Ask Lemmy

I'd see it as a seal of quality if the developer is a crank.

Would you drive on a road made by nazis? Your life literally depends on the quality of the road, but where does political ideology come in to this equation?

With software though, different things are at stake, but how will ideology affect the quality? I think it does have a effect on features and how the project is run, but isn’t quality a mostly separate area?

There's such different views on life that I don't think its possible to get software designed close to what you or I believe in.

If the source is open, the code is viewable. So yes I think I can trust, at least the code.

Also there's a saying "trust but verify". So actually check to see if the binaries your getting actually behave the way you think.

Depends on the context but generally I will. Like I don't love the lead of GrapheneOS but I still use there project. But I strongly disagree with Protons ethics and many other issues so I avoid them. Really it's a question of how much I want to care and how much I disagree with them.

jdupes: it's great software. The author left GitHub not because of Microsoft, but because he refused to implement 2fa on his account, which GitHub made mandatory.

I choose not to do business with anyone who's too vocal about their political disagreements. I'm paying you for your services not your opinion so shut up!

I moved off of lemmy because I didn't want to use software made by a tankie, so no.

I trust the Lemmy developers enough to use their platform hosted on external servers despite them being Marxist clowns, but I wouldn't self host without a thorough code review.

And I'm seriously just waiting for a decent piefed app in order to ditch the platform altogether. So far voyager is the most functionally complete one, but doesn't look very appealing.

I've installed thousands of programs on my systems over the past 30 years. Closed source, open source, you name it. Never had a single problem.

Trusting software is such an overblown hangup that people have. Even if it bites me in the ass someday, so what? I'll roll back, reformat, do whatever I have to do. It'll have been worth it.

Is the political disagreement around surveillance or something related?

Yes.

Whether you'd boycott it is another thing.

No. Fuck that guy.

I can't really apply "you don't understand the code yourself" because I do.

So I do check the code if it's something critical, but otherwise don't bother. For example the Lemmy server I'm running I didn't really check much because it can't really do any harm to me.

But if I was running Lemmy somewhere on my home network, I'd either isolate it or thoroughly check it (but probably just isolate it from the rest of the network and put it in a VM, nobody's got the time to read other people's source code).

Since you're asking specifically for "on my machine" I usually put stuff I don't fully trust in a VM.

for me, it generally boils down to "show me the work, then i decide".

some works are more influenced by politics like art pieces and written works. some, like architecture, plumbing and network stacks, much less so.

in this case, even if you don't know code but can be a good appraiser of political taint then you can decide on your own what to endorse or not.

If I know someone's political affiliation prior to using their software I'll likely find an alternative if their views are harmful.

Not when it comes to anything important like work or other sensitive data.

You are not supposed to trust anyone who doesn’t have a duty of providing trust. It is why companies like Red Hat, canonical and Novell were paid billions; they did the reviews and provided support. Yes, some distributions try to provide some of that (like Arch, Debian, etc) but only for core packages (everything else is just the Wild West and it could be malware again)