Take a look at the other comments. The other side of the bottle states it helps reduce the amount of plastic required on the inside bottle by 50%, while making things easier to recycle.
Unfortunately that detail doesnt fit on one side, the only side the imager taker chose to show.
Thats why I bind toggling them to a hotkey. One or the other at a time, never both.
So maybe use Debian and compile the app yourself instead? The Dev made something free with their time, use your time to make it work for you.
It’s VIM features and key bindings that you can toggle on and off with a hotkey in VScode.
Very handy when you have a task that VIM is better at (for your workflow), like recording s macro and replaying 100 times.
Why not both?
Yes, but…
The build environment was not clean to start, which is why a contributor is working to correct that.
You could also have the build scripts that run on GitHub pull the binary releases directly from their original release locations at build time, vs a file that an individual can modify in the source tree. This isn’t as good as building from source, but it’s better than nothing.
You:
solve a relatively minor security issue.
Wikipedia:
In February 2024, a malicious backdoor was introduced to the Linux build of the xz utility within the liblzma library in versions 5.6.0 and 5.6.1 by an account using the name “Jia Tan”.[b][4] The backdoor gives an attacker who possesses a specific Ed448 private key remote code execution through OpenSSH on the affected Linux system. The issue has been given the Common Vulnerabilities and Exposures number CVE-2024-3094 and has been assigned a CVSS score of 10.0, the highest possible score.[5]
Binary supply-chain attacks are not “minor security issues”. There is a reason many companies will not allow admins to use Ventoy.
I like Ventoy, it’s a fantastic project. I like that the author is transparent about where they won’t be spending their time. You can like a project, and recognize it’s flaws at the same time.
A contributor building a PR to solve the build concerns is not a bad thing, it’s to be celebrated. Even a short-term solution of having the build script pull the binaries from a release and checksum them would alleviate a lot of that concern. And the Windows vs Nix item would be alleviated by the GitHub build ENV. Binary releases isn’t the problem, it’s binary in the source. This is about audits and traceability more than the build itself.
Not having a security first posture on these kinds of attacks is how the xz event happened, and I would hate to see that happen to Ventoy. I look forward to contributors helping the author out.
The problem with Ventoy isn’t the ISOs.
The problem is they use binary versions of core tools like cryptsetup in their source tree, vs compiling them at build time.
This leaves the door open to supply-chain attacks. I.E. a PR with a bad cryptsetup binary, or an attack on crypt that makes its way downstream with no way to audit. This is how huge software distributions make their way to Wikipedia in a bad way: https://en.m.wikipedia.org/wiki/XZ_Utils_backdoor
The solution is the build those binaries at build time, which a fork is working on.
For me, the hardest at-home part is the motivation. It’s so easy to “skip”. Finding things like pre-plans or games like Zwift on a bike trainer help, because it sets my schedule.
I also found it handy to pick an audio book, podcast, or show I liked, and only do that while working out.
Yup, all his top video comments said this shortly after video release. Personally, I always check for this stuff pre-purchase, but if I ran into it now, I would return unless I specifically bought it to self-host and block internet, which you can do with Bosch, but I wouldn’t, because for a dishwasher that’s dumb.
It’s because Mark Rober said he was still buying a new one after driving his through a wall.
I may have something to read up on.
I really don’t like charts with one option. Digital independence is about choice. Linux Mint or Debian? Matrix or Signal?
I use most of the things on this list, but the key is to not bias. It’s like those Lemmy app lists where the author features the one they use at the top.
Android, too.
But does the drop test take into account an external hammer when thrown at high velocity in a shoe?
If so, they really swung for the edge cases on that one. Their manager would have been upset they wasted productive hours on that until this happened.
Yea, BI didn’t want to get beat to the headline, so they want to press, but what a wasted opportunity.
@knowledge_seeker@lemmy.world this comment is mostly it. Live in America for a bit and you’ll see there are people that way and there aren’t. And guess what, every other country, too. Americans also have speech patterns that push more air, which sounds loud and projecting to many other nationalities. (Am American)
But surely you know another beekeeper who is on Lemmy? There must be 1s of you!
Or Spam detection. A standard Bayesian filter would catch these with reports.
Yea I do agree. Companies that really want to make things better just need to sell bulk refills. Plastic use goes way down the larger the container (to a point based on weight). In-store refills are of course the best, but lots more challenges there.