123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255 |
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
- <head>
- <title>Concerns with Linux - Kevin "The Nuclear" Bloom's Personal Website</title>
- <link rel="shortcut icon" type="image/png" href="/img/guy-in-space.png"/>
- <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
- <meta name="generator" content="Org mode" />
- <meta name="author" content="Kevin "The Nuclear" Bloom" />
- <meta http-equiv="cache-control" content="no-cache, must-revalidate, post-check=0, pre-check=0" />
- <meta http-equiv="cache-control" content="max-age=0" />
- <meta http-equiv="expires" content="0" />
- <meta http-equiv="expires" content="Tue, 01 Jan 1980 1:00:00 GMT" />
- <meta http-equiv="pragma" content="no-cache" />
- <link rel='stylesheet' href='/styles/main.2.css' />
- </head>
- <body>
- <div id="preamble" class="status">
- <div id="banner">
- <h1><a href="/home.html">Kevin "The Nuclear" Bloom</a></h1>
- <hr />
- <div id="navit">
- <a href="/contact.html">Contact</a>
-
- <a href="/blog.html">Blog</a>
-
- <a href="/projects.html">Projects</a>
-
- <a href="/about-me.html">About Me</a>
- </div>
- </div>
- </div>
- <div id="content">
- <div id="outline-container-org1f2e80f" class="outline-2">
- <h2 id="org1f2e80f">Concerns with Linux</h2>
- <div class="outline-text-2" id="text-org1f2e80f">
- <div class="PREVIEW">
- <p>
- A few months ago I was poking around on a Debian system just for fun and wanted
- to install <a href="https://gnu.org/s/emacs">GNU Emacs</a>. On the core install <a href="https://www.gtk.org/">GTK</a> isn't installed by default, so I
- fired up <code>apt</code> to pull down the program and it's <i>insane</i> amount of
- dependencies. When I saw the number of dependencies, I was shocked! I've built
- Emacs like a hundred times now and never needed all that. I was curious and
- began to look through the depends to see what's up. To my surprise, I found tons
- and tons of <i>unneeded</i> programs and libraries, especially <a href="https://webkitgtk.org/">webkitGTK</a>, which I
- have <i>never</i> needed for Emacs.<sup><a id="fnr.1" class="footref" href="#fn.1">1</a></sup> Especially because Emacs is an editor not a web
- browser. "Interesting," I said, "there could be hundreds of programs installed
- and no one would ever know…" This thought made me take a deep look at the
- current state of GNU/Linux and here's what I've found.
- </p>
- </div>
- <p>
- While looking into my concerns on what I'm calling <i>dependency hell</i>, I ran into
- an interesting article entitled
- <a href="https://unixsheikh.com/articles/why-you-should-migrate-everything-from-linux-to-bsd.html">Why You Should Migrate Everything from Linux to BSD</a>.<sup><a id="fnr.2" class="footref" href="#fn.2">2</a></sup> While I'm not totally
- advocating that, it brought up some very interesting points and valid concerns
- with <a href="https://en.wikipedia.org/wiki/GNU_General_Public_License">GPL</a>'d software. From my own findings in tandem with the information from
- the article, I have come up with 4 concerns that I have with GNU/Linux:
- malicious influence, dependency hell, proprietary influence, and lack of care.
- </p>
- </div>
- <div id="outline-container-org18744db" class="outline-3">
- <h3 id="org18744db">Malicious Influence</h3>
- <div class="outline-text-3" id="text-org18744db">
- <p>
- If you read the article mentioned above, you'll see how <a href="https://systemd.io/">systemd</a>, Firefox, Linux
- (I don't think he explicitly mentioned Microsoft's influence in that article)
- have been influenced by companies in a potentially malicious way. I won't repeat
- what he wrote about but I will say that this should be a rather large concern
- for us. With core programs like systemd and Linux being hijacked can we really
- say if a GNU/Linux system (running systemd) is safe? Probably not. At this
- point, I wouldn't recommend anyone run a distro that using systemd. This knocks
- out many distros including but not limited to: Debian, Arch, and anything based
- on those 2 (besides Devuan).
