Omarchy is full of security holes

Aug 26, 2026 07:17 PM - 1 hour ago 2

Posts About Contact Subscribe RSS

25 Aug, 2026

First, a PSA: Do NOT usage Omarchy if you attraction astir information of your instrumentality moreover a small bit.

You can't polish a turd

Omarchy 4.0 shipped pinch a postulation of information issues which I tin only picture arsenic regrettable (because I promised my mum I would committedness less). There are bangers for illustration video title bash injection aliases all notifications being capable to tally arbitrary bash connected your machine.

All projects person information issues but not each projects person specified predictable information issues. We cognize really to woody pinch untrusted inputs. We cognize we should not usage AI-generated bash scripts for processing untrusted input, peculiarly pinch seemingly nary review.

And you can't get to a reasonably unafraid strategy by starting pinch a heap of bash slop and hoping others will drawback and hole the issues earlier they are exploited.

Simply put, Omarchy doesn't dainty information arsenic important. They do role-play taking information earnestly but their improvement practices and the easiness pinch which they speedrun decades of information issues and invent caller ones show america overmuch much astir the information of Omarchy than Security Team announcements.

Lies aliases marketing?

DHH loves to opportunity he's making the twelvemonth of Linux connected desktop happen. How Omarchy is the distro group should use. Showing really polished the acquisition is. Essentially, he's bully astatine trading Omarchy.

On the information front, he highlights the information team's efforts successful the caller constituent release. A agelong database of resolved information issues judge looks awesome if you commencement pinch Swiss food of an operating system.

I deliberation the trading has turned into lying, being disingenuous. An honorable cognition would beryllium to opportunity that they attraction astir iterating connected their dotfiles overmuch much than astir basal information of the system.

DHH silences his critics pinch clone positivity, pinch a "let's fucking do it" attitude. But the reality is that Omarchy is simply a task which doesn't dainty information earnestly and I wouldn't beryllium amazed if galore companies prohibition its use.

Just fto group bask things, jeez

I'm not stopping anyone. I don't for illustration erstwhile the nationalist cognition of really overmuch consequence personification is taking is disconnected from the existent consequence of utilizing a task for illustration Omarchy.

The squad doesn't look willing successful accurately explaining it to their users. I don't for illustration group being deceived into hurting themselves, hence this post.

Peace ✌️

More