[issue]: Remove BLOBs from the source tree

FairyTail2000 commented 7 months ago

What happened?

Due to the recent XZ-Utils drama I checked the code and I'm appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/cryptsetup https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/Unix/ventoy_unix https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/DMSETUP

There is no reason to have those not be build in the release process. Of course it's convenient, they are prebuild, it's fast and nobody has a problem with it.

Recent events however showed that these BLOBs can contain everything and nothing. The build instructions would not produce the exact same executable for everyone. It's better to have GitHub build it on-push and use them out of the build cache.

I would do it myself, but unfortunately I'm not familiar enough with the Ventoy build process to actually do it. I understand that removing BLOBs isn't a priority over new and shiny features. But due to recent events, this should be rethought.

Thank you for reading this and I hope for a productive conversation

Joseph-DiGiovanni commented 2 months ago

use the versions of those blobs that are provided by the distribution's package manager.

If every binary has a known origin this is a fine solution, but I believe there are still some that just don't have one.

Remaining silent on a huge accusation like your project being the next XZ Utils is nothing more than a stall tactic in my eyes.

bernardgut commented 2 months ago

Since the maintainer doesn't want to do basic open source project management/create tasks tickets so people can contribute and help him. Let me try to spell it out for him:

He needs someone who is reasonably good at automake to write a makefile that pulls dependencies (in this case blobs) from trusted sources (Microsoft, Debian, GNU etc) and create a PR for that
He needs the to remove secureboot support or sign his key so he can build his own trusted bootloader. And create the documentation for people who want to use secureboot to install his key locally in their tpm.

Something along those lines. Did I miss something ?

PS: @ the maintainer : man you are really making it HARD to want to help you. NOBODY will ever spend a week creating a PR for it to be discarded because it doesn't meet whatever criteria you have in your head. Maybe if you spend 10 min SPELLING OUT what you want to be done for fixing this issue instead of begging for money, this thread would have been closed last year... Plenty of people know how to fix this issue. Nobody is going to waste their time trying to figure out which solution you deem as acceptable for a PR. Just my 2 cents.

grepwood commented 2 months ago

Using the following command:

find . -type f -exec file {} \; | grep ELF | sed 's/:\ ELF.*$//;s/^\.\///'

I have found this list of files:

