• 2 Posts
  • 58 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle









  • jabjoe@feddit.uktolinuxmemes@lemmy.worldIT Department's Plan
    link
    fedilink
    English
    arrow-up
    25
    ·
    edit-2
    2 months ago

    Few things, in rough order:

    • Smaller = less attack surface. You can strip a Linux OS down to only what is needed.

    • Open source, so it’s can be peered review. There are Unix distros like OpenBSD, that share lot of user space component options, where auditing is a big thing. The whole sunlight and oxygen stops things festering as much. As abosed to things locked in a box in another box down in a cellar.

    • Open source transparency forces corporates to be better. We can see what they are and aren’t doing.

    • Diversity. The is no “Linux”, it’s a ecosystem of Linux distros all built and configured differently, using different components. Think of Linux as just a type of base board in a sea of Unix Lego bits. There are plenty of big deployments on BSD bases that share a lot with some Linux deployments.

    • Unix security is simplier than Windows security, so easer to not mess up.




  • Someone got to say it…

    There is no Debian if everything was a pile of Snaps/Flatpack/Docker/etc. Debian is the packaging and process that packaging is put through. Plus their FOSS guidelines.

    So sure, if it’s something new and dev’y, it should isolate the dependencies mess. But when it’s mature, sort out the dependencies and get it into Debian, and thus all downstream of it.

    I don’t want to go back to app-folders. They end up with a missmash of duplicate old or whacky lib. It’s bloaty, insecure and messy. Gift wrapping the mess in containers and VM, mitigates some of security issues, but brings more bloat and other issues.

    I love FOSS package management. All the dependencies, in a database, with source and build dependencies. All building so there is one copy of a lib. All updating together. It’s like an OS ecosystem utopia. It doesn’t get the appreciation it should.


  • jabjoe@feddit.uktoPrivacy@lemmy.mlThought on Graphene?
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 months ago

    Can it run problem bank apps? I need a bank auth app for work as the bank stopped fobs and it just would not run on LineageOS. It refused to run because “the phone is insecure”. I tried Magisk hiding stuff and MicroG, and a number of way of tricking methods. That’s why I ended up on GrapheneOS, as a compromise without feeling too compromised. Everything seams to think it’s on a normal Android phone, but I’ve sandboxed the Google tentacles. But it would be better if mandating OS wasn’t allowed. If I want to run a “insecure” phone, that’s my “problem”.




  • I’ve been on Debian Testing for my own desktops for about 15 years now. Sometimes as a Frankendebian mixing in SID/unstable. Sometimes mainly unstable, but mostly just Testing.

    It rarely breaks, but when it does, it’s a learning opportunity. Stable for servers and other people’s desktops. Maybe with backports. Flatpacks if this no other option.

    You don’t get 100% solid and 100% new. Ever. With anything.