GET https://kbin.spritesserver.nl/index.php/m/linux@lemmy.ml/t/26893/Is-it-actually-dangerous-to-run-Firefox-as-root/top

Response
200 OK
IP
216.73.216.9
Profiled on
Token
35f9b8

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 18.21 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.05 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#265
    +icon: Proxies\__CG__\App\Entity\Image {#246 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#275
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#237 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
    +entries: Doctrine\ORM\PersistentCollection {#180 …}
    +posts: Doctrine\ORM\PersistentCollection {#138 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
    +bans: Doctrine\ORM\PersistentCollection {#117 …}
    +reports: Doctrine\ORM\PersistentCollection {#103 …}
    +badges: Doctrine\ORM\PersistentCollection {#81 …}
    +logs: Doctrine\ORM\PersistentCollection {#71 …}
    +awards: Doctrine\ORM\PersistentCollection {#1346 …}
    +categories: Doctrine\ORM\PersistentCollection {#1823 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#269
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#271
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
  +title: "Is it actually dangerous to run Firefox as root?"
  +url: null
  +body: """
    I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
    \n
    I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
    \n
    I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
    \n
    This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 88
  +favouriteCount: 93
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712572029 {#2414
    date: 2024-04-08 12:27:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 26893
  -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
  -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704359289
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10062491"
  +editedAt: DateTimeImmutable @1711170613 {#1793
    date: 2024-03-23 06:10:13.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704272889 {#2402
    date: 2024-01-03 10:08:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#265
    +icon: Proxies\__CG__\App\Entity\Image {#246 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#275
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#237 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
    +entries: Doctrine\ORM\PersistentCollection {#180 …}
    +posts: Doctrine\ORM\PersistentCollection {#138 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
    +bans: Doctrine\ORM\PersistentCollection {#117 …}
    +reports: Doctrine\ORM\PersistentCollection {#103 …}
    +badges: Doctrine\ORM\PersistentCollection {#81 …}
    +logs: Doctrine\ORM\PersistentCollection {#71 …}
    +awards: Doctrine\ORM\PersistentCollection {#1346 …}
    +categories: Doctrine\ORM\PersistentCollection {#1823 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#269
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#271
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
  +title: "Is it actually dangerous to run Firefox as root?"
  +url: null
  +body: """
    I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
    \n
    I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
    \n
    I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
    \n
    This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 88
  +favouriteCount: 93
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712572029 {#2414
    date: 2024-04-08 12:27:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 26893
  -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
  -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704359289
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10062491"
  +editedAt: DateTimeImmutable @1711170613 {#1793
    date: 2024-03-23 06:10:13.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704272889 {#2402
    date: 2024-01-03 10:08:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2400
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#265
    +icon: Proxies\__CG__\App\Entity\Image {#246 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#275
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#237 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
    +entries: Doctrine\ORM\PersistentCollection {#180 …}
    +posts: Doctrine\ORM\PersistentCollection {#138 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
    +bans: Doctrine\ORM\PersistentCollection {#117 …}
    +reports: Doctrine\ORM\PersistentCollection {#103 …}
    +badges: Doctrine\ORM\PersistentCollection {#81 …}
    +logs: Doctrine\ORM\PersistentCollection {#71 …}
    +awards: Doctrine\ORM\PersistentCollection {#1346 …}
    +categories: Doctrine\ORM\PersistentCollection {#1823 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#269
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#271
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
  +title: "Is it actually dangerous to run Firefox as root?"
  +url: null
  +body: """
    I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
    \n
    I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
    \n
    I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
    \n
    This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 88
  +favouriteCount: 93
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712572029 {#2414
    date: 2024-04-08 12:27:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 26893
  -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
  -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704359289
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10062491"
  +editedAt: DateTimeImmutable @1711170613 {#1793
    date: 2024-03-23 06:10:13.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704272889 {#2402
    date: 2024-01-03 10:08:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4014
  +user: App\Entity\User {#3963 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    You seriously need to stop what you’re doing. Log in with ssh only. If you need multiple terminals use multiple ssh sessions, or screen/tmux. If you need to search something do it on your desktop system.\n
    \n
    The server should not have Firefox installed, or KDE, or anything related to desktop apps. There’s no point and nothing good can come of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 195
  +score: 0
  +lastActive: DateTime @1711497528 {#4023
    date: 2024-03-27 00:58:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4012 …}
  +nested: Doctrine\ORM\PersistentCollection {#4010 …}
  +votes: Doctrine\ORM\PersistentCollection {#4008 …}
  +reports: Doctrine\ORM\PersistentCollection {#4006 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3974 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3978 …}
  -id: 276188
  -bodyTs: "'anyth':48 'app':52 'come':61 'desktop':36,51 'firefox':43 'good':59 'instal':44 'kde':46 'log':10 'multipl':18,21 'need':3,17,28 'noth':58 'point':56 're':8 'relat':49 'screen/tmux':25 'search':30 'serious':2 'server':39 'session':23 'someth':31 'ssh':13,22 'stop':5 'system':37 'termin':19 'use':20"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5716078"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704283379 {#3955
    date: 2024-01-03 13:02:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4014
  +user: App\Entity\User {#3963 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    You seriously need to stop what you’re doing. Log in with ssh only. If you need multiple terminals use multiple ssh sessions, or screen/tmux. If you need to search something do it on your desktop system.\n
    \n
    The server should not have Firefox installed, or KDE, or anything related to desktop apps. There’s no point and nothing good can come of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 195
  +score: 0
  +lastActive: DateTime @1711497528 {#4023
    date: 2024-03-27 00:58:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4012 …}
  +nested: Doctrine\ORM\PersistentCollection {#4010 …}
  +votes: Doctrine\ORM\PersistentCollection {#4008 …}
  +reports: Doctrine\ORM\PersistentCollection {#4006 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3974 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3978 …}
  -id: 276188
  -bodyTs: "'anyth':48 'app':52 'come':61 'desktop':36,51 'firefox':43 'good':59 'instal':44 'kde':46 'log':10 'multipl':18,21 'need':3,17,28 'noth':58 'point':56 're':8 'relat':49 'screen/tmux':25 'search':30 'serious':2 'server':39 'session':23 'someth':31 'ssh':13,22 'stop':5 'system':37 'termin':19 'use':20"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5716078"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704283379 {#3955
    date: 2024-01-03 13:02:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4014
  +user: App\Entity\User {#3963 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    You seriously need to stop what you’re doing. Log in with ssh only. If you need multiple terminals use multiple ssh sessions, or screen/tmux. If you need to search something do it on your desktop system.\n
    \n
    The server should not have Firefox installed, or KDE, or anything related to desktop apps. There’s no point and nothing good can come of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 195
  +score: 0
  +lastActive: DateTime @1711497528 {#4023
    date: 2024-03-27 00:58:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4012 …}
  +nested: Doctrine\ORM\PersistentCollection {#4010 …}
  +votes: Doctrine\ORM\PersistentCollection {#4008 …}
  +reports: Doctrine\ORM\PersistentCollection {#4006 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3974 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3978 …}
  -id: 276188
  -bodyTs: "'anyth':48 'app':52 'come':61 'desktop':36,51 'firefox':43 'good':59 'instal':44 'kde':46 'log':10 'multipl':18,21 'need':3,17,28 'noth':58 'point':56 're':8 'relat':49 'screen/tmux':25 'search':30 'serious':2 'server':39 'session':23 'someth':31 'ssh':13,22 'stop':5 'system':37 'termin':19 'use':20"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5716078"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704283379 {#3955
    date: 2024-01-03 13:02:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#4060
  +user: App\Entity\User {#4044 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > Is it actually dangerous to run Firefox as root?\n
    \n
    Yes, very. This is not specific to Firefox, but anything running as root gets access to everything. Only one thing has to go wrong for the whole system to get busted.\n
    \n
    > usually logged into KDE Plasma as root.\n
    \n
    Please don’t do this! DEs are not tested to be run as root! Millions of lines of code are expected to not have access to anything they shouldn’t have and as such might be built to fail quietly if accessing something they shouldn’t in the first place. Same thing applies to Firefox, really.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 68
  +score: 0
  +lastActive: DateTime @1711456001 {#4066
    date: 2024-03-26 13:26:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4052 …}
  +nested: Doctrine\ORM\PersistentCollection {#4055 …}
  +votes: Doctrine\ORM\PersistentCollection {#4053 …}
  +reports: Doctrine\ORM\PersistentCollection {#4051 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4050 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4041 …}
  -id: 276028
