• 33 Posts
  • 320 Comments
Joined 2 years ago
cake
Cake day: November 27th, 2023

help-circle
  • 1000% agree. Had to install an older version of Pinta because it was also gnomed a while back.

    While I’ve yet to contribute to open-source projects aside from reporting issues, I’ve got my eyes set on something like libadapta. As soon as one of the programs I use on a daily basis gets gnomed, I’m going all in to soft fork libadwaita and restore as many GTK3 features as I can.

    • someone who ran rm -rf /usr/share/icons/Adwaita


  • Depends on the degree of coreboot support. If the vendor or a firm like 3mdeb officially supports coreboot on your model of choice, it’ll have first-class support and you won’t miss out on anything compared to your typical proprietary BIOS.

    If you plan on installing it yourself, do read carefully through the coreboot docs since some systems will have a few quirks (e.g. audio jack issues on T480/T470). But once coreboot is up and running on your computer, it’s smooth sailing on Linux. Compiling and flashing can be a bit of a rabbit hole, but I’m happy to give some pointers if you go this route.

    I daily drive a ThinkPad X230 with Libreboot and haven’t had any issues. The only significant differences I’ve noticed are

    • Faster boot times (1 to 2 seconds to reach LUKS prompt)
    • Config menu (nvramcui payload) has very few options
    • (Libreboot exclusive) Full-disk encryption by having GRUB with LUKS2 support directly on the BIOS
    • I left out UEFI support since it’s complicated on the X230 and it’s not necessary for Linux to boot



  • I’ve been daily driving Debian Stable for the past 5 years and I am more than happy to continue for the next five. It’s also on nearly all of my machines and the majority of my VMs.

    I’m honestly not very keen on the latest features or hardware, but I am very keen on my software being predictable and consistent, so the Debian release cycle is perfect for me.


  • Fellow Debian user ricing my daily driver here. Other people may call me crazy too, but I can see where you’re coming from. I’ve mostly come to terms with it by reminding myself that most people are either blissfully ignorant or too busy to care.

    Have you considered making a sort of install script or even just a public repository for your tweaks? Makes it all a bit more accessible for those interested to adopt elements of your system. I’ve personally wanted to put together an automated install script once I perfect my Chicago95 rice since I’d imagine there’s quite a few people who want a one-click, retro, but functional system.





  • I’d say go for it. I can attest that it’s a very polished experience and the GrapheneOS devs go at length to ensure that their work is both secure and reliable. Just make sure it’s the factory unlocked variant so you can unlock the bootloader. Any apps that require regular Android can be put on a separate phone.




  • Functionally, not really. I can get my work done on anything from FVWM to GNOME without a hitch.

    Aesthetically, very much. The Chicago95 theme sparks joy and makes work just a bit more enjoyable. KDE and GNOME might have more creature comforts, but I will happily tolerate XFCE because it works well with Chicago95. I don’t even do fresh installs anymore because of the time it takes for me to configure the visual style just right. I’ll instead image from an install I’ve prepared on a VM.




  • Certainly. I’ve had setups with FVWM as a pure window manager while using XFCE’s xfce4-terminal, MATE’s Caja file browser, and GNOME’s Evolution mail client. Some utilities will pull a few extra dependencies from their native DE, but they won’t get in the way either.

    Display manager won’t matter too much, most should be configurable to point at your WM of choice. LightDM integrates nicely with GTK themes, SDDM for Qt, and GDM for GNOME.

    The biggest pain point from my experience was configuring power management and lid close actions manually, if using a laptop, since those often are only done for you if you install an entire DE at once.

    Also grab a copy of qt5ct if you’re interested in making your Qt packages look more integrated next to GTK packages.


  • Sorry if this analogy has already been thrown at you dozens of times, I like to think of DNS like an address book for the internet. On a traditional phone, I can’t just type in someone’s name, I have to type in a number. Without DNS, the internet would be like that, accessing any website would require recalling and typing in the IP address. But DNS translates domain names (hence Domain Name System), the part of the URL leading up to .com, .ml, etc, into the proper IP addresses for you.

    Unless you self-host, the DNS service is hosted on someone else’s server, and many devices default to communicating with the DNS server in plain text. Which is why you want to trust your DNS provider since they can keep a list of which sites you visit. And DNS over HTTPS mitigates the possibility of interception by encrypting your DNS requests.


  • Worth it, especially if you are stuck with the phone. Find FOSS equivalents of the built-in utilities (gallery, files, etc.), disable what you can (judiciously) with uad-ng, block the apps that can’t be disabled from network access using Rethink DNS, and use the websites of services on a computer browser instead of apps whenever possible.

    It’s still far from what privacy ROMs can do for you, but until you can get a GrapheneOS, etc. friendly phone, taking some action is much better than just letting the spyware run wild.


  • No idea about macOS, but this is something the typical Windows user should notice when switching over to Linux. That is, Windows OOBE gives you a user with administrative privileges by default and therefore won’t prompt you for the password again after logging in, just yes/no dialogs when exercising those admin privileges.

    Typing in the password whenever you need root privileges is just part of the security model of Linux and unless for some reason you’re using sudo for everything, people get used to it. Your default user account doesn’t automatically have root privileges, sudo or su mediates that for you. Back when I used Windows, I even had my accounts set up that way, separate admin, daily user account without admin privileges, and prompt for the admin password every time I installed stuff, etc.

    Granted, it does leave me with a couple compromises like a login password that is shorter than my disk encryption password so I’m not asked for the full thing every time I sudo and sometimes leaving a terminal with sudo -i hanging around.


  • Are you keen on using wireless headphones or speakers? If not, I’d go all the way for one without Bluetooth so the thought of present or future vulnerabilities won’t have to cross my mind whenever I use it.

    In addition to the Bluetooth vulnerabilities other commenters have mentioned, a recent one affects headsets with Google’s Fast Pair feature. Once forcibly paired, an adversary can register the headset with their Google account. The headset thereafter pings nearby Android devices as part of the find lost devices network and can be used to track the victim.

    Not sure if they are in production any more, but I can recommend the old iPod-looking Walkman and Sansa MP3 players. Currently also using a no-name iPod nano clone for the fact that it has a microSD slot, even upgraded the internal battery a few months ago.