Live data from Hacker News

EasyOS: An experimental Linux distribution designed from scratch for containers

easyos.org

91–94 of 94 posts

Re: EasyOS: An experimental Linux distribution designed from scratch for containers

#91
post #87

Earlier quoted context omitted.

> Running applications as restricted users has been standard practice for decades ...as a way of preventing users from interfering with the system or other users in multi user systems. Running applications as a user different from yourself is an ugly hack we've started doing because we don't have actual control over what our applications can access, so things like ransomware are possible despite not having system lev…

Once you add backup in the picture, the local users are great. My main account can have all the ransomware it wants, all the backups are gong to stay intact, so I can restore the files. * in the real life, there is “sudo hole”, but this can be fixed within the current user concept.

I'd rather prevent ransomware from working in the first place. Local backups are hardly sufficient anyway.

Re: EasyOS: An experimental Linux distribution designed from scratch for containers

#92

Fedora Silverblue is already semi-production ready https://silverblue.fedoraproject.org https://fedoramagazine.org/what-is-silverblue/ https://docs.fedoraproject.org/en-US/fedora-silverblue/toolb...

I waved off Silverblue when I learned one must reboot to install packages. Maybe that's not a big deal with a server OS, but having to unlock the full-disk encryption, then restore my desktop and possibly reauth any apps is a bridge too far for me. To say nothing of the heartache involved when you realize that, haha, you didn't know the full package list you needed, so now you are iterating through that process.

Re: EasyOS: An experimental Linux distribution designed from scratch for containers

#93
post #87

Earlier quoted context omitted.

Once you add backup in the picture, the local users are great. My main account can have all the ransomware it wants, all the backups are gong to stay intact, so I can restore the files. * in the real life, there is “sudo hole”, but this can be fixed within the current user concept.

I'd rather prevent ransomware from working in the first place. Local backups are hardly sufficient anyway.

Why won’t local backups be sufficient against ransomware? Is it because of privilege escalation attacks?

I was under impression that even with zero days, using modern distribution and auto updates will minimize the amount of time the system is vulnerable, so for most of time, it will be sufficient.

Re: EasyOS: An experimental Linux distribution designed from scratch for containers

#94
post #72

Earlier quoted context omitted.

Do you have a point to make about how this is better , or is this change for the sake of change?

GUI tools provide significantly better discoverability, for one. The file hierarchy is a mess to put it mildly.

Discoverability is only possible if the tool is trivial. Otherwise, you have to hide functionality inside the UI to prevent the creation of an unusable mass of buttons on the GUI's main screen. This also kills fluency, by preventing people from developing muscle memory.
Post reply on HN