  -bodyTs: "'access':24,72,89 'actual':3 'anyth':19,74 'appli':100 'built':84 'bust':40 'code':66 'danger':4 'des':53 'everyth':26 'expect':68 'fail':86 'firefox':7,17,102 'first':96 'get':23,39 'go':32 'kde':44 'line':64 'log':42 'might':82 'million':62 'one':28 'place':97 'plasma':45 'pleas':48 'quiet':87 'realli':103 'root':9,22,47,61 'run':6,20,59 'shouldn':76,92 'someth':90 'specif':15 'system':37 'test':56 'thing':29,99 'usual':41 'whole':36 'wrong':33 'yes':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.cafe/comment/3797028"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276284 {#4064
    date: 2024-01-03 11:04:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#4060
  +user: App\Entity\User {#4044 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > Is it actually dangerous to run Firefox as root?\n
    \n
    Yes, very. This is not specific to Firefox, but anything running as root gets access to everything. Only one thing has to go wrong for the whole system to get busted.\n
    \n
    > usually logged into KDE Plasma as root.\n
    \n
    Please don’t do this! DEs are not tested to be run as root! Millions of lines of code are expected to not have access to anything they shouldn’t have and as such might be built to fail quietly if accessing something they shouldn’t in the first place. Same thing applies to Firefox, really.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 68
  +score: 0
  +lastActive: DateTime @1711456001 {#4066
    date: 2024-03-26 13:26:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4052 …}
  +nested: Doctrine\ORM\PersistentCollection {#4055 …}
  +votes: Doctrine\ORM\PersistentCollection {#4053 …}
  +reports: Doctrine\ORM\PersistentCollection {#4051 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4050 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4041 …}
  -id: 276028
  -bodyTs: "'access':24,72,89 'actual':3 'anyth':19,74 'appli':100 'built':84 'bust':40 'code':66 'danger':4 'des':53 'everyth':26 'expect':68 'fail':86 'firefox':7,17,102 'first':96 'get':23,39 'go':32 'kde':44 'line':64 'log':42 'might':82 'million':62 'one':28 'place':97 'plasma':45 'pleas':48 'quiet':87 'realli':103 'root':9,22,47,61 'run':6,20,59 'shouldn':76,92 'someth':90 'specif':15 'system':37 'test':56 'thing':29,99 'usual':41 'whole':36 'wrong':33 'yes':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.cafe/comment/3797028"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276284 {#4064
    date: 2024-01-03 11:04:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#4060
  +user: App\Entity\User {#4044 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > Is it actually dangerous to run Firefox as root?\n
    \n
    Yes, very. This is not specific to Firefox, but anything running as root gets access to everything. Only one thing has to go wrong for the whole system to get busted.\n
    \n
    > usually logged into KDE Plasma as root.\n
    \n
    Please don’t do this! DEs are not tested to be run as root! Millions of lines of code are expected to not have access to anything they shouldn’t have and as such might be built to fail quietly if accessing something they shouldn’t in the first place. Same thing applies to Firefox, really.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 68
  +score: 0
  +lastActive: DateTime @1711456001 {#4066
    date: 2024-03-26 13:26:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4052 …}
  +nested: Doctrine\ORM\PersistentCollection {#4055 …}
  +votes: Doctrine\ORM\PersistentCollection {#4053 …}
  +reports: Doctrine\ORM\PersistentCollection {#4051 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4050 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4041 …}
  -id: 276028
  -bodyTs: "'access':24,72,89 'actual':3 'anyth':19,74 'appli':100 'built':84 'bust':40 'code':66 'danger':4 'des':53 'everyth':26 'expect':68 'fail':86 'firefox':7,17,102 'first':96 'get':23,39 'go':32 'kde':44 'line':64 'log':42 'might':82 'million':62 'one':28 'place':97 'plasma':45 'pleas':48 'quiet':87 'realli':103 'root':9,22,47,61 'run':6,20,59 'shouldn':76,92 'someth':90 'specif':15 'system':37 'test':56 'thing':29,99 'usual':41 'whole':36 'wrong':33 'yes':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.cafe/comment/3797028"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276284 {#4064
    date: 2024-01-03 11:04:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#4127
  +user: App\Entity\User {#4140 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Your frame of mind is “dangerous”. If you are browsing on your servers as root, you need to not manage servers anymore. If that sounded harsh, learn about attack surface area first and then I might let you back in the server room.\n
    \n
    You won’t find discussions about running browsers as root because it’s not something you should need to discuss. Also, you don’t need to be browsing “shady” websites to get compromised. Get that myth out of your head.\n
    \n
    > find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system\n
    \n
    How is extra steps and added latency more convenient? The latency of a console via remote desktop would drive me crazy. Hell, I haven’t installed any kind of desktop environment on Linux server for over 20 years. It’s not needed and a waste of resources. Who needs file managers anyway?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 63
  +score: 0
  +lastActive: DateTime @1711243271 {#4122
    date: 2024-03-24 02:21:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4128 …}
  +nested: Doctrine\ORM\PersistentCollection {#4130 …}
  +votes: Doctrine\ORM\PersistentCollection {#4132 …}
  +reports: Doctrine\ORM\PersistentCollection {#4134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4138 …}
  -id: 276435
  -bodyTs: "'20':142 'ad':111 'also':64 'anymor':22 'anyway':157 'area':31 'attack':29 'back':39 'brows':10,71 'browser':51 'command':91 'compromis':76 'consol':119 'conveni':87,114 'crazi':126 'danger':6 'desktop':96,122,135 'direct':99 'discuss':48,63 'drive':124 'environ':136 'extra':108 'file':155 'find':47,84 'first':32 'frame':2 'get':75,77 'harsh':26 'haven':129 'head':83 'hell':127 'ing':102 'instal':131 'instead':97 'kind':133 'latenc':112,116 'learn':27 'let':37 'line':92 'linux':138 'manag':20,156 'might':36 'mind':4 'myth':79 'need':17,61,68,147,154 'remot':95,121 'resourc':152 'room':43 'root':15,53 'run':50 'server':13,21,42,139 'shadi':72 'someth':58 'sound':25 'ssh':101 'ssh-ing':100 'step':109 'surfac':30 'system':105 'use':89 'via':120 'wast':150 'websit':73 'won':45 'would':123 'year':143"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6036897"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704290349 {#4123
    date: 2024-01-03 14:59:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#4127
  +user: App\Entity\User {#4140 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Your frame of mind is “dangerous”. If you are browsing on your servers as root, you need to not manage servers anymore. If that sounded harsh, learn about attack surface area first and then I might let you back in the server room.\n
    \n
    You won’t find discussions about running browsers as root because it’s not something you should need to discuss. Also, you don’t need to be browsing “shady” websites to get compromised. Get that myth out of your head.\n
    \n
    > find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system\n
    \n
    How is extra steps and added latency more convenient? The latency of a console via remote desktop would drive me crazy. Hell, I haven’t installed any kind of desktop environment on Linux server for over 20 years. It’s not needed and a waste of resources. Who needs file managers anyway?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 63
  +score: 0
  +lastActive: DateTime @1711243271 {#4122
    date: 2024-03-24 02:21:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4128 …}
  +nested: Doctrine\ORM\PersistentCollection {#4130 …}
  +votes: Doctrine\ORM\PersistentCollection {#4132 …}
  +reports: Doctrine\ORM\PersistentCollection {#4134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4138 …}
  -id: 276435
  -bodyTs: "'20':142 'ad':111 'also':64 'anymor':22 'anyway':157 'area':31 'attack':29 'back':39 'brows':10,71 'browser':51 'command':91 'compromis':76 'consol':119 'conveni':87,114 'crazi':126 'danger':6 'desktop':96,122,135 'direct':99 'discuss':48,63 'drive':124 'environ':136 'extra':108 'file':155 'find':47,84 'first':32 'frame':2 'get':75,77 'harsh':26 'haven':129 'head':83 'hell':127 'ing':102 'instal':131 'instead':97 'kind':133 'latenc':112,116 'learn':27 'let':37 'line':92 'linux':138 'manag':20,156 'might':36 'mind':4 'myth':79 'need':17,61,68,147,154 'remot':95,121 'resourc':152 'room':43 'root':15,53 'run':50 'server':13,21,42,139 'shadi':72 'someth':58 'sound':25 'ssh':101 'ssh-ing':100 'step':109 'surfac':30 'system':105 'use':89 'via':120 'wast':150 'websit':73 'won':45 'would':123 'year':143"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6036897"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704290349 {#4123
    date: 2024-01-03 14:59:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#4127
  +user: App\Entity\User {#4140 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Your frame of mind is “dangerous”. If you are browsing on your servers as root, you need to not manage servers anymore. If that sounded harsh, learn about attack surface area first and then I might let you back in the server room.\n
    \n
    You won’t find discussions about running browsers as root because it’s not something you should need to discuss. Also, you don’t need to be browsing “shady” websites to get compromised. Get that myth out of your head.\n
    \n
    > find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system\n
    \n
    How is extra steps and added latency more convenient? The latency of a console via remote desktop would drive me crazy. Hell, I haven’t installed any kind of desktop environment on Linux server for over 20 years. It’s not needed and a waste of resources. Who needs file managers anyway?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 63
  +score: 0
  +lastActive: DateTime @1711243271 {#4122
    date: 2024-03-24 02:21:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4128 …}
  +nested: Doctrine\ORM\PersistentCollection {#4130 …}
  +votes: Doctrine\ORM\PersistentCollection {#4132 …}
  +reports: Doctrine\ORM\PersistentCollection {#4134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4138 …}
  -id: 276435
  -bodyTs: "'20':142 'ad':111 'also':64 'anymor':22 'anyway':157 'area':31 'attack':29 'back':39 'brows':10,71 'browser':51 'command':91 'compromis':76 'consol':119 'conveni':87,114 'crazi':126 'danger':6 'desktop':96,122,135 'direct':99 'discuss':48,63 'drive':124 'environ':136 'extra':108 'file':155 'find':47,84 'first':32 'frame':2 'get':75,77 'harsh':26 'haven':129 'head':83 'hell':127 'ing':102 'instal':131 'instead':97 'kind':133 'latenc':112,116 'learn':27 'let':37 'line':92 'linux':138 'manag':20,156 'might':36 'mind':4 'myth':79 'need':17,61,68,147,154 'remot':95,121 'resourc':152 'room':43 'root':15,53 'run':50 'server':13,21,42,139 'shadi':72 'someth':58 'sound':25 'ssh':101 'ssh-ing':100 'step':109 'surfac':30 'system':105 'use':89 'via':120 'wast':150 'websit':73 'won':45 'would':123 'year':143"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6036897"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704290349 {#4123
    date: 2024-01-03 14:59:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4201
  +user: App\Entity\User {#4214 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    [www.mozilla.org/en-US/security/…/mfsa2023-56/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/)\n
    \n
    That’s a link to the most recent release of Firefox and the security vulnerabilities that were fixed.\n
    \n
    You’ll notice the first one listed says, “This issue could allow an attacker to perform remote code execution and sandbox escape.”\n
