franzap on nostr

Open in Damus

@franzap 1772289190

I'm actually quite shocked with the responses in this thread. No one seems to care much about proper hash verification?

People commenting here are not your average Windows normie.

They use Linux. They are familiar with the command line. They are aware of Nostr's main selling points.

Censorship resistance and cryptographic verification good for shitposting... but for software "trust me bro" just fine?

Holy shit.

elsat @elsat · 33w

How do #linux people get their apps today? What is good or painful about this approach? What is a missed opportunity for app distribution on linux? cc nostr:npub1x458tl7h9xcxa66vr4a8pg0h2qz96pnhwnfpcra0le9090uk5t5qw7armt nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm8 Show more

381❤️3💯1🖤1

Every package manager under the sun already does signature verification.

I don't want to offend anyone. I'd like to see responses here explaining why I am wrong.

Someone should do something about that...

Silberengel · 33w

I Nostr-sign my commits and releases, now. It's really easy to do, but I wonder if it will catch on.

Leo Wandersleb · 33w

It's pragmatism. People want to get stuff done so they get their tools from 12 different package managers and trust those. Those repositories all have reputation to lose, so there is some incentive to hunt down bad stuff. Is it enough? Probably not for every use case but the right amount of resourc...

ChipTuner · 33w

Windows by default requires 3rd party executables to be signed by Microsoft certificate chains.

Sebastix · 33w

Installing LibreOffice with pacman failed for me due invalid signatures

DireMunchkin · 33w

I'm not an expert on this but I know Linux Mint uses APT as the package manager - How APT does things is that each repository has a GPG key that signs each package. The repository itself is imported from a list embedded in the OS. So you really don't need to verify signatures in normal operation. Yo...