IMG/cpio_x86/ventoy/tool/zstdcat64
IMG/cpio_x86/ventoy/tool/inotifyd
IMG/cpio_x86/ventoy/tool/dm_patch_32.ko
IMG/cpio_x86/ventoy/tool/dm_patch_ibt_64.ko
IMG/cpio_x86/ventoy/tool/ar
IMG/cpio_x86/ventoy/tool/zstdcat
IMG/cpio_x86/ventoy/tool/lz4cat
IMG/cpio_x86/ventoy/tool/lz4cat64
IMG/cpio_x86/ventoy/tool/dm_patch_64.ko
IMG/cpio_x86/ventoy/busybox/xzminidec32
IMG/cpio_x86/ventoy/busybox/ash
IMG/cpio_x86/ventoy/busybox/64h
IMG/cpio_x86/ventoy/busybox/xzminidec64
IMG/cpio_x86/ventoy/busybox/xzminidec64_musl
IMG/cpio_x86/ventoy/busybox/vtchmod32
IMG/cpio_x86/ventoy/busybox/vtchmod64_musl
IMG/cpio_x86/ventoy/busybox/vtchmod64
IMG/cpio_arm64/ventoy/tool/zstdcataa64
IMG/cpio_arm64/ventoy/tool/lz4cataa64
IMG/cpio_arm64/ventoy/busybox/a64
IMG/cpio_arm64/ventoy/busybox/vtchmodaa64
IMG/cpio_arm64/ventoy/busybox/xzminidecaa64
IMG/cpio_mips64/ventoy/tool/lz4catm64e
IMG/cpio_mips64/ventoy/busybox/m64
IMG/cpio_mips64/ventoy/busybox/vtchmodm64e
IMG/cpio_mips64/ventoy/busybox/xzminidecm64e
SQUASHFS/unsquashfs_aa64
SQUASHFS/unsquashfs_64
SQUASHFS/unsquashfs_32
VtoyTool/vtoytool/01/vtoytool_64
VtoyTool/vtoytool/02/vtoytool_64
VtoyTool/vtoytool/00/vtoytool_64
VtoyTool/vtoytool/00/vtoytool_32
VtoyTool/vtoytool/00/vtoytool_m64e
VtoyTool/vtoytool/00/vtoytool_aa64
LiveCD/VTOY/ventoy/drivers/ezusb.ko
LiveCD/VTOY/ventoy/drivers/usblp.ko
LiveCD/VTOY/ventoy/drivers/sisusbvga.ko
LiveCD/VTOY/ventoy/drivers/xhci-pci.ko
LiveCD/VTOY/ventoy/drivers/vhci-hcd.ko
LiveCD/VTOY/ventoy/drivers/yurex.ko
LiveCD/VTOY/ventoy/drivers/mptbase.ko
LiveCD/VTOY/ventoy/drivers/mptsas.ko
LiveCD/VTOY/ventoy/drivers/xhci-hcd.ko
LiveCD/VTOY/ventoy/drivers/mptscsih.ko
LiveCD/VTOY/ventoy/drivers/usb-otg-fsm.ko
LiveCD/VTOY/ventoy/drivers/usbip-host.ko
LiveCD/VTOY/ventoy/drivers/parport.ko
LiveCD/VTOY/ventoy/drivers/usb3503.ko
LiveCD/VTOY/ventoy/drivers/megaraid_sas.ko
LiveCD/VTOY/ventoy/drivers/ums-realtek.ko
LiveCD/VTOY/ventoy/drivers/mptfc.ko
LiveCD/VTOY/ventoy/drivers/mptctl.ko
LiveCD/VTOY/ventoy/drivers/scsi_transport_sas.ko
LiveCD/VTOY/ventoy/drivers/pi3usb30532.ko
LiveCD/VTOY/ventoy/drivers/xhci-plat-hcd.ko
LiveCD/VTOY/ventoy/drivers/cdc-acm.ko
LiveCD/VTOY/ventoy/drivers/scsi_transport_srp.ko
LiveCD/VTOY/ventoy/drivers/uss720.ko
LiveCD/VTOY/ventoy/drivers/cdc-wdm.ko
LiveCD/VTOY/ventoy/drivers/usb251xb.ko
LiveCD/VTOY/ventoy/drivers/mptspi.ko
LiveCD/VTOY/ventoy/drivers/scsi_transport_spi.ko
LiveCD/VTOY/ventoy/drivers/usb4604.ko
LiveCD/VTOY/ventoy/drivers/usbip-core.ko
ZSTD/zstdcat64
ZSTD/zstdcataa64
ZSTD/zstdcat
VBLADE/vblade-master/vblade_32
VBLADE/vblade-master/vblade_aa64
VBLADE/vblade-master/vblade_64
LiveCDGUI/EXT/busybox-x86_64
INSTALL/VentoyGUI.x86_64
INSTALL/tool/x86_64/Ventoy2Disk.qt5
INSTALL/tool/x86_64/xzcat
INSTALL/tool/x86_64/mkexfatfs
INSTALL/tool/x86_64/ash
INSTALL/tool/x86_64/hexdump
INSTALL/tool/x86_64/Plugson
INSTALL/tool/x86_64/mount.exfat-fuse
INSTALL/tool/x86_64/Ventoy2Disk.gtk2
INSTALL/tool/x86_64/vlnk
INSTALL/tool/x86_64/Ventoy2Disk.gtk3
INSTALL/tool/x86_64/vtoycli
INSTALL/tool/x86_64/V2DServer
INSTALL/tool/i386/Ventoy2Disk.qt5
INSTALL/tool/i386/xzcat
INSTALL/tool/i386/mkexfatfs
INSTALL/tool/i386/ash
INSTALL/tool/i386/hexdump
INSTALL/tool/i386/Plugson
INSTALL/tool/i386/mount.exfat-fuse
INSTALL/tool/i386/Ventoy2Disk.gtk2
INSTALL/tool/i386/vlnk
INSTALL/tool/i386/Ventoy2Disk.gtk3
INSTALL/tool/i386/vtoycli
INSTALL/tool/i386/V2DServer
INSTALL/tool/mips64el/Ventoy2Disk.qt5
INSTALL/tool/mips64el/xzcat
INSTALL/tool/mips64el/mkexfatfs
INSTALL/tool/mips64el/ash
INSTALL/tool/mips64el/hexdump
INSTALL/tool/mips64el/Plugson
INSTALL/tool/mips64el/mount.exfat-fuse
INSTALL/tool/mips64el/vlnk
INSTALL/tool/mips64el/Ventoy2Disk.gtk3
INSTALL/tool/mips64el/vtoycli
INSTALL/tool/mips64el/V2DServer
INSTALL/tool/aarch64/Ventoy2Disk.qt5
INSTALL/tool/aarch64/xzcat
INSTALL/tool/aarch64/mkexfatfs
INSTALL/tool/aarch64/ash
INSTALL/tool/aarch64/hexdump
INSTALL/tool/aarch64/Plugson
INSTALL/tool/aarch64/mount.exfat-fuse
INSTALL/tool/aarch64/vlnk
INSTALL/tool/aarch64/Ventoy2Disk.gtk3
INSTALL/tool/aarch64/vtoycli
INSTALL/tool/aarch64/V2DServer
INSTALL/grub/x86_64-efi/btrfs.mod
INSTALL/grub/x86_64-efi/random.mod
INSTALL/grub/x86_64-efi/usbtest.mod
INSTALL/grub/x86_64-efi/part_sunpc.mod
INSTALL/grub/x86_64-efi/hello.mod
INSTALL/grub/x86_64-efi/part_amiga.mod
INSTALL/grub/x86_64-efi/loadenv.mod
INSTALL/grub/x86_64-efi/play.mod
INSTALL/grub/x86_64-efi/part_sun.mod
INSTALL/grub/x86_64-efi/loadbios.mod
INSTALL/grub/x86_64-efi/morse.mod
INSTALL/grub/x86_64-efi/mul_test.mod
INSTALL/grub/x86_64-efi/gcry_rmd160.mod
INSTALL/grub/x86_64-efi/gcry_idea.mod
INSTALL/grub/x86_64-efi/minix3_be.mod
INSTALL/grub/x86_64-efi/legacy_password_test.mod
INSTALL/grub/x86_64-efi/usb.mod
INSTALL/grub/x86_64-efi/dm_nv.mod
INSTALL/grub/x86_64-efi/date.mod
INSTALL/grub/x86_64-efi/cryptodisk.mod
INSTALL/grub/x86_64-efi/affs.mod
INSTALL/grub/x86_64-efi/password.mod
INSTALL/grub/x86_64-efi/scsi.mod
INSTALL/grub/x86_64-efi/setpci.mod
