| 1 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 2 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 3 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 4 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 5 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 6 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
} |
|
Show voter details
|
| 7 |
DENIED
|
edit
|
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
} |
|
Show voter details
|
| 8 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1702
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1596
+user: Proxies\__CG__\App\Entity\User {#2493 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: Proxies\__CG__\App\Entity\Image {#2531 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2533 …}
+slug: "3rd-party-app-for-Reddit-Boost-is-still-functioning-well"
+title: "3rd party app for Reddit, Boost, is still functioning well after July 1st"
+url: "https://www.reddit.com/r/BoostForReddit"
+body: """
Some users wonder if the dev will be charged for having it still up, others argue Reddit can't charge him without having signed a contract. Everyone is confused as to why the API change hasn't made it inoperable.\n
\n
Why is Boost still working?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 113
+favouriteCount: 117
+score: 63
+isAdult: false
+sticky: false
+lastActive: DateTime @1688604126 {#2526
date: 2023-07-06 02:42:06.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2534 …}
+votes: Doctrine\ORM\PersistentCollection {#2536 …}
+reports: Doctrine\ORM\PersistentCollection {#2538 …}
+favourites: Doctrine\ORM\PersistentCollection {#2540 …}
+notifications: Doctrine\ORM\PersistentCollection {#2542 …}
+badges: Doctrine\ORM\PersistentCollection {#2544 …}
+children: [
App\Entity\EntryComment {#1702}
]
-id: 718
-titleTs: "'1st':13 '3rd':1 'app':3 'boost':6 'function':9 'juli':12 'parti':2 'reddit':5 'still':8 'well':10"
-bodyTs: "'api':34 'argu':16 'boost':43 'chang':35 'charg':9,20 'confus':29 'contract':26 'dev':6 'everyon':27 'hasn':36 'inoper':40 'made':38 'other':15 'reddit':17 'sign':24 'still':13,44 'user':2 'without':22 'wonder':3 'work':45"
+cross: false
+upVotes: 63
+downVotes: 0
+ranking: 1688400933
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375"
+editedAt: null
+createdAt: DateTimeImmutable @1688314533 {#2514
date: 2023-07-02 18:15:33.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1620 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1613 …}
+body: "RIF works if you're logged out. Logged in you get a 429 error."
+lang: "en"
+isAdult: false
+favouriteCount: 8
+score: 0
+lastActive: DateTime @1688321643 {#1528
date: 2023-07-02 20:14:03.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@UnhappyCamper@kbin.social"
"@BaroqueInMind@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1701 …}
+nested: Doctrine\ORM\PersistentCollection {#1687 …}
+votes: Doctrine\ORM\PersistentCollection {#1689 …}
+reports: Doctrine\ORM\PersistentCollection {#1691 …}
+favourites: Doctrine\ORM\PersistentCollection {#1795 …}
+notifications: Doctrine\ORM\PersistentCollection {#1711 …}
-id: 7199
-bodyTs: "'429':13 'error':14 'get':11 'log':6,8 're':5 'rif':1 'work':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/RedditMigration/t/128375/-/comment/503680"
+editedAt: null
+createdAt: DateTimeImmutable @1688321643 {#1619
date: 2023-07-02 20:14:03.0 +02:00
}
+"title": 7199
} |
|
Show voter details
|
| 9 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 10 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 11 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 12 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 13 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 14 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
} |
|
Show voter details
|
| 15 |
DENIED
|
edit
|
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
} |
|
Show voter details
|
| 16 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1665
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1549
+user: Proxies\__CG__\App\Entity\User {#2511 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-do-you-use-for-a-domain-registrar"
+title: "What do you use for a domain registrar?"
+url: null
+body: "Since Google Domains is shutting down, I am looking for a new place to transfer my domains. What are others using for domain registration?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 33
+favouriteCount: 17
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1687627031 {#2546
date: 2023-06-24 19:17:11.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2551 …}
+votes: Doctrine\ORM\PersistentCollection {#2554 …}
+reports: Doctrine\ORM\PersistentCollection {#2556 …}
+favourites: Doctrine\ORM\PersistentCollection {#2558 …}
+notifications: Doctrine\ORM\PersistentCollection {#2560 …}
+badges: Doctrine\ORM\PersistentCollection {#2562 …}
+children: [
App\Entity\EntryComment {#1665}
]
-id: 415
-titleTs: "'domain':7 'registrar':8 'use':4"
-bodyTs: "'domain':3,17,23 'googl':2 'look':9 'new':12 'other':20 'place':13 'registr':24 'shut':5 'sinc':1 'transfer':15 'use':21"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1687694277
+visibility: "visible "
+apId: "https://feddit.nl/post/196762"
+editedAt: null
+createdAt: DateTimeImmutable @1687607877 {#2532
date: 2023-06-24 13:57:57.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1559 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1582 …}
+body: """
I've been happy with Gandi but their future looks bleak. Gandi was bought by Total Webhosting Solutions/now your.online a couple of months back, which is pretty bad news. They've been purchasing Dutch companies and increasing prices while letting their services turn to shit for a while now. The raised prices came in a few weeks ago, we've yet to see the services turn to shit but I am extremely confident it will happen.\n
\n
Gandi is just the first international purchase by TWS, so not many people know it, and there are few relevant references on the English-speaking web as most of this was localized to the Netherlands. You'd have to search on Dutch tech news sources like tweakers.net and use some translation tool to find anything meaningful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1687618085 {#1595
date: 2023-06-24 16:48:05.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@missing22gb@feddit.nl"
"@dan@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1571 …}
+nested: Doctrine\ORM\PersistentCollection {#1591 …}
+votes: Doctrine\ORM\PersistentCollection {#1590 …}
+reports: Doctrine\ORM\PersistentCollection {#1553 …}
+favourites: Doctrine\ORM\PersistentCollection {#1562 …}
+notifications: Doctrine\ORM\PersistentCollection {#1563 …}
-id: 4410
-bodyTs: "'ago':58 'anyth':132 'back':24 'bad':28 'bleak':11 'bought':14 'came':53 'compani':35 'confid':73 'coupl':21 'd':114 'dutch':34,119 'english':101 'english-speak':100 'extrem':72 'find':131 'first':81 'futur':9 'gandi':6,12,77 'happen':76 'happi':4 'increas':37 'intern':82 'know':90 'let':40 'like':123 'local':109 'look':10 'mani':88 'meaning':133 'month':23 'netherland':112 'news':29,121 'peopl':89 'pretti':27 'price':38,52 'purchas':33,83 'rais':51 'refer':97 'relev':96 'search':117 'see':63 'servic':42,65 'shit':45,68 'solutions/now':18 'sourc':122 'speak':102 'tech':120 'tool':129 'total':16 'translat':128 'turn':43,66 'tweakers.net':124 'tws':85 'use':126 've':2,31,60 'web':103 'webhost':17 'week':57 'yet':61 'your.online':19"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.ml/t/88970/-/comment/376384"
+editedAt: null
+createdAt: DateTimeImmutable @1687618085 {#1612
date: 2023-06-24 16:48:05.0 +02:00
}
+"title": 4410
} |
|
Show voter details
|
| 17 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 18 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 19 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 20 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 21 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 22 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
} |
|
Show voter details
|
| 23 |
DENIED
|
edit
|
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
} |
|
Show voter details
|
| 24 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1630
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1629
+user: Proxies\__CG__\App\Entity\User {#2367 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Why-are-most-memes-on-Lemmy-from-5-10-years-ago"
+title: "Why are most memes on Lemmy from 5-10 years ago?"
