7 ms·

The same kind as a similar recent post [1] where a person pointed out a bunch of problems with Omarchy's shell scripts as examples of it being terrible. Open a

by donatj 21d ago

The same kind as a similar recent post [1] where a person pointed out a bunch of problems with Omarchy's shell scripts as examples of it being terrible. Open a pull request. That's how this is supposed to work. Wisdom of the crowd and what not. 1. https://xn--gckvb8fzb.com/a-word-on-omarchy/ https://xn--gckvb8fzb.com/a-word-on-omarchy/

thehappyfellow 21d ago
Why would I do that? It's a crazy non-sequitur. My opinion is that the way Omarchy is developed leads to gigantic security holes. I wanted people to be aware of it. In my opinion, there are much better choices both for me and I'd imagine for other people as well. I don't want to help Omarchy succeed, I don't care about them.
- donatj 21d ago
  Because you could make the world a better place instead of just complaining about it? I don't understand the "all I wanna do is complain" process at all. Fix it. If you see a problem in the world, fix it. If they reject the fix, that's when you complain.
  - thehappyfellow 21d ago
    I dont just complain. I making the world a better place in ways which I believe are worth it. Improving Omarchy seems like a waste of time to me. Letting people know how insecure it likely is, given how little time it took, is much better bang for buck. Or, in colourful analogy: if people on the streets are hitting themselves on the head with frying pans repeatedly, I want them to stop, not to help them recover from the pain quicker so that they can hit themselves more.
  - 05hundred 21d ago
    > My opinion is that the way Omarchy is developed leads to gigantic security holes >> Fix it. If you see a problem in the world, fix it. You can't "open a pull request" to fix a projects development process. The point of the article isn't about any specific security issue, it's that these vulnerabilities will keep getting introduced due to the lax attitude the project takes towards security.
mexicocitinluez 21d ago
You're not suggesting that you can't criticize something unless you're willing to fix it yourself, are you?
- busterarm 21d ago
  The bar is a lot higher when you're empowered and capable. Like a lot a lot a lot. And that's before we had LLMs writing code. So really it's basically orbital now. The fractional pennies in tokens it could have taken to fix this would cost less than their web traffic bill. But alas, if you fix it and put in a PR, that doesn't get you the eyeballs and social good-boy points that a blog post appealing to correct politics does. Why fix when you can farm?
busterarm 21d ago
> Open a pull request. As I've gotten older and more experienced, I've really embraced the "just shut up and fix it" mentality. If you're empowered to do something, any time you spend complaining about it not being done is adding to the noise and a negative contribution. This applies in life and in work. Especially in work. I straight up just shift the discussion or leave meetings if people start complaining about problems that are within their abilities to fix. It happens so much and I don't have time for it anymore. And if you can fix it and you don't want to, just stfu and move on with your life. For the sake of all of us.
MarkSweep 21d ago
Thanks for sharing the link. I think it provides a lot of reasons why installing Omarchy or opening a pull request would be a waste of time. I can’t fix fundamental design flaws in a PR. I don’t want to try to fix apps written in Bash and QML & vanilla JavaScript. There are other ecosystems out there that are built on stronger foundations I can (and do) contribute my time to.
- dborovikov 21d ago
  Well, as far as I know, the internal config systems of most popular distros like Debian, Arch, even NixOS are all Bash. There is nothing that makes Omarchy fundamentally bad design; it's pretty average.

by donatj 21d ago

thehappyfellow 21d ago

Why would I do that? It's a crazy non-sequitur. My opinion is that the way Omarchy is developed leads to gigantic security holes. I wanted people to be aware of it. In my opinion, there are much better choices both for me and I'd imagine for other people as well. I don't want to help Omarchy succeed, I don't care about them.

donatj 21d ago
Because you could make the world a better place instead of just complaining about it? I don't understand the "all I wanna do is complain" process at all. Fix it. If you see a problem in the world, fix it. If they reject the fix, that's when you complain.
- thehappyfellow 21d ago
  I dont just complain. I making the world a better place in ways which I believe are worth it. Improving Omarchy seems like a waste of time to me. Letting people know how insecure it likely is, given how little time it took, is much better bang for buck. Or, in colourful analogy: if people on the streets are hitting themselves on the head with frying pans repeatedly, I want them to stop, not to help them recover from the pain quicker so that they can hit themselves more.
- 05hundred 21d ago
  > My opinion is that the way Omarchy is developed leads to gigantic security holes >> Fix it. If you see a problem in the world, fix it. You can't "open a pull request" to fix a projects development process. The point of the article isn't about any specific security issue, it's that these vulnerabilities will keep getting introduced due to the lax attitude the project takes towards security.

mexicocitinluez 21d ago

You're not suggesting that you can't criticize something unless you're willing to fix it yourself, are you?

busterarm 21d ago
The bar is a lot higher when you're empowered and capable. Like a lot a lot a lot. And that's before we had LLMs writing code. So really it's basically orbital now. The fractional pennies in tokens it could have taken to fix this would cost less than their web traffic bill. But alas, if you fix it and put in a PR, that doesn't get you the eyeballs and social good-boy points that a blog post appealing to correct politics does. Why fix when you can farm?

busterarm 21d ago

> Open a pull request. As I've gotten older and more experienced, I've really embraced the "just shut up and fix it" mentality. If you're empowered to do something, any time you spend complaining about it not being done is adding to the noise and a negative contribution. This applies in life and in work. Especially in work. I straight up just shift the discussion or leave meetings if people start complaining about problems that are within their abilities to fix. It happens so much and I don't have time for it anymore. And if you can fix it and you don't want to, just stfu and move on with your life. For the sake of all of us.

MarkSweep 21d ago

Thanks for sharing the link. I think it provides a lot of reasons why installing Omarchy or opening a pull request would be a waste of time. I can’t fix fundamental design flaws in a PR. I don’t want to try to fix apps written in Bash and QML & vanilla JavaScript. There are other ecosystems out there that are built on stronger foundations I can (and do) contribute my time to.

dborovikov 21d ago
Well, as far as I know, the internal config systems of most popular distros like Debian, Arch, even NixOS are all Bash. There is nothing that makes Omarchy fundamentally bad design; it's pretty average.