    \n
    So if you visited a site that exploited that bug, it escaped the sandbox and ran whatever code it wanted to. Since you were running as root it could do anything it wants. Your device is now the property of someone else. Potentially all your data has been stolen. You probably didn’t even notice.\n
    \n
    Now. Realistically. You probably didn’t get exploited. Your device may not be vulnerable to that particular bug. But new bugs are found, and fixed, and created every day. Can you be sure you weren’t exploited?\n
    \n
    Let’s look at it a different way. Think of it like driving a car with no seatbelt or airbags. As long as you don’t crash, you’re fine. The car still works fine without seatbelts and you have more freedom to move your arms around.\n
    \n
    Let’s look at it a different way. Do you ever lock the door to your home/apartment? Heck do you even close the door? Why not leave it wide open?\n
    \n
    At the end of the day security is about layers and the trade offs for convenience. You can run KDE as root, and you can run Firefox as root. You’ll probably be fine. It’s like driving without a seatbelt or leaving your front door wide open, but you can do it. If you do drive with a seatbelt and at least close your front door, you can probably run KDE and Firefox as a regular user.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 61
  +score: 0
  +lastActive: DateTime @1704276047 {#4196
    date: 2024-01-03 11:00:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4202 …}
  +nested: Doctrine\ORM\PersistentCollection {#4204 …}
  +votes: Doctrine\ORM\PersistentCollection {#4206 …}
  +reports: Doctrine\ORM\PersistentCollection {#4208 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4210 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4212 …}
  -id: 276021
  -bodyTs: "'/en-us/security/':3 '/en-us/security/advisories/mfsa2023-56/)':7 '/mfsa2023-56':4 'airbag':159 'allow':37 'anyth':78 'arm':185 'around':186 'attack':39 'bug':57,120,123 'car':154,171 'close':208,280 'code':43,65 'conveni':232 'could':36,76 'crash':166 'creat':129 'data':93 'day':131,222 'devic':82,112 'didn':99,107 'differ':146,193 'door':200,210,262,283 'drive':152,254,273 'els':89 'end':219 'escap':47,59 'even':101,207 'ever':197 'everi':130 'execut':44 'exploit':55,110,139 'fine':169,174,250 'firefox':18,243,290 'first':30 'fix':25,127 'found':125 'freedom':181 'front':261,282 'get':109 'heck':204 'home/apartment':203 'issu':35 'kde':236,288 'layer':226 'least':279 'leav':213,259 'let':140,187 'like':151,253 'link':11 'list':32 'll':27,247 'lock':198 'long':161 'look':142,189 'may':113 'move':183 'new':122 'notic':28,102 'off':230 'one':31 'open':216,264 'particular':119 'perform':41 'potenti':90 'probabl':98,106,248,286 'properti':86 'ran':63 're':168 'realist':104 'recent':15 'regular':293 'releas':16 'remot':42 'root':74,238,245 'run':72,235,242,287 'sandbox':46,61 'say':33 'seatbelt':157,176,257,276 'secur':21,223 'sinc':69 'site':53 'someon':88 'still':172 'stolen':96 'sure':135 'think':148 'trade':229 'user':294 'visit':51 'vulner':22,116 'want':67,80 'way':147,194 'weren':137 'whatev':64 'wide':215,263 'without':175,255 'work':173 'www.mozilla.org':2,6 'www.mozilla.org/en-us/security/':1 'www.mozilla.org/en-us/security/advisories/mfsa2023-56/)':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6375764"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276047 {#4197
    date: 2024-01-03 11:00:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4201
  +user: App\Entity\User {#4214 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    [www.mozilla.org/en-US/security/…/mfsa2023-56/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/)\n
    \n
    That’s a link to the most recent release of Firefox and the security vulnerabilities that were fixed.\n
    \n
    You’ll notice the first one listed says, “This issue could allow an attacker to perform remote code execution and sandbox escape.”\n
    \n
    So if you visited a site that exploited that bug, it escaped the sandbox and ran whatever code it wanted to. Since you were running as root it could do anything it wants. Your device is now the property of someone else. Potentially all your data has been stolen. You probably didn’t even notice.\n
    \n
    Now. Realistically. You probably didn’t get exploited. Your device may not be vulnerable to that particular bug. But new bugs are found, and fixed, and created every day. Can you be sure you weren’t exploited?\n
    \n
    Let’s look at it a different way. Think of it like driving a car with no seatbelt or airbags. As long as you don’t crash, you’re fine. The car still works fine without seatbelts and you have more freedom to move your arms around.\n
    \n
    Let’s look at it a different way. Do you ever lock the door to your home/apartment? Heck do you even close the door? Why not leave it wide open?\n
    \n
    At the end of the day security is about layers and the trade offs for convenience. You can run KDE as root, and you can run Firefox as root. You’ll probably be fine. It’s like driving without a seatbelt or leaving your front door wide open, but you can do it. If you do drive with a seatbelt and at least close your front door, you can probably run KDE and Firefox as a regular user.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 61
  +score: 0
  +lastActive: DateTime @1704276047 {#4196
    date: 2024-01-03 11:00:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4202 …}
  +nested: Doctrine\ORM\PersistentCollection {#4204 …}
  +votes: Doctrine\ORM\PersistentCollection {#4206 …}
  +reports: Doctrine\ORM\PersistentCollection {#4208 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4210 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4212 …}
  -id: 276021
  -bodyTs: "'/en-us/security/':3 '/en-us/security/advisories/mfsa2023-56/)':7 '/mfsa2023-56':4 'airbag':159 'allow':37 'anyth':78 'arm':185 'around':186 'attack':39 'bug':57,120,123 'car':154,171 'close':208,280 'code':43,65 'conveni':232 'could':36,76 'crash':166 'creat':129 'data':93 'day':131,222 'devic':82,112 'didn':99,107 'differ':146,193 'door':200,210,262,283 'drive':152,254,273 'els':89 'end':219 'escap':47,59 'even':101,207 'ever':197 'everi':130 'execut':44 'exploit':55,110,139 'fine':169,174,250 'firefox':18,243,290 'first':30 'fix':25,127 'found':125 'freedom':181 'front':261,282 'get':109 'heck':204 'home/apartment':203 'issu':35 'kde':236,288 'layer':226 'least':279 'leav':213,259 'let':140,187 'like':151,253 'link':11 'list':32 'll':27,247 'lock':198 'long':161 'look':142,189 'may':113 'move':183 'new':122 'notic':28,102 'off':230 'one':31 'open':216,264 'particular':119 'perform':41 'potenti':90 'probabl':98,106,248,286 'properti':86 'ran':63 're':168 'realist':104 'recent':15 'regular':293 'releas':16 'remot':42 'root':74,238,245 'run':72,235,242,287 'sandbox':46,61 'say':33 'seatbelt':157,176,257,276 'secur':21,223 'sinc':69 'site':53 'someon':88 'still':172 'stolen':96 'sure':135 'think':148 'trade':229 'user':294 'visit':51 'vulner':22,116 'want':67,80 'way':147,194 'weren':137 'whatev':64 'wide':215,263 'without':175,255 'work':173 'www.mozilla.org':2,6 'www.mozilla.org/en-us/security/':1 'www.mozilla.org/en-us/security/advisories/mfsa2023-56/)':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6375764"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276047 {#4197
    date: 2024-01-03 11:00:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4201
  +user: App\Entity\User {#4214 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    [www.mozilla.org/en-US/security/…/mfsa2023-56/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/)\n
    \n
    That’s a link to the most recent release of Firefox and the security vulnerabilities that were fixed.\n
    \n
    You’ll notice the first one listed says, “This issue could allow an attacker to perform remote code execution and sandbox escape.”\n
    \n
    So if you visited a site that exploited that bug, it escaped the sandbox and ran whatever code it wanted to. Since you were running as root it could do anything it wants. Your device is now the property of someone else. Potentially all your data has been stolen. You probably didn’t even notice.\n
    \n
    Now. Realistically. You probably didn’t get exploited. Your device may not be vulnerable to that particular bug. But new bugs are found, and fixed, and created every day. Can you be sure you weren’t exploited?\n
    \n
    Let’s look at it a different way. Think of it like driving a car with no seatbelt or airbags. As long as you don’t crash, you’re fine. The car still works fine without seatbelts and you have more freedom to move your arms around.\n
    \n
    Let’s look at it a different way. Do you ever lock the door to your home/apartment? Heck do you even close the door? Why not leave it wide open?\n
    \n
    At the end of the day security is about layers and the trade offs for convenience. You can run KDE as root, and you can run Firefox as root. You’ll probably be fine. It’s like driving without a seatbelt or leaving your front door wide open, but you can do it. If you do drive with a seatbelt and at least close your front door, you can probably run KDE and Firefox as a regular user.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 61
  +score: 0
  +lastActive: DateTime @1704276047 {#4196
    date: 2024-01-03 11:00:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4202 …}
  +nested: Doctrine\ORM\PersistentCollection {#4204 …}
  +votes: Doctrine\ORM\PersistentCollection {#4206 …}
  +reports: Doctrine\ORM\PersistentCollection {#4208 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4210 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4212 …}
  -id: 276021
  -bodyTs: "'/en-us/security/':3 '/en-us/security/advisories/mfsa2023-56/)':7 '/mfsa2023-56':4 'airbag':159 'allow':37 'anyth':78 'arm':185 'around':186 'attack':39 'bug':57,120,123 'car':154,171 'close':208,280 'code':43,65 'conveni':232 'could':36,76 'crash':166 'creat':129 'data':93 'day':131,222 'devic':82,112 'didn':99,107 'differ':146,193 'door':200,210,262,283 'drive':152,254,273 'els':89 'end':219 'escap':47,59 'even':101,207 'ever':197 'everi':130 'execut':44 'exploit':55,110,139 'fine':169,174,250 'firefox':18,243,290 'first':30 'fix':25,127 'found':125 'freedom':181 'front':261,282 'get':109 'heck':204 'home/apartment':203 'issu':35 'kde':236,288 'layer':226 'least':279 'leav':213,259 'let':140,187 'like':151,253 'link':11 'list':32 'll':27,247 'lock':198 'long':161 'look':142,189 'may':113 'move':183 'new':122 'notic':28,102 'off':230 'one':31 'open':216,264 'particular':119 'perform':41 'potenti':90 'probabl':98,106,248,286 'properti':86 'ran':63 're':168 'realist':104 'recent':15 'regular':293 'releas':16 'remot':42 'root':74,238,245 'run':72,235,242,287 'sandbox':46,61 'say':33 'seatbelt':157,176,257,276 'secur':21,223 'sinc':69 'site':53 'someon':88 'still':172 'stolen':96 'sure':135 'think':148 'trade':229 'user':294 'visit':51 'vulner':22,116 'want':67,80 'way':147,194 'weren':137 'whatev':64 'wide':215,263 'without':175,255 'work':173 'www.mozilla.org':2,6 'www.mozilla.org/en-us/security/':1 'www.mozilla.org/en-us/security/advisories/mfsa2023-56/)':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6375764"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704276047 {#4197
    date: 2024-01-03 11:00:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#4275
  +user: App\Entity\User {#4288 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "I think there are many security issues with your setup. You really, really shouldn’t do everything as root. That is just a time bomb waiting to blow."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 47
