rollingflower

@rollingflower@lemmy.kde.social

This profile is from a federated server and may be incomplete. Browse more on the original instance.

rollingflower,

I might have something shocking to tell you. There are distros with good defaults!

rollingflower,

Agree on the Fedora problem, but the solution is pretty easy.


<span style="color:#323232;"># install the RPM packages, your system is auto detected, the packages take care of updating the repos
</span><span style="color:#323232;">sudo dnf install https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
</span><span style="color:#323232;">
</span><span style="color:#323232;"># enable cisco-openh264 to be sure
</span><span style="color:#323232;">sudo dnf config-manager --enable fedora-cisco-openh264
</span><span style="color:#323232;">
</span><span style="color:#323232;"># install ffmpeg with allowerase
</span><span style="color:#323232;">sudo dnf install ffmpeg --allowerasing
</span><span style="color:#323232;">
</span><span style="color:#323232;"># or, if you just want videos, without uninstalling anything
</span><span style="color:#323232;">sudo dnf install libavcodec-freeworld
</span>

Thats basically it. On the Atomic variants, installing libavcodec-freeworld is just as easy, but allowerasing doesnt work so you need to uninstall everything manually to unbreak ffmpeg. Or you just use uBlue where it is already done and default (this will also avoid any rpmfusion incompatibilities to happen on your device and on the server instead)

Yes this is annoying, but you do that once and afterwards have a current release more stable than Arch, and an old-supported release that is even more stable.

rollingflower,

Stacer for the win!

rollingflower,

I can recommend a semi-rolling distro ;D wayblue has some defaults, but I have not tried it. There also is a hardened version of it under the secureblue images. Although I think the maintainer has horrible control issues, I cant deny that the product is near perfect (apart from opinionated Chromium enforcements and some hacky parts like LD_PRELOADing a different allocator) and use the kinoite variant daily.

rollingflower, (edited )

The Arch repos, being quick, rolling, not restricted legally or being upstream of some corpo distro like Fedora or OpenSUSE etc

Idk ask Steam?

rollingflower,

New Clock

Downloaded with Obtainium.

It is new, elegant and supports direct boot, meaning it will wake me even if the device auto updated from an update over night.

rollingflower,

On Fedora you should use the Google binaries, as Fedoras Fastboot is broken for some reason.

You will also need the android-udev package and symlink it. That process is damn overcomplex, for “security”.

Managed to install GrapheneOS after replacing fastboot with the path to the fastboot binary downloaded from Google.

See this Fedora discuss post

Reproducing a Microsoft corporate environment on Linux.

Most companies I’ve worked at where employees had a Microsoft work computers. They were under heavy control, even with admin privileges. I was wondering, for a corporate environment, how employees’Linux desktops could be kept under control in a similar way. What would be an open source or Linux based alternative to the...

rollingflower,

To get rid of Viruses, simply clean out all executable attachments in mails, mailcow and other solutions support that.

You can also mount /home nonexecutable, which means everything you can run needs to be on the system. Without that, “control over what is installed” is worthless. You could literally download any package, export the binary and run it from anywhere.

To run untrusted software, you can use a server that uses something like KASM. It is image-based, accessed through the browser, suppports uploading files and viewing lots of stuff. You can also run antivirus there, but as shown in this video antivirus is often simply tricked by encoding and re-encoding the scripts into something like Base64.

Antivirus really is flawed. You need to control the origins of code, and run all untrusted code in immutable VMs.

rollingflower,

If you dont even have a way of running untrusted code on your production environment, how the heck is that worse than badness enumerating AV?

Insurances…

rollingflower,

See above. There are tools for mail servers to strip and sandbox all executable attachements.

MSOffice btw doesnt allow macros anymore afaik

rollingflower,

Excel sheets can be used without macros, i.e. executable code. Macros can be disabled in Libreoffice afaik, and this is likely possible via some sort of policy.

These are great things to try out and I want to experiment with it when I have time. For example not sure if policies work with flatpak, as users could be able to change them.

Antivirus is a joke, for sure you could run it, but it just doesnt work. It would be just there for the compliance, while you simply dont run any code, not even trusted code, that doesnt come from trusted repos like Fedora, Ubuntu or flathub-verified

rollingflower,

No shit whats your health currently?

Mine is like 60/100 or so

rollingflower,

Likely some DRM or tracking crap. So this is a Microsoft Teams message, not Firefox. What OS do you use?

rollingflower,

That is the question. Please send a complete screenshot.

rollingflower,

Ok so its likely bullshit

rollingflower,

You should use the version from IzzyOnDroid or use Obtainium. Heliboars is out since months.

rollingflower, (edited )

Add this search string in Firefox/Librewolf/Mull. On Desktop you need the addon “add custom search engine”, on mobile its integrated. (No idea why)

Tor

There dont seem to be discoverable lemmy instances on Tor, even though there is a guide.

You could use this for searching lemmy over tor:


Note that the (intext:“modlog” & “instances” & “docs” & “code” & “join lemmy”) method seems better. The fedi-search is also awesome.

rollingflower,

Could you give an example URL?

rollingflower,

This is great!

rollingflower,

Damn? Where? I found something called “newsearch” but no GUI appeared on Librewolf

rollingflower,

Interesting, you have no compression as that is likely only on BTRFS

rollingflower,

Damn that is really cool. Good compression algorithms are key.

I also think that flatpaks huge issue is

  • installing the entire runtime instead of just needed components
  • being universal (and Linux has a reputation to support old hardware) thus wasting potential
  • not being good to backup
  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • GTA5RPClips
  • DreamBathrooms
  • khanakhh
  • ngwrru68w68
  • Youngstown
  • magazineikmin
  • mdbf
  • slotface
  • thenastyranch
  • rosin
  • kavyap
  • tacticalgear
  • tester
  • provamag3
  • osvaldo12
  • cubers
  • ethstaker
  • everett
  • Durango
  • InstantRegret
  • Leos
  • normalnudes
  • modclub
  • anitta
  • cisconetworking
  • megavids
  • lostlight
  • All magazines