dngray

100% this, either use a DE like GNOME or Cosmic if you can't be bothered, or spend a little time looking at someone's dotfiles.

No need to use a whole distribution with 1000 other poor decisions made for you.

Which tells me that they don't really take security seriously because everyone knows exposing the docker socket is dangerous. I would almost bet that AI would warn about that.

Exposing the docker socket seems like such a rookie mistake to. There's a good reason we've known about docker socket proxies for a very long time.

Also beside that they use ancient package alongside Archlinux. One of those being Chromium. It also used to use Chaotic AUR but now they just automate packages (every 6 hours) in their own repository without any maintainer intervention so it's still open for supply chain issues.

Confirmed it is slop and u can tell from the wording that it is too, all the LLM-isms are obvious. Also there's no usecase where syncthing and chezmoi make sense. The whole point of version control is being able to keep a log of what you changed easily (something syncthing isn't designed for).

Just use a git repo and the templating function if you have secrets. If you want the entire thing to be secret then use a private repo, or self host it.

I know there's a lot of blog articles with blogspam ai slop with indian sounding names, so that's anecdotal but i have noticed that in tech.

The real thing i think people forget is that humans actually value time and effort from other humans. AI is often used by people who want to do neither and that's really what it boils down to.

Ask yourself, would you like to receive a christmas or birthday card with a personalized message or something produced you know was 100% produced by AI bot - even better when it has a hallucination in there.

A lot of those developing nations use it specifically to produce useless slop. Blog spam from India is also very common.

I do use AI myself and don't believe its worthless, but I believe its only useful when you ask it fairly specific questions, with data it can consume publicly like "whats the rules for XYZ in this standard and if i do this problem like this in this way would that comply with those rules?" Type of thing.

I've also found it useful for programming (but often does miss things or do things a long-handed way) you have to be very careful about the results and not simply accept it because it appears to work, so it still requires a human to have a brain.

I'm not at all surprised that consumers dislike AI in this way because of the way its used, eg to replace help desk support, and create further distance between consumers and the companies they do business with. That's generally 100% how those companies use it because that is how AI companies have marketed it to executives.

Only now are we seeing posts from those people saying "waahh tokens cost too much how long till we can build our own AI". Which is another point in itself business workflows should be resilient and not heavily dependent on the cost of openai or anthropic tokens to be competitive. If these two companies can simply turn up the money knob and make your business have a huge risk then that's bad.

Also 100% we need to have sovereignty. We cannot depend on a single country to provide AI infrastructure. They can just shut it off whenever they feel like it. Maybe this week it's Fable/Mythos, and next week it's an entire country because Donald is unhappy and wouldn't "make a deal" on some thing he wants.

100% and when you decide to use something else, you realize why systemd is actually good.

That's because it's a slop article and it's only really an advertisement for a particular linux distribution.

No they say there they block ads, and I do as well, so maybe they're not used to seeing this kind of crap.

One of the things which really annoys me is the idea that it's every acceptable to blindly "curl -fsSL" bullshit .sh scripts.

Even large companies have adopted this crap and you don't know whether there's any digital signing going on or whether they're downright stealing anything you have of value.

It's not difficult to generate a rpm, deb, tgz and relevant detatched .asc PGP signature or if you hate PGP use openssh signatures or something.

They never did this for user privacy, and yes I think you're spot on. This was just to remove liability.

Now it just costs them the data and development cost to maintain. Any remaining problems they'll throw some crappy AI moderator at to fix.