+url: null
+body: "I’m glad people are active, but why are the most upvoted memes things from years ago? Bots? Users desperate for content?"
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 50
+favouriteCount: 119
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1698510320 {#2508
date: 2023-10-28 18:25:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2513 …}
+votes: Doctrine\ORM\PersistentCollection {#2516 …}
+reports: Doctrine\ORM\PersistentCollection {#2518 …}
+favourites: Doctrine\ORM\PersistentCollection {#2520 …}
+notifications: Doctrine\ORM\PersistentCollection {#2522 …}
+badges: Doctrine\ORM\PersistentCollection {#2524 …}
+children: [
App\Entity\EntryComment {#1630}
]
-id: 7956
-titleTs: "'-10':9 '5':8 'ago':11 'lemmi':6 'meme':4 'year':10"
-bodyTs: "'activ':6 'ago':17 'bot':18 'content':22 'desper':20 'glad':3 'm':2 'meme':13 'peopl':4 'thing':14 'upvot':12 'user':19 'year':16"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1698461669
+visibility: "visible "
+apId: "https://lemmy.world/post/7386524"
+editedAt: null
+createdAt: DateTimeImmutable @1698375269 {#2496
date: 2023-10-27 04:54:29.0 +02:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1628 …}
+image: null
+parent: null
+root: null
+body: "Memes used to be funny"
+lang: "en"
+isAdult: false
+favouriteCount: 19
+score: 0
+lastActive: DateTime @1698429436 {#1611
date: 2023-10-27 19:57:16.0 +02:00
}
+ip: null
+tags: null
+mentions: [
"@onlyhalfminotaur@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#1626 …}
+nested: Doctrine\ORM\PersistentCollection {#1618 …}
+votes: Doctrine\ORM\PersistentCollection {#1597 …}
+reports: Doctrine\ORM\PersistentCollection {#1731 …}
+favourites: Doctrine\ORM\PersistentCollection {#1723 …}
+notifications: Doctrine\ORM\PersistentCollection {#1721 …}
-id: 74184
-bodyTs: "'funni':5 'meme':1 'use':2"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/asklemmy@lemmy.world/t/573493/-/comment/3198338"
+editedAt: null
+createdAt: DateTimeImmutable @1698382359 {#1598
date: 2023-10-27 06:52:39.0 +02:00
}
+"title": 74184
} |
|
Show voter details
|
| 25 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 26 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 27 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 28 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 29 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 30 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
} |
|
Show voter details
|
| 31 |
DENIED
|
edit
|
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
} |
|
Show voter details
|
| 32 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1730
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1737
+user: Proxies\__CG__\App\Entity\User {#2164 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Security-advise-collection-what-do-you-recommend"
+title: "Security advise collection - what do you recommend?"
+url: null
+body: """
I use Linux for quite a while and would like to gather some security advice, well known and lesser known.\n
\n
### Well known\n
\n
#### Dont install random apps from the internet\n
\n
This is the (old) Windows way and the result of an OS not caring about its software. Often bundled with also outsourced antivirus, or scanning all files you download.\n
\n
So use official repos nearly exclusively. If there is an app not in your distros repos, try Distrobox, create a Container of any image and install it there. You can display the images available by pressing tab after `-i`.\n
\n
`distrobox-create NAME -i IMAGE-NAME`\n
\n
This also goes for\n
\n
- Ubuntu PPAs\n
- Arch AUR\n
- Opensuse Build service repos\n
- Fedora COPR\n
- Random external repos\n
\n
Some repos are more or less controlled, so be careful!\n
\n
Some “external ones” are trusted, like:\n
\n
- Fedora/Derivates: rpmfusion\n
- Flathub\n
- Steam Fedora Repo\n
- Google Chrome Fedora Repo (dont use Chrome lol)\n
- Open-h264 from Cisco\n
- …\n
\n
[Not all Flathub repos are controlled, but here is a list](https://github.com/trytomakeyouprivate/Flatpak-remotes)\n
\n
#### Update, update, update\n
\n
Its best to enable automatic updates. If you have a slim system and install your apps as Flatpak apps (best if they are verified, look at flathub.org or directly add the verified repo), updates should never break something.\n
\n
#### Wayland\n
\n
X11 is an outdated security desaster with design flaws so big, that nobody cared to fix it. Instead, Wayland was created with way tighter (and more modern) restrictions, requiring Portals for apps to do stuff like\n
\n
- using your Camera\n
- using your Microphone\n
- viewing your screen or specific app Windows\n
- simulating input devices\n
- watching for keypresses\n
\n
Only KDE and GNOME have full Wayland support for now, along with some Window Managers and RaspberryPi OS. This means\n
\n
- XFCE\n
- LXQt, LXDE\n
- Budgie\n
- Mate\n
- Cinnamon\n
- …\n
\n
Should be avoided until at least a year when they have full Wayland support. Wayland is not a new protocol at all, but requires Desktops to do more work. It can be expected (and hoped) that at least some effords combine, Desktops use existing Compositors etc.\n
\n
Wayland is backwards compatible (X11-only apps run through xwayland, and you can also force apps to use Xwayland if they otherwise lose features).\n
\n
All apps work on Wayland that dont do weird stuff that uses insecure methods. Poorly this includes screen readers and lots of Remote Desktop Software, as well as Screen recording. But things will evolve, and there are Apps that only support Wayland.\n
\n
### Less known\n
\n
#### Avoid stable Distributions\n
\n
Stable Distros dont get regular updates of every package that… gets an update, but they get ***backported*** security fixes.\n
\n
Correct me if I am wrong, but not all security related bugs get a CVE ([Common Vulnerabilities and Exposures](https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)) and thus dont get backported.\n
\n
Stable Distributions are used everywhere on the internet though, so this could be debatable.\n
\n
#### Use an “immutable” distro\n
\n
Immutability is implemented in various ways, there is no standard at all\n
\n
- Android, Chromeos\n
