I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

2 points
*
Deleted by creator
permalink
report
reply
2 points

I mean the author has simply ignored this issue. If you look into it there are a few that people simply do not know how to generate, so without the maintainer it’s impossible to make a PR solving this.

permalink
report
parent
reply
-5 points
*
Deleted by creator
permalink
report
parent
reply
8 points
Deleted by creator
permalink
report
parent
reply
-2 points
*
Deleted by creator
permalink
report
parent
reply
10 points

I cannot fathom what in this issue description gives rise to your concern. It’s worded very calmly, clearly explaining why the author thinks these BLOBs shouldn’t be there, expressing an understanding that it’s not a top priority and even closing with a thank you.

permalink
report
parent
reply
-1 points
*
Deleted by creator
permalink
report
parent
reply
1 point

Is this not rude:

I checked the code and I’m appalled. There are more BLOBs than source code

No. The commenter is voicing their own feelings and explains why they have them. There is neither blaming nor rudeness here.

And this:

I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.

It would have been nice if you had explained why you think this is rude. The author expresses understanding that the maintainers’ priorities don’t align with the author’s. This seems to be an uncontroversial statement to me.

Then the author explains (I agree, it’s more a hint than an explanation) why they think the priorities should be changed. In my view their argument is sound. Again, there is no blaming or rudeness here.

They should have opened with a complement

I assume you mean “compliment”.

I’ve often heard of the “sandwich technique” – start with a compliment, then voice criticism, end with another positive thing. I find this is an appropriate procedure when voicing open feedback, that is, good things and bad things. However, this is a Github issue. Its whole point is to point out a perceived problem, not to give the maintainers a pat on the back or thank them.

permalink
report
parent
reply
3 points

Actually you can and should Gordon Ramsey all over it. It is the duty of audience members to express how they feel honestly about the artwork.

Open Source can and do understand that and open source software becomes better for it.

permalink
report
parent
reply
1 point
*
Deleted by creator
permalink
report
parent
reply
1 point

Yes, that’s users for you. A diverse bunch and many lacking in basic politeness. But you just have to listen to whiney users. You just have to… and figure it out if you want to make world class software.

permalink
report
parent
reply
57 points

Hey guys open source is great you can look at all the code and therefore there are no security backdoors etc. Also here are a bunch of pre-compiled blobs in the repo, don’t worry about those, but they are required to run the program.

permalink
report
reply
21 points

permalink
report
parent
reply
18 points

Right, the fact that it’s open is the reason this came to light, and we’re having this discussion

permalink
report
parent
reply
4 points

Exactly. Acting like this is an “ah-ha, see?!!” moment when this is exactly what open source is designed for. That’s like saying global warming is a hoax because “oh look it’s snowing”.

permalink
report
parent
reply
1 point

Well, it is an “ah-ha, see!” moment, because it shows the benefit of open source.

Its more like pointing at the absence of a glacier on a mountaintop and saying “yep, see, climate change does exist”

permalink
report
parent
reply
2 points

This isn’t a knock against opensource programming, but there shouldn’t ever be precompiled blobs in the repo unless they are the official builds for the various OS’s and if you want to build from source, the pre-compiled blobs shouldn’t be part of that, otherwise you can’t really claim you are opensource.

permalink
report
parent
reply
90 points

The fact that people know there are pre-compiled blobs in open source means they have an informed reason to avoid the software!

permalink
report
parent
reply
8 points
*

This is a bit absurd. I really don’t think this is as serious as some comments say. Also there is a comment from AUR package manager which explains more details. . And even the blobs in the first post there are source and build instructions in their respective folder.

permalink
report
reply
12 points

That linked reply doesn’t explain anything. It just says “bro trust him”. Just because you and the AUR maintainer says its trustful, does not make it clear whats behind the binary blobs. It doesn’t matter what anyone says, if we can’t verify. In my opinion, its absurd calling others absurd for not trusting the word of others.

permalink
report
parent
reply
13 points

I firmly believe there are no backdoors or anything dodgy going on here

OK but that’s hardly reassuring.

permalink
report
parent
reply
6 points

Not suspicious at all.

permalink
report
parent
reply
19 points

And even the blobs in the first point there are source and build instructions in their respective folder.

No it is not. It is supposedly the built result based on the instruction provided. If they can just provide that instruction, why not provide the source as well?

The issue thread also highlights the stubbornness and hostility of the project maintainer toward possible contributors.

permalink
report
parent
reply
27 points
*
Deleted by creator
permalink
report
reply
3 points

If you don’t like it, don’t use fork Ventoy.

permalink
report
parent
reply
50 points

From what others have said: The blobs violate GPL because they are taken from other FOSS project but the changes Ventoy makes are not viewable.

permalink
report
parent
reply
29 points

Wtf is ventoy and why is nobody explaining it

permalink
report
reply
12 points

because search engines exist

permalink
report
parent
reply
33 points

Wtf is search engines and why is no one explaining it

permalink
report
parent
reply
7 points

Search engines are websites that people used to go to in order to get helpful information. These days, they just spam out a bunch of SEO garbage, AI-generated bullshit, and ads.

Google, probably

permalink
report
parent
reply
33 points
*

Basically an OS which let’s you choose another OS to boot into. This way you can chose between multiple OS’s on one USB drive. You drag your ISO files into a USB folder and choose between them on boot.

permalink
report
parent
reply
14 points

That sounded like grub until you said ISO file

permalink
report
parent
reply
13 points

Yeah basically grub but on a USB stick and with ISO files

permalink
report
parent
reply
1 point

So like rEFInd but on the same drive?

permalink
report
parent
reply
24 points

I used Ventoy (its still on my USB stick). Its actually a pretty cool concept. Normally without Ventoy, you would flash your Linux distribution on the USB stick. And then you can boot from it, right?

Ventoy instead allows you to have a folder where you put an ISO without flashing it, and then you can boot from it by selecting in the menu. You just need to flash Ventoy once, as the base system, then you can put as many ISO files into that directory. I tested it and have 7 different Linux distributions (ranging from 1 GB to 4 GB variants) on the same USB stick, and I can boot any of them without flashing again. Replacing ISO is extremely easy, just delete it and copy a new one. Filenames does not matter, anything can be found.

permalink
report
parent
reply
21 points

Wtf is a BLOB and why is nobody explaining it

permalink
report
parent
reply
-1 points

Because you can look it up.

permalink
report
parent
reply
6 points

permalink
report
parent
reply
8 points

Binary data. In the case of lz it was a carefully “corrupted” archive.

permalink
report
parent
reply

Binary Large OBject

Basically any binary file, often objected to in open source repos because of the lack of source and ‘openness’. See also the recent xz backdoor.

permalink
report
parent
reply

Open Source

!opensource@lemmy.ml

Create post

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

  • Posts must be relevant to the open source ideology
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

Community stats

  • 3.3K

    Monthly active users

  • 1.2K

    Posts

  • 10K

    Comments