INSTALL/grub/x86_64-efi/videotest.mod
INSTALL/grub/x86_64-efi/uhci.mod
INSTALL/grub/x86_64-efi/ata.mod
INSTALL/grub/x86_64-efi/offsetio.mod
INSTALL/grub/x86_64-efi/mdraid09.mod
INSTALL/grub/x86_64-efi/linux16.mod
INSTALL/grub/x86_64-efi/usbserial_pl2303.mod
INSTALL/grub/x86_64-efi/part_dvh.mod
INSTALL/grub/x86_64-efi/signature_test.mod
INSTALL/grub/x86_64-efi/cbtime.mod
INSTALL/grub/x86_64-efi/gcry_sha1.mod
INSTALL/grub/x86_64-efi/zfscrypt.mod
INSTALL/grub/x86_64-efi/iorw.mod
INSTALL/grub/x86_64-efi/time.mod
INSTALL/grub/x86_64-efi/pata.mod
INSTALL/grub/x86_64-efi/setjmp.mod
INSTALL/grub/x86_64-efi/zfsinfo.mod
INSTALL/grub/x86_64-efi/exfctest.mod
INSTALL/grub/x86_64-efi/gcry_sha256.mod
INSTALL/grub/x86_64-efi/eval.mod
INSTALL/grub/x86_64-efi/keylayouts.mod
INSTALL/grub/x86_64-efi/nilfs2.mod
INSTALL/grub/x86_64-efi/bswap_test.mod
INSTALL/grub/x86_64-efi/minix.mod
INSTALL/grub/x86_64-efi/ufs1_be.mod
INSTALL/grub/x86_64-efi/gcry_des.mod
INSTALL/grub/x86_64-efi/functional_test.mod
INSTALL/grub/x86_64-efi/cs5536.mod
INSTALL/grub/x86_64-efi/disk.mod
INSTALL/grub/x86_64-efi/jfs.mod
INSTALL/grub/x86_64-efi/xnu.mod
INSTALL/grub/x86_64-efi/gcry_seed.mod
INSTALL/grub/x86_64-efi/geli.mod
INSTALL/grub/x86_64-efi/hfs.mod
INSTALL/grub/x86_64-efi/cbmemc.mod
INSTALL/grub/x86_64-efi/cmp_test.mod
INSTALL/grub/x86_64-efi/cmdline_cat_test.mod
INSTALL/grub/x86_64-efi/f2fs.mod
INSTALL/grub/x86_64-efi/parttool.mod
INSTALL/grub/x86_64-efi/gptsync.mod
INSTALL/grub/x86_64-efi/lsefi.mod
INSTALL/grub/x86_64-efi/reiserfs.mod
INSTALL/grub/x86_64-efi/hfspluscomp.mod
INSTALL/grub/x86_64-efi/datehook.mod
INSTALL/grub/x86_64-efi/usbserial_usbdebug.mod
INSTALL/grub/x86_64-efi/usbserial_ftdi.mod
INSTALL/grub/x86_64-efi/videotest_checksum.mod
INSTALL/grub/x86_64-efi/search_label.mod
INSTALL/grub/x86_64-efi/usbserial_common.mod
INSTALL/grub/x86_64-efi/raid6rec.mod
INSTALL/grub/x86_64-efi/memdisk.mod
INSTALL/grub/x86_64-efi/ehci.mod
INSTALL/grub/x86_64-efi/lspci.mod
INSTALL/grub/x86_64-efi/progress.mod
INSTALL/grub/x86_64-efi/afs.mod
INSTALL/grub/x86_64-efi/odc.mod
INSTALL/grub/x86_64-efi/strtoull_test.mod
INSTALL/grub/x86_64-efi/pcidump.mod
INSTALL/grub/x86_64-efi/zstd.mod
INSTALL/grub/x86_64-efi/videoinfo.mod
INSTALL/grub/x86_64-efi/gcry_serpent.mod
INSTALL/grub/x86_64-efi/part_plan.mod
INSTALL/grub/x86_64-efi/testload.mod
INSTALL/grub/x86_64-efi/blscfg.mod
INSTALL/grub/x86_64-efi/cpio_be.mod
INSTALL/grub/x86_64-efi/msdospart.mod
INSTALL/grub/x86_64-efi/help.mod
INSTALL/grub/x86_64-efi/testspeed.mod
INSTALL/grub/x86_64-efi/lssal.mod
INSTALL/grub/x86_64-efi/procfs.mod
INSTALL/grub/x86_64-efi/wrmsr.mod
INSTALL/grub/x86_64-efi/bsd.mod
INSTALL/grub/x86_64-efi/mpi.mod
INSTALL/grub/x86_64-efi/test_blockarg.mod
INSTALL/grub/x86_64-efi/usbms.mod
INSTALL/grub/x86_64-efi/gcry_arcfour.mod
INSTALL/grub/x86_64-efi/minix_be.mod
INSTALL/grub/x86_64-efi/legacycfg.mod
INSTALL/grub/x86_64-efi/syslinuxcfg.mod
INSTALL/grub/x86_64-efi/part_dfly.mod
INSTALL/grub/x86_64-efi/ufs2.mod
INSTALL/grub/x86_64-efi/div.mod
INSTALL/grub/x86_64-efi/macho.mod
INSTALL/grub/x86_64-efi/search_fs_uuid.mod
INSTALL/grub/x86_64-efi/cmp.mod
INSTALL/grub/x86_64-efi/ctz_test.mod
INSTALL/grub/x86_64-efi/rdmsr.mod
INSTALL/grub/x86_64-efi/sleep_test.mod
INSTALL/grub/x86_64-efi/minix3.mod
INSTALL/grub/x86_64-efi/minix2.mod
INSTALL/grub/x86_64-efi/luks.mod
INSTALL/grub/x86_64-efi/cbls.mod
INSTALL/grub/x86_64-efi/search_fs_file.mod
INSTALL/grub/x86_64-efi/normal.mod
INSTALL/grub/x86_64-efi/gcry_cast5.mod
INSTALL/grub/x86_64-efi/cbfs.mod
INSTALL/grub/x86_64-efi/keystatus.mod
INSTALL/grub/x86_64-efi/setjmp_test.mod
INSTALL/grub/x86_64-efi/efinet.mod
INSTALL/grub/x86_64-efi/ntfscomp.mod
INSTALL/grub/x86_64-efi/memrw.mod
INSTALL/grub/x86_64-efi/div_test.mod
INSTALL/grub/x86_64-efi/sfs.mod
INSTALL/grub/x86_64-efi/pgp.mod
INSTALL/grub/x86_64-efi/macbless.mod
INSTALL/grub/x86_64-efi/lvm.mod
INSTALL/grub/x86_64-efi/ufs1.mod
INSTALL/grub/x86_64-efi/lsefisystab.mod
INSTALL/grub/x86_64-efi/crc64.mod
INSTALL/grub/x86_64-efi/ohci.mod
INSTALL/grub/x86_64-efi/cpuid.mod
INSTALL/grub/x86_64-efi/multiboot.mod
INSTALL/grub/x86_64-efi/tga.mod
INSTALL/grub/x86_64-efi/elf.mod
INSTALL/grub/x86_64-efi/cbtable.mod
INSTALL/grub/x86_64-efi/probe.mod
INSTALL/grub/x86_64-efi/multiboot2.mod
INSTALL/grub/x86_64-efi/nativedisk.mod
INSTALL/grub/x86_64-efi/spkmodem.mod
INSTALL/grub/x86_64-efi/hexdump.mod
INSTALL/grub/x86_64-efi/mdraid09_be.mod
INSTALL/grub/x86_64-efi/lsmmap.mod
INSTALL/grub/x86_64-efi/archelp.mod
INSTALL/grub/x86_64-efi/minix2_be.mod
INSTALL/grub/x86_64-efi/appleldr.mod
INSTALL/grub/x86_64-efi/gcry_md4.mod
INSTALL/grub/x86_64-efi/cpio.mod
INSTALL/grub/x86_64-efi/gcry_whirlpool.mod
INSTALL/grub/x86_64-efi/shim_lock.mod
INSTALL/grub/x86_64-efi/adler32.mod
INSTALL/grub/x86_64-efi/shift_test.mod
INSTALL/grub/x86_64-efi/part_acorn.mod
INSTALL/grub/x86_64-efi/gcry_twofish.mod
INSTALL/grub/x86_64-efi/raid5rec.mod
INSTALL/grub/x86_64-efi/gcry_blowfish.mod