- Fedora Atomic (Silverblue, Kinoite, …)\n
- Opensuse microOS (now Kalpa, Aeon)\n
- VanillaOS\n
- SteamOS\n
\n
They are all different from each other, with Chromeos and Android being fully immutable, allowing no deviations from the OS at all, SteamOS being similar but allowing to run Flatpak apps natively.\n
\n
VanillaOS and Opensuse microOS use a different form of “regular package management but atomic”, so the change does not apply to the running system but to a clone of it, being applied on reboot.\n
\n
Fedora Atomic goes the “Cloud way” with an image-based system that can be downloaded, swapped out but also modified. They use OSTree for keeping track of every single package on your system and also changes, a simple `rpm-ostree reset` will reset your base system. It is the most secure of the customizable ones to my knowledge.\n
\n
Immutable Operating systems make sure that every update works, so they can easily be done automatically and on a running system.\n
\n
Also, changes to the core system through malware are not possible, at least not directly.\n
\n
#### secure directories and dotfiles\n
\n
An exception here is, if a malware would simply create a bash alias to ***anything***. So a sudo password can easily be grabbed, or a second command executed whenever you do something with sudo.\n
\n
[madaidans-insecurities.github.io/linux.html#examp…](https://madaidans-insecurities.github.io/linux.html#examples)\n
\n
So this means that your shell configs should only be writable by sudo, all others can only read! The same for ~/.gnupg or ~/.ssh, maybe even only readable by sudo depending on your use case.\n
\n
```\n
\n
<span style="color:#323232;">sudo chmod 755 ~/.bashrc && sudo chown root ~/.bashrc\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.ssh && sudo chown -R root ~/.ssh\n
</span><span style="color:#323232;">sudo chmod -R 700 ~/.gnupg && sudo chown -R root ~/.gnupg\n
</span><span style="color:#323232;">sudo chmod 755 ~/.zshrc && sudo chown root ~/.zshrc\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/fish/ && sudo chown -R root ~/.config/fish/\n
</span><span style="color:#323232;">sudo chmod -R 755 ~/.config/autostart && sudo chown root -R ~/.config/autostart\n
</span><span style="color:#323232;">#sudo chmod -R 755 ~/.local/share/applications && sudo chown -R root ~/.local/share/applications\n
</span>\n
```\n
\n
(7: **r**ead **w**rite e**x**execute, 5: read execute, “-R”, recursively)\n
\n
This may still be incomplete, and the security is pretty flawed as long as random software can write to these directories at all, and as long as everything important is stored there.\n
\n
Please report if any setting breaks something. Making the local applications directory read-only for everyone but root might be good, but will break for example KDEs GUI editor. But they put apps in `~/.local/share/applications/ons` anyways for some reason.\n
\n
#### SELinux or Apparmor\n
\n
I dont know what is better, but I feel secure on Fedora with SELinux on enforcing. If any tools require you to disable it, they are poorly written.\n
\n
#### Sandboxing\n
\n
I am not nearly technical enough to explain details, but firejail is said to have many design flaws, a reason why bubblejail (using bubblewrap, which is used in Flatpak) should be preferred.\n
\n
It is in early stages though.\n
\n
Browser sandboxes are also not easy, Firefox Flatpak vs. Firefox native for example. Flatpaks need to replace the internal sandbox with bubblewrap. The same goes for Chromium and electron apps, and especially Chromium as a native app is said to be very secure.\n
\n
For regular and especially privacy concerns, Flatpak with mostly manually hardened permissions is the best way. KDE has the permissions graphically integrated, otherwise Flatseal is nice.\n
\n
Flatpak apps are always weakly isolated to make sure nothing breaks. In the future with portals for every (i.e. dynamic permissions) static permissions should be gone.\n
\n
#### Firmware updates & Coreboot\n
\n
While you may use the linux-libre Kernel and live full stallman, what Firmware does your PC use?\n
\n
In most cases, especially for “Laptops with good Linux compatibility” that may be older Laptops, decommissioned Company devices, older Thinkpads… and they all probably dont get Firmware updates anymore!\n
\n
My Thinkpad T495 has an outdated, bloated Lenovo Firmware. Firmware can read RAM, connect to the Internet and do anything. You cannot monitor that from the OS, you need a MITM proxy using another device.\n
\n
And also, proprietary Firmware is everywhere. Only a vew people develop it, but it is there!\n
\n
- [Novacustom](configurelaptop.eu) for EU people, they partner with [3mdeb](3mdeb.com) to support and ship Dasharo, a secure Coreboot Distro similar to Heads\n
- System76 for US People\n
- Starlabs also ships coreboot\n
- [3mdeb](shop.3mdeb.com) sells PCs with Coreboot\n
\n
Lots of Coreboot Distros only support old Hardware like Thinkpads up to T430. Nitrokey is a good vendor here, but keep in mind that these machines are now 11 years old. I still have one and it works great! But not for complex stuff like multiple VMs.\n
\n
#### Secureboot\n
\n
Also important to verify that your OS was not tempered with. Many Distros support it, even though they may not have an agreement with Microsoft so work out of the box, but they generate their own keys after installation.\n
\n
Firmware like Dasharo or heads with integrity checks is better than Secureboot alone.\n
\n
---\n
\n
What other tips do you know?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 15
+favouriteCount: 28
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1710702956 {#1357
date: 2024-03-17 20:15:56.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2495 …}
+votes: Doctrine\ORM\PersistentCollection {#2498 …}
+reports: Doctrine\ORM\PersistentCollection {#2500 …}
+favourites: Doctrine\ORM\PersistentCollection {#2502 …}
+notifications: Doctrine\ORM\PersistentCollection {#2504 …}
+badges: Doctrine\ORM\PersistentCollection {#2506 …}
+children: [
App\Entity\EntryComment {#1730}
]
-id: 16322
-titleTs: "'advis':2 'collect':3 'recommend':7 'secur':1"