  +score: 0
  +lastActive: DateTime @1704322263 {#4270
    date: 2024-01-03 23:51:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4276 …}
  +nested: Doctrine\ORM\PersistentCollection {#4278 …}
  +votes: Doctrine\ORM\PersistentCollection {#4280 …}
  +reports: Doctrine\ORM\PersistentCollection {#4282 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4284 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4286 …}
  -id: 277870
  -bodyTs: "'blow':28 'bomb':25 'everyth':17 'issu':7 'mani':5 'realli':12,13 'root':19 'secur':6 'setup':10 'shouldn':14 'think':2 'time':24 'wait':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5953704"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704322263 {#4271
    date: 2024-01-03 23:51:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#4275
  +user: App\Entity\User {#4288 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "I think there are many security issues with your setup. You really, really shouldn’t do everything as root. That is just a time bomb waiting to blow."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 47
  +score: 0
  +lastActive: DateTime @1704322263 {#4270
    date: 2024-01-03 23:51:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4276 …}
  +nested: Doctrine\ORM\PersistentCollection {#4278 …}
  +votes: Doctrine\ORM\PersistentCollection {#4280 …}
  +reports: Doctrine\ORM\PersistentCollection {#4282 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4284 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4286 …}
  -id: 277870
  -bodyTs: "'blow':28 'bomb':25 'everyth':17 'issu':7 'mani':5 'realli':12,13 'root':19 'secur':6 'setup':10 'shouldn':14 'think':2 'time':24 'wait':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5953704"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704322263 {#4271
    date: 2024-01-03 23:51:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#4275
  +user: App\Entity\User {#4288 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "I think there are many security issues with your setup. You really, really shouldn’t do everything as root. That is just a time bomb waiting to blow."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 47
  +score: 0
  +lastActive: DateTime @1704322263 {#4270
    date: 2024-01-03 23:51:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4276 …}
  +nested: Doctrine\ORM\PersistentCollection {#4278 …}
  +votes: Doctrine\ORM\PersistentCollection {#4280 …}
  +reports: Doctrine\ORM\PersistentCollection {#4282 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4284 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4286 …}
  -id: 277870
  -bodyTs: "'blow':28 'bomb':25 'everyth':17 'issu':7 'mani':5 'realli':12,13 'root':19 'secur':6 'setup':10 'shouldn':14 'think':2 'time':24 'wait':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5953704"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704322263 {#4271
    date: 2024-01-03 23:51:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#4349
  +user: App\Entity\User {#4362 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Realistically it’s not super dangerous, and no you probably don’t have a virus just from browsing a few tech support sites, but you do eliminate your last line of defense when you run software as root. As you know, root can read/change/delete *anything* on your system whereas regular users are generally restricted to their own data. So if there is a security problem in the software, it’s made worse by the fact that you were running it as root.\n
    \n
    You are right though that Firefox does still have its own protections - it’s probably one of the most hardened pieces of software on your computer exactly because it connects to the whole wide internet - and those protections are not negated by running as root. However if those protections fail, the attacker has the keys to the kingdom rather than just a sizable chunk of the kingdom.\n
    \n
    To put that in perspective though, if there is a Firefox exploit and a hacker gets access to your regular user account, that’s already pretty bad in itself. Even if you run as a regular unprivileged user they would still have have access to things like: your personal documents, your ssh keys, your Firefox profile with your browsing history, your session cookies and your saved passwords, your e-mail, your paypal account, your banking information, …\n
    \n
    As root, they could obviously do even more like damage like reading *all* users’ data, installing a keylogger or screengrabber, installing a rootkit to make themselves undetectable, but for most regular users most of the damage is already done when their own account is compromised.\n
    \n
    So when these discussions come up, I always have to think about this XKCD comic:\n
    \n
    ![](https://imgs.xkcd.com/comics/authorization_2x.png)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 35
  +score: 0
  +lastActive: DateTime @1711203915 {#4343
    date: 2024-03-23 15:25:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4350 …}
  +nested: Doctrine\ORM\PersistentCollection {#4352 …}
  +votes: Doctrine\ORM\PersistentCollection {#4354 …}
  +reports: Doctrine\ORM\PersistentCollection {#4356 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4358 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4360 …}
  -id: 276119
  -bodyTs: "'/comics/authorization_2x.png)':289 'access':166,193 'account':171,223,269 'alreadi':174,264 'alway':279 'anyth':45 'attack':134 'bad':176 'bank':225 'brows':18,208 'chunk':146 'come':276 'comic':286 'compromis':271 'comput':108 'connect':112 'cooki':212 'could':230 'damag':236,262 'danger':6 'data':58,241 'defens':32 'discuss':275 'document':199 'done':265 'e':219 'e-mail':218 'elimin':27 'even':179,233 'exact':109 'exploit':161 'fact':75 'fail':132 'firefox':88,160,204 'general':53 'get':165 'hacker':164 'harden':102 'histori':209 'howev':128 'imgs.xkcd.com':288 'imgs.xkcd.com/comics/authorization_2x.png)':287 'inform':226 'instal':242,247 'internet':117 'key':137,202 'keylogg':244 'kingdom':140,149 'know':41 'last':29 'like':196,235,237 'line':30 'made':71 'mail':220 'make':251 'negat':123 'obvious':231 'one':98 'password':216 'paypal':222 'person':198 'perspect':154 'piec':103 'pretti':175 'probabl':10,97 'problem':65 'profil':205 'protect':94,120,131 'put':151 'rather':141 'read':238 'read/change/delete':44 'realist':1 'regular':50,169,185,257 'restrict':54 'right':85 'root':38,42,82,127,228 'rootkit':249 'run':35,79,125,182 'save':215 'screengrabb':246 'secur':64 'session':211 'site':23 'sizabl':145 'softwar':36,68,105 'ssh':201 'still':90,190 'super':5 'support':22 'system':48 'tech':21 'thing':195 'think':282 'though':86,155 'undetect':253 'unprivileg':186 'user':51,170,187,240,258 'virus':15 'wherea':49 'whole':115 'wide':116 'wors':72 'would':189 'xkcd':285"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5714539"
  +editedAt: DateTimeImmutable @1711191563 {#4344
    date: 2024-03-23 11:59:23.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704280297 {#4345
    date: 2024-01-03 12:11:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#4349
  +user: App\Entity\User {#4362 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Realistically it’s not super dangerous, and no you probably don’t have a virus just from browsing a few tech support sites, but you do eliminate your last line of defense when you run software as root. As you know, root can read/change/delete *anything* on your system whereas regular users are generally restricted to their own data. So if there is a security problem in the software, it’s made worse by the fact that you were running it as root.\n
    \n
    You are right though that Firefox does still have its own protections - it’s probably one of the most hardened pieces of software on your computer exactly because it connects to the whole wide internet - and those protections are not negated by running as root. However if those protections fail, the attacker has the keys to the kingdom rather than just a sizable chunk of the kingdom.\n
    \n
    To put that in perspective though, if there is a Firefox exploit and a hacker gets access to your regular user account, that’s already pretty bad in itself. Even if you run as a regular unprivileged user they would still have have access to things like: your personal documents, your ssh keys, your Firefox profile with your browsing history, your session cookies and your saved passwords, your e-mail, your paypal account, your banking information, …\n
    \n
    As root, they could obviously do even more like damage like reading *all* users’ data, installing a keylogger or screengrabber, installing a rootkit to make themselves undetectable, but for most regular users most of the damage is already done when their own account is compromised.\n
    \n
    So when these discussions come up, I always have to think about this XKCD comic:\n
    \n
    ![](https://imgs.xkcd.com/comics/authorization_2x.png)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 35
  +score: 0
  +lastActive: DateTime @1711203915 {#4343
    date: 2024-03-23 15:25:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4350 …}
  +nested: Doctrine\ORM\PersistentCollection {#4352 …}
  +votes: Doctrine\ORM\PersistentCollection {#4354 …}
  +reports: Doctrine\ORM\PersistentCollection {#4356 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4358 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4360 …}
  -id: 276119
  -bodyTs: "'/comics/authorization_2x.png)':289 'access':166,193 'account':171,223,269 'alreadi':174,264 'alway':279 'anyth':45 'attack':134 'bad':176 'bank':225 'brows':18,208 'chunk':146 'come':276 'comic':286 'compromis':271 'comput':108 'connect':112 'cooki':212 'could':230 'damag':236,262 'danger':6 'data':58,241 'defens':32 'discuss':275 'document':199 'done':265 'e':219 'e-mail':218 'elimin':27 'even':179,233 'exact':109 'exploit':161 'fact':75 'fail':132 'firefox':88,160,204 'general':53 'get':165 'hacker':164 'harden':102 'histori':209 'howev':128 'imgs.xkcd.com':288 'imgs.xkcd.com/comics/authorization_2x.png)':287 'inform':226 'instal':242,247 'internet':117 'key':137,202 'keylogg':244 'kingdom':140,149 'know':41 'last':29 'like':196,235,237 'line':30 'made':71 'mail':220 'make':251 'negat':123 'obvious':231 'one':98 'password':216 'paypal':222 'person':198 'perspect':154 'piec':103 'pretti':175 'probabl':10,97 'problem':65 'profil':205 'protect':94,120,131 'put':151 'rather':141 'read':238 'read/change/delete':44 'realist':1 'regular':50,169,185,257 'restrict':54 'right':85 'root':38,42,82,127,228 'rootkit':249 'run':35,79,125,182 'save':215 'screengrabb':246 'secur':64 'session':211 'site':23 'sizabl':145 'softwar':36,68,105 'ssh':201 'still':90,190 'super':5 'support':22 'system':48 'tech':21 'thing':195 'think':282 'though':86,155 'undetect':253 'unprivileg':186 'user':51,170,187,240,258 'virus':15 'wherea':49 'whole':115 'wide':116 'wors':72 'would':189 'xkcd':285"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5714539"
  +editedAt: DateTimeImmutable @1711191563 {#4344
    date: 2024-03-23 11:59:23.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704280297 {#4345
    date: 2024-01-03 12:11:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#4349
  +user: App\Entity\User {#4362 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Realistically it’s not super dangerous, and no you probably don’t have a virus just from browsing a few tech support sites, but you do eliminate your last line of defense when you run software as root. As you know, root can read/change/delete *anything* on your system whereas regular users are generally restricted to their own data. So if there is a security problem in the software, it’s made worse by the fact that you were running it as root.\n
