231–240 of 270 posts
Earlier quoted context omitted.
Indeed, many bugs are API usage bugs, something that no language can verify. (The API is implemented in C anyway.)
No, but some languages make designing difficult-to-misuse APIs a lot easier than others.
I wonder if Redox has a much better API; at least I hope it does.
Earlier quoted context omitted.
Cool. I'm pretty excited for the new login manager. Maybe now KDE will be able to fit all customization options (wallpaper, lockscreen, login screen) on a single Settings page.
Is there a CLI way to dump/restore those settings?
https://youtu.be/RuxNnfllxco?t=3894 - Neal Gompa on the Fedora 44 Release party stream,
Earlier quoted context omitted.
>I think power users are not the main target of Ubuntu. Then who is? Normies buy iPads and casuals stay on Windows. Is this why Linux can't gain any market share?
IMHO, Ubuntu is trying to gain market share by targeting non-experts — making Linux simple enough for normies and casual users. Casual users are generally less likely to mess things up on Ubuntu than on Windows.
Earlier quoted context omitted.
In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear. Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.
assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
The attacker would just need to spoof the request to gain the key.
Earlier quoted context omitted.
assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
My threat model is a junkie breaks in to my house and flips my server on facebook marketplace. Then the buyer curiously pokes through my hard drives. Of course if protecting against government agencies is the threat model then TPM alone isn't enough. For me, a zero friction way to have decent security is worlds better than the normal state where homeservers are not encrypted at all.
Your threat model is the same as my use of a laptop: regular LUKS with a password is enough on its own. Add TPM if you want to know that you're entering your password in a secure boot environment (ie. protect against a fake LUKS screen that steals your password).
Earlier quoted context omitted.
> Easier said than done, surprise: apt, who we know and love, is redirected to Snap for an ever-increasing number of packages. With 24.04 at least, doing an 'apt purge snapd' seems to be quite useful. Is that not sufficient?
On 25.10, removing snap gets rid of firefox, chromium, cups and many more packages.
For servers, this may not be a problem for us. Currently on 24.04, so will have to see how things are ≥25.10.
Earlier quoted context omitted.
> I’m curious about proprietary Nvidia drivers. Ubuntu normally comes with fairly outdated, if not obsolete ones […] I see the latest—580, 590, 595—available (scroll to bottom): * https://packages.ubuntu.com/search?keywords=nvidia-dkms Am I missing something?
Awesome, this must be a recent thing, when I last checked about a year ago the latest drivers from restricted were a couple versions behind. Many people always complained about it on reddit, AskUbuntu etc, which is where I found out about the PPA.
Something gnome could do well to learn
Earlier quoted context omitted.
My threat model is a junkie breaks in to my house and flips my server on facebook marketplace. Then the buyer curiously pokes through my hard drives. Of course if protecting against government agencies is the threat model then TPM alone isn't enough. For me, a zero friction way to have decent security is worlds better than the normal state where homeservers are not encrypted at all.
I just don't understand where the protection comes from if you have automatic password entry. If the thief boots up the server it is just as convenient for them as it is for you. Your threat model is the same as my use of a laptop: regular LUKS with a password is enough on its own. Add TPM if you want to know that you're entering your password in a secure boot environment (ie. protect against a fake LUKS screen that…
Earlier quoted context omitted.
On 25.10, removing snap gets rid of firefox, chromium, cups and many more packages.
> On 25.10, removing snap gets rid of firefox, chromium, cups and many more packages. For servers, this may not be a problem for us. Currently on 24.04, so will have to see how things are ≥25.10.