-bodyTs: "'/.bashrc':746,750 '/.config/autostart':793,798 '/.config/fish':783,788 '/.gnupg':729,765,770 '/.local/share/applications':803,808 '/.local/share/applications/ons':889 '/.ssh':731,755,760 '/.zshrc':774,778 '/linux.html#examp':704 '/linux.html#examples)':707 '/trytomakeyouprivate/flatpak-remotes)':171 '/wiki/common_vulnerabilities_and_exposures))':453 '11':1225 '3mdeb':1169,1191 '3mdeb.com':1170 '5':817 '7':809 '700':754,764 '755':745,773,782,792,802 'add':204 'advic':15 'aeon':499 'agreement':1267 'alia':680 'allow':516,528 'alon':1296 'along':279 'also':50,107,355,587,603,649,967,1146,1188,1245 'alway':1036 'android':489,512 'anoth':1143 'antivirus':52 'anymor':1109 'anyth':682,1129 'anyway':890 'app':26,69,190,193,245,261,348,357,367,403,532,887,993,1000,1034 'apparmor':896 'appli':553,565 'applic':864 'arch':112 'atom':492,547,569 'aur':113 'automat':179,643 'avail':92 'avoid':297,410 'backport':429,458 'backward':343 'base':578,614 'bash':679 'best':176,194,1021 'better':902,1293 'big':224 'bloat':1116 'box':1275 'break':211,859,878,1043 'browser':964 'bubblejail':947 'bubblewrap':949,985 'budgi':292 'bug':443 'build':115 'bundl':48 'camera':252 'cannot':1131 'care':43,132,227 'case':742,1083 'chang':550,604,650 'check':1291 'chmod':744,752,762,772,780,790,800 'chown':748,757,767,776,785,795,805 'chrome':146,151 'chromeo':490,510 'chromium':990,996 'cinnamon':294 'cisco':157 'clone':561 'cloud':572 'combin':335 'command':694 'common':447 'compani':1097 'compat':344,1090 'complex':1239 'compositor':339 'concern':1012 'config':714 'configurelaptop.eu':1162 'connect':1123 'contain':79 'control':129,163 'copr':119 'core':653 'coreboot':1061,1178,1190,1196,1199 'correct':432 'could':470 'creat':77,100,234,677 'customiz':623 'cve':446 'dasharo':1175,1286 'debat':472 'decommiss':1096 'depend':738 'desast':219 'design':221,942 'desktop':319,336,389 'detail':934 'develop':1155 'deviat':518 'devic':265,1098,1144 'differ':505,540 'direct':203,663 'directori':665,842,865 'disabl':919 'display':89 'distribut':412,460 'distro':73,414,476,1179,1200,1257 'distrobox':76,99 'distrobox-cr':98 'done':642 'dont':23,149,372,415,456,898,1105 'dotfil':667 'download':58,583 'dynam':1052 'e':814 'ead':811 'earli':961 'easi':969 'easili':640,688 'editor':883 'efford':334 'electron':992 'en.m.wikipedia.org':452 'en.m.wikipedia.org/wiki/common_vulnerabilities_and_exposures))':451 'enabl':178 'enforc':912 'enough':931 'especi':995,1010,1084 'etc':340 'eu':1164 'even':733,1260 'everi':420,596,634,1050 'everyon':870 'everyth':849 'everywher':463,1150 'evolv':399 'exampl':880,976 'except':669 'exclus':64 'execut':695,816,819 'exist':338 'expect':327 'explain':933 'exposur':450 'extern':121,134 'featur':365 'fedora':118,143,147,491,568,908 'fedora/derivates':139 'feel':905 'file':56 'firefox':970,973 'firejail':936 'firmwar':1059,1076,1107,1118,1119,1148,1284 'fix':229,431 'flathub':141,160 'flathub.org':201 'flatpak':192,531,954,971,977,1013,1033 'flatseal':1030 'flaw':222,832,943 'forc':356 'form':541 'full':274,306,1073 'fulli':514 'futur':1046 'gather':12 'generat':1278 'get':416,423,428,444,457,1106 'github.com':170 'github.com/trytomakeyouprivate/flatpak-remotes)':169 'gnome':272 'goe':108,570,988 'gone':1058 'good':875,1088,1213 'googl':145 'grab':690 'graphic':1027 'great':1235 'gui':882 'h264':155 'harden':1017 'hardwar':1204 'head':1182,1288 'hope':329 'i.e':1051 'imag':82,91,104,577 'image-bas':576 'image-nam':103 'immut':475,477,515,628 'implement':479 'import':850,1246 'includ':382 'incomplet':826 'input':264 'insecur':378 'instal':24,84,188,1283 'instead':231 'integr':1028,1290 'intern':982 'internet':29,466,1126 'isol':1038 'kalpa':498 'kde':270,1023 'kdes':881 'keep':593,1217 'kernel':1070 'key':1281 'keypress':268 'kinoit':494 'know':899,1302 'knowledg':627 'known':17,20,22,409 'laptop':1086,1095 'least':300,332,661 'lenovo':1117 'less':128,408 'lesser':19 'libr':1069 'like':10,138,249,1205,1241,1285 'linux':3,1068,1089 'linux-libr':1067 'list':168 'live':1072 'local':863 'lol':152 'long':834,847 'look':199 'lose':364 'lot':386,1197 'lxde':291 'lxqt':290 'machin':1222 'madaidans-insecurities.github.io':703,706 'madaidans-insecurities.github.io/linux.html#examp':702 'madaidans-insecurities.github.io/linux.html#examples)':705 'make':631,861,1040 'malwar':656,674 'manag':283,545 'mani':941,1256 'manual':1016 'mate':293 'may':823,1064,1092,1263 'mayb':732 'mean':288,710 'method':379 'microo':496,537 'microphon':255 'microsoft':1269 'might':873 'mind':1219 'mitm':1140 'modern':240 'modifi':588 'monitor':1132 'most':1015 'multipl':1242 'name':101,105 'nativ':533,974,999 'near':63,929 'need':978,1138 'never':210 'new':313 'nice':1032 'nitrokey':1210 'nobodi':226 'noth':1042 'novacustom':1161 'offici':61 'often':47 'old':33,1203,1227 'older':1094,1099 'one':135,624,1231 'open':154 'open-h264':153 'opensus':114,495,536 'oper':629 'os':41,286,521,1136,1251 'ostre':591,609 'other':722 'otherwis':363,1029 'outdat':217,1115 'outsourc':51 'packag':421,544,598 'partner':1167 'password':686 'pc':1079 'pcs':1194 'peopl':1154,1165,1186 'permiss':1018,1026,1053,1055 'pleas':854 'poor':380,923 'portal':243,1048 'possibl':659 'ppas':111 'prefer':957 'press':94 'pretti':831 'privaci':1011 'probabl':1104 'proprietari':1147 'protocol':314 'proxi':1141 'put':886 'quit':5 'r':753,758,763,768,781,786,791,797,801,806,810,820 'ram':1122 'random':25,120,836 'raspberrypi':285 'read':725,818,867,1121 'read-on':866 'readabl':735 'reader':384 'reason':893,945 'reboot':567 'record':395 'recurs':821 'regular':417,543,1008 'relat':442 'remot':388 'replac':980 'repo':62,74,117,122,124,144,148,161,207 'report':855 'requir':242,318,916 'reset':610,612 'restrict':241 'result':38 'rite':813 'root':749,759,769,777,787,796,807,872 'rpm':608 'rpm-ostre':607 'rpmfusion':140 'run':349,530,556,647 'said':938,1002 'sandbox':925,965,983 'scan':54 'screen':258,383,394 'second':693 'secur':14,218,430,441,620,664,829,906,1006,1177 'secureboot':1244,1295 'selinux':894,910 'sell':1193 'servic':116 'set':858 'shell':713 'ship':1174,1189 'shop.3mdeb.com':1192 'silverblu':493 'similar':526,1180 'simpl':606 'simpli':676 'simul':263 'singl':597 'slim':185 'softwar':46,390,837 'someth':212,699,860 'specif':260 