It’s upstream GRUB that’s decided the older GRUB versions are insecure and not to be trusted. Microsoft just propagated that to machines running distros that weren’t shipping patched GRUB builds yet. Up-to-date Debian wouldn’t be affected provided that they downstreamed fixes quickly.
https://fedia.io/m/linux@lemmy.ml/t/1111595/-/comment/6916699 says that Debian’s GRUB wasn’t affected, but another part of the boot sequence was.
You can’t trust users to make informed decisions about cybersecurity as most users don’t have the necessary background knowledge, so won’t think beyond this popup is annoying me and has a button to make it go away and I am smart and therefore immune to malware. Microsoft don’t want Windows to have the reputation for being infested with malware like it used to have, and users don’t want their bank details stolen. If something’s potentially going to be a bad idea, it’s better to only give the decision to people capable of making it an informed decision. That’s why we don’t let children opt into surgery or decide whether to have ice cream for dinner, and have their parents decide instead.
The comment you’re quoting was replying to someone suggesting a warning popup, and saying it would be a bad idea, rather than suggesting the secure boot UEFI option should be taken away. You need at least a little bit more awareness of the problem to know to toggle that setting.
But it does mean you can spend forty hours a week or thereabouts putting effort into a particular goal and maintaining the knowledge, skills and experience to keep doing it to a high standard without having to sink time and effort into something else in order to get paid enough to live on.
Those forks aren’t maintaining Firefox itself, just their own modifications. If a bug is found in Firefox, the LibreWolf team don’t have to fix it themselves, they can wait for Mozilla to do it, and incorporate the fix once it materialises. There are forks that diverge further, but they either get quickly abandoned after their creator realises how much of a headache maintenance will be, or they’re left with gaping security holes.
When the internet was becoming a world-changing technology, there weren’t thirty years of websites to keep working and malware to protect from, web standards were far simpler, and a much higher proportion of users were enthusiasts who were excited by anything they could get and didn’t mind if things were rough around the edges. Similarly, two brothers could make the world’s first aircraft that flew under its own power, and yet with the combined might of everyone working for Boeing, people are worried about airliner doors falling off and an eight-day space trip has become an eight-month one. Mature technologies need a lot more effort to build and maintain than emerging ones.
UX isn’t universal. What intuitively clicks for one person might be unusable for someone else. Good UX is adequate for as many people as possible, but it can’t be perfect for everyone at once when some people work best with large labelled buttons with big, clear icons that have to go into submenus to fit on the screen, and other people prefer lots of small buttons whose purpose and location they’ve memorised which all fit on screen at once to save them needing to click into submenus.
Maintaining a web browser in the 2020s is an expensive thing to do. You need full time employees who specialise in all the systems that make up a browser, and can’t leave security-critical parts like ensuring the integrity of the JavaScript sandbox to volunteer hobbyists. It’s far from the only thing Mozilla spend money on, so if they need to mage cost savings, it won’t necessarily stop them being able to maintain Firefox, but another organisation picking it up if they do stop isn’t likely.
You can’t really find out of you’ll get good enough to enjoy a soulslike without buying one and playing it for longer than the two hour refund period. For other products, you usually have something you can do about it or some way to try it first. You don’t need to buy a kayak to find out you don’t like kayaking as you can go for a kayaking lesson first and use the venue’s equipment. It’s understandable that people who hit a wall and can never get any enjoyment from a soulslike will be upset that it cost them just as much to find that out as it costs someone who’ll compete the game and have a great time.
Maybe it’s enough to just do the refund window based on progression rather than time.
They’re not supposed to have trust. That’s why they’re only allowed fully anonymised data under this scheme. They do pay the bills, though, so they can’t be completely banished until there’s an alternative source of money.
!openmw@lemmy.ml has less than 150 subscribers, so it’s definitely not large. We’re already swamped with infrastructure work for the stuff we already self-host, so I don’t think we’ll be running our own Lemmy instance any time soon.
OpenMW’s official Lemmy community has been on lemmy.ml since 2021, way before lemmy.world existed (and most other instances, too), and way before there was any inter-instance drama. It’s becoming increasingly likely that it’s not going to be a suitable long-term home, but we’d be much happier if we could migrate the existing community rather than start from scratch with a new one. Is there any way to do that yet?
It doesn’t necessarily work that way, though. If tests tell you you broke something immediately, you don’t have time to forget how anything works, so identifying the problem and fixing it is much faster. For the kind of minor bug that’s potentially acceptable to launch a game with, if it’s something tests detect, it’s probably easier to fix than it is to determine whether it’s viable to just ignore it. If it’s something tests don’t detect, it’s just as easy to ignore whether it’s because there are no tests or because despite there being tests, none of them cover this situation.
The games industry is rife with managers doing things that mean developers have a worse time and have the opposite effect to their stated goals. A good example is crunch. It obviously helps to do extra hours right before a launch when there’s the promise of a holiday after the launch to recuperate, but it’s now common for games studios to be in crunch for months and years at a time, despite the evidence being that after a couple of weeks, everyone’s so tired from crunch that they’re less productive than if they worked normal hours.
Games are complicated, and building something complicated in a mad rush because of an imposed deadline is less effective than taking the time to think things through, and typically ends up failing or taking longer anyway.
I’m thinking more for the scale of something like OpenMW, as we’ve got more frequently asked questions than we could hope to put on an FAQ page. In the olden days, stuff showed up from our forums when people googled it, and now it doesn’t, so we get loads of questions through Discord, and very rarely one from Matrix.
If past support questions showed up in searches, then more users would be able to help themselves and would never need to ask for support, so it wouldn’t matter as much what platform it happened on.
Personally, I think it would be good if support discords were all bridged to matrix spaces (currently doable, but matrix needs locking down more than discord to stop spam as the tools to prevent and remove it are worse) and the matrix history was archived somewhere search engines could index it like mailing list archives are (currently not doable). That approach would let users use what they want without forcing anyone else to, and keeps self help as easy as it was in the days of forums.
I never said I preferred Outlook to Thunderbird, but both are generally horrible.
It affects Windows 10, too.
The mail server for the accounts I’ve noticed it struggling with is GMail, and it manages to push mail to other clients on my non-Windows devices just fine.
Having the tinkerer options should come after making the software work. From my perspective, Thunderbird is a passable clone of a bad mail client. None of its tweakable options turn it into a good mail client, and so it would be a better mail client than it is had the effort spent on implementing the tweakable options instead been invested into making it generally better.
Desktop mail clients all seem to be dire, but Mail for Windows 10 seemed to suck a lot less than anything else. I, too, am a victim of it not noticing new mail for a couple of hours after it’s sent unless I explicitly refresh it, despite it being set to get new mail on push, but I’d still rather use it over Thunderbird, which I tried years ago, and tried again when they started warning about forcing Outlook onto people. Unfortunately, it looks like Mozilla decided that there were a non-zero number of good things about Outlook, and made a clone of it, as it’s got basically all the things I hate about Outlook.
No, that is an entirely unrelated bad decision. It being okay to not have a popup to opt out of secure boot when it does its one job and notices you’re about to run insecure code in kernel mode doesn’t make every other user-hostile thing Microsoft ever does magically okay.