“Trust” as in: trust it enough to run it on your machine.
(And assuming that you can’t understand code yourself)
Lemmy is exactly that for a lot of people, the developers are quite controversial.
Obviously most users are not installing the software from those developers on their personal machines, but serving a federated instance certainly involves doing so.
I run thousands of pieces of software and I have no idea what the political leanings of the developers are. Obviously I know about the main Lemmy developers because this seems to be a recurring topic here. However why would I start caring about these particular developers now?
There have been developers who have done shady things in their projects and it usually torpedoes the trust in the project and people fork and move away. However whatever I may think about the Lemmy developers politics I have no reason to believe they are doing nefarious things in their software.
I don’t “trust” tankies, because no authoritarian can ever be trusted, nor do I trust lemmy. I just prefer to vote with my content/wallet, and Reddit showed the world they don’t deserve their user base, or any of their content.
This is an open non-profit platform anyone can scrape. That’s good enough for me, until something with a better value proposition comes along.
i’m so excited about the progress piefed is making and my home instance’s plans to migrate
Wait. How similar is piefed to Lemmy? Does Voyager work with it?
Voyager has “experimental “ support for piefed. I do believe they are working on expanding on that.
extremely similar with some serious quality of life improvements and better dev leadership. the api, per my understanding, is similar to lemmy, but not wholly compatible. voyager, i do not think, does not support piefed currently (i will need to switch apps)
The developer is kind of just a sack of shit. I’m 90% sure Lemmy development is funded by either Russia or China, and I suspect Russia.
I kinda doubt it. Let’s not forget this is a global community, and Marxism-Leninism has different levels of support in different parts of the world.
If this was a state-funded project, I think the development would have gone a lot more swiftly, and the leads would be even more puritanical in pushing their beliefs. As it is, I’ve argued pretty extensively from a liberal perspective on .ml before, even personally with dessalines, and while they don’t exactly love me over there, I’m careful to respect their rules and they haven’t banned me.
I think they really are just idealistic supporters of communism, mostly from places where that’s a little more common.
If it was state funded by a functioning state I would agree with you, but I wouldn’t be surprised if Russia was kicking these guys a modest living to undermine American social media companies.
I mean, I got banned personally by Dessalines from lemmy.ml for mildly suggesting that a meme felt like it was a Chinese op designed to provoke in-fighting in western countries.
Not rudely, not aggressively, literally just questioning whether it could be in the comments below.
It’s funded mostly by the Netherlands lol
Well, you may be surprised then to find it’s being funded by NLnet, which apparently gets its money from the EU.
That doesn’t mean it’s not also funded by China or Russia. They’ve been able to work on Lemmy for a while without much public funding.
They get donations, and people can just do stuff on the side
Who’s out here trying to figure out the political or other beliefs of developers? I’ve got around 50 docker containers running on my server, there’s no way I’m going through people’s profiles to see if they’re morally aligned with me.
Yes, since not liking or disagreeing with someone isn’t the same thing as likelihood they are pushing malicious code. If something is open source that’s a really good sign, because they could also push closed source code and be more likely to get away with it that way. More points if it clearly has other eyes on it; even if I am not checking over the code myself, someone probably is for a lot of projects.
It’s like “separate art from artist” except even more so because software tends to be even more quantifiable as its own independent thing than art is.
if it is open source and sources I trust approve of it, sure
I mean… I used reiserFS for years and that guy killed his wife, I’m not too keen on that.
I guess its fine as long as its not actively malicious code, its not like I’m letting them into my brain.
On that though, I find it unlikely someone who differs from me politically would have the same priorities, and as such their projects are much less likely to show up on my radar.
Edit: spelling correction, Autocorrupt, ykwim?
it depends entirely on the context, what the software is, alternatives… etc
no.
IMO conservatives are untrustworthy and can’t identify fact from fiction.
would you run software from a dev who has a problem discerning reality? do you think a schizophrenic person writes stable maintainable code?
mental health is an important part of gaining trust in your product. ironic that they continue to trust and support a geriatric nazi-wannabe, but goes to show how compromised conservatives are when it comes to their decision making skills.
