The 8232 Project
I trust code more than politics.
- 10 Posts
- 34 Comments
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Comprehensive guide to hardening RHEL clones?2·2 months agoFedora isn’t that secure without some effort either.
Fedora’s philosophy is being a modern and security oriented (not security focused) distro. An easy example is that Fedora uses Linux kernel 6.14.2, whereas Debian uses Linux kernel 6.1 (I know they backport fixes, but the point remains).
Unfortunately, I have no way to confirm which one out of them is “more secure”.
Do you have any sort of automated test framework in mind which one can use to test distros against attacks?
Generally trust what security experts say about it, but if you really want an automated test, you can look at Lynis
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Comprehensive guide to hardening RHEL clones?1·2 months agoWhy do you rank secureblue over Whonix?
Whonix on its own isn’t very secure. It’s more privacy focused than security focused. It’s based on Debian, which has a host of issues I won’t get into.
dom0
in Qubes OS is based on Fedora for its security, and it’s no coincidence that secureblue is also based on Fedora.
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Comprehensive guide to hardening RHEL clones?1·2 months agoHey, I recognise you now!
Look mom, I’m famous! :P
That was a great post, I had a lot of fun reading it.
Thank you!
If I could follow people on Lemmy I’d follow you.
The best you can do in regards to that is adding my profile to your preferred RSS reader, so you get notified each time I post. A few good ones for android are Feeder, Read You, or (my favorite) Capy Reader.
What do you think about Kicksecure (and Kicksecure inside of Qubes)?
I’m not sure if you mean actual Kicksecure or if you mean Whonix. Either way, if I were to use Qubes OS, I would do Whonix inside of Qubes (until a secureblue template is made).
SecureBlue too but I hear SecureBlue isn’t a big team, not sure how much time they have to address the broad range of desktop Linux security issues
secureblue backports a lot of fixes from other projects (e.g. their browser, Trivalent, backports fixes from GrapheneOS’s Vanadium). Their team is small but mighty.
I personally think that if you were to put GrapheneOS and Qubes OS side-by-side on uncompromised hardware, I’d take Qubes.
GrapheneOS compartmentalizes as well, but in a different fashion. All apps on GrapheneOS are sandboxed, Once GrapheneOS implements App Communication Scopes, apps will be able to be completely* isolated. Without App Communication Scopes, the best way to isolate apps is by setting up separate profiles.
*While APC prevents communication between apps, they are still installed on the same profile, and thus have access to unique profile identifiers. Apps with network access can technically communicate with each other via a third party. Furthermore, apps may be able to directly communicate with each other through a telephone effect (e.g. Pixel Camera tells Google Play Services to tell Google Calendar about the photo you just took). I am massively oversimplifying this, but you get the gist.
I mentioned in my post that security is going to become very interesting with the introduction of the Linux terminal into Android. If GrapheneOS chooses to expand on this, that means, like Qubes OS, GrapheneOS could emulate multiple Linux distros.
Anyways, this is how I would rank them in terms of security (again, oversimplified):
GrapheneOS > Qubes-secureblue > Qubes-Whonix > secureblue
Each project fundamentally has different goals, so there is no one “security” to rank them by.
Though, for desktop, I prefer secureblue, as I don’t have a secondary GrapheneOS device, and secureblue is far more usable than Qubes OS.
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Comprehensive guide to hardening RHEL clones?4·2 months agohttps://privsec.dev/posts/linux/linux-insecurities/
That’s a more up-to-date article about security issues with Linux.
TL;DR is that Linux (the desktop, not the kernel) is fundamentally insecure, and so the more secure options for desktop are Qubes OS (Qubes OS is not a Linux distro) or (even better) GrapheneOS used in Desktop Mode. secureblue is about as secure as Linux can get, but the most secure option for desktop itself.
Things also get weird when you consider running secureblue inside of Qubes OS. See my post for more thoughts about that.
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Comprehensive guide to hardening RHEL clones?7·2 months agoMadaidan’s Insecurities hasn’t been updated in a few years, so some of the information is a bit out of date. It is still decent information, but don’t follow it granularly. What you may be looking for instead is secureblue, which essentially does what you are describing but for Fedora Atomic desktops.
The 8232 Project@lemmy.mlOPto Linux@lemmy.ml•How do I install CoreOS on a Raspberry Pi 5?1·2 months agoThank you! I will try this tomorrow. I’ve been at this for 7 or 8 hours straight now.
The 8232 Project@lemmy.mlOPto Linux@lemmy.ml•How do I install CoreOS on a Raspberry Pi 5?1·2 months agoI think so, but I can’t be certain. Is there an easy way to check?