'stabl':411,413,459 'stage':962 'stallman':1074 'standard':486 'starlab':1187 'static':1054 'steam':142 'steamo':501,524 'still':824,1229 'store':852 'stuff':248,375,1240 'sudo':685,701,720,737,743,747,751,756,761,766,771,775,779,784,789,794,799,804 'support':276,308,406,1172,1202,1258 'sure':632,1041 'swap':584 'system':186,557,579,601,615,630,648,654 'system76':1183 't430':1209 't495':1112 'tab':95 'technic':930 'temper':1254 'thing':397 'thinkpad':1100,1111,1206 'though':467,963,1261 'thus':455 'tighter':237 'tip':1299 'tool':915 'track':594 'tri':75 'trust':137 'ubuntu':110 'updat':172,173,174,180,208,418,425,635,1060,1108 'us':1185 'use':2,60,150,250,253,337,359,377,462,473,538,590,741,948,952,1065,1080,1142 'vanillao':500,534 'various':481 'vendor':1214 'verifi':198,206,1248 'vew':1153 'view':256 'vms':1243 'vs':972 'vulner':448 'w':812 'watch':266 'way':35,236,482,573,1022 'wayland':213,232,275,307,309,341,370,407 'weak':1037 'weird':374 'well':16,21,392 'whenev':696 'window':34,262,282 'work':323,368,636,1234,1271 'would':9,675 'writabl':718 'write':839 'written':924 'wrong':437 'x':815 'x11':214,346 'x11-only':345 'xfce':289 'xwayland':351,360 'year':302,1226"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1700928097
+visibility: "visible "
+apId: "https://feddit.de/post/6001973"
+editedAt: DateTimeImmutable @1701462094 {#2352
date: 2023-12-01 21:21:34.0 +01:00
}
+createdAt: DateTimeImmutable @1700841697 {#2014
date: 2023-11-24 17:01:37.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
Don't bother "securing" directories like that. The meaningful permission bit is the write permission on the directory holding the file. `cat ~/.bashrc > ~/.bashrc.new; put-malware-in ~/.bashrc.new; rm -f ~/.bashrc; mv ~/.bashrc.new ~/.bashrc` or the like will still work if you have write permissions to `/home/username` at all. Marking the file immutable with `chattr +i` as root might be slightly more effective, but realistically still not enough in a lot of cases as the parent directory can still be renamed. Not to mention you've only found some of the low-hanging fruit; your text editor most likely also has a few ways to accomplish arbitrary code execution in its config/scripting/plugin files but it absolutely doesn't stop there.\n
\n
Don't bother buying old systems because they can have free firmware. Ever since Spectre, CPU vulnerabilities have made old machines completely unsuitable for high-security purposes time and time again. Not all mitigations are equally effective and with mitigations on, performance takes a massive hit on those 10 year old machines. If you can get a reasonably new system with free firmware, that's good, though.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1701395722 {#1728
date: 2023-12-01 02:55:22.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@Pantherina@feddit.de"
]
+children: Doctrine\ORM\PersistentCollection {#1732 …}
+nested: Doctrine\ORM\PersistentCollection {#1735 …}
+votes: Doctrine\ORM\PersistentCollection {#1729 …}
+reports: Doctrine\ORM\PersistentCollection {#1719 …}
+favourites: Doctrine\ORM\PersistentCollection {#1714 …}
+notifications: Doctrine\ORM\PersistentCollection {#1720 …}
-id: 159144
-bodyTs: "'/.bashrc':23,32,35 '/.bashrc.new':24,29,34 '/home/username':48 '10':172 'absolut':118 'accomplish':108 'also':102 'arbitrari':109 'bit':11 'bother':3,125 'buy':126 'case':74 'cat':22 'chattr':56 'code':110 'complet':144 'config/scripting/plugin':114 'cpu':138 'directori':5,18,78 'doesn':119 'editor':99 'effect':64,160 'enough':69 'equal':159 'ever':135 'execut':111 'f':31 'file':21,53,115 'firmwar':134,186 'found':89 'free':133,185 'fruit':96 'get':179 'good':189 'hang':95 'high':148 'high-secur':147 'hit':169 'hold':19 'immut':54 'like':6,38,101 'lot':72 'low':94 'low-hang':93 'machin':143,175 'made':141 'malwar':27 'mark':51 'massiv':168 'meaning':9 'mention':85 'might':60 'mitig':157,163 'mv':33 'new':182 'old':127,142,174 'parent':77 'perform':165 'permiss':10,15,46 'purpos':150 'put':26 'put-malware-in':25 'realist':66 'reason':181 'renam':82 'rm':30 'root':59 'secur':4,149 'sinc':136 'slight':62 'spectr':137 'still':40,67,80 'stop':121 'system':128,183 'take':166 'text':98 'though':190 'time':151,153 'unsuit':145 've':87 'vulner':139 'way':106 'work':41 'write':14,45 'year':173"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/652878/-/comment/3752219"
+editedAt: null
+createdAt: DateTimeImmutable @1700845023 {#1736
date: 2023-11-24 17:57:03.0 +01:00
}
+"title": 159144
} |
|
Show voter details
|
| 33 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 34 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 35 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 36 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 37 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 38 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
} |
|
Show voter details
|
| 39 |
DENIED
|
edit
|
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
} |
|
Show voter details
|
| 40 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1741
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1740
+user: Proxies\__CG__\App\Entity\User {#2005 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "What-are-the-major-components-of-any-Linux-distribution"
+title: "What are the major components of any Linux distribution?"
+url: null
+body: """
Hi all - I am learning about Linux and want to see if my understanding is correct on this - the list of *major parts* of any distro:\n
\n
1. the Linux Kernel\n
2. GRUB or another bootloader\n
3. one or more file systems (gotta work with files somehow, right?)\n
4. one or more Shells (the terminal - bash, zsh, etc…)\n
5. a Desktop Environment (the GUI, if included, like KDE or Gnome - does this include X11 or Wayland or are those separate from the DE?)\n
6. a bunch of Default applications and daemons (is this where systemd fits int? I know about the GNU tools, SAMBA, CUPS, etc…)\n
7. a Package Manager (apt, pacman, etc…)\n
\n
Am I forgetting anything at this 50,000 foot level? I know there are lots of other things we can add, but what are the most important things that ALL Linux distributions include?\n
\n
Thanks!
