This is why when cyberthreat actors steal millions in USD stablecoins by hacking a protocol or a large wallet, the very first thing they do is convert those stablecoins to something else.

I would recommend it only if this type of thing naturally interests you. I can't imagine powering through the initial learning curve if it felt like a frustrating chore.

That said, if having (most of) your machine defined declaratively in a git repository sounds exciting/useful/comfy, then I would encourage you to give it a try. You can start small by just configuring a few programs or options and see how you like it.

I wrote more about my experience here where I also link to my configs: https://bryce.is/writing/code/fully-nix-pilled

Put aside the bit rot that occurs constantly with digital project files in a way it never did with tape, just getting my DAW, plugins, samples, projects working has been a giant pain. I am a big fan of deterministic/reproducible computing environments in general. My primary machine is setup declaratively with Nix. It would be great if something like this existed for my music setup without having to compromise on creative choices.

Most of these plugins are of dubious software quality, but that is not mutually exclusive with their ability to accomplish great sounding results. One of the reasons I bought a dedicated machine for music is that I inherently don't really trust them to be running on the same device as my personal computing. Some of them (Universal Audio Apollo) even require kernel extensions on MacOS.

If anyone is attempting to solve this, I'd like to hear about it.

For all of the security suggestions in this article I was also surprised to see the author recommending ungoogle-chromium, which has a number of security issues. See: https://qua3k.github.io/ungoogled/

The primary issue I take with the article is the chosen tone. I think there are ways that these points could have been made without being overly cynical and negative. I think speaking authoritatively throughout the article has the effect of equating the importance of subjective preferences (like the choice of which terminal emulator to include), with legitimate security concerns (bash shortcomings, migrations, firewall misconfiguration, piping curl | sh to install software).

I wouldn't use Omarchy, but I am glad it exists. It's bringing more people into the desktop Linux ecosystem, which should be positive sum. Omarchy comes off to me as a little hacky and immature, but at this stage that seems.. mostly fine? Perhaps they should be more clear about that in their marketing, but I understand the goals and I admire the enthusiasm from DHH.

Part of me hopes that some amount of resources are being invested by someone in our government to analyze and assess this, but maybe that is overly optimistic.

I'm not sure if the reason may be as simple as the desire to pump their user numbers for earnings, or if it's something more egregious than that. It's not clear to me how a company owned by the public which relies on advertisers for revenue has been able to carry on for so long being a propaganda farm for foreign agents and marketing bots.

Also, while I love the convenience of Synology's software, I don't love that it's closed source. Their hardware is also fairly underwhelming for the price tag.

It may not be obvious to more casual observers, but there is a lot of trading volume happening on on-chain exchanges these days (as in easily 10B+ in trading volume per day with most of this coming from futures).

There are solutions on the desktop like Qubes (but it uses virtualization and is slow, also very complex for the average user). There are also user-space solutions like Firejail, bubblewrap, AppArmor, which all have their own quirks and varying levels of compatibility and support. You also have things like OpenSnitch which are helpful only for isolating networking capabilities of programs. One problem is that most users don't want to spend days configuring the capabilities for each program on their system. So any such solution needs profiles for common apps which are constantly maintained and updated.

I'm somewhat surprised that the current state of the world on the desktop is just _so_ bad, but I think the problem at its core is very hard and the financial incentives to solve it are not there.

That said, China is one of the most authoritarian countries in the world. It has some of the most effective controls in place around media, speech, technology, and capital of any country. I'm not sure whether that model could be easily copied, and whether it should be copied is maybe a different conversation altogether.

Perhaps the solution is trying to better understand how victims are acquiring and transferring their funds? Perhaps we need to regulate centralized exchanges to better protect their customers. In the U.S. it's necessary to pass some simple online questionnaire before trading advanced financial products like options/futures. Perhaps we need something like this for cryptocurrency? I'm just throwing out ideas, because I don't know the solution. But even if you think regulating it out of existence is the ideal outcome, that is simply not going to be possible at this point.

I was referring more to being well read in music theory in the academic sense. I am doubtful McCartney ever picked up a book on the subject. Traveling to meet someone so they can show you how to position your fingers so you can play a B7 chord is a bit different than that in my opinion.

I suspect this is true of many great songwriters, maybe even most of them. I would even argue that studying music theory may even make you a worse songwriter, because the most innovative songwriters don't seem to follow some clearly established rulebook, but rather they bend/break the "rules" unknowingly because their focus is on what they are feeling/hearing rather than something more analytical.

Capitalism is all about aligning incentives. Those of us who have experienced startups know just how important it is to have your employees aligned with the interests of the company in the form of equity grants. I've always personally wondered why this isn't more common outside of Silicon Valley. I respect the goal of researching these topics more deeply.