INSTALL/grub/x86_64-efi/bfs.mod
INSTALL/grub/x86_64-efi/gcry_rsa.mod
INSTALL/grub/x86_64-efi/aout.mod
INSTALL/grub/x86_64-efi/ahci.mod
INSTALL/grub/x86_64-efi/gcry_rfc2268.mod
INSTALL/grub/x86_64-efi/pbkdf2_test.mod
INSTALL/grub/x86_64-efi/ldm.mod
INSTALL/grub/x86_64-efi/part_bsd.mod
INSTALL/grub/x86_64-efi/romfs.mod
INSTALL/grub/x86_64-efi/gcry_camellia.mod
INSTALL/grub/x86_64-efi/verifiers.mod
INSTALL/grub/x86_64-efi/lsefimmap.mod
INSTALL/grub/x86_64-efi/xnu_uuid.mod
INSTALL/grub/x86_64-efi/gcry_tiger.mod
INSTALL/grub/x86_64-efi/gcry_crc.mod
INSTALL/grub/x86_64-efi/hdparm.mod
INSTALL/grub/x86_64-efi/lsacpi.mod
INSTALL/grub/x86_64-efi/xnu_uuid_test.mod
INSTALL/grub/x86_64-efi/gcry_rijndael.mod
INSTALL/grub/x86_64-efi/tr.mod
INSTALL/grub/x86_64-efi/zfs.mod
INSTALL/grub/x86_64-efi/fixvideo.mod
INSTALL/grub/x86_64-efi/backtrace.mod
INSTALL/grub/x86_64-efi/tpm.mod
INSTALL/grub/x86_64-efi/mdraid1x.mod
INSTALL/grub/x86_64-efi/gcry_dsa.mod
INSTALL/grub/arm64-efi/normal.mod
INSTALL/grub/i386-efi/btrfs.mod
INSTALL/grub/i386-efi/random.mod
INSTALL/grub/i386-efi/usbtest.mod
INSTALL/grub/i386-efi/part_sunpc.mod
INSTALL/grub/i386-efi/hello.mod
INSTALL/grub/i386-efi/part_amiga.mod
INSTALL/grub/i386-efi/loadenv.mod
INSTALL/grub/i386-efi/play.mod
INSTALL/grub/i386-efi/part_sun.mod
INSTALL/grub/i386-efi/loadbios.mod
INSTALL/grub/i386-efi/morse.mod
INSTALL/grub/i386-efi/mul_test.mod
INSTALL/grub/i386-efi/gcry_rmd160.mod
INSTALL/grub/i386-efi/gcry_idea.mod
INSTALL/grub/i386-efi/minix3_be.mod
INSTALL/grub/i386-efi/legacy_password_test.mod
INSTALL/grub/i386-efi/usb.mod
INSTALL/grub/i386-efi/dm_nv.mod
INSTALL/grub/i386-efi/date.mod
INSTALL/grub/i386-efi/cryptodisk.mod
INSTALL/grub/i386-efi/affs.mod
INSTALL/grub/i386-efi/password.mod
INSTALL/grub/i386-efi/scsi.mod
INSTALL/grub/i386-efi/setpci.mod
INSTALL/grub/i386-efi/videotest.mod
INSTALL/grub/i386-efi/uhci.mod
INSTALL/grub/i386-efi/ata.mod
INSTALL/grub/i386-efi/offsetio.mod
INSTALL/grub/i386-efi/mdraid09.mod
INSTALL/grub/i386-efi/linux16.mod
INSTALL/grub/i386-efi/usbserial_pl2303.mod
INSTALL/grub/i386-efi/part_dvh.mod
INSTALL/grub/i386-efi/signature_test.mod
INSTALL/grub/i386-efi/cbtime.mod
INSTALL/grub/i386-efi/gcry_sha1.mod
INSTALL/grub/i386-efi/gdb.mod
INSTALL/grub/i386-efi/zfscrypt.mod
INSTALL/grub/i386-efi/iorw.mod
INSTALL/grub/i386-efi/time.mod
INSTALL/grub/i386-efi/pata.mod
INSTALL/grub/i386-efi/setjmp.mod
INSTALL/grub/i386-efi/zfsinfo.mod
INSTALL/grub/i386-efi/exfctest.mod
INSTALL/grub/i386-efi/gcry_sha256.mod
INSTALL/grub/i386-efi/eval.mod
INSTALL/grub/i386-efi/keylayouts.mod
INSTALL/grub/i386-efi/nilfs2.mod
INSTALL/grub/i386-efi/bswap_test.mod
INSTALL/grub/i386-efi/minix.mod
INSTALL/grub/i386-efi/ufs1_be.mod
INSTALL/grub/i386-efi/gcry_des.mod
INSTALL/grub/i386-efi/functional_test.mod
INSTALL/grub/i386-efi/cs5536.mod
INSTALL/grub/i386-efi/disk.mod
INSTALL/grub/i386-efi/jfs.mod
INSTALL/grub/i386-efi/xnu.mod
INSTALL/grub/i386-efi/gcry_seed.mod
INSTALL/grub/i386-efi/geli.mod
INSTALL/grub/i386-efi/hfs.mod
INSTALL/grub/i386-efi/cbmemc.mod
INSTALL/grub/i386-efi/cmp_test.mod
INSTALL/grub/i386-efi/cmdline_cat_test.mod
INSTALL/grub/i386-efi/f2fs.mod
INSTALL/grub/i386-efi/parttool.mod
INSTALL/grub/i386-efi/gptsync.mod
INSTALL/grub/i386-efi/lsefi.mod
INSTALL/grub/i386-efi/reiserfs.mod
INSTALL/grub/i386-efi/hfspluscomp.mod
INSTALL/grub/i386-efi/datehook.mod
INSTALL/grub/i386-efi/usbserial_usbdebug.mod
INSTALL/grub/i386-efi/usbserial_ftdi.mod
INSTALL/grub/i386-efi/videotest_checksum.mod
INSTALL/grub/i386-efi/search_label.mod
INSTALL/grub/i386-efi/usbserial_common.mod
INSTALL/grub/i386-efi/raid6rec.mod
INSTALL/grub/i386-efi/memdisk.mod
INSTALL/grub/i386-efi/ehci.mod
INSTALL/grub/i386-efi/lspci.mod
INSTALL/grub/i386-efi/progress.mod
INSTALL/grub/i386-efi/afs.mod
INSTALL/grub/i386-efi/odc.mod
INSTALL/grub/i386-efi/strtoull_test.mod
INSTALL/grub/i386-efi/pcidump.mod
INSTALL/grub/i386-efi/zstd.mod
INSTALL/grub/i386-efi/videoinfo.mod
INSTALL/grub/i386-efi/gcry_serpent.mod
INSTALL/grub/i386-efi/part_plan.mod
INSTALL/grub/i386-efi/testload.mod
INSTALL/grub/i386-efi/blscfg.mod
INSTALL/grub/i386-efi/cpio_be.mod
INSTALL/grub/i386-efi/msdospart.mod
INSTALL/grub/i386-efi/help.mod
INSTALL/grub/i386-efi/testspeed.mod
INSTALL/grub/i386-efi/lssal.mod
INSTALL/grub/i386-efi/procfs.mod
INSTALL/grub/i386-efi/wrmsr.mod
INSTALL/grub/i386-efi/bsd.mod
INSTALL/grub/i386-efi/mpi.mod
INSTALL/grub/i386-efi/test_blockarg.mod
INSTALL/grub/i386-efi/usbms.mod
INSTALL/grub/i386-efi/gcry_arcfour.mod
INSTALL/grub/i386-efi/minix_be.mod
INSTALL/grub/i386-efi/legacycfg.mod
INSTALL/grub/i386-efi/syslinuxcfg.mod
INSTALL/grub/i386-efi/part_dfly.mod
INSTALL/grub/i386-efi/ufs2.mod
INSTALL/grub/i386-efi/div.mod
INSTALL/grub/i386-efi/macho.mod
INSTALL/grub/i386-efi/search_fs_uuid.mod
INSTALL/grub/i386-efi/cmp.mod
INSTALL/grub/i386-efi/ctz_test.mod
INSTALL/grub/i386-efi/rdmsr.mod
INSTALL/grub/i386-efi/sleep_test.mod