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 37
+favouriteCount: 122
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1701032472 {#2376
date: 2023-11-26 22:01:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2269 …}
+votes: Doctrine\ORM\PersistentCollection {#1348 …}
+reports: Doctrine\ORM\PersistentCollection {#1349 …}
+favourites: Doctrine\ORM\PersistentCollection {#1352 …}
+notifications: Doctrine\ORM\PersistentCollection {#1354 …}
+badges: Doctrine\ORM\PersistentCollection {#1356 …}
+children: [
App\Entity\EntryComment {#1741}
]
-id: 16851
-titleTs: "'compon':5 'distribut':9 'linux':8 'major':4"
-bodyTs: "'000':120 '1':27 '2':31 '3':36 '4':48 '5':58 '50':119 '6':83 '7':106 'add':133 'anoth':34 'anyth':116 'applic':88 'apt':110 'bash':55 'bootload':35 'bunch':85 'correct':16 'cup':104 'daemon':90 'de':82 'default':87 'desktop':60 'distribut':144 'distro':26 'environ':61 'etc':57,105,112 'file':40,45 'fit':95 'foot':121 'forget':115 'gnome':69 'gnu':101 'gotta':42 'grub':32 'gui':63 'hi':1 'import':139 'includ':65,72,145 'int':96 'kde':67 'kernel':30 'know':98,124 'learn':5 'level':122 'like':66 'linux':7,29,143 'list':20 'lot':127 'major':22 'manag':109 'one':37,49 'packag':108 'pacman':111 'part':23 'right':47 'samba':103 'see':11 'separ':79 'shell':52 'somehow':46 'system':41 'systemd':94 'termin':54 'thank':146 'thing':130,140 'tool':102 'understand':14 'want':9 'wayland':75 'work':43 'x11':73 'zsh':56"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1701049024
+visibility: "visible "
+apId: "https://lemm.ee/post/16037589"
+editedAt: null
+createdAt: DateTimeImmutable @1700962624 {#2015
date: 2023-11-26 02:37:04.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: null
+root: null
+body: """
A biggie you miss is the toolchain: the compiler/binutils/linux-headers/libc/libstdc++ combination. The libc and usually libstdc++ are key components of any install. The other parts usually don't make it to non-dev-desktops, but the distro couldn't be made without them, so they're virtually always available as packages.\n
\n
Only exception is if the entire distro is cross-compiled or it's made exclusively for containers, but those kinds of special distros break every rule imaginable anyway. Some might not even ship a bootloader or a Linux kernel by themselves.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1700970103 {#1717
date: 2023-11-26 04:41:43.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@perishthethought@lemm.ee"
]
+children: Doctrine\ORM\PersistentCollection {#1707 …}
+nested: Doctrine\ORM\PersistentCollection {#2464 …}
+votes: Doctrine\ORM\PersistentCollection {#2448 …}
+reports: Doctrine\ORM\PersistentCollection {#2447 …}
+favourites: Doctrine\ORM\PersistentCollection {#2462 …}
+notifications: Doctrine\ORM\PersistentCollection {#2461 …}
-id: 164886
-bodyTs: "'alway':48 'anyway':80 'avail':49 'biggi':2 'bootload':87 'break':76 'combin':10 'compil':62 'compiler/binutils/linux-headers/libc/libstdc':9 'compon':18 'contain':69 'couldn':38 'cross':61 'cross-compil':60 'desktop':34 'dev':33 'distro':37,58,75 'entir':57 'even':84 'everi':77 'except':53 'exclus':67 'imagin':79 'instal':21 'kernel':91 'key':17 'kind':72 'libc':12 'libstdc':15 'linux':90 'made':41,66 'make':28 'might':82 'miss':4 'non':32 'non-dev-desktop':31 'packag':51 'part':24 're':46 'rule':78 'ship':85 'special':74 'toolchain':7 'usual':14,25 'virtual':47 'without':42"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/656079/-/comment/3776629"
+editedAt: null
+createdAt: DateTimeImmutable @1700970103 {#1739
date: 2023-11-26 04:41:43.0 +01:00
}
+"title": 164886
} |
|
Show voter details
|
| 41 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 42 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 43 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 44 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 45 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 46 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
} |
|
Show voter details
|
| 47 |
DENIED
|
edit
|
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
} |
|
Show voter details
|
| 48 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2452
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2457
+user: Proxies\__CG__\App\Entity\User {#2235 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2016 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2017 …}
+slug: "Canonical-changes-the-license-of-LXD-to-AGPL"
+title: "Canonical changes the license of LXD to AGPL"
+url: "https://discourse.ubuntu.com/t/lxd-5-20-has-been-released/40865"
+body: null
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 34
+favouriteCount: 74
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1703342592 {#1986
date: 2023-12-23 15:43:12.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2008 …}
+votes: Doctrine\ORM\PersistentCollection {#1987 …}
+reports: Doctrine\ORM\PersistentCollection {#1983 …}
+favourites: Doctrine\ORM\PersistentCollection {#1979 …}
+notifications: Doctrine\ORM\PersistentCollection {#2368 …}
+badges: Doctrine\ORM\PersistentCollection {#2373 …}
+children: [
App\Entity\EntryComment {#2452}
]
-id: 23586
-titleTs: "'agpl':8 'canon':1 'chang':2 'licens':4 'lxd':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703169608
+visibility: "visible "
+apId: "https://lemmy.ml/post/9549624"
+editedAt: null
+createdAt: DateTimeImmutable @1703083208 {#2003
date: 2023-12-20 15:40:08.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2454 …}
+body: """
No, it comes together with a CLA being required to contribute. In other words, Canonical (and only Canonical) is still allowed to sell exceptions to the AGPL.\n
\n
Yes, the post says there is no copyright *assignment*. That's extremely carefully chosen wording to avoid mention of the [CLA which was made required in the same commit as the license change](https://github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889). It's "just" a super extended license that lets them do whatever, not assignment.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 15
+score: 0
+lastActive: DateTime @1703109340 {#2460
date: 2023-12-20 22:55:40.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@wiki_me@lemmy.ml"
"@QuazarOmega@lemy.lol"
]
+children: Doctrine\ORM\PersistentCollection {#2455 …}
+nested: Doctrine\ORM\PersistentCollection {#2468 …}
+votes: Doctrine\ORM\PersistentCollection {#2469 …}
+reports: Doctrine\ORM\PersistentCollection {#2471 …}
+favourites: Doctrine\ORM\PersistentCollection {#2363 …}
+notifications: Doctrine\ORM\PersistentCollection {#2377 …}
-id: 238807
-bodyTs: "'/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':63 'agpl':27 'allow':21 'assign':36,77 'avoid':44 'canon':15,18 'care':40 'chang':60 'chosen':41 'cla':7,48 'come':3 'commit':56 'contribut':11 'copyright':35 'except':24 'extend':69 'extrem':39 'github.com':62 'github.com/canonical/lxd/commit/b8ff449ddb44dee98105b292d531584e34d3a889).':61 'let':72 'licens':59,70 'made':51 'mention':45 'post':30 'requir':9,52 'say':31 'sell':23 'still':20 'super':68 'togeth':4 'whatev':75 'word':14,42 'yes':28"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/715016/-/comment/4230689"
+editedAt: null
+createdAt: DateTimeImmutable @1703109340 {#2453
date: 2023-12-20 22:55:40.0 +01:00
}
+"title": 238807
} |
|
Show voter details
|
| 49 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 50 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 51 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 52 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 53 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 54 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
} |
|
Show voter details
|
| 55 |
DENIED
|
edit
|
App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
} |
|
Show voter details
|
| 56 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372}
0 => App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
} |
|
Show voter details
|
| 57 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 58 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
} |
|
Show voter details
|
| 59 |
DENIED
|
edit
|
App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
} |
|
Show voter details
|
| 60 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1908
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380
+user: Proxies\__CG__\App\Entity\User {#2108 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: Proxies\__CG__\App\Entity\Image {#2228 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2134 …}
+slug: "Super-weird-error-what-s-happening"
+title: "Super weird error, what's happening?"
