this post was submitted on 02 Jul 2023
18 points (100.0% liked)

Showerthoughts

29827 readers
835 users here now

A "Showerthought" is a simple term used to describe the thoughts that pop into your head while you're doing everyday things like taking a shower, driving, or just daydreaming. A showerthought should offer a unique perspective on an ordinary part of life.

Rules

  1. All posts must be showerthoughts
  2. The entire showerthought must be in the title
  3. Avoid politics
    • 3.1) NEW RULE as of 5 Nov 2024, trying it out
    • 3.2) Political posts often end up being circle jerks (not offering unique perspective) or enflaming (too much work for mods).
    • 3.3) Try c/politicaldiscussion, volunteer as a mod here, or start your own community.
  4. Posts must be original/unique
  5. Adhere to Lemmy's Code of Conduct

founded 1 year ago
MODERATORS
 

It's the same as with Linux, GIMP, LibreOffice or OnlyOffice. Some people are so used to their routines that they expect everything to work the same and get easily pissed when not.

all 45 comments
sorted by: hot top controversial new old
[–] fubo@lemmy.world 8 points 1 year ago* (last edited 1 year ago) (1 children)

This isn't just open-source software; it's also a collection of servers run by hobbyists.

There is no business here at all. You're not the product, but you're also not the customer — because there is no customer. What you're seeing here is a strictly nonprofit Internet service provided by people who just want to make one.

[–] mustbe3to20signs@feddit.de 5 points 1 year ago (1 children)

Which makes Karen behaviour even worse and incomprehensible but most people are humble and don't care to much about some minor problems and a little learning curve

[–] fubo@lemmy.world 0 points 1 year ago (1 children)

I don't know what "Karen behavior" means; could you explain?

[–] instamat@lemmy.world 1 points 1 year ago

A “karen” is a person who comes across as entitled and demanding, beyond the scope of what is generally accepted.

[–] ShustOne@lemmy.one 3 points 1 year ago* (last edited 1 year ago) (5 children)

I was with you until GIMP. If one more person lists it as an alternative to Photoshop I'm gonna lose it. It's UI is terrible, you have to watch a guide just to get started. Can't read PSDs in any viable way. I'm sure people use it just fine but to call it an alternative to Photoshop is just plain lying.

Edit: the other thing I dislike about it being suggested as a replacement is that it assumes you work alone. Anyone on a team with people in PS will not be able to even attempt to use GIMP to get work done.

[–] sparky678348@lemm.ee 1 points 1 year ago

You wretched Photoshop enthusiast. How dare you defile the sacred realm of pixelated beauty with your blasphemous tools of the Adobe empire! You, who bathe in the deceptive allure of layers and filters, know nothing of the humble struggle of a true purist.

While you revel in your so-called "advanced" software, I, a virtuous wielder of MS Paint, have embarked on an arduous journey. Armed only with a pixelated brush and limited color palette, I navigate the treacherous seas of artistry. Each stroke, deliberate and purposeful, carries the weight of my soul, for I am a master of simplicity.

Do you not understand the profound joy that arises from conquering the challenge of transforming mere pixels into a masterpiece? With each painstaking click, I breathe life into my creations, shaping reality with the precision of a pixel whisperer. Your Photoshop may grant you an abundance of tools, but it lacks the purity and authenticity that flows through the veins of my MS Paint.

Gimp, you say? Ah, a mere imitation of the great MS Paint, seeking validation in the realm of Photoshop. It too shall crumble beneath the weight of its pretentious ambitions. For true artistry lies not in the abundance of options, but in the mastery of limitations.

So, my misguided foe, before you spew your haughty words, remember the legacy of MS Paint. It has endured the test of time, witnessed the rise and fall of software giants, and remained steadfast in its simplistic grandeur. While your Photoshop may dazzle the masses with its flashy tricks, it is MS Paint that stands as the guardian of true artistic purity.