TempleOS?
technically the guy went crazy because of the project.
Depends heavily on application (access required, sensitivity of data handled, etc) and nature of disagreement as it pertains to trustworthiness.
Example A: I use Lemmy even though I disagree politically with the original devs because the design appears sound and it doesn’t require access to sensitive data.
Example B: I won’t use anything from the Proton Foundation because the founders’ personal comportment and political leanings have led me to suspect that they intend to sell user data.
While I am… suspicious of what the CEO (?) has spouted recently, I am unaware of how that connects to user data. Can you ELI5/summarize/point me in a direction?
Not OP, but I left for similar reasons. The CEO publically supported the Republican admin (mildly, but even at the time, stupidly). The statement sent out about it after the fact was also sus, but not really super bad.
I left anyway. I’d rather not pay a CEO to publically support the administration that is specifically targeting my family for political points.
I also heard a lot of fear mongering on the fediverse about how their new AI conversations can’t be private because it gets to their servers directly, but I couldn’t find anyone reasonable online who actually looked into it and confirmed that.
So like, they’ve got all the ingredients for more stupidity, and as we’ve seen time and again, everything pressuring them to fuck up/enshitify is also there in the background too.
Only if they specifically seem fascist, because that’s the one political group that likes to know everything you do and censor any dissenting opinion.
it depends on what the software is doing i guess
I already do, I disagree with a lot of foss devs
I’d see it as a seal of quality if the developer is a crank.
I trust the Lemmy developers enough to use their platform hosted on external servers despite them being Marxist clowns, but I wouldn’t self host without a thorough code review.
And I’m seriously just waiting for a decent piefed app in order to ditch the platform altogether. So far voyager is the most functionally complete one, but doesn’t look very appealing.
I know you do.
Well, you’re here, aren’t you?
Tbf, accessing a a software running on some server (which is not my machine) over Tor isn’t exactly the same as, say, installing a software with admin privileges on my computer.
True that…
Then lemme try to give the answer you were asking for.
Let’s start with Linux. The kernel itself has hundreds, if not thousands, of contributors. Next there’s the pieces of software that run on it, each with its own set of contributors.
There’s no way you can do anything meaningful by going thru this huge list just to see what their political backgrounds are. I’m sure there are controversial people contributing to the very pieces you are running right now.
Even if you did find some problematic backgrounds, what are you gonna do anyway? Stop using it? Do you think it would affect them? It’s not like you’re paying them. On the contrary, you’re probably just gonna make your life harder.
I’m assuming this is a dig at Lemmy? The author is a tanky, the software is Janky and we are all having a fun time anyways.
Not really directed at Lemmy.
I was thinking about the time Louis Rossman (who used to advocate for using Graphene OS) said he stopped using GrapheneOS because he didn’t trust the former lead dev.
Also: https://en.wikipedia.org/wiki/XZ_Utils_backdoor comes to mind.
In this situation, any closed source developer/project manager would never disclose such issues, if they caught them at all.
I trust open source code a hell of a lot more then close sourced stuff because anyone can look at it/test it and see if somethings fucky.
He lied about stopping use of GrapheneOS. He can be seen in videos long after still using GrapheneOS on his Pixel. Also, the reasons he stated for not using/trusting it were nonsense. There was not, and is not, a technical way to target a user with malicious OTA updates.
He was also one of 3 owners of a for-profit telecom that included Nick Merrill (Founder of Calyx). https://sec.gov/Archives/edgar/data/2009536/000200953624000001/xslFormDX01/primary_doc.xml is the SEC filing for shares issued in February 2024 .
Ok first of all: GrapheneOS is great, probably the best alternative Android OS, but their PR skills are rock bottom. Still, many ignore that due to how good it is.
With that said, I don’t believe their claim that it’s impossible for them to target a user with a malicious OTA: their reason is basically that the update server never even knows who is downloading, and so it can’t send a different file to just one user. That’s true, but thet could, in theory, make a single OTA that everybody gets, but checks for a specific IMEI or other device ID and only there enables some malicious payload.
I trust them not to do it, for many reasons, but technically they could. I also don’t think they’d do it to Louis, despite the beef they have with him.
