Login
You're viewing the y.diskcat.com public feed.
  • May 26, 2025, 2:00 PM
    So in case you #rust enthusiasts didn't notice, you ruined Gentoo, too. You made rust a requirement for compiling gcc because your language is soooo great, and your compiler takes a huge amount of time and CPU to compile, so they've made gcc depend on rust-bin. What that means is every (every!) Gentoo system can be compromised, just by sneaking malicious code into rust-bin. I know you rich kids think everything is fine and we can just buy more RAM, and we peasants don't need to be able to compile things, so why wouldn't we want to use an untrusted binary for literally everything? But fuck you. You're one bad day away from being just as fucked as I am.

    And if you try to defend your horrible project of destroying open source and reserving compiling to rich kids, by claiming that Gentoo starts out with untrusted binaries, there is a very good reason for compiling source of the next update to a compiler like gcc. If someone sneaks malicious code into Gentoo's stage3 binaries, then only people in the future who install Gentoo from the bad binaries are at risk. When someone sneaks malicious code into rust-bin, then every Gentoo system on the planet is at risk, as soon as they update. Just to make it clear to you appdevs: bootstrap from binary once = more secure than use new binary for every update.

    I hope this is opt-out, because I'm trying to specify USE=-rust now. But the fact that I didn't even know about this until I wondered why rust-bin was installed on my system means a lot of people with very high security requirements fell for your scam. Opt-out at the bottom of the fine print. Just like you slimeballs love.

    #tech #rant #FuckEverything
    💬 0🔄 0⭐ 0