NaibofTabr

Hmm… how does one anonymously pay an internet service provider with cash? Mail it in an unmarked envelope, with just your account name? Roll up to the front door and hand it to the receptionist?

Someone else has mentioned M-Disc and I want to second that. The benefit of using a storage format like this is that the actual storage media is designed to last a long time, and it is separate from the drive mechanism. This is a very important feature - the data is safe from mechanical, electrical and electronic failure because the storage is independent of the drive. If your drive dies, you can replace it with no risk to the data. Every serious form of archival data storage is the same - the storage media is separate from the reading device.

An M-Disc drive is required to write data, but any DVD or BD drive can read the data. It should be possible to acquire a replacement DVD drive to recover the data from secondary markets (eBay) for a very long time if necessary, even after they’re no longer manufactured.

PenDriveLinux or rufus or balena etcher (frequently just referred to as “etcher”) or just dd.

Maybe it’s time to start funding software infrastructure the way we fund physical infrastructure - with tax dollars.

“Here, maintain this for us, we don’t want to pay anyone to do it”

Oh really, are they building their own engine?

Browser engines are ridiculously complex, nearly on the level of operating systems. All of the Firefox forks are really just different UIs built around Gecko/Quantum - those other projects aren’t really maintaining their own engines, they’re dependent on Mozilla’s work to remain stable, secure and relevant.

A list of Mozilla’s “other bullshit”:

https://en.wikipedia.org/wiki/List_of_Mozilla_products

Librewolf is just a reskinned Firefox.

til I can only imagine 0 bananas in a bunch

Unnaproved software installation implies an obligation to provide user support… indefinitely.

This assumes that

1. There’s a process to read.

2. The steps in the process are complete and thorough.

Those are bad assumptions.

Flatpak is not a container and should not be thought of as such for security/privacy purposes:

In general though we try to avoid using the term container when speaking about Flatpak as it tends to cause comparisons with Docker and rkt, comparisons which quickly stop making technical sense due to the very different problem spaces these technologies try to address. And thus we prefer using the term sandboxing.

https://flatpak.org/faq/#Is_Flatpak_a_container_technology_

It can provide container-like functions if specifically configured for that, but that’s not normal and it shouldn’t be relied on as a security barrier.

This is specifically caused by an update for CrowdStrike’s Falcon antivirus software, which is designed for large organizations. This won’t affect personal computers unless they’ve specifically chosen to install Falcon.

Where I live, there are security cameras all over the buildings and the lamposts and the traffic intersections and the parking lots, plus Ring/Nest doorbells everywhere. There are more cameras outside the buildings than inside. Everybody is carrying a smartphone and I see people taking pictures or video with them all the time.

Drones and satellites are really only outside.

So I don’t agree with your conclusion.

Never mind the security cameras, and the drones, and the smartphones, and the satellites…

Um, if it’s “parallel” (e.g. separate from the OS package manager) then it’s not centrally managed. The OS package manager is the central management.

There might be specific use cases where this makes sense, but frankly if segregating an app from the OS is a requirement then it should be fully containerized with something like Docker, or run in an independent VM.

If a flatpack is made reasonably, then it gets library updates independent of the app developer doing it.

That feels like a load-bearing “if”. I never have to worry about this with the package manager.

Oh no, no GUI nonsense. Single, simple shell command update for the whole system so that it can be properly remotely managed, please. Something equivalent to sudo apt upgrade