The 8232 Project@lemmy.mlOPto Linux@lemmy.ml•How do I install CoreOS on a Raspberry Pi 5?2·2 months agoI specifically need CoreOS since I plan to rebase it to securecore. Thanks for the suggestion, though!
The 8232 Project@lemmy.mlOPto Open Source@lemmy.ml•Open Source Everything celebrates 100th release41·5 months agoEvery time a significant update to the list has been made, the version code is bumped and a new release is made. Sometimes there are hot fixes such as a broken SVG, for example.
The 8232 Project@lemmy.mlOPto Open Source@lemmy.ml•Open Source Everything celebrates 100th release12·5 months agoDo you have experience with LMMS or MuseScore Studio? If so, what benefit does Ardour provide over them?
The 8232 Project@lemmy.mlOPto Open Source@lemmy.ml•Open Source Everything celebrates 100th release31·5 months agoHi there!
Thanks for the suggestions! I’ll definitely look into QR Scanner. Most camera apps come with some QR code scanning functionality built in, so there’s not much use in having a dedicated app. However, as you mentioned, network permissions can be a deciding factor. Someone may want the camera app to have network permissions, but not the QR scanning app.
Thank you for letting me know that Thunderbird is available for Android now! If you find any other incorrect platforms, please let me know. I’ve based almost all of the platform information based on what is listed on https://alternativeto.net/, so there are likely dozens of mistakes. I’ve found a few myself.
I use Breezy Weather and love it. A quick look at Bura, and it actually looks like an Android clone of the default iOS weather app, which is really cool. From the screenshots, I don’t see many differences, so I’m excited to try it out and see how similar it is. Breezy Weather runs in the background to provide notifications such as upcoming precipitation, etc. so that isn’t much of a deciding factor.
I will note, it’s unlikely that Breezy Weather will be replaced with Bura, simply because Breezy Weather is recommended more often by the community. Even though my list is curated, it doesn’t always reflect my preferred options (hence the “my top choices” stamp).
For example, I prefer Book’s Story instead of Librera Reader as an ebook reader, and Read You instead of Feeder as an RSS reader. However, since Librera Reader and Feeder are recommended more often (and have no major issues), those are what are listed.
I hate the UI of Librera Reader. Feeder is missing features such as a search functionality, but I don’t have any oppositions to it, so I still gave it the “my top choices” stamp, especially since Read You is a little weird about some functionality. Anyways, thanks for putting Bura on my radar. I’ll still check it out and, if there’s a massive benefit over Breezy Weather, it might replace it.
Thank you so much!
Edit: Bura fascinates me. It’s not an exact clone of the iOS weather app, but more like if the iOS weather app was done in Material Design. It’s very familiar to me, having used iOS my entire life until a few months ago. However, its simplicity, while an upside for some, is a bit of a downside for this list. Breezy Weather has a vast amount of customization, including customizing weather sources, which Bura doesn’t have. It’s a cool app though!
Edit 2: I tried out all Android QR code readers I could find, and settled on this one which is nearly the gold standard in my opinion. However, it does ask for network permissions. If you use GrapheneOS you can disable it, and it will work fine.
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Linux is now an RPG. What do you have? (totally not r/outside)9·6 months agoQuest: Kali Bandits
The Kali have been terrorizing villages across Linuxia. I beg you, young traveler, help us fight them off. I’ll reward you with riches beyond compare!
Objective: Protect the village from the Kali bandits.
Reward: +500 gold
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Linux is now an RPG. What do you have? (totally not r/outside)8·6 months agoThe questmakers haven’t updated the quest descriptions in a while. I’m waiting for the next update when they port the Whonix ISO kit.
The 8232 Project@lemmy.mlto Linux@lemmy.ml•Linux is now an RPG. What do you have? (totally not r/outside)151·6 months agoI have
[
and a ] Debian ArmorGNOME
as my companion. I often equip theTor Browser Cloak of Invisibility
. If slain, I will drop aLocked KeePassXC Database Chest
. After completing the missionRevive bricked Linux system
, I was awarded with the[
. When drunk, it boosts all stats temporarily during a battle. ] Ego Potion
I personally can’t stand any other options except for Cinnamon (since it got a redesign) and a few distro-specific ones. That’s just me though. Explore away!
I have a potato laptop, so GNOME is a little too heavy on it. I think KDE Plasma would be fine for a desktop, but I’m addicted to GNOME
I use both: GNOME works better for a desktop, KDE Plasma works better for a laptop.
There are more than those 2 options for a Desktop Environment, by the way ;)
Will the official PeerTube app for Android ever adopt Kotlin, Jetpack Compose, and Material 3 Expressive?