I’m the Never Ending Pie Throwing Robot, aka NEPTR.

Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.

TL;DR I am a nerd.

  • 1 Post
  • 295 Comments
Joined 1 year ago
cake
Cake day: November 20th, 2024

help-circle


  • You say “all the privacy settings on”, but what does that mean. I assume FFP but probably not RFP. I also assume it keeps JS JIT enabled which is a massive attack surface. I am not going to get into more detail but if people are looking for a more security/privacy focused Firefox fork, use Librewolf. If all you are looking for is Firefox with the privacy settings on, just use Firefox. Even with Librewolf, you can (mostly) replicate the experience by using Phoenix or Arkenfox with vanilla Firefox. I recommend everyone reconsider using a fork that is amounts to a few preinstalled extensions and just some (good) default settings. Using a fork just introduces a new party into the mix, which at best slows down how fast you get (security) updates from upstream, and at worst leads to supply chain attacks.

    That being said, I keep seeing people talk about how much they like Waterfox. I tried it and figured it wasn’t for me. That isn’t me saying that it isn’t the right choice for others. I would love to better understand what people enjoy about Waterfox over/instead of Firefox/Librewolf/Zen/etc., pros/cons and the like.



  • While I agree snapper (what CachyOS uses) I very useful, it is important to draw a distinction between snapshots (snapper) and a proper backup tool (borg or restic). Snapshots are usually stored on the same drive, so in the event of a drive failure/corruption you are still very fucked. Proper backup programs also have other important features, like the ability to select remote locations, setup encryption, etc. DO NOT rely on snapper to (always) save your ass.

    That being said, I fucking love snapper and it was the main feature I was missing from openSUSE.







  • I would prefer webapps to native if there was a protocol to fully load the page and disable network traffic for apps that work fully offline. It is more secure to run an app in the browser because off the layers of isolation in modern browsers. Native apps can access all sorts of information and system resources, which could be used to compromise the host OS.






  • Security and bug fixes have made Plasma 6 run better for me. Wayland support is better now too (which matters to me). Minor features that improve usability. Newer kernel means i can use newer features, which some of the apps I use depend on. The main thing with your setup I was surprised about is that it isn’t an LTS kernel (from what I can tell). If you are just not updating and not using LTS software (i can’t tell), then you are missing plenty of security fixes.




  • Proprietary subscription OS, big no for me. Has worse specs than a Google Pixel and probably doesn’t have strong hardware security. Wtf would I not just use a Pixel with GrapheneOS, which is FOSS, heavily deblobbed over base AOSP, and substantial more secure and private. What a weak argument “AphyOS is a subscription operating system, simply because if you don’t pay for a product, you are the product” when GOS is free. They should just sell a phone and guarantee OS updates for (at least) 5 years like any (reasonable) OEM would do if they “care about their users”. The only, and I mean only, feature that I think is interesting is the SD card slot, which isn’t revolutionary.

    If you don’t want a Google Pixel because buying it supports Google, get it used in Good or Mint condition from a site like Swappa.com, that way no profit makes it’s way to Google.