Just spotted a DVD logo on the ZKM wall, very nice

#gpn23

I've placed a security hold on Xlibre in Alpine, for a number of reasons that basically sum up to an unproven reactionary project whose code runs with elevated privilege (such as direct hardware access) is extremely high risk for introducing security-related regressions.

I do think a fork of X is a good idea, but that fork needs to be focused on sustainability: it should be focused on the generic drivers (such as modesetting for video and libinput for input), and there needs to be a real documented plan for maintenance and triage of security vulnerabilities.

Right now, I don't see that. Instead I see a fork of every component of X, including all of the hardware-specific drivers, and people complaining about politics.

This does not inspire confidence that the fork will not introduce security regressions, or worse, fail to import security patches from X.org.

For those reasons, at least for now, the security hold will remain indefinitely. We can reevaluate after the project has had time to mature (and hopefully start focusing on the fundamentals rather than wild proclamations about being "anti-DEI").

"Internet is becoming more and more centralized in the hands of a few evil tech companies. Our project aims to change that! Join our discord and…"

"If the data speaks, please don't interrupt"

(Yote, Patterns in Chaos: How Data Visualisation Helps To See the Invisible)

#gpn23