or data logging, no bandwidth caps" looks very dubious.
> We've worked on Tor, Signal, and other privacy tools. We've seen firsthand how censorship destroys lives—journalists silenced, activists imprisoned, families separated.
Does "worked on" just mean "used" or are authors actually claiming to be past contributors to Tor Project and Signal? Looking at tge solo contributor to the github I don't see any relevant contributions to privacy tech. Their most notable repo seems to be https://github.com/EmperorMew/unstoppable_spam_bot.
There is nothing to try or check out beyond aspirational marketing here so I don't see why this should be on Show HN.
I hope they have a change of mind in their approach.
The immich.cloud domain should be added to the Public Suffix List, which is the industry solution for this situation of user-controlled subdomains.
Looks like that's coming to an end too.
https://community.broadcom.com/tanzu/blogs/beltran-rueda-bor...
Decisions like these need to be done from first principles. SharePoint shouldn't even have been a contender here if looked at seriously. Do your own homework.
Was not aware of this and it does put the flagging in a different light.
Using Qubes would limit the blast radius for a scenario like this. In QubesOS, you would use disposable VMs (with no access to your crypto wallets or other user files) to download and flash an ISO. So even if this malware was targeting Linux, it wouldn't get zit and disappear when you finish flashing and shut down that VM (as long as there isn't an unpatched exploit breaking the VM isolation involved).
Of course, if the ISO is bad then this won't save you from compromise once you boot it. But that's not what happened here.
And again, nothing was removed from the store here, only marked as NSFW.
Not true. Quran just as targeted as Bible.
> and ignored things like reddit
What do you mean with "ignored reddit"? There is no official reddit app on f-droid and community clients are flagged with the "depends on or promotes non-free network service" anti-feature.
An offline reading-tracking app being flagged sounds like one false positive that should be corrected, though. Have you tried submitting a PR for it?
https://docs.rspamd.com/blog/2025/10/18/incident-disclosure/