    \n
    You are right though that Firefox does still have its own protections - it’s probably one of the most hardened pieces of software on your computer exactly because it connects to the whole wide internet - and those protections are not negated by running as root. However if those protections fail, the attacker has the keys to the kingdom rather than just a sizable chunk of the kingdom.\n
    \n
    To put that in perspective though, if there is a Firefox exploit and a hacker gets access to your regular user account, that’s already pretty bad in itself. Even if you run as a regular unprivileged user they would still have have access to things like: your personal documents, your ssh keys, your Firefox profile with your browsing history, your session cookies and your saved passwords, your e-mail, your paypal account, your banking information, …\n
    \n
    As root, they could obviously do even more like damage like reading *all* users’ data, installing a keylogger or screengrabber, installing a rootkit to make themselves undetectable, but for most regular users most of the damage is already done when their own account is compromised.\n
    \n
    So when these discussions come up, I always have to think about this XKCD comic:\n
    \n
    ![](https://imgs.xkcd.com/comics/authorization_2x.png)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 35
  +score: 0
  +lastActive: DateTime @1711203915 {#4343
    date: 2024-03-23 15:25:15.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4350 …}
  +nested: Doctrine\ORM\PersistentCollection {#4352 …}
  +votes: Doctrine\ORM\PersistentCollection {#4354 …}
  +reports: Doctrine\ORM\PersistentCollection {#4356 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4358 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4360 …}
  -id: 276119
  -bodyTs: "'/comics/authorization_2x.png)':289 'access':166,193 'account':171,223,269 'alreadi':174,264 'alway':279 'anyth':45 'attack':134 'bad':176 'bank':225 'brows':18,208 'chunk':146 'come':276 'comic':286 'compromis':271 'comput':108 'connect':112 'cooki':212 'could':230 'damag':236,262 'danger':6 'data':58,241 'defens':32 'discuss':275 'document':199 'done':265 'e':219 'e-mail':218 'elimin':27 'even':179,233 'exact':109 'exploit':161 'fact':75 'fail':132 'firefox':88,160,204 'general':53 'get':165 'hacker':164 'harden':102 'histori':209 'howev':128 'imgs.xkcd.com':288 'imgs.xkcd.com/comics/authorization_2x.png)':287 'inform':226 'instal':242,247 'internet':117 'key':137,202 'keylogg':244 'kingdom':140,149 'know':41 'last':29 'like':196,235,237 'line':30 'made':71 'mail':220 'make':251 'negat':123 'obvious':231 'one':98 'password':216 'paypal':222 'person':198 'perspect':154 'piec':103 'pretti':175 'probabl':10,97 'problem':65 'profil':205 'protect':94,120,131 'put':151 'rather':141 'read':238 'read/change/delete':44 'realist':1 'regular':50,169,185,257 'restrict':54 'right':85 'root':38,42,82,127,228 'rootkit':249 'run':35,79,125,182 'save':215 'screengrabb':246 'secur':64 'session':211 'site':23 'sizabl':145 'softwar':36,68,105 'ssh':201 'still':90,190 'super':5 'support':22 'system':48 'tech':21 'thing':195 'think':282 'though':86,155 'undetect':253 'unprivileg':186 'user':51,170,187,240,258 'virus':15 'wherea':49 'whole':115 'wide':116 'wors':72 'would':189 'xkcd':285"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5714539"
  +editedAt: DateTimeImmutable @1711191563 {#4344
    date: 2024-03-23 11:59:23.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704280297 {#4345
    date: 2024-01-03 12:11:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#4423
  +user: App\Entity\User {#4436 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    An overarching principle of security is that of minimum privilege: everything (every process, every person) should have the minimum privileges it needs to do what it does, and where possible, that privilege should be explicitly granted temporarily and then dropped.\n
    \n
    This means that any issue: a security breach or a mistake can’t access or break anything except whatever the component or person who had the issue could access or break, and that that access is minimal.\n
    \n
    Suppose that you hit a page which exploits the [https://www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](CVE-2023-4863) vulnerability in Firefox, or one like it, allowing remote code execution. If Firefox is running as root, the remote attacker now completely controls that machine. If you have SSH keys to other servers on there, they are all compromised. Your personal data could be encrypted for ransom. Anything that server manages, such as a TV or smart home equipment, could be manipulated arbitrarily, and possibly destroyed.\n
    \n
    The same is true for any piece of software you use, because this is a general principle. Most distributions I believe don’t let you ssh in as root for that reason.\n
    \n
    **In short:** don’t log in to anything as root; log in as a regular user and use `sudo` to temporarily perform administrator actions.\n
    \n
    P.S. your description of the situation shows you don’t know the nature of vulnerabilities and security - if you’re running servers then this is something you should learn more about in short order.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1704297332 {#4418
    date: 2024-01-03 16:55:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4424 …}
  +nested: Doctrine\ORM\PersistentCollection {#4426 …}
  +votes: Doctrine\ORM\PersistentCollection {#4428 …}
  +reports: Doctrine\ORM\PersistentCollection {#4430 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4432 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4434 …}
  -id: 276773
  -bodyTs: "'/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':89 'access':54,69,75 'action':211 'administr':210 'allow':97 'anyth':57,137,195 'arbitrarili':152 'attack':109 'believ':176 'breach':48 'break':56,71 'code':99 'complet':111 'compon':61 'compromis':128 'control':112 'could':68,132,149 'data':131 'descript':214 'destroy':155 'distribut':174 'drop':40 'encrypt':134 'equip':148 'everi':12,14 'everyth':11 'except':58 'execut':100 'explicit':35 'exploit':85 'firefox':92,102 'general':171 'grant':36 'hit':81 'home':147 'issu':45,67 'key':119 'know':222 'learn':240 'let':179 'like':95 'log':192,198 'machin':114 'manag':140 'manipul':151 'mean':42 'minim':77 'minimum':9,19 'mistak':51 'natur':224 'need':22 'one':94 'order':245 'overarch':2 'p.s':212 'page':83 'perform':209 'person':15,63,130 'piec':162 'possibl':30,154 'principl':3,172 'privileg':10,20,32 'process':13 'ransom':136 're':231 'reason':187 'regular':202 'remot':98,108 'root':106,184,197 'run':104,232 'secur':5,47,228 'server':122,139,233 'short':189,244 'show':218 'situat':217 'smart':146 'softwar':164 'someth':237 'ssh':118,181 'sudo':206 'suppos':78 'temporarili':37,208 'true':159 'tv':144 'use':166,205 'user':203 'vulner':90,226 'whatev':59 'www.hkcert.org':88 'www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':87"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6382490"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704297332 {#4419
    date: 2024-01-03 16:55:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#4423
  +user: App\Entity\User {#4436 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    An overarching principle of security is that of minimum privilege: everything (every process, every person) should have the minimum privileges it needs to do what it does, and where possible, that privilege should be explicitly granted temporarily and then dropped.\n
    \n
    This means that any issue: a security breach or a mistake can’t access or break anything except whatever the component or person who had the issue could access or break, and that that access is minimal.\n
    \n
    Suppose that you hit a page which exploits the [https://www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](CVE-2023-4863) vulnerability in Firefox, or one like it, allowing remote code execution. If Firefox is running as root, the remote attacker now completely controls that machine. If you have SSH keys to other servers on there, they are all compromised. Your personal data could be encrypted for ransom. Anything that server manages, such as a TV or smart home equipment, could be manipulated arbitrarily, and possibly destroyed.\n
    \n
    The same is true for any piece of software you use, because this is a general principle. Most distributions I believe don’t let you ssh in as root for that reason.\n
    \n
    **In short:** don’t log in to anything as root; log in as a regular user and use `sudo` to temporarily perform administrator actions.\n
    \n
    P.S. your description of the situation shows you don’t know the nature of vulnerabilities and security - if you’re running servers then this is something you should learn more about in short order.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1704297332 {#4418
    date: 2024-01-03 16:55:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4424 …}
  +nested: Doctrine\ORM\PersistentCollection {#4426 …}
  +votes: Doctrine\ORM\PersistentCollection {#4428 …}
  +reports: Doctrine\ORM\PersistentCollection {#4430 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4432 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4434 …}
  -id: 276773
  -bodyTs: "'/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':89 'access':54,69,75 'action':211 'administr':210 'allow':97 'anyth':57,137,195 'arbitrarili':152 'attack':109 'believ':176 'breach':48 'break':56,71 'code':99 'complet':111 'compon':61 'compromis':128 'control':112 'could':68,132,149 'data':131 'descript':214 'destroy':155 'distribut':174 'drop':40 'encrypt':134 'equip':148 'everi':12,14 'everyth':11 'except':58 'execut':100 'explicit':35 'exploit':85 'firefox':92,102 'general':171 'grant':36 'hit':81 'home':147 'issu':45,67 'key':119 'know':222 'learn':240 'let':179 'like':95 'log':192,198 'machin':114 'manag':140 'manipul':151 'mean':42 'minim':77 'minimum':9,19 'mistak':51 'natur':224 'need':22 'one':94 'order':245 'overarch':2 'p.s':212 'page':83 'perform':209 'person':15,63,130 'piec':162 'possibl':30,154 'principl':3,172 'privileg':10,20,32 'process':13 'ransom':136 're':231 'reason':187 'regular':202 'remot':98,108 'root':106,184,197 'run':104,232 'secur':5,47,228 'server':122,139,233 'short':189,244 'show':218 'situat':217 'smart':146 'softwar':164 'someth':237 'ssh':118,181 'sudo':206 'suppos':78 'temporarili':37,208 'true':159 'tv':144 'use':166,205 'user':203 'vulner':90,226 'whatev':59 'www.hkcert.org':88 'www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':87"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6382490"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704297332 {#4419
    date: 2024-01-03 16:55:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#4423
  +user: App\Entity\User {#4436 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    An overarching principle of security is that of minimum privilege: everything (every process, every person) should have the minimum privileges it needs to do what it does, and where possible, that privilege should be explicitly granted temporarily and then dropped.\n
    \n
    This means that any issue: a security breach or a mistake can’t access or break anything except whatever the component or person who had the issue could access or break, and that that access is minimal.\n
    \n