+url: "https://lemmy.zip/pictrs/image/3adb807b-14b9-40d7-94a5-e56d0c2dbc70.webp"
+body: """
I’m not sure if this is the best community to post in, but I just bought a used computer and slotted in an RX480 as the GPU. I installed KDE Neon 5.27 on it, and it worked flawlessly for 2 days.\n
\n
Then, even though it was working earlier today, it slept and then would not wake up. So I turned off the power and turned it back on again, and was greeted with this error screen:\n
\n
The only prior error message I’d gotten from the system was when I tried to install wine for one application, it told me some packages weren’t up to date, without a way to fix it. I can enter the BIOS just fine.\n
\n
What is going on? How do I fix this?
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 36
+favouriteCount: 63
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712576655 {#2183
date: 2024-04-08 13:44:15.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1988 …}
+votes: Doctrine\ORM\PersistentCollection {#1998 …}
+reports: Doctrine\ORM\PersistentCollection {#2001 …}
+favourites: Doctrine\ORM\PersistentCollection {#1999 …}
+notifications: Doctrine\ORM\PersistentCollection {#2004 …}
+badges: Doctrine\ORM\PersistentCollection {#1989 …}
+children: [
1 => App\Entity\EntryComment {#2372
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#2380 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2386 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
The RAID1 seems to be failing according to that screenshot. That breaks the "Local File Systems" task and since quite a lot of things tend to depend on that, many things usually end up failing in an annoying cascade failure. It's also failing with a timeout instead of a strict error, which is odd.\n
\n
Either way, I'd try commenting that line for `/mnt/raid` in /etc/fstab for now and seeing if that makes the system boot. It's possible that `journalctl -u dev-md0.service` or `systemctl status dev-md0.service` might tell you more, but it's 50/50 if it'll be anything useful.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 3
+score: 0
+lastActive: DateTime @1703199135 {#2359
date: 2023-12-21 23:52:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
]
+children: Doctrine\ORM\PersistentCollection {#2385 …}
+nested: Doctrine\ORM\PersistentCollection {#2378 …}
+votes: Doctrine\ORM\PersistentCollection {#2381 …}
+reports: Doctrine\ORM\PersistentCollection {#1910 …}
+favourites: Doctrine\ORM\PersistentCollection {#1909 …}
+notifications: Doctrine\ORM\PersistentCollection {#1926 …}
-id: 241727
-bodyTs: "'/etc/fstab':67 '/mnt/raid':65 '50/50':96 'accord':7 'also':43 'annoy':38 'anyth':101 'boot':77 'break':12 'cascad':39 'comment':61 'd':59 'depend':27 'dev-md0.service':84,88 'either':56 'end':33 'error':52 'fail':6,35,44 'failur':40 'file':15 'instead':48 'journalctl':82 'line':63 'll':99 'local':14 'lot':22 'make':74 'mani':30 'might':89 'odd':55 'possibl':80 'quit':20 'raid1':2 'screenshot':10 'see':71 'seem':3 'sinc':19 'status':87 'strict':51 'system':16,76 'systemctl':86 'task':17 'tell':90 'tend':25 'thing':24,31 'timeout':47 'tri':60 'u':83 'use':102 'usual':32 'way':57"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4249566"
+editedAt: DateTimeImmutable @1706189440 {#2361
date: 2024-01-25 14:30:40.0 +01:00
}
+createdAt: DateTimeImmutable @1703199135 {#2364
date: 2023-12-21 23:52:15.0 +01:00
}
+"title": 241727
}
0 => App\Entity\EntryComment {#1908}
]
-id: 23887
-titleTs: "'error':3 'happen':6 'super':1 'weird':2"
-bodyTs: "'2':41 '5.27':33 'applic':98 'back':68 'best':9 'bio':119 'bought':17 'communiti':10 'comput':20 'd':84 'date':108 'day':42 'earlier':49 'enter':117 'error':76,81 'even':44 'fine':121 'fix':113,129 'flawless':39 'go':124 'gotten':85 'gpu':28 'greet':73 'instal':30,94 'kde':31 'm':2 'messag':82 'neon':32 'one':97 'packag':103 'post':12 'power':64 'prior':80 'rx480':25 'screen':77 'slept':52 'slot':22 'sure':4 'system':88 'though':45 'today':50 'told':100 'tri':92 'turn':61,66 'use':19 'wake':57 'way':111 'weren':104 'wine':95 'without':109 'work':38,48 'would':55"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1703278360
+visibility: "visible "
+apId: "https://lemmy.zip/post/7302107"
+editedAt: null
+createdAt: DateTimeImmutable @1703191960 {#2262
date: 2023-12-21 21:52:40.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1407 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#2382 …}
+body: """
You're most likely booted, otherwise you might need a live USB. Hopefully, the system isn't in read-only mode. What I'd recommend doing is:\n
\n
```\n
cp /etc/fstab /etc/fstab.backup\n
\n
```\n
\n
To make a copy once. Then, `nano /etc/fstab` to run nano, a basic CLI editor. You can use the arrow keys to navigate and type freely in it. The hints like `^O` shown on the bottom mean ctrl+o.\n
\n
You'd use the arrow keys to go down to the line that probably says `/dev/md0 /mnt/raid morecrap`, put a `#` in front of it, press ctrl+w then enter to save. If that worked, ctrl+x to exit and try a `reboot` again.\n
\n
Obviously can't promise this is "the" error preventing the system from booting, but it's generally a good idea to disable broken stuff like this to get the system working again, then fix it from there. Hopefully, this does the trick. Your RAID setup will not be activated on reboot after you do this but it's not going to permanently delete data or anything.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 9
+score: 0
+lastActive: DateTime @1703206049 {#1874
date: 2023-12-22 01:47:29.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@SuperSpruce@lemmy.zip"
"@djtech@lemmy.world"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#1883 …}
+nested: Doctrine\ORM\PersistentCollection {#2389 …}
+votes: Doctrine\ORM\PersistentCollection {#2387 …}
+reports: Doctrine\ORM\PersistentCollection {#2394 …}
+favourites: Doctrine\ORM\PersistentCollection {#2393 …}
+notifications: Doctrine\ORM\PersistentCollection {#1381 …}
-id: 241990
-bodyTs: "'/dev/md0':86 '/etc/fstab':30,39 '/etc/fstab.backup':31 '/mnt/raid':87 'activ':162 'anyth':179 'arrow':51,75 'basic':44 'boot':5,126 'bottom':67 'broken':136 'cli':45 'copi':35 'cp':29 'ctrl':69,96,105 'd':25,72 'data':177 'delet':176 'disabl':135 'editor':46 'enter':99 'error':121 'exit':108 'fix':147 'freeli':57 'front':92 'general':130 'get':141 'go':78,173 'good':132 'hint':61 'hope':13,151 'idea':133 'isn':16 'key':52,76 'like':4,62,138 'line':82 'live':11 'make':33 'mean':68 'might':8 'mode':22 'morecrap':88 'nano':38,42 'navig':54 'need':9 'o':63,70 'obvious':114 'otherwis':6 'perman':175 'press':95 'prevent':122 'probabl':84 'promis':117 'put':89 'raid':157 're':2 'read':20 'read-on':19 'reboot':112,164 'recommend':26 'run':41 'save':101 'say':85 'setup':158 'shown':64 'stuff':137 'system':15,124,143 'tri':110 'trick':155 'type':56 'usb':12 'use':49,73 'w':97 'work':104,144 'x':106"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/717944/-/comment/4251226"
+editedAt: null
+createdAt: DateTimeImmutable @1703206049 {#1907
date: 2023-12-22 01:47:29.0 +01:00
}
+"title": 241990
} |
|
Show voter details
|
| 61 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 62 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 63 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 64 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
| 65 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 66 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
} |
|
Show voter details
|
| 67 |
DENIED
|
edit
|
App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
} |
|
Show voter details
|
| 68 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385}
0 => App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
} |
|
Show voter details
|
| 69 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
| 70 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
} |
|
Show voter details
|
| 71 |
DENIED
|
edit
|
App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
} |
|
Show voter details
|
| 72 |
DENIED
|
moderate
|
App\Entity\EntryComment {#2021
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382
+user: Proxies\__CG__\App\Entity\User {#2233 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2284 …}
+slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
+title: "Is it actually dangerous to run Firefox as root?"
