Haley
member since 6 Aug 2026 02:26
Well I guess I’m eating crow for suggesting MacOS was secure. JESUS lmfao, this one is nasty.
“Would Rust have solved this” oops, nope
Good point. Not sure what they’re gonna do about that.
I suppose Microslop aren’t actually professionals anymore.
I can live with that
Twitter is not worth it for your mental health. Looking at how they treat people who aren’t 100% flawless.
This is true.
If it’s a subscription, sure. But if I literally paid to own the game? What the fuck is the point?
Lol Sony gonna Sony
If buying isn’t owning… (just be careful not to get hit with malware if you do sail)
Yet another Microslop moment
Doubly so this is why I fear for the future of Linux dev if AI generated development is the future.
I’ll gladly judge someone not willing to leave the nazi pedo site just because they might lose a few bot followers, sorry. Look at Wukko, the guy behind Helium Browser. All he does is whine that people don’t like AI and act condescending towards people who raise issues about the project. It’s really bizarre the way that guy acts.
Pretty much lmao
“But I won’t be able to market!!!” The Onion got more coverage after leaving, you have no excuse
Yah that’s fair, I’m expecting things to get worse before they get better. I still have my older games, so it’s fine. I’d like to be able to try 6, but it’s not a high priority for me.
start ms-cxh:localonly or one of those rufus unattended things are the only ways i could ever set up Windows anymore, their stock config is some bullshit
Fair point
Some games even block you out of single player if you don’t have that kernel malware installed sadly. Battlefield 6’s single player for instance.
Ngl, the fact that they’ll probably block me out of playing because of my OS of choice already killed the hype for me
Better software support??? There’s stuff I’m still struggling to replace and I’d rather native linux builds than have to go back for it.
Let me guess. Their kernel malware is going to come to Linux next?
facts
Nah, destroying those mass surveillance cameras is a public duty. One I don’t have the cojones to do, but a public duty nonetheless.
That man did us a favor
Yeah hopefully you’re right. Just a lot of scary reports all around compounded with threats I have already received personally.
It is really scary navigating, but I’m hoping being careful is still enough for most of what I do.
Especially now with AI agents discovering vulnerabilities at a pretty insane pace
Same with Linux
I’m really worried for the future if we don’t get our shit together (AUR malware already proves what kind of damage these people can do)
Haha fair enough
I used to watch hella New Japan events on there
Welp
There goes my bootleg international wrestling show full shows I used to watch there because copyrights will catch them atp
Roblox digging their own grave who would have thunk
Best Buy.
The irony of that name is hilarious.
I am scared of the future, you know why? Because everything feels so unbearably bleak and I wish I had something to feel actually hopeful for.
But I guess we’ll own nothing and be forced to live with it.
I’ve only heard that term being used to insult, that’s actually a real thing?
And people who have an issue with this are called luddites
Absolute clown show
Microslop at it again
Noooow I see why they want all this age verification crap
You got this, proud of you for taking that step
Hopefully Zuck gets hit where it hurts
Yeah I pretty much chose to take matters into my own hands by importing some of the SecureBlue defaults (with a few modifications) into my config.
I missed Vista, but I was using XP for years on an old trash potato. The only issues I had there were very clearly hardware related. I also dodged 8/8.1 purely because I disliked the UI
The first BSoD I ever experienced for myself was on Windows 10, and they were incredibly rare for me. My XP machine was largely disconnected from the internet for the majority of its existence and the only issues it had were because it was a literal shitbox potato trying to do more than it could handle.
I’m not saying it was 100% perfect, but compared to the horror stories everywhere else it might as well have been. Being careful online certainly helps, as I never caught a virus that I wasn’t intentionally trying to test just to see what would happen.
Yeah the real point was that those systems have things in place we could stand to learn from, to do better, and continue to keep people protected. It’s a learning lesson we could stand to be more careful.
I’m cynical of it mostly due to the way people respond when you suggest it in cases like the AUR malware. Speaking of mobile permissions I’m impressed with Voyager (my Lemmy client), it asked for literally nothing!
It’s really hard to quantify an answer to that final question, because realistically, any OS connected to the internet leaves itself more vulnerable than any OS air gapped, so that’s already inherently a tradeoff. If I go purely on a purity test? TempleOS. It’s not daily driveable, but it technically wins due to the fact that Terry did not code any network support at all into it.