Use Krita as an alternative! 💕

[–] paorzz@lemmy.world 1 points 1 year ago (1 children)

The better alternative to Photoshop/Illustrator/InDesign is Affinity. And yeah, while it’s not actually free, you only have to pay once and everything is yours.

Or for quick free edits, Photopea.

[–] PancakedWaffle@lemmy.world 1 points 1 year ago (1 children)

Upvote for photopea.com it’s crazy how much functionality it has, love that site.

Absolutely amazing software, 10000/10

[–] xaxl@lemmy.world 1 points 1 year ago

It's an alternative image manipulation software. It's not a great replacement for PS though.

[–] loudWaterEnjoyer@lemmy.dbzer0.com 0 points 1 year ago (1 children)

You also need a guide to get going in PS, its just a different App but fulfills the same tasks

[–] ShustOne@lemmy.one 0 points 1 year ago (1 children)

It fills some of the same tasks.

[–] loudWaterEnjoyer@lemmy.dbzer0.com 0 points 1 year ago (1 children)

Which tasks is Photoshop capable of and GIMP is not?

[–] ShustOne@lemmy.one 0 points 1 year ago (2 children)

Something I use a ton: smart objects, smart masks, smart filters. Non destructive actions where I can still edit the original and have all previous items applied in a separate file or view in real time.

[–] loudWaterEnjoyer@lemmy.dbzer0.com 1 points 1 year ago (1 children)

OK but thats a workflow problem, that's not a missing design tool.

[–] ShustOne@lemmy.one 0 points 1 year ago (2 children)

Well these tools are in Photoshop and not GIMP. You can't just hand wave that away as not GIMPs fault.

[–] Adderbox76@lemmy.ca 1 points 1 year ago (1 children)

Photoshop doesn't have a native G'MIC plugin feature. You can't wave that away as not Adobes fault!

That's how stupid you sound.

Different products have different features and different ways to do things. It's not Gimp's sole purpose to just clone every feature from Photoshop. It's not a Photoshop clone, it's a piece of software in its own right.

Gimp makes great use of the amazing G'Mic filter tool. Adobe doesn't. That doesn't make Gimp better than Photoshop.

Different software makes different choices and people choose whichever they want to use and shut the hell up about it.

[–] ShustOne@lemmy.one 1 points 1 year ago

My whole point was only that I dislike that people call it an alternative to Photoshop. That's been proven by your post. I'm not trying to have a semantics contest here

[–] loudWaterEnjoyer@lemmy.dbzer0.com 0 points 1 year ago (1 children)

Well its still not a image manipulation feature missing. It's a workflow feature. You could also just copy a layer. But in the end, Photoshop has no image manipulation feature that is really missing in GIMP, you can export the same result picture.

[–] ShustOne@lemmy.one 0 points 1 year ago (1 children)

Right so you've validated my point that it's not a Photoshop alternative.

Look at it like two cars. One is automatic and the other has a stick shift. In the end what I am talking about is the transportation. Both cars drive the same speed and arrive at the same time, but driving stick requires a different workflow, then driving automatic. But that does not mean, stick shift is no alternative to an automatic.

[–] Adderbox76@lemmy.ca 1 points 1 year ago (1 children)

Those aren't tasks. those are tools.

A task would be if to give us an example of an "end result" that you can accomplish in PS that you can't in GIMP.

Not what tools you use to make it. But the content that comes out the other end.

I'm not going to argue that PS has some extra tools that make stuff easier to do. It has the resources to develop them, after all.

But there is no drawing, animation, photo edit, composition or other end product that you can ONLY do with Photoshop. The only people who say that are people who have never used any alternative.

[–] ShustOne@lemmy.one 1 points 1 year ago

So my point is still valid that GIMP is not an alternative to Photoshop. It would be like saying this screwdriver is an alternative to this toolset. People coming from Photoshop aren't looking at the singular goal of image manipulation.

