zlacker

[parent] [thread] 14 comments
1. gspr+(OP)[view] [source] 2022-06-22 13:45:36
It's pretty close to being unusable as an open source code base. Look at Debian's struggles with maintaining security fixes for Chromium.

Sure, the license is open, and Chromium is therefore technically open. But it's dangerously close to not being usable in any real practical meaning of "open source".

The way things are, we do indeed stand on the precipice of a Chromium-only web with—for all practical intents and purpose—no open browser. Firefox is the last thing that stands between us and that reality. It's just a shame that they seem to be wasting hundreds of millions on admin and management instead of just throwing it all at their developers.

replies(2): >>gsnedd+55 >>jacoop+Xh1
2. gsnedd+55[view] [source] 2022-06-22 14:13:26
>>gspr+(OP)
> Look at Debian's struggles with maintaining security fixes for Chromium.

I can't see anything about this anywhere giving any reasons; is it simply that they're released frequently and there aren't really any long-lived branches?

replies(1): >>gspr+b8
◧◩
3. gspr+b8[view] [source] [discussion] 2022-06-22 14:26:31
>>gsnedd+55
My understanding is that the Chromium folks handle security issues with: "version x.y.z is vulnerable, please update to (x+7).(y+25).(z+2), as it is the only supported version – the fact that the diff from x.y.z is 100 kLOC and touches mostly completely unrelated things is your problem".

This isn't sustainable open source development in any practical sense. Sure, it's technically open source, but nearly useless for anything but consumption straight from Google. I'd say that that makes it practically not open source.

replies(1): >>encryp+Ln
◧◩◪
4. encryp+Ln[view] [source] [discussion] 2022-06-22 15:32:45
>>gspr+b8
Arch has been handling minor releases on Chromium just fine. If Debian is having issues, it is most likely with them trying to backport fixes into antiquated code bases.
replies(2): >>gspr+OA1 >>GekkeP+kK1
5. jacoop+Xh1[view] [source] 2022-06-22 19:40:23
>>gspr+(OP)
Its a Debian problem, there is a flatpak version and its working fine.
replies(1): >>gspr+By1
◧◩
6. gspr+By1[view] [source] [discussion] 2022-06-22 21:08:46
>>jacoop+Xh1
You're kinda proving my point: it works fine if you wholeheartedly take whatever Google gives you. Sure, that's technically open source, but is it really practically so if you can't practically adapt it?
replies(1): >>jacoop+RD1
◧◩◪◨
7. gspr+OA1[view] [source] [discussion] 2022-06-22 21:22:15
>>encryp+Ln
If a year old is considered antiquated, we have some major problems in this world.

And it's kinda my whole point: code that can only be consumed wholesale as shipped might technically be open source, but if backporting fixes to a year old version is nigh on impossible, is it truly open source in practice?

replies(1): >>encryp+1L1
◧◩◪
8. jacoop+RD1[view] [source] [discussion] 2022-06-22 21:41:01
>>gspr+By1
How ? There is brave, Ungoogle chromium, and many other modified browsers that are maintained.
replies(1): >>gspr+gC2
◧◩◪◨
9. GekkeP+kK1[view] [source] [discussion] 2022-06-22 22:24:23
>>encryp+Ln
But arch is a rolling distro.

Debian has a release model for a reason and it's their raison d'etre. Of course they don't want to compromise that.

Considering the amount of other distros that use them as a base they're providing something that people want.

◧◩◪◨⬒
10. encryp+1L1[view] [source] [discussion] 2022-06-22 22:28:18
>>gspr+OA1
Yes it is. That is like saying because it doesn't run on an Atari that it isn't truly open source.
replies(1): >>gspr+oy2
◧◩◪◨⬒⬓
11. gspr+oy2[view] [source] [discussion] 2022-06-23 06:14:18
>>encryp+1L1
No it's not. The Atari isn't one year old. Come on man, from your logic you might as well say that a one year old car should be fed hay since it's practically a horse.
replies(1): >>encryp+VH3
◧◩◪◨
12. gspr+gC2[view] [source] [discussion] 2022-06-23 06:58:38
>>jacoop+RD1
Are they maintained? Or are they latest version or bust "maintained"?
replies(1): >>jacoop+qn3
◧◩◪◨⬒
13. jacoop+qn3[view] [source] [discussion] 2022-06-23 13:33:45
>>gspr+gC2
Latest version or bust, because really you can't call a browser behind on updates maintained.
◧◩◪◨⬒⬓⬔
14. encryp+VH3[view] [source] [discussion] 2022-06-23 15:08:00
>>gspr+oy2
Debian stable is using components often several years old, not just a year.
replies(1): >>spacem+H86
◧◩◪◨⬒⬓⬔⧯
15. spacem+H86[view] [source] [discussion] 2022-06-24 09:32:50
>>encryp+VH3
Some parts of the system evolve faster than others. I am glad for Debian's relatively conservative policy for all my servers, but I want an evergreen browser on my desktop.
[go to top]