INSTALL/grub/i386-efi/minix3.mod
INSTALL/grub/i386-efi/minix2.mod
INSTALL/grub/i386-efi/luks.mod
INSTALL/grub/i386-efi/cbls.mod
INSTALL/grub/i386-efi/search_fs_file.mod
INSTALL/grub/i386-efi/normal.mod
INSTALL/grub/i386-efi/gcry_cast5.mod
INSTALL/grub/i386-efi/cbfs.mod
INSTALL/grub/i386-efi/keystatus.mod
INSTALL/grub/i386-efi/setjmp_test.mod
INSTALL/grub/i386-efi/efinet.mod
INSTALL/grub/i386-efi/ntfscomp.mod
INSTALL/grub/i386-efi/memrw.mod
INSTALL/grub/i386-efi/div_test.mod
INSTALL/grub/i386-efi/sfs.mod
INSTALL/grub/i386-efi/pgp.mod
INSTALL/grub/i386-efi/macbless.mod
INSTALL/grub/i386-efi/lvm.mod
INSTALL/grub/i386-efi/ufs1.mod
INSTALL/grub/i386-efi/lsefisystab.mod
INSTALL/grub/i386-efi/crc64.mod
INSTALL/grub/i386-efi/ohci.mod
INSTALL/grub/i386-efi/cpuid.mod
INSTALL/grub/i386-efi/multiboot.mod
INSTALL/grub/i386-efi/tga.mod
INSTALL/grub/i386-efi/elf.mod
INSTALL/grub/i386-efi/cbtable.mod
INSTALL/grub/i386-efi/probe.mod
INSTALL/grub/i386-efi/multiboot2.mod
INSTALL/grub/i386-efi/nativedisk.mod
INSTALL/grub/i386-efi/spkmodem.mod
INSTALL/grub/i386-efi/hexdump.mod
INSTALL/grub/i386-efi/mdraid09_be.mod
INSTALL/grub/i386-efi/lsmmap.mod
INSTALL/grub/i386-efi/archelp.mod
INSTALL/grub/i386-efi/minix2_be.mod
INSTALL/grub/i386-efi/appleldr.mod
INSTALL/grub/i386-efi/gcry_md4.mod
INSTALL/grub/i386-efi/cpio.mod
INSTALL/grub/i386-efi/gcry_whirlpool.mod
INSTALL/grub/i386-efi/adler32.mod
INSTALL/grub/i386-efi/shift_test.mod
INSTALL/grub/i386-efi/part_acorn.mod
INSTALL/grub/i386-efi/gcry_twofish.mod
INSTALL/grub/i386-efi/raid5rec.mod
INSTALL/grub/i386-efi/gcry_blowfish.mod
INSTALL/grub/i386-efi/bfs.mod
INSTALL/grub/i386-efi/gcry_rsa.mod
INSTALL/grub/i386-efi/aout.mod
INSTALL/grub/i386-efi/ahci.mod
INSTALL/grub/i386-efi/gcry_rfc2268.mod
INSTALL/grub/i386-efi/pbkdf2_test.mod
INSTALL/grub/i386-efi/ldm.mod
INSTALL/grub/i386-efi/part_bsd.mod
INSTALL/grub/i386-efi/romfs.mod
INSTALL/grub/i386-efi/gcry_camellia.mod
INSTALL/grub/i386-efi/verifiers.mod
INSTALL/grub/i386-efi/lsefimmap.mod
INSTALL/grub/i386-efi/xnu_uuid.mod
INSTALL/grub/i386-efi/gcry_tiger.mod
INSTALL/grub/i386-efi/gcry_crc.mod
INSTALL/grub/i386-efi/hdparm.mod
INSTALL/grub/i386-efi/lsacpi.mod
INSTALL/grub/i386-efi/xnu_uuid_test.mod
INSTALL/grub/i386-efi/gcry_rijndael.mod
INSTALL/grub/i386-efi/tr.mod
INSTALL/grub/i386-efi/zfs.mod
INSTALL/grub/i386-efi/fixvideo.mod
INSTALL/grub/i386-efi/backtrace.mod
INSTALL/grub/i386-efi/mdraid1x.mod
INSTALL/grub/i386-efi/gcry_dsa.mod
INSTALL/grub/i386-pc/btrfs.mod
INSTALL/grub/i386-pc/random.mod
INSTALL/grub/i386-pc/usbtest.mod
INSTALL/grub/i386-pc/fshelp.mod
INSTALL/grub/i386-pc/crypto.mod
INSTALL/grub/i386-pc/part_sunpc.mod
INSTALL/grub/i386-pc/pxechain.mod
INSTALL/grub/i386-pc/hello.mod
INSTALL/grub/i386-pc/part_amiga.mod
INSTALL/grub/i386-pc/loadenv.mod
INSTALL/grub/i386-pc/priority_queue.mod
INSTALL/grub/i386-pc/play.mod
INSTALL/grub/i386-pc/part_sun.mod
INSTALL/grub/i386-pc/gcry_sha512.mod
INSTALL/grub/i386-pc/morse.mod
INSTALL/grub/i386-pc/mul_test.mod
INSTALL/grub/i386-pc/gcry_rmd160.mod
INSTALL/grub/i386-pc/gcry_idea.mod
INSTALL/grub/i386-pc/minix3_be.mod
INSTALL/grub/i386-pc/legacy_password_test.mod
INSTALL/grub/i386-pc/usb.mod
INSTALL/grub/i386-pc/dm_nv.mod
INSTALL/grub/i386-pc/cryptodisk.mod
INSTALL/grub/i386-pc/truecrypt.mod
INSTALL/grub/i386-pc/affs.mod
INSTALL/grub/i386-pc/password.mod
INSTALL/grub/i386-pc/scsi.mod
INSTALL/grub/i386-pc/bitmap_scale.mod
INSTALL/grub/i386-pc/setpci.mod
INSTALL/grub/i386-pc/uhci.mod
INSTALL/grub/i386-pc/ata.mod
INSTALL/grub/i386-pc/offsetio.mod
INSTALL/grub/i386-pc/mdraid09.mod
INSTALL/grub/i386-pc/usbserial_pl2303.mod
INSTALL/grub/i386-pc/mmap.mod
INSTALL/grub/i386-pc/part_dvh.mod
INSTALL/grub/i386-pc/video_fb.mod
INSTALL/grub/i386-pc/signature_test.mod
INSTALL/grub/i386-pc/pbkdf2.mod
INSTALL/grub/i386-pc/cbtime.mod
INSTALL/grub/i386-pc/gcry_sha1.mod
INSTALL/grub/i386-pc/gdb.mod
INSTALL/grub/i386-pc/cmosdump.mod
INSTALL/grub/i386-pc/mda_text.mod
INSTALL/grub/i386-pc/zfscrypt.mod
INSTALL/grub/i386-pc/iorw.mod
INSTALL/grub/i386-pc/time.mod
INSTALL/grub/i386-pc/pata.mod
INSTALL/grub/i386-pc/regexp.mod
INSTALL/grub/i386-pc/setjmp.mod
INSTALL/grub/i386-pc/zfsinfo.mod
INSTALL/grub/i386-pc/exfctest.mod
INSTALL/grub/i386-pc/gcry_sha256.mod
INSTALL/grub/i386-pc/serial.mod
INSTALL/grub/i386-pc/eval.mod
INSTALL/grub/i386-pc/freedos.mod
INSTALL/grub/i386-pc/keylayouts.mod
INSTALL/grub/i386-pc/file.mod
INSTALL/grub/i386-pc/nilfs2.mod
INSTALL/grub/i386-pc/bswap_test.mod
INSTALL/grub/i386-pc/minix.mod
INSTALL/grub/i386-pc/ufs1_be.mod
INSTALL/grub/i386-pc/gcry_des.mod
INSTALL/grub/i386-pc/functional_test.mod
INSTALL/grub/i386-pc/cs5536.mod
INSTALL/grub/i386-pc/jfs.mod
INSTALL/grub/i386-pc/xnu.mod
INSTALL/grub/i386-pc/gcry_seed.mod
INSTALL/grub/i386-pc/geli.mod
INSTALL/grub/i386-pc/setkey.mod
INSTALL/grub/i386-pc/part_apple.mod
INSTALL/grub/i386-pc/hfs.mod
INSTALL/grub/i386-pc/cbmemc.mod
INSTALL/grub/i386-pc/cmp_test.mod
