• Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 minutes ago

    For a while the deepin desktop’s looked pretty cool. It got old quickly though and it doesn’t seem like they are innovating as much.

  • 1985MustangCobra@lemmy.ca
    link
    fedilink
    English
    arrow-up
    64
    ·
    12 hours ago

    “I use Gentoo sir and my DE is i3, I brought my dotfiles if you would like to see them”

    “Son, it’s great to have you here. HONEY IM TAKING STEVE TO THE OFFICE!”

  • Batman@lemmy.world
    link
    fedilink
    arrow-up
    19
    ·
    13 hours ago

    I just continuously google “how to reinstall grub”, never get a chance to login

    • Moobythegoldensock@lemm.ee
      link
      fedilink
      arrow-up
      97
      arrow-down
      1
      ·
      17 hours ago

      It’s by a Chinese company, and collects telemetry on its users via Umeng+, which is a Beijing-based analytics company. Even though it’s open source, the code is large enough that it’s hard to tell if there is anythinf compromising in there from the Chinese government, and/or whether/what data collected by Umeng+ is making it to the Chinese government.

      • HEXN3T@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        21
        ·
        16 hours ago

        It’s unfortunate, because I really like the DE. Real stand out. If it were more trustworthy, it’d be my first choice.

      • kinther@lemmy.world
        link
        fedilink
        arrow-up
        2
        arrow-down
        9
        ·
        12 hours ago

        I mean a simple

        grep -r “string” *

        Does wonders to find anything, but you need to know what you’re looking for. I’d probably look for DNS names that end in government or China specific TLDs to start with.

        • Badabinski@kbin.earth
          link
          fedilink
          arrow-up
          9
          ·
          9 hours ago

          it’s trivial to break that approach by obfuscating strings. You can do things like using base64 encoded strings in the source code, building strings from smaller component parts, or using rot13 on, say, the host component of a URI. That last one could be pretty interesting if you, as a threat actor, owned both permutations. The hostname (minus TLD) in the source code could be the nice, human readable version (www.happysite.org) that appears to be something legit. Then, when you rot13 it to www.uncclfvgr.org, traffic is sent to the evil site doing scary things. People can be far more tricksy than that. There’s also the whole issue around whether or not the binaries you’re running actually match the code in the repo. The xz kerfuffle showed how much can be hidden that way.

          EDIT: I should make it clear that I don’t use Deepin or the DE it provides because I only use WMs with no desktop, so the distro and DE are of no interest to me. I don’t know if it’s a security hazard or not, I have no horse in this fight.

    • snpzrik@midwest.socialOP
      link
      fedilink
      English
      arrow-up
      43
      arrow-down
      1
      ·
      17 hours ago

      First time seeing hate for deepin. What’s wrong with it?

      Western concerns about connections to Chinese government

      Radware’s head of threat research has commented on concerns about analytics collected by Deepin, and whether these are sent to the Chinese government: while the CNZZ analytics service has been removed, analytics are still collected, now by “Umeng+”.[29] According to cybersecurity lawyer Steven T. Snyder, due to the sheer size of Deepin’s codebase, it is impossible to really scrutinize all the code comprising it to be sure the Chinese government doesn’t have backdoors.[29] The project does remain fully open source allowing anyone to review, modify or change the code to meet their standards.

      • fl42v@lemmy.ml
        link
        fedilink
        arrow-up
        31
        arrow-down
        5
        ·
        15 hours ago

        due to the sheer size of [the] codebase, it’s impossible […] to be sure [it] doesn’t have backdoors.

        Meanwhile Linux and systemd 4rbnv4-3566887808

        • GregorGizeh@lemmy.zip
          link
          fedilink
          arrow-up
          14
          arrow-down
          25
          ·
          edit-2
          15 hours ago

          Ah yes, a dystopian government OS with direct uplink to the thought police is much less of a security risk and convenience loss than a by all objective measures reasonably working and widespread OS with broad compatibility, just because the latter is made by a for profit corporation, MICROSOFT EVUL GUYS AMIRITE

          I’m a Linux user myself due to the hostile practices of win11, but get some perspective ffs

          • Ooops@feddit.org
            link
            fedilink
            arrow-up
            16
            arrow-down
            1
            ·
            12 hours ago

            Sure…an open source OS is worse than a closed one. Because you are too lazy to check the former, yet trust the latter ignoring all its well documented cases of spying on users…

            Maybe you should try to go back to basic logic over idiological tribalism before you question other people’s perspective.