    Suppose that you hit a page which exploits the [https://www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](CVE-2023-4863) vulnerability in Firefox, or one like it, allowing remote code execution. If Firefox is running as root, the remote attacker now completely controls that machine. If you have SSH keys to other servers on there, they are all compromised. Your personal data could be encrypted for ransom. Anything that server manages, such as a TV or smart home equipment, could be manipulated arbitrarily, and possibly destroyed.\n
    \n
    The same is true for any piece of software you use, because this is a general principle. Most distributions I believe don’t let you ssh in as root for that reason.\n
    \n
    **In short:** don’t log in to anything as root; log in as a regular user and use `sudo` to temporarily perform administrator actions.\n
    \n
    P.S. your description of the situation shows you don’t know the nature of vulnerabilities and security - if you’re running servers then this is something you should learn more about in short order.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1704297332 {#4418
    date: 2024-01-03 16:55:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4424 …}
  +nested: Doctrine\ORM\PersistentCollection {#4426 …}
  +votes: Doctrine\ORM\PersistentCollection {#4428 …}
  +reports: Doctrine\ORM\PersistentCollection {#4430 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4432 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4434 …}
  -id: 276773
  -bodyTs: "'/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':89 'access':54,69,75 'action':211 'administr':210 'allow':97 'anyth':57,137,195 'arbitrarili':152 'attack':109 'believ':176 'breach':48 'break':56,71 'code':99 'complet':111 'compon':61 'compromis':128 'control':112 'could':68,132,149 'data':131 'descript':214 'destroy':155 'distribut':174 'drop':40 'encrypt':134 'equip':148 'everi':12,14 'everyth':11 'except':58 'execut':100 'explicit':35 'exploit':85 'firefox':92,102 'general':171 'grant':36 'hit':81 'home':147 'issu':45,67 'key':119 'know':222 'learn':240 'let':179 'like':95 'log':192,198 'machin':114 'manag':140 'manipul':151 'mean':42 'minim':77 'minimum':9,19 'mistak':51 'natur':224 'need':22 'one':94 'order':245 'overarch':2 'p.s':212 'page':83 'perform':209 'person':15,63,130 'piec':162 'possibl':30,154 'principl':3,172 'privileg':10,20,32 'process':13 'ransom':136 're':231 'reason':187 'regular':202 'remot':98,108 'root':106,184,197 'run':104,232 'secur':5,47,228 'server':122,139,233 'short':189,244 'show':218 'situat':217 'smart':146 'softwar':164 'someth':237 'ssh':118,181 'sudo':206 'suppos':78 'temporarili':37,208 'true':159 'tv':144 'use':166,205 'user':203 'vulner':90,226 'whatev':59 'www.hkcert.org':88 'www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20230913](cve-2023-4863)':87"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6382490"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704297332 {#4419
    date: 2024-01-03 16:55:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\EntryComment {#4496
  +user: App\Entity\User {#4509 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > but no one seems to be discussing how risky it actually is.\n
    \n
    That is because people stopped doing it ages ago.\n
    \n
    > But shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system?\n
    \n
    Security is always a matter of layers. Any given layer can fail some of the time but you want to set up your security so situations where all the layers fail together are rare.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 32
  +score: 0
  +lastActive: DateTime @1704273827 {#4491
    date: 2024-01-03 10:23:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4497 …}
  +nested: Doctrine\ORM\PersistentCollection {#4499 …}
  +votes: Doctrine\ORM\PersistentCollection {#4501 …}
  +reports: Doctrine\ORM\PersistentCollection {#4503 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4505 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4507 …}
  -id: 275981
  -bodyTs: "'access':35 'actual':11 'age':20 'ago':21 'allow':32 'alway':41 'anyth':33 'base':37 'discuss':7 'everi':28 'fail':50,69 'firefox':25 'given':47 'layer':45,48,68 'matter':43 'one':3 'peopl':16 'rare':72 'riski':9 'sandbox':27 'secur':39,62 'seem':4 'set':59 'shouldn':23 'situat':64 'stop':17 'system':38 'time':54 'togeth':70 'want':57 'websit':29"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7046647"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704273827 {#4492
    date: 2024-01-03 10:23:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\EntryComment {#4496
  +user: App\Entity\User {#4509 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > but no one seems to be discussing how risky it actually is.\n
    \n
    That is because people stopped doing it ages ago.\n
    \n
    > But shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system?\n
    \n
    Security is always a matter of layers. Any given layer can fail some of the time but you want to set up your security so situations where all the layers fail together are rare.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 32
  +score: 0
  +lastActive: DateTime @1704273827 {#4491
    date: 2024-01-03 10:23:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4497 …}
  +nested: Doctrine\ORM\PersistentCollection {#4499 …}
  +votes: Doctrine\ORM\PersistentCollection {#4501 …}
  +reports: Doctrine\ORM\PersistentCollection {#4503 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4505 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4507 …}
  -id: 275981
  -bodyTs: "'access':35 'actual':11 'age':20 'ago':21 'allow':32 'alway':41 'anyth':33 'base':37 'discuss':7 'everi':28 'fail':50,69 'firefox':25 'given':47 'layer':45,48,68 'matter':43 'one':3 'peopl':16 'rare':72 'riski':9 'sandbox':27 'secur':39,62 'seem':4 'set':59 'shouldn':23 'situat':64 'stop':17 'system':38 'time':54 'togeth':70 'want':57 'websit':29"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7046647"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704273827 {#4492
    date: 2024-01-03 10:23:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\EntryComment {#4496
  +user: App\Entity\User {#4509 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    > but no one seems to be discussing how risky it actually is.\n
    \n
    That is because people stopped doing it ages ago.\n
    \n
    > But shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system?\n
    \n
    Security is always a matter of layers. Any given layer can fail some of the time but you want to set up your security so situations where all the layers fail together are rare.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 32
  +score: 0
  +lastActive: DateTime @1704273827 {#4491
    date: 2024-01-03 10:23:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4497 …}
  +nested: Doctrine\ORM\PersistentCollection {#4499 …}
  +votes: Doctrine\ORM\PersistentCollection {#4501 …}
  +reports: Doctrine\ORM\PersistentCollection {#4503 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4505 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4507 …}
  -id: 275981
  -bodyTs: "'access':35 'actual':11 'age':20 'ago':21 'allow':32 'alway':41 'anyth':33 'base':37 'discuss':7 'everi':28 'fail':50,69 'firefox':25 'given':47 'layer':45,48,68 'matter':43 'one':3 'peopl':16 'rare':72 'riski':9 'sandbox':27 'secur':39,62 'seem':4 'set':59 'shouldn':23 'situat':64 'stop':17 'system':38 'time':54 'togeth':70 'want':57 'websit':29"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7046647"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704273827 {#4492
    date: 2024-01-03 10:23:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED moderate 
App\Entity\EntryComment {#4570
  +user: App\Entity\User {#4583 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t want to step on your workflow too much since it somehow seems to work for you but your main issue stems from the fact that you clearly don’t work with your server as if it actually was a server.\n
    \n
    You shouldn’t really have a desktop interface running there in the first place (let alone as root and then using it as a regular user). You should ask yourself what it actually solves for you and be open to trying different (and more standard) solutions to what you’re trying to achieve.\n
    \n
    It’d probably consist of less clicking and using the CLI a bit more, but for stuff like file management you can still easily use [`mc`](https://linux.die.net/man/1/mc).\n
    \n
    If you need terminal sessions that keep scrollback and don’t stop when you disconnect you should learn to use `tmux` or `screen` or something like that. But then again if you’re running actual software in there then you should probably use a service (daemon) for that.\n
    \n
    As for whether it’s a security issue, yeah it most definitely is. Just like it’s a security issue to run literally any networked application as root. Security isn’t black and white and there are trade offs to be made but most people wouldn’t consider what you’re doing a reasonable tradeoff.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1711286285 {#4564
    date: 2024-03-24 14:18:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4571 …}
  +nested: Doctrine\ORM\PersistentCollection {#4573 …}
  +votes: Doctrine\ORM\PersistentCollection {#4575 …}
  +reports: Doctrine\ORM\PersistentCollection {#4577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4579 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4581 …}
  -id: 276034
  -bodyTs: "'/man/1/mc).':125 'achiev':96 'actual':40,76,160 'alon':59 'applic':199 'ask':72 'bit':109 'black':205 'clear':30 'cli':107 'click':103 'consid':221 'consist':100 'd':98 'daemon':171 'definit':185 'desktop':50 'differ':85 'disconnect':140 'easili':120 'fact':27 'file':115 'first':56 'interfac':51 'isn':203 'issu':23,181,193 'keep':132 'learn':143 'less':102 'let':58 'like':114,151,188 'linux.die.net':124 'linux.die.net/man/1/mc).':123 'liter':196 'made':215 'main':22 'manag':116 'mc':122 'much':11 'need':128 'network':198 'off':212 'open':82 'peopl':218 'place':57 'probabl':99,167 're':93,158,224 'realli':47 'reason':227 'regular':68 'root':61,201 'run':52,159,195 'screen':148 'scrollback':133 'secur':180,192,202 'seem':15 'server':36,43 'servic':170 'session':130 'shouldn':45 'sinc':12 'softwar':161 'solut':89 'solv':77 'somehow':14 'someth':150 'standard':88 'stem':24 'step':6 'still':119 'stop':137 'stuff':113 'termin':129 'tmux':146 'trade':211 'tradeoff':228 'tri':84,94 'use':64,105,121,145,168 'user':69 'want':4 'whether':176 'white':207 'work':17,33 'workflow':9 'wouldn':219 'yeah':182"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/5047325"
  +editedAt: DateTimeImmutable @1711178131 {#4565
    date: 2024-03-23 08:15:31.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704276432 {#4566
    date: 2024-01-03 11:07:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
39 DENIED edit 
App\Entity\EntryComment {#4570
  +user: App\Entity\User {#4583 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t want to step on your workflow too much since it somehow seems to work for you but your main issue stems from the fact that you clearly don’t work with your server as if it actually was a server.\n
    \n
    You shouldn’t really have a desktop interface running there in the first place (let alone as root and then using it as a regular user). You should ask yourself what it actually solves for you and be open to trying different (and more standard) solutions to what you’re trying to achieve.\n
    \n
    It’d probably consist of less clicking and using the CLI a bit more, but for stuff like file management you can still easily use [`mc`](https://linux.die.net/man/1/mc).\n
    \n
