Meanwhile the EU probably pushes for the 100th time to backdoor all communication encryption backed by fascists and Spain trying to put down the Catalans…
And the UK doing the same thing and also a big surveillance state…
Sadly nowhere is great right now.
They are a massive megacorp though. It always leaves me to wonder “how much”.
Tons of capitalist companies do stock options where “technically” the employees own a share of the company, though that percentage is usually extremely small, even collectively such that they have no decision power. I can’t help but think that it is similar with huawei, but with better marketing.
That is very fair!!
But on the other hand, 99.9% of users don’t read all of the change notes for their packages and don’t have notifications for CVEs. In that case, in my opinion just doing updates as they come would be easier and safer.
Doesn’t ucore also have to restart to apply updates?
Not super ideal for a server as far as maintenance and uptime to have unexpected, frequent restarts as opposed to in-place updates, unless one’s startup is completely automated and drives are on-device keyfile decrypted, but that probably fits some threat models for security.
The desktop versions are great!
Well, I didn’t think anyone would be dumb enough to do that, but you might be right…
I am also very low. I just pretty much let someone else take credit for it so that it would actually be taken to management.
I got my company to start using bitwarden. That was a huge step and 1/4 of the company forgot their password in the first 60 days. I sent a big email detailing how to make a mnemonic device with a passphrase that bitwarden generates 😂 complete with photoshop drawings on one i generated. no forgotten passwords since
You absolutely can fail. I daily drive bazzite but many things have been pretty rough:
Any coding apps that will use an external device -> you can’t use flatpak. You have to use distrobox that constantly freezes your entire mouse for 3-5 seconds upon any sort of dialog, settings, saving, anything where it has to access the filesystem. Then you have to add udev rules to directories that in the documentation says not to write to, and reloading the rules doesn’t work for testing, you have to fully restart with every minor change or it will seem like the change didn’t work.
Luckily most device drivers seem to work in the provided arch distrobox but holy dependency hell. Things will fail to install because they need a package that exists on the host but not the container so you get an unsolvable “file exists” conflict. When installing a package, it will sometimes just try to grab an old version of a dependency specifically that will 404 out instead of just grabbing the most recent version (never happened on arch itself to me)
Setting up a plasma vault with gocryptfs was not fun figuring out how. Also ran into tons of dependency problems and the fact that fedora just abandoned it specifically. Ended up just having to stick the binary in a random folder and point to it.
Any sort of document authentication/signing -> doesn’t work and will not work in the future for a long time.
You absolutely have to install rpms still for corectrl, any external devices, like drawing tablets, etc…
Some games inexplicably use <50% GPU and <40% CPU with terrible framerates and will not go any higher (or lower) no matter what, switching between low and high settings and resolution results in 0fps change.
When I have my config set and don’t have to change anything, it is super super nice to never have to manually update, but anything outside of very basic usage is weaving through nonstandard undocumented territory.
Bazzite trades maintenance headaches for configuration and installation headaches. For me, that is worth it.
Only Android Open Source Project, not the different phone UIs, vendor blobs, firmware, camera apps, etc… It is really the basics that are open source.
But also the source of android is 100% controlled by google unless it is an alternative forked project like lineageOS (at least I think so)
What is the benefit of using labplot over matplotlib or seaborn?
Oh great, the Belgian good alternative for piece of shit Facebook marketplace is on there… 2dehands.
We can never have nice things…
Also Good Pizza Great Pizza 😢
This is actually a really handy app!
That is a different spin than the original comment, which is why I made that commen.
https://docs.getaurora.dev/ https://docs.projectbluefin.io/ aurora has one small page of documentation total unless you click on the logo which suddenly opens a hidden unlabeled drawer with sparse docs. Bluefin has even less. I consider this near-zero documentation. So how would OP’s non-techy girlfriend (or someone who has only heard of aurora and bluefin from this thread) know to go to bazzite, a completely different project to most people, to debug their completely different OS? Because googling “ublue aurora flatpak won’t install” literally gives this page: https://docs.getaurora.dev/guides/software/ which is literally almost useless.
Bazzite’s documentation has gotten way better since I installed it (they had almost nothing on rpmostree commands when I did), but I don’t believe everything in the documentation for bazzite applies the same to aurora and bluefin, especially with differences in pre-installed non-layered gaming defaults vs working with flatpaks will be not even close to the same.
Also fedora knoite has little documentation https://docs.fedoraproject.org/en-US/fedora-kinoite/. It has enough to get you started and installed, but that is about it. It has one single line of code about rpmostree for example, not even anything about installing an RPM not in fedora’s limited repos.
I didn’t say any of it was bad. Just that you have to be slightly careful with using those for non-techy users because the documentation just isn’t there yet.
Gotta be slightly careful with those spins though because there is near-zero documentation.
That said, it isn’t fun for firmware development.
I have daily driven it for 6 months or so. Most things work great but more niche uses like embedded firmware development, digitally signing documents (impossible on bazzite as far as I have found) and anything that requires udev rules or interplay between software.
Otherwise it is great! Much better day to day than opensuse Kalpa.
Also another downside, if I am not mistaken, is that all of the chat metadata is unencrypted, unlike alternatives like signal. (I think this is the nature of being essentially encrypted email on the backend)
Using the official company social media to double down on what the CEO said = company policy = how company will act
People on all social media really can’t seem to understand that the choices aren’t exclusively “everything has a perfect open source, non-profit utopia” and “fuck it, everyone is corrupt so it doesn’t matter what service you use.”
You are able to do what you can, where you can, to mitigate risks and try your best not to support fascists. Especially when there are a dozen alternatives.
Then again, maybe people are just arguing in bad faith.
We have 38h in Belgium, but if you work 40, you get 12 extra full days of holiday during the year (what I do).
A 32 hour work week with no salary cut will never happen, but that would be a dream
Interesting thoughts in this thread.
I simply switched to having an unencrypted boot partition with the automount key on a flash drive. After it boots the server, just remove the whole boot partition. Physical separation is much much more powerful for smash and grabs, petty seizures, and evil maid than TPMs.
The flash drive is stored securely when I am in the area. Flash drive can go in the machine if I am away for a while or have something critical.
I go a step further and have password-only data drive description so I have to ssh in to set up the data drives again, but the principle would be the same.
same with antennapod
Watch out. A lot of controversy over rustdesk because they do some strange things and route all traffic through their server in China or something.
(Not up to date on it, just have heard it many times in passing, worth looking in to)