            • WhyJiffie@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              ·
              10 hours ago

              I’m all for open source, but being open source does not mean that it cannot be, or even that it is unlikely to be malicious

            • GregorGizeh@lemmy.zip
              link
              fedilink
              arrow-up
              2
              arrow-down
              3
              ·
              11 hours ago

              Zero reading comprehension. I am not a windows user myself as I said, and would happily recommend virtually any other Linux distro (aside from the fact that I am at best a novice when it comes to the various differences) over windows.

              But not one made by, or at least greenlit by an autocratic regime that actively seeks to gain influence abroad. People shouldn’t use fucking red star OS either.

              • emeralddawn45@discuss.tchncs.de
                link
                fedilink
                arrow-up
                4
                ·
                10 hours ago

                Wow your propaganda susceptibility is really showing. Guess the american thought police did their job well. Imagine calling windows, a literal spyware masterpiece that sucks up every bit of data it can a " reasonably working and widespread OS with broad compatibility" and an open source piece of software, “a dystopian government OS with a direct uplink to the thought police”. Like honestly what thoughts exactly do you think China is pilicing on western users and how are they acting on them? Meanwhile Microsoft, Samsung, Google, are all actively collecting as much data as possible and not even trying to hide it anymore, despite not being open source.

          • mexicancartel@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            6
            ·
            13 hours ago

            Its just the countries of government changed lol. It’s not like we don’t have evidenced for microsoft leaking user data and allowing fbi to hack windows computers. At least in case of deepin we don’t have evidence

      • emeralddawn45@discuss.tchncs.de
        link
        fedilink
        arrow-up
        6
        arrow-down
        6
        ·
        10 hours ago

        This is ridiculous. If someone could write the code, someone cluld analyze it. If noone has found anything suspicious or incriminating then this just seems like anti china propaganda. “Maybe this Chinese company is collecting data! Even though their code is publically available we cant know for sure!” Meanwhile every US company is sucking up telemetry on every keystroke. Like what a thing to argue about when Microsoft, Samsung, Google, Meta, etc etc exist. And tbh, id rather china have my data then the US anyway. The US is both more likely and more capable of using it against me.

    • HStone32@lemmy.world
      link
      fedilink
      arrow-up
      22
      arrow-down
      10
      ·
      15 hours ago

      Not just deepin, but really any piece of software made by a Chinese or Chinese owned company should be treated with suspicion. At least, until the inevitable fall of the CCP occurs.

      • emeralddawn45@discuss.tchncs.de
        link
        fedilink
        arrow-up
        16
        arrow-down
        2
        ·
        10 hours ago

        This is insane. US companies blatantly collect data, meanwhile a chinese company releases OPEN SOURCE software that hasnt been shown to do anything malicious and your response is “but maybe they somehow hid some tracking in there”. Bro examine your prejudices.

        • sabreW4K3@lazysoci.al
          link
          fedilink
          arrow-up
          5
          ·
          9 hours ago

          What gets me is how everyone can spout this shit and not feel any shame. Somehow it’s okay when US companies do it, but even suspecting the Chinese is enough to shun something. I’m disappointed to see all the upvotes this bigotry gets.

  • kekmacska@lemmy.zip
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    5
    ·
    16 hours ago

    just use Garuda if you are a gamer, Qubes or Tails if you wear tin foil as your hat, Mint or Ubuntu if you barely know anything about computers, Arch or Void if you like to tinker with your system, Slackware or Gentoo if you hate yourself, Alma or Debian testing if you need a secure server, openSuse Tumbleweed or Kde neon if you like KDE and productivity