You’re definitely right about the convenience tradeoffs, but some of that shit is just blatantly egregious, particularly with Arch and the AUR, yet Linuxtubers still swear by it and still tell new converts they don’t need to be careful, which is ignorance at best and negligence at worst. Even worse are the ones that openly advocate you use an LLM to figure this stuff out. That kind of mindset toward new users hurts us more than many realize.
SecureBlue doesn’t claim to be the most secure option, its whole model is trying to strike a balance between security and convenience. It’s just that a lot of distros are so far behind that their ideas seem extreme. I ran a Lynis audit on my Fedora system recently and I got a 77/100 score. That’s probably enough for the average person, and that was after downloading their sysctl rules from their github, commenting out about 3 or 4 options that I didn’t really need, and importing them all into my configuration.
Do people even still use Facebook or has it completely been taken over by bots at this point?
Yeah you had some very good suggestions though, much appreciated :)
Many desktop Linux distros have poor security defaults. Fedora even disables the restrictions on ptrace by default, which is strange considering the browser sandbox needs ptrace restrictions in order to function properly. Debian and Ubuntu default to apparmor which is very insecure (remember crackarmor?) and Arch has basically no security ootb and the AUR is essentially NEEDED in order to use it for most things, despite how unvetted and messy it is. Kali is not for daily driving, for the record.
I implore you to read SecureBlue’s documentation which is where the bulk of my knowledge has been from. Even Android is not as secure as it could be, there is a reason that GrapheneOS, the pinnacle of Android security, doesn’t even consider their build of Android secure enough.
Well, it’s more so that I wished the open source community wasn’t as averse to implementing a security model that wasn’t heavily reliant on the systems being obscure. Security through obscurity is a horrid way to do such things, but it seems like that’s the way things were done before I got here.
It would be nice to see the vision of the SecureBlue project come through elsewhere in the desktop Linux world, but any time someone so much as hints at fixing the flagrant security issues of something like the AUR, all they get is dismissal and knuckle dragging in response. I’m not a blind shill for corporate products by any means, I just would like for the community to quit treating security as an afterthought, because it’s truly needed if we want to keep the new converts safe from the looming threats that are coming day after day.
Acknowledging the successes of projects that just so happen to not be community driven isn’t shilling inherently and I’m a little perturbed at that conclusion you immediately jumped to.
At the moment I’ve settled on Fedora with cherrypicked SecureBlue hardening, to me that is a lot more balanced for my needs. Tails is something I’ve dabbled with, but I’m not sure I need total anonymity, I basically never use Tor for anything but it’s nice to have something like that on hand just in case the need arises.
Qubes is definitely an interesting project though as well, my last ex girlfriend daily drove it and somehow managed to get gaming working on it, and I wish she was still around to teach me how she did it.
I mean the bar is in hell anyway
This is why we should all migrate over to Codeberg for sure
I personally think it’s bullshit that these things are happening to begin with, not that people are ringing the alarm to our new reality. The latter is just us doing our part to fix this.
I’m exhausted of all this. The data centers have been so pervasive that some communities have been thinking about rationing electricity to get around the requirements. That’s… a dystopia future if Ive ever seen one.
Yeah my primary aim is closer to something secure enough to be protected as long as I am careful, but still usable for modern stuff. My desktop setup has finally gotten to a place I like, but mobile has been really difficult for me, and I genuinely wish I had the privilege to get into the GrapheneOS world.
Suppose this is a fair point. The stuff that is exposed seems to be quite helpful, such as already integrating features like Global Privacy Control long before Google.
As for SecureBlue… a lot of it seems quite extreme even for me but they’re doing good work overall. I was maining their browser for a bit until I realized I was fighting against the current to make it usable for my use case and I felt kind of dirty doing all that to their excellent baseline. But I did grab their sysctl config, commented out 3 or 4 that I didn’t need, and inserted it into my own. I like having more control, but I’ll gladly take a more secure option if it doesn’t affect usability significantly, so I cherrypick fixes liberally from their setup.
Any chance for this new version to hit Fedora’s repos?