Omarchy development practices lead to predictable security issues
https://blog.happyfellow.dev/merchants-of-insecurity/The funders are not funding the development of a Linux distro, they are co-signing the political statement.
I don't mean to get distracted from the topic at hand, but is that really true? If I create my own software stack for the TRMNL display I received as a gift because I think it's fun and interesting, is that a political statement? What politics does that involve? If someone makes a small Rust library that implements some days structure and a few hundred people find it useful, what political stance is intrinsically baked in by the author?
It's exhausting to go through life if you think every field is a battlefield.
I don't think Omarchy is anti-political so much as an attempt to revive the enthusiast/hacker ethos of the OSS community.
1000x this
People who say they don’t need their rights guaranteed do that because they never realised they were protected their whole lives.
FOSS never was about the right of the distributor. It’s been always about protecting the user. The way to do it is to give the users a set of rights that cannot be revoked.
We probably should have known better.
Wait is that really the spin that DHH is pushing? That'd be insane given he's among the most politically active open sources developers put there by a wiiide margin.
...By injecting it with big money and pushing more AI slop?
Statements dreamed up by people who get gilliganed by a coconut every morning.
Do basically, they got 8 millions dollars of funding, they bragged and criticized others in linux and said some political stuff, they were also criticized by others including political stuff from the other side (not sure of the order). Finally it became viral enough for people looking at the security of the distro and found many issues.
Personally I like my Linux distro like my coffee: competently managed, with a minimum of drama and with having to hear the less assholes possible.
I've been using Linux since 1993 and at various points every distro under the sun and that perfectly describes exactly zero Linux distributions.
Politics is how groups decide things, from what a code of conduct should be to where we should stop for coffee after lunch. It’s easy to not notice it, but we do politics dozens of times every day.
This is a reference to a dog whistle. Above 25kHz are sounds that dogs can hear but humans generally can't.
The term dog whistle is used to refer to phrases that racists use to indicate their racism, while sounding plausibly deniable. The idea is that it's a phrase that will make other racists realize that you are one of them, while not sounding openly racist to others.
DHH himself has gone beyond dog whistles. He's directly compared what he considers undesirable ehtnic populations to wolves who need to be shot. He's just openly calling for ethnic cleansing by now.
But support for Omarchy itself can be seen as a dog whistle. It's widely known that DHH is a fascist, but you have some plausible deniability by donating to Omarchy because you're just politically neutral and think it's cool tech, or something like that.
I switched to Omarchy 4.0 from CachyOS and is having an amazing experience so far, barely know anything about DHH other than that he made Rails, and now everybody is calling me a racist sympathizer.
I don't think users know who DHH is, or care who DHH is. Probably like 0.01% of users have read a blog post, let alone a political one. (Maybe they all are, I haven't read any)
This is an inflammatory enough position to make any of his output into a de facto political statement.
Yes, DHH has conservative political leanings, but the vast majority of people who have tried out Omarchy either don't know or don't care. The project is in no way consumed by politics. The commenter's brain obviously is, and they are seeing everything through that lens.
HN is better when the discourse doesn't revolve around reactionary political extremism. 99% of the energy going into the distro has always been people who liked to "rice" their Linux (make it look cool). If the project has a "soul" it's that. It's also a classic "hacker" thing to rice out your desktop. It's like the modern version of the demoscene. It's fine. It's cool. Sorry if someone hurt you. Now let's move past the political histrionics.
It's not even a Linux distro. It's an Arch respin with tweaks that DHH likes.
This is for people who want to work like DHH.
Closest thing to the “it just works” experience that Mac was always known for and it runs great on older hardware. Even goes so far as to optimize the install time down to about 1 minute.
I was running i3 when an Ubuntu update borked my entire setup so I made the switch. The difference is night and day in the level of polish.
Small example, running Zoom on i3 caused a tile cascade every time I turned on my Bluetooth headset because Zoom bypassed the main notification system. Issue resolved here.
One of many little quirks that no longer happen.
It’s nice to see excitement around Linux because nothing from the big names was really creating it.
AI sells, this should be obvious by now. The guy behind the project talks about this in more detail, for instance during the interview he recently did with Network Chuck on youtube.
My guess is relationships and fame went a long way towards getting those funds.
In some way I feel people just try to buy into "street cred" on the other hand omarchy could be a great launchpad for a distro that is customizable, easy enough to use and may provide a great MDM solution at some point.
a machine whose hardware parts you could change, as well as bigger chunks of its software, above and beyond end-user apps. That is possible via the integration of the OS with AI agents that do the heavy lifting for you in adapting the OS to your ‘needs.’ Users of the Pi coding agent get a better feeling for this because the tool is, by design, built to respond and adapt to user-commanded changes. This is the kind of capability the typical user won’t see in private-source OSes like Windows and iOS, especially because they have security as a concern (thus the OP’s motivation for the heads-up on security in Omarchy).
He is the author of rails and there are so many founders who were inspired by 37 signals and their takes on things back in the day.
The golden years of HN.
- project overpromise to a point of absurdity (e.g. Tesla (still has questionable full self driving), SpaceX (in recent times there had been absurd differences between claimed rocket load and what we then find out the rocket actually could load, like 100 Tons being only 15 Tons IRL level of differences), etc. etc.)
- project jumps on some hype train (e.g. AI)
- project has some eccentric owner which is good at selling it, even if it doesn't do what is sold
- owner also goes with the "move fast break things"
- owner acts widely (likely actually criminally) negligent in "safety" topics, shipping something is more important then the damage the negligence will causes, in some such such cases even if it's close to guaranteed that the negligence will kill people. Another way to phrase this point is they follow the "move at ANY cost so fast that competition can't keep up until you win by default" motto.
- owner has some "Vitamine B" connections to rich risk friendly investors (aka. the "friends help friends", "cartel-like", "kinda looks like corruption" structures we have been seen from time to time in the background of SV-related startup investments)
So I don't think you are missing anything about Omarchy, it's more like the whole investor culture around SV is severely broken, unhealthy and in their recklessness IMHO more damaging to society then its helpful. Not speaking about how this background structures twist the founding/startup marked in a way which may look to the outside to be "fair and open" but in fact isn't, if you don't "bow" to the right people and their ideology you aren't getting anywhere.
2. As an apolitical refuge, since contributors like DHH and Tobi Lütke [along with possibly the silent majority], want to focus on commonalities (love of hacking and computing) rather than the things that drive us apart (political views)
This is the main difference between sharing one’s cool config files and shipping a “distro”.
Something crashes? Click the notification and your agent solves the bug.
It also has a very standardized UI library and a good plugin system.
Due to those things the list of plugins is increasing by hundreds a day [2], I made one that adds Exposé like for macOS myself a few days ago.
Most of them are actually good, and unlike other distros they look visually consistent. Customizing your system and participating in the community has never been this easy. Incredibly fun, feels like being a kid in a candyshop.
[1] https://github.com/basecamp/omarchy/blob/quattro/default/age...
It's a vibe coding distro, so of course there is no security to begin with.
DHH is also on the Slopify board, so AI is mandatory.