marcie (she/her)

  • 26 Posts
  • 306 Comments
Joined 1 year ago
cake
Cake day: March 22nd, 2024

help-circle






  • If I’m trying to look up how to do terminal stuff to install something not on flatpak, 99% of the time the instructions are for regular Fedora, not Silverblue.

    This is solved by the various ublue images and distrobox generally. Distrobox basically lets you run those install instructions as natively as possible. Its a bit like WINE but for all linux distros. For example, I can install a .deb file to my system with distrobox, or I could pull from Arch’s AUR. Distrobox lets you be pretty lazy, it works most of the time, though some applications don’t seem to like it. And by the way, you can download a .rpm file and layer it using rpm-ostree install [.rpm filelocation] if all else fails.

    Generally, I feel like Fedora Atomic is the best middleground for linux these days. It really incentivizes the users to use containers, which are far more secure than the permissions anarchy of normal linux. Its easy enough to daily drive too.

    What feature does ShareX provide that Spectacle doesnt? You can share to imgur, telegram, etc with it.




  • its a packet and internet analyzer, im mostly concerned with security issues so i constantly check packets on outgoing connections. for apps where the internet is unimportant i disable their ability to access the internet. the vast majority of security issues are solved by preventing internet access.

    occasionally a small project shows up on my radar. usually its an alternative frontend for discord, youtube, etc that has not stellar security but much better than what youtube or discord gives you out of the box. ive submitted maybe 1000 detailed security issues on github to small open source projects, many have been implemented 🤓


  • bazzite is the way to go imo. it feels light years ahead of all the other gaming focused distros, ive tried all of them. it does take getting used to, but once you figure it out, its rock solid. nothing breaks. its almost boring in a way, lol. everything just works and i basically never have to fix or research anything. ublue has an insane amount of contributors on bazzite in comparison to other gaming distros as well, ive submitted many issues to them and patches are applied quickly. for example: garuda has around 9 contributors, cachyos has around 7, nobara has maybe 10, popos has 39 (some are full time employees). what does bazzite have? 113 or so. but they’re also not a typical distro, theyre an image of fedora kinoite/silverblue. a lot of the effort is shunted onto the supermassive org (24k+ contributors) that fedora/rhel is and many of their patches are upstreamed. the update process is very seamless and smooth due to this method of organization.

    just remember to install most things through flatpak, distrobox, and brew. and you’re set. i love atomic for cluing me into distrobox, distrobox is straight up the laziest way to use linux and i love it. if you need some niche program that some dev only released .deb files for or only fedora/opensuse/aur commandline instructions, its got you. it just works. its somewhat similar to WINE and lets you run any linux distro installer and program as natively as possible.


    also look at this fun graph for fedora atomic spins. as an fyi the fedora project as a whole has around 300k active users






  • Confiscation of the domain isn’t a big deal. As I’ve already said, there are many anonymous hosting providers that have been tested on the Israel issue and came out the other side. 1984 is one, ADL served them an injunction in court in Iceland and 1984 was successful in fighting it and also avoiding divulging any info about activists.

    If you wanted to it’s also possible to proxy server traffic so that the main server is never divulged which makes it very easy to swap domain names and providers. I consider this overkill for this use case though, would be necessary on a streaming site or something, though that should be hosted in Russia to avoid issues anyways, Russia essentially allows for the piracy of non Russian data.



  • I’d argue every small social site should run on the principal that they will be prosecuted like an illegal streaming site. You can divest yourself of liability and doxing with basic opsec.

    An example: host on 1984.hosting and pay with mined or donated Monero. Only access the site through a computer specifically for that purpose, and only with Tor / Tor Browser and a Linux distro such as Qubes, Tails, or less suspiciously, Fedora Atomic. Memorize credentials if possible, if not encrypt them on drive with a strong password via a keepassxc databases. If you are hosting the site properly, you can transfer the site podman/docker container and url with databases and info intact with no effort. Make sure the computer for managing site management stuff wipes itself on every shutdown sans credential info, has secureboot, and an encrypted drive. As an admin account, only access the site through base Mullvad Browser with a VPN (ideally Mullvad) or Tor Browser on a computer of your choosing.

    You can easily say the site is no longer yours and your payment information will reflect this. This has been done before. Germany can ban the site but it’ll be easily discoverable through other fediverse servers, Tor, and VPNs. They would have to ban anything that uses acitivitypub, and again, even in that scenario you can use a VPN or Tor or self host a vps with the instructions above to access it normally anyways.



  • Mullvad browser and Tor browser are the only serious options for privacy on the internet. Librewolf, cromite, Firefox, brave, etc will get you fingerprinted. If you care about security more than privacy, use a chromium based browser. Personally, I use Mullvad browser with Vpn (use only protonvpn, mullvad, or ivpn, they have had security and legal tests) it’s the best combo of fast and private.

    For mobile, the options are more limited. Ironfox, Cromite, and Vanadium (GrapheneOs) are the best bets for daily use. Tor Browser is the only one that actually stops fingerprinting however, but it is difficult to recommend it as a daily driver, it’s more of a tool.

    Source: I actually help code security software and test it in real world scenarios regularly