INSTALL/grub/i386-pc/cmdline_cat_test.mod
INSTALL/grub/i386-pc/f2fs.mod
INSTALL/grub/i386-pc/parttool.mod
INSTALL/grub/i386-pc/acpi.mod
INSTALL/grub/i386-pc/gptsync.mod
INSTALL/grub/i386-pc/reiserfs.mod
INSTALL/grub/i386-pc/hfspluscomp.mod
INSTALL/grub/i386-pc/datehook.mod
INSTALL/grub/i386-pc/efiemu.mod
INSTALL/grub/i386-pc/usbserial_usbdebug.mod
INSTALL/grub/i386-pc/usbserial_ftdi.mod
INSTALL/grub/i386-pc/search_label.mod
INSTALL/grub/i386-pc/usbserial_common.mod
INSTALL/grub/i386-pc/raid6rec.mod
INSTALL/grub/i386-pc/memdisk.mod
INSTALL/grub/i386-pc/ehci.mod
INSTALL/grub/i386-pc/pxe.mod
INSTALL/grub/i386-pc/progress.mod
INSTALL/grub/i386-pc/afs.mod
INSTALL/grub/i386-pc/lsapm.mod
INSTALL/grub/i386-pc/odc.mod
INSTALL/grub/i386-pc/strtoull_test.mod
INSTALL/grub/i386-pc/pcidump.mod
INSTALL/grub/i386-pc/zstd.mod
INSTALL/grub/i386-pc/net.mod
INSTALL/grub/i386-pc/gcry_serpent.mod
INSTALL/grub/i386-pc/part_plan.mod
INSTALL/grub/i386-pc/testload.mod
INSTALL/grub/i386-pc/blscfg.mod
INSTALL/grub/i386-pc/cpio_be.mod
INSTALL/grub/i386-pc/msdospart.mod
INSTALL/grub/i386-pc/cat.mod
INSTALL/grub/i386-pc/bufio.mod
INSTALL/grub/i386-pc/testspeed.mod
INSTALL/grub/i386-pc/procfs.mod
INSTALL/grub/i386-pc/terminfo.mod
INSTALL/grub/i386-pc/wrmsr.mod
INSTALL/grub/i386-pc/bsd.mod
INSTALL/grub/i386-pc/mpi.mod
INSTALL/grub/i386-pc/test_blockarg.mod
INSTALL/grub/i386-pc/usbms.mod
INSTALL/grub/i386-pc/gcry_arcfour.mod
INSTALL/grub/i386-pc/minix_be.mod
INSTALL/grub/i386-pc/legacycfg.mod
INSTALL/grub/i386-pc/syslinuxcfg.mod
INSTALL/grub/i386-pc/part_dfly.mod
INSTALL/grub/i386-pc/ufs2.mod
INSTALL/grub/i386-pc/div.mod
INSTALL/grub/i386-pc/macho.mod
INSTALL/grub/i386-pc/search_fs_uuid.mod
INSTALL/grub/i386-pc/cmp.mod
INSTALL/grub/i386-pc/ctz_test.mod
INSTALL/grub/i386-pc/rdmsr.mod
INSTALL/grub/i386-pc/cmostest.mod
INSTALL/grub/i386-pc/datetime.mod
INSTALL/grub/i386-pc/bitmap.mod
INSTALL/grub/i386-pc/sleep_test.mod
INSTALL/grub/i386-pc/minix3.mod
INSTALL/grub/i386-pc/minix2.mod
INSTALL/grub/i386-pc/luks.mod
INSTALL/grub/i386-pc/cbls.mod
INSTALL/grub/i386-pc/plan9.mod
INSTALL/grub/i386-pc/search_fs_file.mod
INSTALL/grub/i386-pc/gcry_cast5.mod
INSTALL/grub/i386-pc/cbfs.mod
INSTALL/grub/i386-pc/keystatus.mod
INSTALL/grub/i386-pc/setjmp_test.mod
INSTALL/grub/i386-pc/ntfscomp.mod
INSTALL/grub/i386-pc/memrw.mod
INSTALL/grub/i386-pc/div_test.mod
INSTALL/grub/i386-pc/sfs.mod
INSTALL/grub/i386-pc/pgp.mod
INSTALL/grub/i386-pc/macbless.mod
INSTALL/grub/i386-pc/lvm.mod
INSTALL/grub/i386-pc/ufs1.mod
INSTALL/grub/i386-pc/crc64.mod
INSTALL/grub/i386-pc/ohci.mod
INSTALL/grub/i386-pc/cpuid.mod
INSTALL/grub/i386-pc/multiboot.mod
INSTALL/grub/i386-pc/tga.mod
INSTALL/grub/i386-pc/elf.mod
INSTALL/grub/i386-pc/cbtable.mod
INSTALL/grub/i386-pc/probe.mod
INSTALL/grub/i386-pc/multiboot2.mod
INSTALL/grub/i386-pc/nativedisk.mod
INSTALL/grub/i386-pc/spkmodem.mod
INSTALL/grub/i386-pc/hexdump.mod
INSTALL/grub/i386-pc/mdraid09_be.mod
INSTALL/grub/i386-pc/lsmmap.mod
INSTALL/grub/i386-pc/archelp.mod
INSTALL/grub/i386-pc/minix2_be.mod
INSTALL/grub/i386-pc/relocator.mod
INSTALL/grub/i386-pc/sendkey.mod
INSTALL/grub/i386-pc/gcry_md4.mod
INSTALL/grub/i386-pc/cpio.mod
INSTALL/grub/i386-pc/gcry_whirlpool.mod
INSTALL/grub/i386-pc/newc.mod
INSTALL/grub/i386-pc/adler32.mod
INSTALL/grub/i386-pc/shift_test.mod
INSTALL/grub/i386-pc/part_acorn.mod
INSTALL/grub/i386-pc/smbios.mod
INSTALL/grub/i386-pc/gcry_twofish.mod
INSTALL/grub/i386-pc/raid5rec.mod
INSTALL/grub/i386-pc/gcry_blowfish.mod
INSTALL/grub/i386-pc/diskfilter.mod
INSTALL/grub/i386-pc/bfs.mod
INSTALL/grub/i386-pc/gcry_rsa.mod
INSTALL/grub/i386-pc/aout.mod
INSTALL/grub/i386-pc/ahci.mod
INSTALL/grub/i386-pc/gcry_rfc2268.mod
INSTALL/grub/i386-pc/pbkdf2_test.mod
INSTALL/grub/i386-pc/ldm.mod
INSTALL/grub/i386-pc/hfsplus.mod
INSTALL/grub/i386-pc/part_bsd.mod
INSTALL/grub/i386-pc/romfs.mod
INSTALL/grub/i386-pc/gcry_camellia.mod
INSTALL/grub/i386-pc/verifiers.mod
INSTALL/grub/i386-pc/xnu_uuid.mod
INSTALL/grub/i386-pc/gcry_tiger.mod
INSTALL/grub/i386-pc/gcry_crc.mod
INSTALL/grub/i386-pc/hdparm.mod
INSTALL/grub/i386-pc/lsacpi.mod
INSTALL/grub/i386-pc/xnu_uuid_test.mod
INSTALL/grub/i386-pc/gcry_rijndael.mod
INSTALL/grub/i386-pc/zfs.mod
INSTALL/grub/i386-pc/backtrace.mod
INSTALL/grub/i386-pc/gfxterm_menu.mod
INSTALL/grub/i386-pc/mdraid1x.mod
INSTALL/grub/i386-pc/gcry_dsa.mod
INSTALL/grub/mips64el-efi/normal.mod
INSTALL/VentoyGUI.i386
INSTALL/VentoyGUI.aarch64
INSTALL/VentoyGUI.mips64el
cryptsetup/veritysetup64
cryptsetup/veritysetup32
DMSETUP/dmsetup32
DMSETUP/dmsetup64
DMSETUP/dmsetupaa64
DMSETUP/dmsetupm64e
BUSYBOX/chmod/vtchmodm64e
BUSYBOX/chmod/vtchmod32
BUSYBOX/chmod/vtchmod64_musl
BUSYBOX/chmod/vtchmod64
BUSYBOX/chmod/vtchmodaa64
LZIP/lz4catm64e
LZIP/lz4cataa64
LZIP/lunzip32
LZIP/lunzipaa64
LZIP/lunzip64
LZIP/lz4cat64
FUSEISO/vtoy_fuse_iso_64
FUSEISO/vtoy_fuse_iso_32
FUSEISO/vtoy_fuse_iso_aa64
Unix/ventoy_unix/DragonFly/sbin/init
Unix/ventoy_unix/DragonFly/sbin/dmsetup

