TPM is a dedicated chip or firmware enabling hardware-level security, housing encryption keys, certificates, passwords, and sensitive data, “and shielding them from unauthorized access,” Microsoft senior product manager Steven Hosking wrote last month, declaring TPM 2.0 to be “a non-negotiable standard for the future of Windows.”

  • asudox@discuss.tchncs.de
    link
    fedilink
    arrow-up
    31
    ·
    2 months ago

    I agree. People need to stop using GitHub already. Btw, Forgejo will be getting federation with ActivityPub.

  • friend_of_satan@lemmy.world
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    3
    ·
    2 months ago

    Wouldn’t urging people to stop using windows and instead use Linux be a more appropriate suggestion? Sure, GH is MS, but GH isn’t what is going to allegedly require TPM 2. Are we also supposed to stop playing Xbox because MS owns that too?

  • Ephera@lemmy.ml
    link
    fedilink
    English
    arrow-up
    38
    arrow-down
    22
    ·
    2 months ago

    I’m so tired of projects being like “We’re open-source” and then they’re hosted on GitHub, using Discord and whatever fucking other awful tooling they can get their hands on. Thanks guys. I’ll definitely check out your project, yes.

    • refalo@programming.dev
      link
      fedilink
      arrow-up
      32
      arrow-down
      6
      ·
      edit-2
      2 months ago

      how does that make the project any less open-source?

      what’s next, shaming project owners for living in a house that they pay for with a corporate job?

      we get it, you hate capitalism, but that doesn’t mean other people want to go live in the woods too… gotta be realistic :)

      • Ephera@lemmy.ml
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        5
        ·
        2 months ago

        They are still technically open-source. I’m not saying that they’re not. But they’re actively alienating users who want to use open-source, because those users cannot get support, report bugs or contribute to the project without using proprietary software.

        • Shimitar@feddit.it
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          2 months ago

          What? I use Firefox and git to bworse, commend and post issues on open source tools hosted on github.

          Just tell me you dislike github (understandable) but not that “those hosted on github” are not open source tools… That depends on the license they are following, not the tools they are using.

          And by the way git is open source as well as the browser you need to access github.

          I think you are getting way too far.

          Said so, I host all my open source code on my private instance of forgejo, which is way more open source than github, but I don’t allow registration (its my private instance, after all) so where do you put me at?

          Just to remember that even the GPL v3 doesn’t say you must provide support or a ticketing system.

        • Kissaki@programming.dev
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          2 months ago

          they’re actively alienating users who want to use open-source, because those users cannot get support, report bugs or contribute to the project without using proprietary software

          You can still use their source and software though.

          Surely, they have their reasons for choosing GitHub over other alternatives.

          I know I do, when I choose GitHub over others. (I’m not choosing Discord though.)

      • ByteOnBikes@slrpnk.net
        link
        fedilink
        arrow-up
        12
        arrow-down
        2
        ·
        2 months ago

        Ewww did you type this on a computer made by BIG TECH? How do you call yourself a supporter of the free world when you’re using tech that had precious metals mined by CHILDREN?!

  • boredsquirrel@slrpnk.net
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    2 months ago

    TPM is nice and all, but Micro$ encrypts your data without consent or a password. Which is insane.

    My backup windows install literall bitlock-ed itself

  • ByteOnBikes@slrpnk.net
    link
    fedilink
    arrow-up
    14
    arrow-down
    5
    ·
    edit-2
    2 months ago

    I’m okay to get downvoted.

    But unless the solution provides a easy way to create issues and MRs, has high upstream and I can read the code in a browser, then I’m sticking with GitHub.

    I say this as a person who contributes to open source and I absolutely know that if I hate something, I should fix it. But I’m dumb as rocks and I just want to contribute, and GitHub hasn’t Enshittified itself to a point that stops me from doing that. Yes, it’s under Microsoft.

    I’ve tried a few others, and I keep going back to GitHub because it has the least barriers of entry. I can contribute, I can get feedback, and I can move on.

    • FizzyOrange@programming.dev
      link
      fedilink
      arrow-up
      8
      ·
      2 months ago

      Gitlab is ok, and Codeberg is getting there.

      I think the main thing that keeps me on GitHub is the network effect - all the other projects are there. They also have very generous (basically anti-competitive) free tiers.

    • Mohamed@lemmy.ca
      link
      fedilink
      arrow-up
      3
      ·
      2 months ago

      There are a few quite good alternatives, like codeberg.org and gitlab. But, im not really disagreeing. Perhaps out of familiarity, GitHub UI/Features is still my favorite.

  • Admiral Patrick@dubvee.org
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 months ago

    What’s a good alternative (assuming this is one of the few things I don’t want to self-host)?

    I self-host Gogs for my internal projects, but my public stuff is on Github. The only “fancy” GH feature I use is the actions since it will do ARM builds which I can’t do locally.

    • asudox@discuss.tchncs.de
      link
      fedilink
      arrow-up
      5
      ·
      2 months ago

      You can self host Forgejo (a Gitea fork) which is powering codeberg.org

      It will be getting federation support someday with the ForgeFed ActivityPub extension, so you pretty much can stay connected with others’ repos while owning your data.

      • Admiral Patrick@dubvee.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago

        I self-host Gogs, currently, but I am looking at Forgejo after several recommendations. Not sure how useful AP integration will be at first, but it’d be a “nice to have” once it’s there for sure.

        The reason I’m looking at a hosted one rather than on-prem is the hosted one is basically my “hot” backup.

    • Arghblarg@lemmy.ca
      link
      fedilink
      arrow-up
      5
      ·
      2 months ago

      Myself, I moved my projects to self-hosted gogs (maybe forgejo soon) but kept placeholders with a README.md and link on github so people can still find them.

      • Admiral Patrick@dubvee.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago

        That was going to be my follow-up question lol: How should I handle the original repo? Leave it at the last commit and add a “We moved” note, strip it down to a stub that points to the new repo, or something else.

        • Arghblarg@lemmy.ca
          link
          fedilink
          arrow-up
          2
          ·
          2 months ago

          I was feeling particularly grumpy and did a final commit that 'git rm’ed everything but the new README.md, yeah.

          One could even risk deleting the github repo and re-creating it w/same name to remove all old content…

    • scsi@lemm.ee
      link
      fedilink
      arrow-up
      5
      ·
      2 months ago

      I self-host Gogs for my internal projects, but my public stuff is on Github.

      If you were willing to make a fundamental change, one possible outcome: migrate your internal from Gogs to Forgejo and use Codeberg for your public FOSS as it runs on (a slightly patched) Forgejo. The gain is working with the same tooling on both sides and possibly gaining a runner (Action) locally if you spend the time to learn and set it up on your internal instance. Bonus idea: you could even make your public Codeberg FOSS repo a push-mirror from your internal server and let the Forgejos keep things in sync between the two.

    • onlinepersona@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      2 months ago
      • https://code.onedev.io/ - built upon Java, feature-rich but suffers from HTTPS-only clones (yep, the main instance can’t use SSH)
      • radicle - federated sourceforge. Doesn’t have a CI but they are actively working on it, but your repo is replicated across multiple instances, “pull requests” (they call them patches - example) can be done across instances, and the devs dog-food it (one of their repositories), and it also works on TOR

      I’d love to support gitlab, but they refuse to invest in federation and there have been rumors about inter to be bought by Google, which will definitely kill any federation suggestions.

      Anti Commercial-AI license