[–] Yaks@lemmy.fmhy.ml 2 points 1 year ago

I am a reddit refugee and just down for fun ride on the bleeding edge. I am finding a lot of the same communities here and I am happy that Lemmy is here to fill the void.

[–] Rusticus@lemmy.world 2 points 1 year ago (2 children)

As someone who used Reddit when it was first released, Lemmy is 10x better than Reddit v0.1 and obviously better than current Reddit.

[–] UnfortunateDoorHinge@aussie.zone 0 points 1 year ago (1 children)

I guess as a user I didn't see the back-of-house tools for mods and admins, but so far Lemmy is at least competitive. There are risks with server security and threat of being hacked, along with the size of the team.

[–] riskable@programming.dev 0 points 1 year ago (1 children)

There are risks with server security and threat of being hacked

[Citation Needed]. I'm a security professional (my day job involves auditing code). I had a look through the Lemmy source (I'm also a Rust developer) and didn't see anything there that would indicate any security issues. They made good architecture decisions (from a security perspective).

NOTES ABOUT LEMMY SECURITY:

User passwords are hashed with bcrypt which isn't quite as good a choice as argon2 but it's plenty good enough (waaaaay better than most server side stuff where developers who don't know any better end up using completely inappropriate algorithms like SHA-256 or worse stuff like MD5). They hard-coded the use of DEFAULT_COST which I think is a mistake but it's not a big deal (maybe I'll open a ticket to get that changed to a configurable parameter after typing this).

I have some minor nitpicks with the variable naming which can lead to confusion when auditing the code (from a security perspective). For example: form_with_encrypted_password.password_encrypted = password_hash; A hashed password is not the same thing as an "encrypted password". An "encrypted password" can be reversed if you have the key used to encrypt it. A hashed password cannot be reversed without spending enormous amounts of computing resources (and possibly thousands of years in the case of bcrypt at DEFAULT_COST). A trivial variable name refactoring could do wonders here (maybe I should submit a PR).

From an OWASP common vulnerabilities standpoint Lemmy is protected via the frameworks it was built upon. For example, Lemmy uses Diesel for Object Relational Mapping (ORM, aka "the database framework") which necessitates the use of its own syntax instead of making raw SQL calls. This makes it so that Lemmy can (in theory) work with many different database back-ends (whatever Diesel supports) but it also completely negates SQL injection attacks.

Lemmy doesn't allow (executable) JavaScript in posts/comments (via various means not the least of which is passing everything through a Markdown compiler) so cross-site scripting vulnerabilities are taken care of as well as Cross Site Request Forgery (CSRF).

Cookie security is handled via the jsonwebtoken crate which uses a randomly-generated secret to sign all the fields in the cookie. So if you tried to change something in the cookie Lemmy would detect that and throw it out the whole cookie (you'd have to re-login after messing with it). This takes care of the most common session/authentication management vulnerabilities and plays a role in protecting against CSRF as well.

Lemmy's code also validates every single API request very robustly. It not only verifies that any given incoming request is in the absolute correct format it also validates the timestamp in the user's cookie (it's a JWT thing).

Finally, Lemmy is built using a programming language that was engineered from the ground up to be secure (well, free from bugs related to memory management, race conditions, and unchecked bounds): Rust. The likelihood that there's a memory-related vulnerability in the code is exceptionally low and Lemmy has tests built into its own code that validate most functions (clone the repo and run cargo test to verify). It even has a built-in test to validate that tampered cookies/credentials will fail to authenticate (which is fantastic--good job devs!).

REFERENCES:

[–] juicebox@aussie.zone 1 points 1 year ago

I have nothing to add, just wanted to give a kudos on the epic comment.

[–] starclaude@lemmy.world 0 points 1 year ago (2 children)

better? there is still so much subreddit not migrating here, saying it is better is just exaggeration

[–] Milx@lemmy.world 1 points 1 year ago

It's not like all those subreddits existed at 0.1 though.

