• 2 Posts
  • 335 Comments
Joined 2 years ago
cake
Cake day: June 6th, 2023

help-circle

  • The Mag7 are the 7 giant tech companies currently propped up by the AI bubble. These companies represent upwards of 34% of the marketcap of the S&P500. The other 493 companies are also intimately tied to the success of AI and/or the Mag7. Not just everyone’s retirement accounts, but a huge amount of the world is invested in the US S&P500 thinking they’re diversified across 500 successful companies.

    So to be clear, yes, we’re absolutely poised for a worldwide economic recession. I wouldn’t be surprised if smaller nations who rely on USD are completely bankrupted, but one thing is for certain: when AI pops, the fallout will not be limited to the US.









  • All of that can be publicly audited. When we talk about “trust” we’re referring to what happens server side, which we have to assume can never be publicly audited. The importance of e2e encryption is that what ever happens server side doesn’t matter. There’s a massive gulch between trusting a binary you’re able to inspect and trusting one you can’t.

    What you said is valid though, if you want/need privacy, you need to put in effort, but you also have to assume there’s someone smarter than you who will be able to outsmart your own audit. The absolute best you can hope for is that at least the binary is publicly reviewable and that they’re not smarter than every pair of eyes who reviews it. That’s basically the backbone of open source security.









  • The Arch repos are completely different from the AUR. The Arch repos are officially maintained and tested. The AUR is where anyone can go upload a little pkgbuild script to make building and installing an arbitrary package as easy as possible.

    Arch’s package manager (pacman) does not work with the AUR. The AUR is basically a glorified pastebin. It’s a convenience for people who know what they’re doing, but you should not go downloading and executing files at random from there. Arch explicitly warns against doing this, and deliberately does not ship with any easy way to do this.