I’m the Never Ending Pie Throwing Robot, aka NEPTR.

Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.

TL;DR I am a nerd.

  • 0 Posts
  • 55 Comments
Joined 1 year ago
cake
Cake day: November 20th, 2024

help-circle






  • You say “all the privacy settings on”, but what does that mean. I assume FFP but probably not RFP. I also assume it keeps JS JIT enabled which is a massive attack surface. I am not going to get into more detail but if people are looking for a more security/privacy focused Firefox fork, use Librewolf. If all you are looking for is Firefox with the privacy settings on, just use Firefox. Even with Librewolf, you can (mostly) replicate the experience by using Phoenix or Arkenfox with vanilla Firefox. I recommend everyone reconsider using a fork that is amounts to a few preinstalled extensions and just some (good) default settings. Using a fork just introduces a new party into the mix, which at best slows down how fast you get (security) updates from upstream, and at worst leads to supply chain attacks.

    That being said, I keep seeing people talk about how much they like Waterfox. I tried it and figured it wasn’t for me. That isn’t me saying that it isn’t the right choice for others. I would love to better understand what people enjoy about Waterfox over/instead of Firefox/Librewolf/Zen/etc., pros/cons and the like.



  • While I agree snapper (what CachyOS uses) I very useful, it is important to draw a distinction between snapshots (snapper) and a proper backup tool (borg or restic). Snapshots are usually stored on the same drive, so in the event of a drive failure/corruption you are still very fucked. Proper backup programs also have other important features, like the ability to select remote locations, setup encryption, etc. DO NOT rely on snapper to (always) save your ass.

    That being said, I fucking love snapper and it was the main feature I was missing from openSUSE.






  • I would prefer webapps to native if there was a protocol to fully load the page and disable network traffic for apps that work fully offline. It is more secure to run an app in the browser because off the layers of isolation in modern browsers. Native apps can access all sorts of information and system resources, which could be used to compromise the host OS.







  • Security and bug fixes have made Plasma 6 run better for me. Wayland support is better now too (which matters to me). Minor features that improve usability. Newer kernel means i can use newer features, which some of the apps I use depend on. The main thing with your setup I was surprised about is that it isn’t an LTS kernel (from what I can tell). If you are just not updating and not using LTS software (i can’t tell), then you are missing plenty of security fixes.