this post was submitted on 07 Mar 2025
32 points (92.1% liked)
Open Source
34022 readers
154 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Yes. It's just a gzip file from Debian.
My understanding of gzip files is simply that they're compressed. Compressed files can still be dangerous last I checked. And like I said to the other guy, I don't know what Debian is. I'm asking for a start into the open source world, how would I know that this random ass compressed file from somewhere I've never heard of is going to be safe?
Debian is one of the largest GNU/Linux variants out there. Who and what you trust are personal decisions but they’ve got a good reputation.
Thank you, I appreciate you actually trying to educate me. If I knew that, I definitely would have been less suspicious
If you don't trust us, then you're not going to be able to perform the necessary work to contribute, because there's a lot of "download this, run this".
If I had any context, explanation, prior warning, knowledge of the person sending the file, or ANYTHING I might be more inclined to download a random file.
I'm honestly kinda stunned that you think "download this, run this", from a complete stranger is a smart thing to do. If that is how you manage your personal security I don't want to imagine how your software will fare.
If you and that other guy are legitimately what I should expect from the open source community then you're absolutely right, it's not for me.
I agree, if you aren't able to use your own judgement to evaluate sources, this is not the community for you. I'm sure you can get away with sandbagging in corporate software development, but open-source happens because people are self-motivated. That also means any time given is done purely voluntarily, so there's an expectation that participants do their own homework.
I'm so glad we're on the same page. I'll go back to the people who are actually open and welcoming to new people rather than the ones that try their hardest to condescend and belittle when I am justifiably suspicious of a random unknown file