I'm not trying to defend Apple, but arguably that's an entirely different system that just happens to be packed into the same UI. It's deeply integrated which I find worrying, but doesn't really mean that if I get a SMS text for security verification that I'm "using iMessage" in any real sense.
I vaguely remember a perk in some expansion book of some Shadowrun edition that was basically "common sense" and ruleswise it meant that once per game session the GM should ask you "are you sure about that" when you're about to do something stupid. That's it. If you go ahead, you go ahead. If you don't realize that they are triggering the perk, you go ahead. If you never do anything stupid (yeah, right), they will never ask.
I tend to give that to my players "for free", but I still love that it's been encoded as a perk that's worth some points at character generation.
"failed" is a pretty bad problem description. Did you get any error messages or unexpected blank pages, where the zip files empty? ... without any context no one can help you (I'm not saying I can help you with that context, but someone might be able to).
I fully appreciate the desire for more civil discussion.
But please be aware that tone policing has been used as an offensive weapon against many marginalized groups: "We get that you want to fight for your rights, but could you please do that in the form of civil discourse?" That phrase is almost always heard when years of civil discourse lead nowhere.
The one issue that I think will catch people over and over again (and which I don't even know how to fix) is that if you find a profile or post on a mastodon other than your own you can't just follow or reply to it.
I know that there are browser extensions that make it work, but those are band-aids. You'd need an app that registered itself as the handler for every mastodon instance and opened all links in itself to handle it seamlessly for the average user.
Yes, I agree with the trust and that it's effectively equivalent for most users. But I read OPs reply as asking specifically for "a more automatic way of checking (that it was build from source cleanly)".
I think expecting that this has already been cleanly solved years ago is not unreasonable (until you realize how many rabbit holes this whole topic has to go down to work well).
AFAIK most Linux distributions don't (yet) have fully reproducible builds (simply because it's a HUGE ask). For Debian for example, it's continued ongoing work: https://wiki.debian.org/ReproducibleBuilds
As the article/SO answer posted by cwagner tells you you effectively can't, because a "trojan" could be injected at many different levels and even self-compiling the source code depends on some compiler binary that you have to get from somewhere (build your own compiler, you tell me, but what do you use to compile THAT?).
In practice for most people the correct answer is "get the binary from your distributions normal repository". By using a given distribution you already implicitly trust that distribution (because if you don't, why use it?), so non-core software from their repository should also be considered trustworthy (at least in the sense that no additional trojans were introduced that aren't in the source).
That doesn't really help with Windows, though. There your best bet is to get a binary that's from as close to the original authors themselves. Ideally from their project home page themselves.
Woah ... metacity brought back memories. Initially my reaction (comming from Sawfish/Sawmill) was "what? you mean I can't script my window manager with LISP?!?", but eventually its simplicity grew on me.
The integration of cryptocurrencies is somewhat offputting for me, which wouldn't be too much of an issue if it was just a tracking feature But it also claims integration with "Internet Identity" which seems to be another web3 projects that promises the sky (and those tend to not deliver).
Hätte allerdings den Nebeneffekt das Content der sich an jüngere richtet (sprich: all jene ohne eigenes Einkommen) plötzlich nicht mehr wirklich möglich ist. Keine Ahnung wie viel "indie" Content (also abgesehn von großen Firmen) es in dem Bereich gibt, aber wenn die es nicht schaffen den Kindern einzureden "sagt euren Eltern dass sie ein paar Euro auf Kofi lassen sollen", schaut's da halt schlecht aus.