We can immediately spot that there's 3 sets of GRUB present:

INSTALL/grub/i386-efi
INSTALL/grub/i386-pc
INSTALL/grub/x86_64-efi

Further snooping shows that there's in fact, more:

INSTALL/grub/arm64-efi
INSTALL/grub/mips64el-efi

They just escaped this rudimentary method of identification, because they are compressed:

$ file INSTALL/grub/arm64-efi/adler32.mod INSTALL/grub/mips64el-efi/adler32.mod
INSTALL/grub/arm64-efi/adler32.mod: XZ compressed data, checksum CRC64
INSTALL/grub/mips64el-efi/adler32.mod: XZ compressed data, checksum CRC64

So the first thing in our bill of materials is GRUB, for i386-pc, i386-efi, x86_64-efi, arm64-efi, and mips64el-efi.

Next we have all kinds of crap in:

IMG/cpio_x86/ventoy/tool
IMG/cpio_x86/ventoy/busybox
IMG/cpio_arm64/ventoy/tool
IMG/cpio_arm64/ventoy/busybox
IMG/cpio_mips64/ventoy/tool
IMG/cpio_mips64/ventoy/busybox

First thing I noticed when browsing these directories is a kernel module:

$ modinfo IMG/cpio_x86/ventoy/tool/dm_patch_32.ko
filename:       IMG/cpio_x86/ventoy/tool/dm_patch_32.ko
license:        GPL
author:         longpanda <admin@ventoy.net>
description:    dmpatch driver
depends:        
retpoline:      Y
intree:         Y
name:           dm_patch
vermagic:       5.10.84-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx SMP mod_unload modversions 686

I'm not entirely sure why is a kernel module needed... here's the source for it: https://github.com/ventoy/Ventoy/blob/c16e76130bf34fd2e0b749cd7a71789c9115783b/DMPATCH/dmpatch.c The use case is described here: https://github.com/ventoy/Ventoy/blob/c16e76130bf34fd2e0b749cd7a71789c9115783b/DMPATCH/readme.txt#L33 I'm really unconvinced that this is needed.

Moving on, let's see what tools are exactly located in the IMG directory:

find IMG/*/ventoy/busybox -type f | awk -F '/' '{print $5}' | sed 's/\.xz$//' | sort -u

which brings us to:

64h
a64
ash
busybox32
busybox64
busyboxaa64
busyboxm64e
m64
vtchmod32
vtchmod64
vtchmod64_musl
vtchmodaa64
vtchmodm64e
xzcat32_musl
xzcat64_musl
xzminidec32
xzminidec64
xzminidec64_musl
xzminidecaa64
xzminidecm64e

Some of those commands I recognize:

xzcat
xzdec
chmod (why is it called vtchmod? src: https://github.com/ventoy/Ventoy/blob/1f49265f29459295bc1b66c53da3de9e99a9370e/BUSYBOX/chmod/vtchmod.c (seems pretty silly, but benign)
busybox
ash

I'm completely lost wtf is a64 and m64. Whoever made them, didn't bother putting any license info, program name, or disclaimer in the strings.

