lto-overlay VS winget-pkgs

Yeah, despite how little I comment on here, I use HN all the time for basically the same thing. I think the good moderation, smaller, tighter-knit community, and relatively high-quality of posts compared to Reddit has made it my first go-to when I am curious about something.

I'll usually `query bla Talos II bla bla site:ycombinator.com`, and if that doesn't give me what I want, I'll try the Algolia search [1]. And only then will I give up and try `site:reddit.com`, unless there is a more specific site I know to try first [2].

---

[1]: I'm sure most regulars here know it, but if you don't, it is super useful. I just wish it had more query operators to filter out stuff sometimes -- <https://hn.algolia.com>

[2]: I'd be interested in what others here do. Off the top of my head, these are the ones I'll usually use, maybe it'll be helpful to someone else:

• For questions about server hardware / networking equipment / weird second-hand HPC stuff, ServeTheHome has a surprising number of quality articles and lots of forum discussion -- `site:servethehome.com` or `site:forums.servethehome.com`

Level1Tech's Forum (site:forum.level1techs.com) can be decent as well for such topics and stuff like ZFS-related questions, but it tends to have a more 'inexperienced'/consumer userbase relative to STH (though usually more into it than, say, the LTT audience).

• If you don't mind Google Translate, Russia's more-or-less HN equivalent, Habr [3], often has pretty high-quality, in-depth articles on a variety of tech/programming topics. It differs from HN a bit in that companies themselves tend to write them and they are displayed inline on Habr itself rather than more of a Reddit-like link-aggregation system like on HN. The style tends to be similar to stuff like the CloudFlare blog posts -- `site:habr.com` (word of warning: great content, but the comments can be quite mean at times - e.g., the blog post on Cosmopolitan was just filled with awful transphobic stuff).

• For anything video encoding-related, `site:doom9.org` is a great resource when Googling specific questions. And for finding out which country has the best quality release of a movie, outside of something like a torrent tracker, screencaps from <https://caps-a-holic.com> are great, and adding `site:forum.blu-ray.com` or `site:dvdcompare.net` to your queries can help a ton to find actual info about a disc.

Otherwise, certain Discord chats, like Beatrice-Raws, /r/av1's Discord, and the SeaDex Discord can have useful discussion.

• Anything Linux-related, the Gentoo Wiki is really good, and Arch too - adding `https://wiki.gentoo.org` to a query can help a lot, particularly for weird compiler flags and old/obscure hardware, or `site:wiki.archlinux.org`. For LTO and optimization bugs, the Gentoo LTO overlay project is also really useful, between the patches/notes and the issue tracker discussions [4]. AUR comments can also be helpful for issues with somewhat bleeding-edge builds.

• Arch's PKGBUILDs and Alpine's APKBUILDs are really easy to read, and I find actually getting to them/the sources for their patches is easier/quicker than most distros. If I'm running into trouble, I tend to check their stuff to avoid the useless Google searches.

• For anything drug/medication-related, the Psychonaut wiki [5] and Tripsit [6] tend to be better than stuff like Wikipedia in terms of "wtf did my doctor prescribe me, what will this do, and do I need to worry about taking it in combination with XYZ".

As a last resort, if neither has good info on some obscure thing I've been given, like when I was living in Russia, if you're willing to Google Translate, I've found Russian Wikipedia to be really vast on all sorts of medications and chemicals, and also much more objective and skeptical about certain topics (e.g., there are tons of borderline placebo Soviet-era meds they'll give you there, and if you look them up on English wikipedia, you can tell some Nootropics-bro wrote half of it, whereas the Russian page will quickly tell you "actually, there's been basically no proof this does anything").

• If I'm looking for a particular file that I can't seem to find normally on Google or torrent tracker, I've had success searching for Apache directory listings with some query abuse [7]. And if that fails, DHT indexers [8] like BTDig [9] can be helpful when you're in a situation where you know the filename, like a particular font that is no longer for sale, but seemingly can't find it on Google, Yandex, Archive.org, etc.

• For finding new music / movies / anime, queries like "Films like Parasite" or "Best Korean movies" on Google tend to be useless due to all the SEO-spam WatchMojo-tier blogs, all featuring the same five films that barely relate to what you're looking for.

The best way that I have found, personally, is to use the collages and comment sections on certain torrent trackers; as with HN, the communities tend to be tighter-knit and have higher quality discussion than you can find on Reddit.

For general music, even if you don't intend on ever actually pirating anything Redacted's ("RED") "collages" (think: ultra high-quality, user-curated lists of similar music) is unmatched. And they have relationship diagrams for each artist to show what other users tend to download. RED is a private tracker, but they allow anyone to sign up if they submit an application through IRC [10]. For East Asian music (j-pop, j-rock, k-pop, etc), Jpopsuki can be useful as well - almost the same system, but more targeted niche (and unfortunately, less curated/moderated).

Otherwise, Last.fm's recommendations tend to be better than Spotify/YouTube for me, and the ability to see which other users have similar taste to you / have the same current favorite song can be really useful, since you can then click on their pages and inevitably find something you've never heard before that matches your taste.

Anime, unfortunately, does not have the same level of pirate curation as movies or music, so I tend to rely a lot on AniDB's tags [11] and MyAnimeList's user-curated recommendations [12]. For Korean and Chinese TV, MyDramaList is similar and pretty decent [13].

And for movies, another torrent tracker, PassThePopcorn ("PTP") has the same sort of collections/collages and system as RED [6], which can be great if you're looking for very specific types of films. And even better, you have to "pay" credits (non-purchasable points you receive for seeding) to even create a collection, which adds a surprisingly nice, artificial barrier to ensure that the only collections that exist are ones maintained by people who truly care about that particular sub-niche.