- </p>
- <p>
- "But that's just one program, why does it matter?" Yes, it is one program,
- however, on the mentioned distros above, it is very difficult to run them
- without using systemd. Also, systemd has become a program of programs. It
- encompasses nearly every aspect of your system. It can even integrate with some
- programs such as Emacs.<sup><a id="fnr.3" class="footref" href="#fn.3">3</a></sup> In theory, systemd could be used as a gateway to
- nearly every part of your system. If that isn't concerning, I don't know what
- is! Check out <a href="https://unixsheikh.com/articles/systemd-isnt-safe-to-run-anywhere.html">this</a> article too!
- </p>
- </div>
- </div>
- <div id="outline-container-orgd7fd584" class="outline-3">
- <h3 id="orgd7fd584">Dependency Hell</h3>
- <div class="outline-text-3" id="text-orgd7fd584">
- <p>
- I have always complained about dependencies. I've been annoyed with them since
- like 2010! This is on of the many reasons I started using Dragora. It doesn't
- suffer from the same dependency struggles that you get when you have a
- dependency tree such as in <code>apt</code>, <code>pacman</code>, or <code>portage</code>. Why is this a concern
- for me? Well, the biggest issue that I see is that there is a potential for
- something unknown being put on your system. For example, say you never want to
- see webkitGTK again due to some security bug or something. Then you go to
- download Emacs and just like that you got webkitGTK back. A normal person
- wouldn't think Emacs would depend on something like that since it's an editor,
- not a web browser. This is not only annoying but potentially dangerous if that
- security bug hadn't been fixed in webkitGTK yet (only if you found yourself
- using it by accident).
- </p>
- <p>
- Another reason I dislike massive amounts of dependencies is that it complicates
- your system. You already are running a very complicated computer with a
- complicated OS with a complicated kernel etc, etc. Why add another complication
- to the party? Have hundreds and hundreds (potentially thousands) of dependencies
- is just a great way to break your system. You install an update, something
- breaks. Totally normal on a Arch system! Well, what broke? I don't know, go
- check the 100 packages that got updated in the last update. Good luck. That
- situation is truly stupid, in my opinion. The fewer dependencies the better, the
- simpler the system the better! There are only a few distros nowadays that don't
- suffer from this issue (that I know of): Dragora, Slackware, [potentially] Void,
- [potentially] Guix System (although this has other complicating factors), and
- CRUX.
- </p>
- </div>
- </div>
- <div id="outline-container-org1e701e5" class="outline-3">
- <h3 id="org1e701e5">Proprietary Influence</h3>
- <div class="outline-text-3" id="text-org1e701e5">
- <p>
- Why doesn't it seem to bother anyone except for free/libre-tards, such as
- myself, that there are so many damn proprietary modules in Linux? Also, why the
- hell does no one care that Linux is starting to be more like the Windows kernel
- with it's ~28 million lines of code and hundreds, potentially thousands, of
- proprietary drivers/modules? Heck, at this rate Linux <i>will</i> be the new
- Windows!! Well, I believe that part of the reason for this odd behavior is that
- Microsoft (MS) is "hijacking" Linux (the kernel). I don't have any real proof of this
- except that MS going from hating Linux to loving them and now they're donating
- tons of money to The Linux Foundation… Yeah, seems sketchy to me! If I was
- getting millions of dollars to do something, I'd probably listen to the guy
- giving it to me.
- </p>
- <p>
- At the rate this is going, I wouldn't be surprised if we would start to see
- potentially malicious code being put into Linux and it becoming difficult or
- impossible to turn off. This would be a major concern to projects like
- <a href="https://www.fsfla.org/ikiwiki/selibre/linux-libre/">Linux-libre</a> whom just take the code and run it through a de-blobbing program. If
- something like that were to happen, I doubt that the folks at Linux-libre would
- have the manpower to fork Linux and keep it going. It would be interesting to
- see what would happen that's for sure.
- </p>
- </div>
- </div>
- <div id="outline-container-org018908f" class="outline-3">
- <h3 id="org018908f">Lack of Care</h3>
- <div class="outline-text-3" id="text-org018908f">
- <p>
- As mentioned in the previous section, no one seems to care about what's going on
- here! There are some folks in the "Free Software-side" of the GNU/Linux
- community that do but the majority don't. I believe that this may be the worst
- factor of them all. If the community just lets all this stuff happen <b>it will
- happen</b> and it won't get better. Unless we actively refuse these concerning
- items, they'll just keep going. Sadly, I don't think that the community will do
- this. I believe that in due time we will see Linux push malicious changes and
- other programs following suit (such as systemd).
