• 2 Posts
  • 232 Comments
Joined 2 years ago
cake
Cake day: July 4th, 2023

help-circle







  • Excellent comment, I completely agree.

    Anyway I want to add that Linux does not seek market share, it’s an escape hatch for those of us fed up with commercial software.

    Linux is used to build plenty of commercial distros like Ubuntu and rhel that do seek market share which is something their companies can worry about.

    Plus, more Wayland support won’t break existing X software. If you want to use old systems, don’t expect new software to run on it.








  • For all of my personal machines secure boot is disabled.

    The main benefit is enabling signature checks on every piece of code that runs to start your machine. This is a good idea to prevent direct modification of the binaries involved. This will work as far up the chain as software supports, even to userland code although I don’t know of any Linux distros do that.

    However, if you occasionally rebuild any of that software and can sign it yourself secure boot just moves the attack surface from the binaries into the build process. Any modifications made to the kernel, bootloader, or firmware before signing are included as trusted code and are vulnerable to malicious modification.

    Since I don’t / can’t verify every piece of code on my system, and rebuild Linux occasionally, and people have demonstrated secure boot bypass flaws, I prefer to disable secure boot entirely for convenience. Also, in a roundabout way this increases the security of my system because I won’t get locked out for misconfiguring an update.


  • It’s terribad, the only glimmer of hope is web assembly and the related apis, but ultimately it’s just adding another layer to the onion that will eventually have sensitive data and important interfaces to protect and require yet another layer on top.

    Also it’s a sneaky way of exploiting foss without contributing back.


  • Heeby deeby what about the various ways to build fhs environments in nix. My largest complaint is actually that the nix ecosystem has disjointed, incomplete, and incorrect documentation. You can get through it, but it’s often best to try reading the code in nixpkgs when things aren’t working like the docs say. I’ve been getting by for a few years now and I don’t really even know the nix language, I really should put the time in to learn it but I will when I need to.

    I’m very happy with how much nixos just works and doesn’t let me break the whole os just because I want to try the latest version of blender 😅