Like HN, the comments often have more value than the content itself. Unlike RED, where comments are for a particular torrent (e.g., Fake Record Label's 1997 Japanese-region CD of Fake Band's Self Title album), PTP comments are per torrent group (i.e., Fake Movie as a whole rather than the 1080P rip of the German Blu-ray of Fake Movie). This can be really nice because the comments often turn into reviews and discussion about particular editions of a film.

As an example, I watched Wong Kar-wai's "Fallen Angels" much later than I should have (great movie, btw), but had I not read the comments, I'd probably have just downloaded the 4K Blu-ray, not realizing they re-colorgraded the film to have an entirely different style from the original, and changed the aspect ratio by cropping it from 16:9 to 2.39:1.

Personally, regardless of what the director claims is his true vision, I am really glad I read those comments because what sticks out to me the most in Fallen Angels is the beautiful color work and the ridiculous decision to use a super-wide angle lens (possibly 9.8mm adapted to 6.8mm?) [14] for most of the film, which gave it this immersive feel. However, like almost everyone else, I have a 16:9 TV, and so when you crop it to a cinema aspect ratio, something feels very, very wrong -- you lose that immersion and claustrophobia the lens created in the first place [15].

[3]: this is the English version, which has much fewer articles, but it might help to get a general idea - <https://habr.com/en/all/> (also, note the company-specific and topic-specific filters)

[4]: <https://github.com/gentoo-mirror/lto-overlay>

[5]: <https://psychonautwiki.org/wiki/Adderall>

[6]: <https://combo.tripsit.me>

[7]: <https://www.reddit.com/r/opendirectories/comments/933pzm/all...>

[8]: <https://wiki.archiveteam.org/index.php/BitTorrent_DHT>

[9]: <https://btdig.com>

[10]: <https://interviewfor.red/en/starting.html>

[11]: <https://anidb.net/anime/7243#tab_main_4_1>

[12]: <https://myanimelist.net/anime/7785/Yojouhan_Shinwa_Taikei/us...>

[13]: <https://mydramalist.com/shows/top>

[14]: really cool video that tries to identify (probably successfully) the mysterious, seemingly non-existent lens the director claimed to have used - <https://www.youtube.com/watch?v=A2dq_7wu0Dw>

[15]: comparisons of the WKW remasters - <https://youtu.be/OrvGqEdomLo?t=435>

A good idea would be to refer to https://github.com/gentoo-mirror/lto-overlay/blob/master/sys-config/ltoize/files/package.cflags/optimizations.conf for problems with -O3/-Ofast. I would even suggest using the lto-overlay and installing sys-config/ltoize from it. Even if you don't use LTO, it installs workarounds for the CFLAGS/CXXFLAGS shown here.

lto-overlay location: /var/db/repos/lto-overlay sync-type: git sync-uri: https://github.com/gentoo-mirror/lto-overlay.git masters: gentoo mv

and sys-config/ltoize::lto-overlay already has configuration for many packages but if something missing you can add it manually

7.0 is now available: https://github.com/microsoft/winget-pkgs/pull/147886

I researched this for a WinGet thing: https://github.com/microsoft/winget-pkgs/pull/110618

Ah, reminds me of that time I requested a .editorconfig file in a Microsoft repo: https://github.com/microsoft/winget-pkgs/issues/329

Take dropbox as an example. This is what the yaml manifest looks like for that if you install it through winget. It literally has a hardcoded link to an .exe installer hosted by dropbox and then just set the flags to silent. I am not spreading misinformation, you are.

It's not quite the same though, as there are different considerations when using a repository of things a unified group has decided should be included and built (or slightly modified existing) packages for and a repo where anyone can submit a package that will go through some level of vetting. In the end I still believe most this discussion is really about individuals and how much trust they apply towards different groups and sources and is not really about Linux or Windows in particular as much.

1: https://github.com/microsoft/winget-pkgs

I never used winget, but probably: - https://github.com/microsoft/winget-pkgs/issues/107858 - https://github.com/Genymobile/scrcpy/issues/4027

It's probably not on the Store, winget pulls from both the Store and a community collection of manifests on GitHub: https://github.com/microsoft/winget-pkgs

I think that's part of the problem, if you don't have that package manager to bootstrap your signature key ring, DNS is your next best bootstrap. It is, of course, a terrible bootstrap for trust, but it is one so many users on Windows have been relying on for such a long time.

For power users on any modern Windows 10/Windows 11 there is at least WinGet now. Its manifests repo is becoming a very interesting (open) source of truth for common Windows applications. Admittedly, it in most cases doesn't seem to be checking specific code signatures in most cases either, but at least includes SHA checksums.

For instance, 7zip's manifests: https://github.com/microsoft/winget-pkgs/tree/master/manifes...

It's too bad there's still not a great option for "average user that doesn't know/trust how to use a CLI", given how sadly polluted the Microsoft Store can be for many common, especially Open Source, applications. For direct instance, because winget kindly includes Microsoft Store results when searching, there is a "7zip 22" in the Microsoft Store that costs some amount of money (winget details say "PaidUnknownPrice" for the pricing information; I'm on a corporate machine right now with the actual Store access locked so can't search in the actual Store right now) and the Publisher is listed as RepackagerExpress.com. (That website currently doesn't go anywhere, giving it a spot check.)

Having seen this, I may boot up my personal machine and try to report this specific Store listing for violating the Store's Open Source policies, though I'm unsure if such whackamole is all that useful. (Seems like it might be a useful winget feature request for it to provide Store Report URLs.)

For example, see that Firefox has /S here.