    If you need terminal sessions that keep scrollback and don’t stop when you disconnect you should learn to use `tmux` or `screen` or something like that. But then again if you’re running actual software in there then you should probably use a service (daemon) for that.\n
    \n
    As for whether it’s a security issue, yeah it most definitely is. Just like it’s a security issue to run literally any networked application as root. Security isn’t black and white and there are trade offs to be made but most people wouldn’t consider what you’re doing a reasonable tradeoff.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1711286285 {#4564
    date: 2024-03-24 14:18:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4571 …}
  +nested: Doctrine\ORM\PersistentCollection {#4573 …}
  +votes: Doctrine\ORM\PersistentCollection {#4575 …}
  +reports: Doctrine\ORM\PersistentCollection {#4577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4579 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4581 …}
  -id: 276034
  -bodyTs: "'/man/1/mc).':125 'achiev':96 'actual':40,76,160 'alon':59 'applic':199 'ask':72 'bit':109 'black':205 'clear':30 'cli':107 'click':103 'consid':221 'consist':100 'd':98 'daemon':171 'definit':185 'desktop':50 'differ':85 'disconnect':140 'easili':120 'fact':27 'file':115 'first':56 'interfac':51 'isn':203 'issu':23,181,193 'keep':132 'learn':143 'less':102 'let':58 'like':114,151,188 'linux.die.net':124 'linux.die.net/man/1/mc).':123 'liter':196 'made':215 'main':22 'manag':116 'mc':122 'much':11 'need':128 'network':198 'off':212 'open':82 'peopl':218 'place':57 'probabl':99,167 're':93,158,224 'realli':47 'reason':227 'regular':68 'root':61,201 'run':52,159,195 'screen':148 'scrollback':133 'secur':180,192,202 'seem':15 'server':36,43 'servic':170 'session':130 'shouldn':45 'sinc':12 'softwar':161 'solut':89 'solv':77 'somehow':14 'someth':150 'standard':88 'stem':24 'step':6 'still':119 'stop':137 'stuff':113 'termin':129 'tmux':146 'trade':211 'tradeoff':228 'tri':84,94 'use':64,105,121,145,168 'user':69 'want':4 'whether':176 'white':207 'work':17,33 'workflow':9 'wouldn':219 'yeah':182"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/5047325"
  +editedAt: DateTimeImmutable @1711178131 {#4565
    date: 2024-03-23 08:15:31.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704276432 {#4566
    date: 2024-01-03 11:07:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
40 DENIED moderate 
App\Entity\EntryComment {#4570
  +user: App\Entity\User {#4583 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t want to step on your workflow too much since it somehow seems to work for you but your main issue stems from the fact that you clearly don’t work with your server as if it actually was a server.\n
    \n
    You shouldn’t really have a desktop interface running there in the first place (let alone as root and then using it as a regular user). You should ask yourself what it actually solves for you and be open to trying different (and more standard) solutions to what you’re trying to achieve.\n
    \n
    It’d probably consist of less clicking and using the CLI a bit more, but for stuff like file management you can still easily use [`mc`](https://linux.die.net/man/1/mc).\n
    \n
    If you need terminal sessions that keep scrollback and don’t stop when you disconnect you should learn to use `tmux` or `screen` or something like that. But then again if you’re running actual software in there then you should probably use a service (daemon) for that.\n
    \n
    As for whether it’s a security issue, yeah it most definitely is. Just like it’s a security issue to run literally any networked application as root. Security isn’t black and white and there are trade offs to be made but most people wouldn’t consider what you’re doing a reasonable tradeoff.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1711286285 {#4564
    date: 2024-03-24 14:18:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4571 …}
  +nested: Doctrine\ORM\PersistentCollection {#4573 …}
  +votes: Doctrine\ORM\PersistentCollection {#4575 …}
  +reports: Doctrine\ORM\PersistentCollection {#4577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4579 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4581 …}
  -id: 276034
  -bodyTs: "'/man/1/mc).':125 'achiev':96 'actual':40,76,160 'alon':59 'applic':199 'ask':72 'bit':109 'black':205 'clear':30 'cli':107 'click':103 'consid':221 'consist':100 'd':98 'daemon':171 'definit':185 'desktop':50 'differ':85 'disconnect':140 'easili':120 'fact':27 'file':115 'first':56 'interfac':51 'isn':203 'issu':23,181,193 'keep':132 'learn':143 'less':102 'let':58 'like':114,151,188 'linux.die.net':124 'linux.die.net/man/1/mc).':123 'liter':196 'made':215 'main':22 'manag':116 'mc':122 'much':11 'need':128 'network':198 'off':212 'open':82 'peopl':218 'place':57 'probabl':99,167 're':93,158,224 'realli':47 'reason':227 'regular':68 'root':61,201 'run':52,159,195 'screen':148 'scrollback':133 'secur':180,192,202 'seem':15 'server':36,43 'servic':170 'session':130 'shouldn':45 'sinc':12 'softwar':161 'solut':89 'solv':77 'somehow':14 'someth':150 'standard':88 'stem':24 'step':6 'still':119 'stop':137 'stuff':113 'termin':129 'tmux':146 'trade':211 'tradeoff':228 'tri':84,94 'use':64,105,121,145,168 'user':69 'want':4 'whether':176 'white':207 'work':17,33 'workflow':9 'wouldn':219 'yeah':182"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/5047325"
  +editedAt: DateTimeImmutable @1711178131 {#4565
    date: 2024-03-23 08:15:31.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704276432 {#4566
    date: 2024-01-03 11:07:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
42 DENIED moderate 
App\Entity\EntryComment {#4644
  +user: App\Entity\User {#4657 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "My goodness"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 22
  +score: 0
  +lastActive: DateTime @1704289767 {#4639
    date: 2024-01-03 14:49:27.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4645 …}
  +nested: Doctrine\ORM\PersistentCollection {#4647 …}
  +votes: Doctrine\ORM\PersistentCollection {#4649 …}
  +reports: Doctrine\ORM\PersistentCollection {#4651 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4653 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4655 …}
  -id: 276413
  -bodyTs: "'good':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/comment/6385189"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704289767 {#4640
    date: 2024-01-03 14:49:27.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
43 DENIED edit 
App\Entity\EntryComment {#4644
  +user: App\Entity\User {#4657 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "My goodness"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 22
  +score: 0
  +lastActive: DateTime @1704289767 {#4639
    date: 2024-01-03 14:49:27.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4645 …}
  +nested: Doctrine\ORM\PersistentCollection {#4647 …}
  +votes: Doctrine\ORM\PersistentCollection {#4649 …}
  +reports: Doctrine\ORM\PersistentCollection {#4651 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4653 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4655 …}
  -id: 276413
  -bodyTs: "'good':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/comment/6385189"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704289767 {#4640
    date: 2024-01-03 14:49:27.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
44 DENIED moderate 
App\Entity\EntryComment {#4644
  +user: App\Entity\User {#4657 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "My goodness"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 22
  +score: 0
  +lastActive: DateTime @1704289767 {#4639
    date: 2024-01-03 14:49:27.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4645 …}
  +nested: Doctrine\ORM\PersistentCollection {#4647 …}
  +votes: Doctrine\ORM\PersistentCollection {#4649 …}
  +reports: Doctrine\ORM\PersistentCollection {#4651 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4653 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4655 …}
  -id: 276413
  -bodyTs: "'good':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/comment/6385189"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704289767 {#4640
    date: 2024-01-03 14:49:27.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
45 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
46 DENIED moderate 
App\Entity\EntryComment {#4717
  +user: App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, it is. As a user you compromise only that user as a consequence of some sandbox escape. Then there may or may not be some successful privilege elevation."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704361562 {#4712
    date: 2024-01-04 10:46:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4718 …}
  +nested: Doctrine\ORM\PersistentCollection {#4720 …}
  +votes: Doctrine\ORM\PersistentCollection {#4722 …}
  +reports: Doctrine\ORM\PersistentCollection {#4724 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4728 …}
  -id: 279086
  -bodyTs: "'compromis':8 'consequ':14 'elev':29 'escap':18 'may':21,23 'privileg':28 'sandbox':17 'success':27 'user':6,11 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5964396"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704361562 {#4713
    date: 2024-01-04 10:46:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
47 DENIED edit 
App\Entity\EntryComment {#4717
  +user: App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, it is. As a user you compromise only that user as a consequence of some sandbox escape. Then there may or may not be some successful privilege elevation."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704361562 {#4712
    date: 2024-01-04 10:46:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4718 …}
  +nested: Doctrine\ORM\PersistentCollection {#4720 …}
  +votes: Doctrine\ORM\PersistentCollection {#4722 …}
  +reports: Doctrine\ORM\PersistentCollection {#4724 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4728 …}
  -id: 279086
  -bodyTs: "'compromis':8 'consequ':14 'elev':29 'escap':18 'may':21,23 'privileg':28 'sandbox':17 'success':27 'user':6,11 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5964396"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704361562 {#4713
    date: 2024-01-04 10:46:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
48 DENIED moderate 
App\Entity\EntryComment {#4717
  +user: App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, it is. As a user you compromise only that user as a consequence of some sandbox escape. Then there may or may not be some successful privilege elevation."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704361562 {#4712
    date: 2024-01-04 10:46:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4718 …}
  +nested: Doctrine\ORM\PersistentCollection {#4720 …}
  +votes: Doctrine\ORM\PersistentCollection {#4722 …}
  +reports: Doctrine\ORM\PersistentCollection {#4724 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4728 …}
  -id: 279086
  -bodyTs: "'compromis':8 'consequ':14 'elev':29 'escap':18 'may':21,23 'privileg':28 'sandbox':17 'success':27 'user':6,11 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5964396"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704361562 {#4713
    date: 2024-01-04 10:46:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
49 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
50 DENIED moderate 
App\Entity\EntryComment {#4790
  +user: App\Entity\User {#4803 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have no clue how dangerous running Firefox as root is, but it begs the question…why would you do that?\n
    \n
    Create a user account for managing things and create a separate user for each service and/or containers.\n
    \n