I'm tired. This is an incredible case, but one that I'm not taking a vacation from life over.

mpeter50 commented 1 month ago

Based on a comment above, a64 and m64 seem to be ARM64 and MIPS64 versions of the ash shell.

Or busybox as running linux strings on it shows among others these:

BusyBox v1.32.0 (2021-03-04 12:59:59 CST)
built-in shell (ash)

mpeter50 commented 1 month ago

Also, to make it easier for anyone to see which files are the same ones, Czkawka is quite useful.

I have attached a text file with duplicates in the repo directory, so that you dont need to use it: results_duplicates.txt

http403 commented 1 month ago

A person seems to be the author replies, but in the wrong place. I can't confirm is he really the author.

https://lemmings.world/post/15186261

Dear community,

I hope this message finds you well. I want to take a moment to address the concerns raised in Issue #2795 regarding the BLOB functionality in our app. First and foremost, I sincerely apologize for any confusion or frustration this may have caused. I was on vacation during this time, and I understand that my absence may have contributed to the lack of clarity surrounding this issue.

The BLOB feature is an important aspect of our app, and I recognize that the documentation surrounding it has not been as clear as it should be. I appreciate your patience as we work through these challenges, and I want to assure you that I am fully committed to resolving this matter.

As I return to work, I will prioritize updating the documentation to provide a comprehensive understanding of how the BLOB functionality works. I will also investigate the specific concerns raised in Issue #2795 to ensure that any underlying issues are addressed promptly.

Your trust in our software is paramount, and I am dedicated to regaining any confidence that may have been affected by this situation. I am confident that, with your continued support and feedback, we can enhance the app and provide a better experience for all users.

Thank you for your understanding and for being a part of our community. I look forward to sharing updates with you soon as we work towards improving our app and its documentation.

Warm regards, longpanda

grepwood commented 1 month ago

https://lemmings.world

This is the first time I see this address. Not a good place to write something that should be read by many people.

robertkirkman commented 1 month ago

https://lemmings.world

This is the first time I see this address. Not a good place to issue write something that should be read by many people.

a couple of points:

that post is definitely not by the real creator of ventoy
on the other hand, lemmy is an open source replacement to reddit because reddit is extremely controversial and drove users away. therefore you should respect lemmy as the leading open source alternative to reddit.

KucharczykL commented 1 month ago

His post does not address anything at all (and it looks to be written by AI).

grepwood commented 1 month ago

on the other hand, lemmy is an open source replacement to reddit because reddit is extremely controversial and drove users away. therefore you should respect lemmy as the leading open source alternative to reddit.

I appreciate, it's no small feat to build such a thing. But I'll stay away because I generally don't like social platforms. It's a huge time sink.

mpeter50 commented 1 month ago

There is a new response from someone who claims to be the real developer's friend:

I am longpanda’s friend and colleague. We used to work together and we go way back. I had lost contact with him several months ago. I still haven’t heard from him until now. This post confused me, because longpanda never writes in English. I helped him with the translations in the past. longpanda is a great comrade, who loves his country deeply and has always followed in the footsteps of the great leader, his loyalty and dedication are truly admirable. I hope he is alroght.

我是longpanda的朋友和同事，我们曾经一起工作，但几个月前我们就失去了联系。直到现在，我仍然没有他的任何消息。看到这篇帖子，我感到很奇怪，因为我知道longpanda不可能是写这篇帖子的，他从来不用英语写东西，过去我都是帮他翻译的。 longpanda是一位伟大的同志，他深爱着自己的祖国，始终坚定地跟随伟大领袖的脚步，他的忠诚和奉献精神令人钦佩。我希望他一切安好。

longpanda如果你看到这条消息，请尽快联系我。

Source: https://lemmings.world/comment/11306760

I don't know if what they tell is true, but there are a few things to consider:

this is really not the style the real Ventoy dev used to write in english. if you have read the documentation you'll know they are not good at it like this
if the post's writer is the dev, why didnt they write here?
both of the accounts were registered on the lemmings.world lemmy instance, but the instance is at least a year old, with other active users
the longpanda account was registered 9 hours ago, and the friend wangshu's account was registered 3 hours ago. both have multiple comments by now
the longpanda account has responded to a former lemmy discussion of this github issue here, before creating the new post

nehemiagurl commented 1 month ago

I'd consider both those accounts to be untrustworthy for now. I think the safe assumption is we're still in the dark when it comes to an answer. if somehow either of these accounts prove the truth of their identity, that would be welcome. but until that happens, let's assume they're both pretenders.

grepwood commented 1 month ago

Both of those accounts are LARPing. If @ventoy wanted to clarify anything, they'd do it in this thread, not on barely known Reddit clone.

http403 commented 1 month ago

The posts/comments and the account made them are now removed by mods under probable impersonation.

https://lemmy.ml/modlog?page=1&actionType=All&userId=14359241

sswangshu commented 1 month ago

Hello, I have been following the posts about longpanda and after the original post was taken down, I am heading here. Like everyone here, I am in the dark of what had happened. As I mentioned in my comment, I lost contact with longpanda for sevearl months. I am worried. I have no ideas who wrote that post, who was behind this and what happened to longpanda 🙏🙏

grepwood commented 1 month ago

@ventoy was last seen on June 8th when committing https://github.com/ventoy/Ventoy/commit/cb209f9b9e02f3fb3a09a6e88d49bcef9f95511f. This issue was filed on April 3rd. These dates are 35 days apart. Maybe communication on such a serious issue was not high on list of priorities. Edit: there are 14 commits in that frame of time.

sswangshu commented 1 month ago

Thank you, the last time I talked to him was before the labour day. He told me he would travel back home for a few weeks.

github2099 commented 1 month ago

@ventoy activities on the Ventoy Forum align with the release schedules

Screenshot3

Even though @ventoy is absent on Github, last visit on the Forum was October 8, strange eh?

Screenshot1

Screenshot2

http403 commented 1 month ago

It would be best not to discuss @ventoy whereabout here, as this should be focused on the issue itself. Such topics is better suited in the forum, or Discussion tab.

Casered commented 3 days ago

There's been some new @ventoy GitHub activity today, so hopefully he can answer soon! 😊

sswangshu commented 2 days ago

@Casered glad to hear!

ventoy / Ventoy

[issue]: Remove BLOBs from the source tree #2795

What happened?