[issue]: Remove BLOBs from the source tree · Issue #2795 · ventoy/Ventoy
github.com
What happened? Due to the recent XZ-Utils drama I checked the code and I'm appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f8946...

I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

  • ⸻ Ban DHMO 🇦🇺 ⸻English
    12·
    2 days ago

    I don’t understand how “appalled” being strong language is so controversial, maybe everyone here is just a rude little shit.

    I would have worded it like so:

    Hi, I’m concerned about the BLOBs used in this repo as they are a security risk, making the code less auditable. It looks like we could generate these BLOBs in a github action or something so we can keep the fast build process while making it easier to audit the code. I’m not exactly sure how to go about this myself but I’ve done similar things in other projects, maybe you could point me in the right direction as I am unfamiliar with the ventoy build process? Thanks for the really cool project, and hopefully we can sort this out easily. Looking forward to your response.

    I did it with less anger and entitlement and in less words

    • bleistift2@sopuli.xyzEnglish
      1·
      1 day ago

      maybe everyone here is just a rude little shit.

      Or maybe you’re just a snowflake that can’t handle criticism.

      • ⸻ Ban DHMO 🇦🇺 ⸻English
        1·
        1 day ago

        That issue is not good criticism, it’s rude and demanding and has no place in a hobby project. I’ve shown what good criticism would look like.

        I AM NOT SAYING THE ISSUE IS INVALID. THE MAINTAINER ABSOLUTELY SHOULD RESPOND TO IT AS IT IS IMPORTANT. I FOUND THE WORDING RUDE AND ENTITLED WHICH MAKES THE ISSUE WAY LESS INVITING.

        I like how if you misgender someone on here without being able to see their pronouns your entire instance may get defederated. However, apparently it’s okay to be arseholes to OSS maintainers.

        I did some further reading into it. The maintainer might be an arseholes with high standards who doesn’t accept PRs or maybe they don’t have a lot of time.

        Fucking hell this website is a waste of time.