Salta al contenuto principale

The Docker corporation deleting open source organizations from their free-of-charge service, the Docker Hub, is an example of the maxim "centralized systems are evil or vulnerable".

In this case, the vulnerability is relying on a centralized system's willingness to continue to provide a service for free. Building on top of that was always risky.

What other centralized systems are you relying on, ones that might go away at any point?

reshared this

in reply to Lars Wirzenius

Evilham :antifa:
Evilham :antifa:
• •
I've seen a bunch of "here is how you use GitHub registry instead", which only moves the problem forward.
in reply to Lars Wirzenius

Ramses 🇵🇸
Ramses 🇵🇸
• •
I guess GitHub is a similar risk, with it being more or less the de facto standard for FOSS collaboration.
Unknown parent

Lars Wirzenius
Lars Wirzenius
• •
@withaveeay @sjvn On the other hand, Flathub isn't a for-profit corporation. That changes the equation somewhat in that it's less likely to be taken away on a whim by someone wanting to make more money fast. But, yes, it's a centralized system, and such, vulnerable.
@Stevan @sjvn
in reply to Lars Wirzenius

clacke: inhibited exhausted pixie dream boy 🇸🇪🇭🇰💙💛
clacke: inhibited exhausted pixie dream boy 🇸🇪🇭🇰💙💛
• •
@Lars Wirzenius @Stevan @sjvn Just waiting for that "flathub is unsustainable and wants to transform into a corporation for more flexibility" moment.
@Lars Wirzenius @Stevan @sjvn
in reply to Lars Wirzenius

Fish Id Wardrobe
Fish Id Wardrobe
• •
I was always a bit wary of Docker Hub; it just seemed to wrap everything in business-speak. Nothing wrong with that in itself, I thought, but maybe a red flag? Well, as it turns out, maybe it was…

I feel the same way about NPM (Javascript). FWIW.
in reply to Lars Wirzenius

Guy James
Guy James
• •
the solution is generally protocols supported by foundations with strong t&cs
in reply to Guy James

Aarkon
Aarkon
• •
@guyjames I’d generalise this even further:
protocols > services
@Guy James
in reply to Lars Wirzenius

Paul
Paul
• •
Docker Hub, GitHub, Google Docs - the list is (unfortunately) endless.

I do at least keep automated backups of things I rely on, but I can't control what third party vendors do.

Lars Wirzenius reshared this.

in reply to Lars Wirzenius

Scott 🏴
Scott 🏴
• •
- my ISP
- my VPS provider
- github (sure, I could use gitea, but see previous two points)
- Backblaze
in reply to Scott 🏴

Elena ``of Valhalla''
Elena ``of Valhalla''
•
@Scott @Lars Wirzenius if they died suddenly there would be some disruptions, but I've already changed ISP and VPS provider a few times with minimal pain for price / quality issues, I don't think it would be a problem to do so because they've become suddenly evil.

Admittedly, I don't have a lot of data on the VPSs, and I don't need to provide multiple 9s of uptime (but if I did, I would be paid enough for redundancy, I hope)
@Lars Wirzenius @Scott 🏴
in reply to Elena ``of Valhalla''

Scott 🏴
Scott 🏴
• •
@valhalla your point does make sense when it comes to b2 tho, I can just migrate to a different S3 provider.
@Elena ``of Valhalla''
in reply to Lars Wirzenius

Paolo Redaelli
Paolo Redaelli
• •
Once upon a time there were using #bittorrent to distribute "bigger" files but I suspect that it won't be that useful in this case as images do change a little too often
#bittorrent

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.

⇧