+url: null
+body: """
I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
\n
I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
\n
I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
\n
This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 88
+favouriteCount: 93
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1712572029 {#2079
date: 2024-04-08 12:27:09.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2251 …}
+votes: Doctrine\ORM\PersistentCollection {#2255 …}
+reports: Doctrine\ORM\PersistentCollection {#2248 …}
+favourites: Doctrine\ORM\PersistentCollection {#2172 …}
+notifications: Doctrine\ORM\PersistentCollection {#2179 …}
+badges: Doctrine\ORM\PersistentCollection {#2169 …}
+children: [
1 => App\Entity\EntryComment {#1385
+user: App\Entity\User {#260 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1382 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1401 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: """
Realistically, there is only a trivial pure *security* difference between logging in directly to root vs sudo set up to allow unrestricted NOPASS access to specific users: the attacker might not know the correct username when trying to brute force. That doesn't matter in the slightest unless you have password auth enabled with trivial passwords.\n
\n
But there is a difference in the ability to audit what happened after the fact if you have any kind of service storing system logs remotely or in a tamper-proof way. If there's more than one admin user on a service, that is very very important. Knowing where the compromise happened is absolutely essential to make things safe.\n
\n
If there's only ever going to be one administrative user (personal machine), logging in directly as root for manual administrative tasks is fine: you already know who the user is. If there's any chance there might be more administrative users later (small but growing business), you should consider doing it right from the start.
"""
+lang: "en"
+isAdult: false
+favouriteCount: 2
+score: 0
+lastActive: DateTime @1704308775 {#1402
date: 2024-01-03 20:06:15.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
]
+children: Doctrine\ORM\PersistentCollection {#1363 …}
+nested: Doctrine\ORM\PersistentCollection {#1362 …}
+votes: Doctrine\ORM\PersistentCollection {#2019 …}
+reports: Doctrine\ORM\PersistentCollection {#2030 …}
+favourites: Doctrine\ORM\PersistentCollection {#2026 …}
+notifications: Doctrine\ORM\PersistentCollection {#2022 …}
-id: 277251
-bodyTs: "'abil':64 'absolut':112 'access':24 'admin':96 'administr':127,138,158 'allow':21 'alreadi':143 'attack':29 'audit':66 'auth':52 'brute':39 'busi':164 'chanc':153 'compromis':109 'consid':167 'correct':34 'differ':9,61 'direct':13,133 'doesn':42 'enabl':53 'essenti':113 'ever':122 'fact':71 'fine':141 'forc':40 'go':123 'grow':163 'happen':68,110 'import':105 'kind':76 'know':32,106,144 'later':160 'log':11,81,131 'machin':130 'make':115 'manual':137 'matter':44 'might':30,155 'nopass':23 'one':95,126 'password':51,56 'person':129 'proof':88 'pure':7 'realist':1 'remot':82 'right':170 'root':15,135 'safe':117 'secur':8 'servic':78,100 'set':18 'slightest':47 'small':161 'specif':26 'start':173 'store':79 'sudo':17 'system':80 'tamper':87 'tamper-proof':86 'task':139 'thing':116 'tri':37 'trivial':6,55 'unless':48 'unrestrict':22 'user':27,97,128,147,159 'usernam':35 'vs':16 'way':89"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4390220"
+editedAt: null
+createdAt: DateTimeImmutable @1704308775 {#1405
date: 2024-01-03 20:06:15.0 +01:00
}
+"title": 277251
}
0 => App\Entity\EntryComment {#2021}
]
-id: 26893
-titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
-bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704359289
+visibility: "visible "
+apId: "https://lemmy.ml/post/10062491"
+editedAt: DateTimeImmutable @1711170613 {#2206
date: 2024-03-23 06:10:13.0 +01:00
}
+createdAt: DateTimeImmutable @1704272889 {#2301
date: 2024-01-03 10:08:09.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1734 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#2028 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1404 …}
+body: "Well, my recommendations for anything semi-automated would be Ansible and Fabric/Invoke. Fabric is also a Python tool (though it's only used on the controlling side, unlike Ansible), so if that's a no-go, I'm afraid I don't have much to offer."
+lang: "en"
+isAdult: false
+favouriteCount: 1
+score: 0
+lastActive: DateTime @1704388225 {#2025
date: 2024-01-04 18:10:25.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
"@HiddenLayer5@lemmy.ml"
"@arjache@kbin.social"
"@taladar@sh.itjust.works"
"@exu@feditown.com"
"@chameleon@kbin.social"
]
+children: Doctrine\ORM\PersistentCollection {#2029 …}
+nested: Doctrine\ORM\PersistentCollection {#2020 …}
+votes: Doctrine\ORM\PersistentCollection {#2027 …}
+reports: Doctrine\ORM\PersistentCollection {#2031 …}
+favourites: Doctrine\ORM\PersistentCollection {#2037 …}
+notifications: Doctrine\ORM\PersistentCollection {#2075 …}
-id: 280049
-bodyTs: "'afraid':41 'also':16 'ansibl':11,30 'anyth':5 'autom':8 'control':27 'fabric':14 'fabric/invoke':13 'go':38 'm':40 'much':46 'no-go':36 'offer':48 'python':18 'recommend':3 'semi':7 'semi-autom':6 'side':28 'though':20 'tool':19 'unlik':29 'use':24 'well':1 'would':9"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4404919"
+editedAt: DateTimeImmutable @1711630408 {#2011
date: 2024-03-28 13:53:28.0 +01:00
}
+createdAt: DateTimeImmutable @1704388225 {#2033
date: 2024-01-04 18:10:25.0 +01:00
}
+"title": 280049
} |
|
Show voter details
|
| 73 |
DENIED
|
ROLE_ADMIN
|
null |
|
Show voter details
|
| 74 |
DENIED
|
ROLE_MODERATOR
|
null |
|
Show voter details
|