[–] evilsmurf@lemmy.fmhy.ml 1 points 1 year ago

Seemed like this discussion was about the technical capabilities, not the user generated content. Anyway if you compare the beginning of reddit (e.g., the early days after digg's implosion) to lemmy today, I'd bet lemmy is doing just fine on the content side too. And even leaving that aside, there's a quality over quantity aspect in the discussions that heavily leans in lemmy's favor.

[–] wiox@compuverse.uk 1 points 1 year ago

Well thats true for all software - being free/libre or not. It just takes time to get used to it.

For example, when I get a new phone - I spend the next months complaining over how much better the previous one was, until I dont.

[–] Blazingflames6073@lemmy.world 1 points 1 year ago

Hmmm, fuck those people honestly

[–] mihnt@kbin.social 1 points 1 year ago

Sometimes though it's major issues that turn people away. I've always loved the idea of Linux, but I've never been able to adopt it fully. I've tried multiple times and this current time is no different then before. It's always some major thing that's broken that no amount of research/troubleshooting that fixes it. At this current moment, my steam install won't download games to my secondary disks. No matter what I change. It's running mostly fine otherwise.

[–] 4L3moNemo@programming.dev 1 points 1 year ago

Somewhat agree, but don't get me started on a Gimp. To think that gimp was build to be a tool analogous to Photoshop (PS) is naive. It was born to demonstrate GTK GUI widgets and to check boxes on feature list (of supposedly paint program analogous to PS) from programmers perspective at most. Ok, they did the thing, checked the boxes, used all widgets, demonstrated that it works and from that day on it had and still has totaly inneficient workflow compared to PS and nobody cares about that. Answer to sugestions is almost always half assed, apple soused - you are holding it wrong, we are not PS. :)

My 2 cents, you can learn Gimp, you can adjust yourself to it, but if you have ever worked on PS and were good at it (with all its workflow, shortcuts, up to the level where you work one hand on keyboard, having most toolboxes hiden out of your view, etc..) you'll still feel gimpy. It's like comparing of giving commands to the gnome with an axe versus to an elf with a whole bunch of efficient specialised tools, spells and workflows – both trying to create art. I don't use PS daily for how much, maybe >8 years and use Gimp weekly for about 12years – I say, it is still gimpy as f.. And I'm programmer not a designer, designers usualy just hate it. I on another hand understant it (and it's history) and take it as it is, as an inferior gimpy cousin of PS :)

[–] spark947@lemm.ee 0 points 1 year ago (1 children)

Yeah, its human nature. Things get better and people come around eventually. Kde plasma is way more continuous from windows 10 then windows 11 is anyway.

[–] mustbe3to20signs@feddit.de 0 points 1 year ago* (last edited 1 year ago) (1 children)

That's because Microsoft stole so much from KDE ^^

[–] spark947@lemm.ee 0 points 1 year ago (1 children)

Oh really? I was unaware lol.

[–] mustbe3to20signs@feddit.de 0 points 1 year ago (1 children)

Yes, the KDE twitter account even mocked Microsoft's for some of their latest 'innovations'.

[–] spark947@lemm.ee 0 points 1 year ago (1 children)

Well, ultimately, I'm glad that something open source is wagging the dogs tail, I assumed it was the other way around.

[–] mustbe3to20signs@feddit.de 0 points 1 year ago (1 children)

Yes and no, it's mean that the creativity and innovation of people at KDE is taken without credit. But on the other hand it shows that their features are really great...

BTW they not only copied ideas but also KDE Plasma's slogan "Simple by default, powerful when needed."

[–] spark947@lemm.ee 1 points 1 year ago

Yeah, I was reading about that. It's a shame about the credit, but hey, what do we expect.

[–] mtcerio@lemmy.world -1 points 1 year ago (1 children)

It's not just that: it is made worse by the fact that, being "free", resources are limited. For example, Lemmy.world has been experiencing several hiccups and it's bloody slow at the moment. I get it, it runs on small servers. But the QoS is bad nevertheless; how can you expect the average Joe coming from Reddit to stay here?