this post was submitted on 23 Oct 2023
340 points (95.7% liked)

Technology

60071 readers
3674 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] -1 points 1 year ago (1 children)
[–] [email protected] 6 points 1 year ago (1 children)

Explain how adding a Microsoft repo that doesn’t actually install anything is the same as giving Microsoft access to your device?

[–] [email protected] -2 points 1 year ago* (last edited 1 year ago) (1 children)

OK if i must...

The raspberry pi came preinstalled with a Microsoft developer tool, which resided in a Microsoft controlled repo.

Now Microsoft has root access to your system, whenever you make any kind of upgrade, and can change dependencies for that tool to anything in their repo. Basically granting a third party control over your raspberry pi.

The worst is that it's very difficult to prevent, you may look up guides to prevent Microsoft repo, and even these solutions have shortcomings.

https://arstechnica.com/gadgets/2021/02/raspberry-pi-os-added-a-microsoft-repo-no-its-not-an-evil-secret/

On top of that, this enabled telemetry which is borderline illegal in EU.

It also means you ping Microsoft with every use of your package manager, granting Microsoft very useful information on a competing OS, plus giving them information you may not wish to give them.

You may consider all these issues as non issues, but I do not.

Edit:

It did not come preinstalled.

[–] [email protected] 3 points 1 year ago (1 children)

Finally, performing apt policy code confirms that Visual Studio Code was not actually installed on my system—it's just easier to install (and update!) now, since its parent repository is part of my sources list, along with the GPG code verifying the contents of that repository.

It didn’t come pre installed with the tool. It only had the repo. Did you even read your own link?

[–] [email protected] 0 points 1 year ago