- 0 Posts
- 37 Comments
While the company has a questionable record and a controversial business model, Brave Browser is an open-source browser with good privacy features.
If they don’t keep any private data on any computer that trusts their home network/wifi and don’t do taxes or banking on those, there’s no problem.
But if they do, I maintain that the analogy is correct: their unpatched machine is an easy way to digitally get access to their home, just like an unlocked door is to a physical home.
You keep using the word “maintenance”. All I’m worried about is not installing any security patches for months.
The problem that I tried to highlight with my “cherry picking” is:
- Running a machine with open vulnerabilities for which patches exist also “paints a target on your back”: even if your data is worthless, you are essentially offering free cloud compute.
- But mostly, a single compromised machine can be an entrypoint towards your entire home network.
So unless you have separated this Orange Pi into its own VLAN or done some other advanced router magic, the Orange Pi can reach, and thus more easily attack all your other devices on the network.
Unless you treat your entire home network as untrusted and have everything shut off on the computers where you do keep private data, the Orange Pi will still be a security risk to your entire home network, regardless of what can be found on the little machine itself.
No it is
https://www.pandasecurity.com/en/mediacenter/consequences-not-applying-patches/
And:
You’re allowing for more attack vectors that would not be there if the system were to be patched. Depending on the severity of the vulnerability, this can result in something like crashes or something as bad as remote code execution, which means attackers can essentially do whatever they want with the pwned machine, such as dropping malware and such. If you wanna try this in action, just spin up a old EOL Windows machine and throw a bunch of metasploit payloads at it and see what you can get.
While nothing sensitive may be going to or on the machine (which may seem to be the case but rarely is the case), this acts as an initial foothold in your environment and can be used as a jumpbox of sorts for the attacker to enumerate the rest of your network.
And:
Not having vulnerability fixes that are already public. Once a patch/update is released, it inherently exposes to a wider audience that a vulnerability exists (assuming we’re only talking about security updates). That then sets a target on all devices running that software that they are vulnerable until updated.
There’s a reason after windows Patch Tuesday there is Exploit Wednesday.
Yes, a computer with vulnerabilities can allow access to others on the network. That’s what it means to step through a network. If computer A is compromised, computer B doesn’t know that so it will still have the same permissions as pre-compromise. If computer A was allowed admin access to computer B, now there are 2 compromised computers.
I used to lose my keys all the time. I don’t want to spend so much time looking for my keys, nowadays I mostly just leave them in the front door, I rarely lock it and it works like a champ.
There is a reason why NixOS was invented 21 years ago. Reproducible builds are not simple in most
packagingbuild systems.
And at your next job, at an employer who sees the value of FOSS and a nerd with strong Linux-fu!
How to call
xargsis typically one of those things I always forget. The foreach alias is a great solution!My current solution was to use
tldrfor all of these tools, but yeah if I find myself having to do a for each line, I’ll definitely make it an alias.Luckily (knocks on wood) I almost exclusively work with yaml and json nowadays so I should just learn
yq.
The closest to Mint in terms of:
- stability: only have breaking changes once every 6 months
- just-works-factor: shipping drivers and whatever proprietary code is necessary to have a smooth out of the box experience
That I know of, beside maybe OpenSUSE (have no experience with it) is Kubuntu 24.10. Yes apt will say weird things and you’ll want to uninstall
snapd.But Kubuntu 24.10, current latest, ships with Plasma 6.1. Current stable, Kubuntu 24.04 ships with Plasma 5 still.
But I assume you’re not a fan of the rolling release model like EndeavourOS (Archlinux based, KDE is the default). So if you want recent packages AND a versioned release model, that leaves only Fedora out of the distros I’m familiar with. They recently promoted the KDE version from a Spin to a full version beside the GNOME version.
But Fedora is much heavier on the FLOSS philosophy, and not as works-out-of-the-box as Mint or any Ubuntu flavor.
Debian isn’t, but it will take a long time for Plasma 6.3 to make it to Debian stable.
So yeah, I guess OpenSUSE may be your best betEDIT: took a quick look, there’s a rolling release model of OpenSUSE called Tumbleweed. But you probably don’t like rolling release. And a versioned one called Leap. The current latest Leap version still ships Plasma 5 so that still isn’r nearly as recent as Fedora, which has had Plasma 6 in the last TWO versions.
It’s not just about speed, but also (battery) efficiency.
Even if you don’t notice the speed, if you are working on anything but a modern expensive laptop, you will notice the difference in battery draw between:
VS Code > NeoVim in traditional terminal > Neovim in Alacritty or Ghostty
After years of fighting
pipandconda, I got a job where “we work with Python but also still have some .NET Framework apps”.NuGet seemed just as bad.
People shit on JavaScript (for very good reasons) but npm is amazing compared to all these. You can have one dependency needing PackageX v1 and another dependency needing PackageX v3 and your project will just work!
A modern statically-linked language with a first-class package manager, like Rust or Go is ideal. No fighting the dependency manager, no issue with deploying on different systems, just “run this binary”.
Yeah that checks out.
I’m fairly new to this space so not aware of the more obscure or older ones but my list of popular Desktop Environments would be:
- KDE Plasma
- GNOME
- Cinnamon
- MATE
- Budgie
- XFCE
- LXQt
- Cosmic
You couldn’t be more wrong. 🍉🍉🍉
Of course, if you’re living in Russia, it’s dangerous to state anything other than support for Russia’s invasion of Ukraine.
That doesn’t mean it isn’t cringeworthy to watch someone awkwardly dance around it, trying to ignore it while complaining about (checks notes) losing a bit of reputation over an unnecessary war that their country started and which literally cost thousands of lives.
Any Russian who stands up against that is incredibly brave. The others, just different levels of sad. Non-Russians who support Putin are the worst.
I understand why you’d want FOSS to not care abot borders, wars and politics and that is noble. But to call this comment racism, comes across as a veiled show of support for Putin. As if critiquing his invasion is a racist act that hurts the Russian people. Putins invasion is hurting the Russian people. Not this comment.
Yes, you are right.
The old stuff, now no longer supported, is:
- .NET Framework up to and incl version 4.8
- Runtimes distributed as part of Windows
- Mono is a Linux Runtime used for compatibility
The new stuff:
- .NET Core, up to and incl 3, more recent versions are named .NET from version 5 onwards (to prevent mixing it up with the old Framework)
- Is completely cross-platform, natively
- I don’t know about desktop specific graphical stuff but that probably depends on the specific library
Ah yeah that looks perfect, just get WayBlue Hyprland then! That sounds like exactly what you need.
No need to mess about with user services in systemd and display manager config.
NixOS
Alternatively (speculating here), you might be able to use Nix to install Hyprland onto an existing immutable distro like Silverblue.
Nix people please chime in!
I have never heard of WattOS but that sounds terrible.
It seems like antiX is a systemd-free Debian flavor.
If you want systemd, why not just use Debian? Or, if you are looking for a nice preconfigured DE/WM, any of a number of Debian/Ubuntu derivatives.
Mint for best out of the box setup, Pop!_OS for tiling, Zorin OS if you’re looking for a funky styling, any of the Ubuntu derivatives for the major DEs: Kubuntu, Xubuntu, etc.
I’ve heard of SwayFX, but it’s pretty niche and I doubt it comes close to the featureset of Hyprland