- </p>
- <hr />
- <p>
- So, what are we to do? Well, let's lay out the options: <a href="https://www.gnu.org/software/hurd/">GNU Hurd</a>, *BSD, keep
- using linux-libre until the dark times and then decide, nothing. The most ideal
- situations would be to get Hurd working well or remove Linux and use a BSD
- kernel. The two best would be <a href="https://www.openbsd.org/">OpenBSD</a><sup><a id="fnr.4" class="footref" href="#fn.4">4</a></sup> or <a href="https://netbsd.org/">NetBSD</a>, as they don't load
- proprietary modules by default. You could do as the article says and migrate
- over to a BSD.<sup><a id="fnr.5" class="footref" href="#fn.5">5</a></sup> They don't really have the same issues due to their
- specialized communities (more to come on this topic. The most practical as of
- now is to just use Linux-libre and see what happens. I, personally, think
- migrating to BSD is the best for advanced users but normal folks should probably
- stay were they are for now (if not on linux-libre, migrate to that).
- </p>
- <p>
- All-and-all, I'm not sure what's going to happen here in the GNU/Linux world. I
- hope for the best but plan for the worst. We will see what happens!
- </p>
- </div>
- </div>
- </div>
- <div id="footnotes">
- <h2 class="footnotes">Footnotes: </h2>
- <div id="text-footnotes">
- <div class="footdef"><sup><a id="fn.1" class="footnum" href="#fnr.1">1</a></sup> <div class="footpara"><p class="footpara">
- I later found out that webkitGTK can be used with xwidgets, something
- that I have never ever wanted to do. I understand that the Debian package
- maintainers what to include everything possible in their standard Emacs package
- but this fact doesn't change my mind about my concerns with dependency hell.
- </p></div></div>
- <div class="footdef"><sup><a id="fn.2" class="footnum" href="#fnr.2">2</a></sup> <div class="footpara"><p class="footpara">
- Check out his <a href="https://unixsheikh.com/articles/why-you-should-migrate-everything-from-linux-to-bsd-part-2.html">sequel</a> too.
- </p></div></div>
- <div class="footdef"><sup><a id="fn.3" class="footnum" href="#fnr.3">3</a></sup> <div class="footpara"><p class="footpara">
- I fundamentally disagree with the Emacs team's decision to do this.
- </p></div></div>
- <div class="footdef"><sup><a id="fn.4" class="footnum" href="#fnr.4">4</a></sup> <div class="footpara"><p class="footpara">
- <a href="https://www.hyperbola.info/">Hyperbola GNU/Linux</a> is currently doing this with OpenBSD's kernel. See <a href="https://www.hyperbola.info/news/announcing-hyperbolabsd-roadmap/">here</a>.
- </p></div></div>
- <div class="footdef"><sup><a id="fn.5" class="footnum" href="#fnr.5">5</a></sup> <div class="footpara"><p class="footpara">
- This is something I am planning on doing. Article to come!
- </p></div></div>
- </div>
- </div></div>
- <div id="postamble" class="status">
- <p class="author">Author: Kevin "The Nuclear" Bloom</p>
- </div>
- <div id="footer">
- <hr />
- <p>
- <a href="https://anybrowser.org/campaign/">
- <img src="/img/any-browser.png" alt="Viewable with any browser! No JS, no cookies, no bullshit!"/></a>
-
- <a href="http://validator.w3.org/check?uri=nuclearkev.org"><img
- src="http://www.w3.org/Icons/valid-xhtml10" alt="Valid XHTML 1.0 Strict" height="31" width="88" /></a>
-
- <a href="http://NetBSD.org/"><img
- src="https://www.netbsd.org/images/powered-by-NetBSD.png" alt="NetBSD" width="88" /></a>
- </p>
- <p>
- Copyright © 2017-2022 Kevin "The Nuclear" Bloom
- </p>
- </div>
- </body>
- </html>
|