    For managing things use tmux with ssh, if you want to manage files etc. just use ranger/lf/mc. One can also mount the file system with sshfs.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704343607 {#4785
    date: 2024-01-04 05:46:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4791 …}
  +nested: Doctrine\ORM\PersistentCollection {#4793 …}
  +votes: Doctrine\ORM\PersistentCollection {#4795 …}
  +reports: Doctrine\ORM\PersistentCollection {#4797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4801 …}
  -id: 278668
  -bodyTs: "'account':25 'also':58 'and/or':37 'beg':14 'clue':4 'contain':38 'creat':22,30 'danger':6 'etc':52 'file':51,61 'firefox':8 'manag':27,40,50 'mount':59 'one':56 'question':16 'ranger/lf/mc':55 'root':10 'run':7 'separ':32 'servic':36 'ssh':45 'sshfs':64 'system':62 'thing':28,41 'tmux':43 'use':42,54 'user':24,33 'want':48 'would':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6393915"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704343607 {#4786
    date: 2024-01-04 05:46:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
51 DENIED edit 
App\Entity\EntryComment {#4790
  +user: App\Entity\User {#4803 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have no clue how dangerous running Firefox as root is, but it begs the question…why would you do that?\n
    \n
    Create a user account for managing things and create a separate user for each service and/or containers.\n
    \n
    For managing things use tmux with ssh, if you want to manage files etc. just use ranger/lf/mc. One can also mount the file system with sshfs.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704343607 {#4785
    date: 2024-01-04 05:46:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4791 …}
  +nested: Doctrine\ORM\PersistentCollection {#4793 …}
  +votes: Doctrine\ORM\PersistentCollection {#4795 …}
  +reports: Doctrine\ORM\PersistentCollection {#4797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4801 …}
  -id: 278668
  -bodyTs: "'account':25 'also':58 'and/or':37 'beg':14 'clue':4 'contain':38 'creat':22,30 'danger':6 'etc':52 'file':51,61 'firefox':8 'manag':27,40,50 'mount':59 'one':56 'question':16 'ranger/lf/mc':55 'root':10 'run':7 'separ':32 'servic':36 'ssh':45 'sshfs':64 'system':62 'thing':28,41 'tmux':43 'use':42,54 'user':24,33 'want':48 'would':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6393915"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704343607 {#4786
    date: 2024-01-04 05:46:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
52 DENIED moderate 
App\Entity\EntryComment {#4790
  +user: App\Entity\User {#4803 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have no clue how dangerous running Firefox as root is, but it begs the question…why would you do that?\n
    \n
    Create a user account for managing things and create a separate user for each service and/or containers.\n
    \n
    For managing things use tmux with ssh, if you want to manage files etc. just use ranger/lf/mc. One can also mount the file system with sshfs.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704343607 {#4785
    date: 2024-01-04 05:46:47.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4791 …}
  +nested: Doctrine\ORM\PersistentCollection {#4793 …}
  +votes: Doctrine\ORM\PersistentCollection {#4795 …}
  +reports: Doctrine\ORM\PersistentCollection {#4797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4801 …}
  -id: 278668
  -bodyTs: "'account':25 'also':58 'and/or':37 'beg':14 'clue':4 'contain':38 'creat':22,30 'danger':6 'etc':52 'file':51,61 'firefox':8 'manag':27,40,50 'mount':59 'one':56 'question':16 'ranger/lf/mc':55 'root':10 'run':7 'separ':32 'servic':36 'ssh':45 'sshfs':64 'system':62 'thing':28,41 'tmux':43 'use':42,54 'user':24,33 'want':48 'would':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6393915"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704343607 {#4786
    date: 2024-01-04 05:46:47.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
53 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
54 DENIED moderate 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4876 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    As a general best practice, you should never directly login as root on any server, and those servers should be configured to not allow remote connections as the root user. You should always log in as a non-root user and only run commands as root using sudo or similar features offered by your desktop environment. You should be wary of even having an interactive root shell open; usually I would only do so on a VM console, when first setting up a system or debugging it.\n
    \n
    By doing this, you not only guard against other people compromising your system, but also against accidentally running commands as root that could damage your system. It’s always best to only run things with the minimum permissions they need, and then only grant them additional permissions on an as-needed basis.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1711630376 {#4858
    date: 2024-03-28 13:52:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 276053
  -bodyTs: "'accident':105 'addit':134 'allow':24 'also':103 'alway':33,117 'as-need':138 'basi':141 'best':4,118 'command':45,107 'compromis':99 'configur':21 'connect':26 'consol':79 'could':111 'damag':112 'debug':87 'desktop':56 'direct':9 'environ':57 'even':63 'featur':52 'first':81 'general':3 'grant':132 'guard':95 'interact':66 'log':34 'login':10 'minimum':125 'need':128,140 'never':8 'non':39 'non-root':38 'offer':53 'open':69 'peopl':98 'permiss':126,135 'practic':5 'remot':25 'root':12,29,40,47,67,109 'run':44,106,121 'server':15,18 'set':82 'shell':68 'similar':51 'sudo':49 'system':85,101,114 'thing':122 'use':48 'user':30,41 'usual':70 'vm':78 'wari':61 'would':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4384060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704277159 {#4859
    date: 2024-01-03 11:19:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
55 DENIED edit 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4876 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    As a general best practice, you should never directly login as root on any server, and those servers should be configured to not allow remote connections as the root user. You should always log in as a non-root user and only run commands as root using sudo or similar features offered by your desktop environment. You should be wary of even having an interactive root shell open; usually I would only do so on a VM console, when first setting up a system or debugging it.\n
    \n
    By doing this, you not only guard against other people compromising your system, but also against accidentally running commands as root that could damage your system. It’s always best to only run things with the minimum permissions they need, and then only grant them additional permissions on an as-needed basis.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1711630376 {#4858
    date: 2024-03-28 13:52:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 276053
  -bodyTs: "'accident':105 'addit':134 'allow':24 'also':103 'alway':33,117 'as-need':138 'basi':141 'best':4,118 'command':45,107 'compromis':99 'configur':21 'connect':26 'consol':79 'could':111 'damag':112 'debug':87 'desktop':56 'direct':9 'environ':57 'even':63 'featur':52 'first':81 'general':3 'grant':132 'guard':95 'interact':66 'log':34 'login':10 'minimum':125 'need':128,140 'never':8 'non':39 'non-root':38 'offer':53 'open':69 'peopl':98 'permiss':126,135 'practic':5 'remot':25 'root':12,29,40,47,67,109 'run':44,106,121 'server':15,18 'set':82 'shell':68 'similar':51 'sudo':49 'system':85,101,114 'thing':122 'use':48 'user':30,41 'usual':70 'vm':78 'wari':61 'would':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4384060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704277159 {#4859
    date: 2024-01-03 11:19:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
56 DENIED moderate 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4876 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    As a general best practice, you should never directly login as root on any server, and those servers should be configured to not allow remote connections as the root user. You should always log in as a non-root user and only run commands as root using sudo or similar features offered by your desktop environment. You should be wary of even having an interactive root shell open; usually I would only do so on a VM console, when first setting up a system or debugging it.\n
    \n
    By doing this, you not only guard against other people compromising your system, but also against accidentally running commands as root that could damage your system. It’s always best to only run things with the minimum permissions they need, and then only grant them additional permissions on an as-needed basis.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1711630376 {#4858
    date: 2024-03-28 13:52:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 276053
  -bodyTs: "'accident':105 'addit':134 'allow':24 'also':103 'alway':33,117 'as-need':138 'basi':141 'best':4,118 'command':45,107 'compromis':99 'configur':21 'connect':26 'consol':79 'could':111 'damag':112 'debug':87 'desktop':56 'direct':9 'environ':57 'even':63 'featur':52 'first':81 'general':3 'grant':132 'guard':95 'interact':66 'log':34 'login':10 'minimum':125 'need':128,140 'never':8 'non':39 'non-root':38 'offer':53 'open':69 'peopl':98 'permiss':126,135 'practic':5 'remot':25 'root':12,29,40,47,67,109 'run':44,106,121 'server':15,18 'set':82 'shell':68 'similar':51 'sudo':49 'system':85,101,114 'thing':122 'use':48 'user':30,41 'usual':70 'vm':78 'wari':61 'would':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/737763/-/comment/4384060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704277159 {#4859
    date: 2024-01-03 11:19:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
57 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
58 DENIED moderate 
App\Entity\EntryComment {#4936
  +user: App\Entity\User {#4949 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Just don’t do that 😁\n
    \n
    I don’t get it anyway, if you login remotely, why don’t you just open firefox locally but on the remote servers? This makes not much sense.\n
    \n
    But If you absolutely have to. … At least be careful with your surf-targets. A search-engine and wiki would most likely be fine. Some pron-, stream- or warez-sites? Nah. Surely not.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704274431 {#4931
    date: 2024-01-03 10:33:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4937 …}
  +nested: Doctrine\ORM\PersistentCollection {#4939 …}
  +votes: Doctrine\ORM\PersistentCollection {#4941 …}
  +reports: Doctrine\ORM\PersistentCollection {#4943 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4945 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4947 …}
  -id: 275998
  -bodyTs: "'absolut':37 'anyway':11 'care':43 'engin':52 'fine':59 'firefox':22 'get':9 'least':41 'like':57 'local':23 'login':14 'make':30 'much':32 'nah':67 'open':21 'pron':61 'remot':15,27 'search':51 'search-engin':50 'sens':33 'server':28 'site':66 'stream':62 'sure':68 'surf':47 'surf-target':46 'target':48 'warez':65 'warez-sit':64 'wiki':54 'would':55"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5937875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274431 {#4932
    date: 2024-01-03 10:33:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
59 DENIED edit 
App\Entity\EntryComment {#4936
  +user: App\Entity\User {#4949 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Just don’t do that 😁\n
    \n
    I don’t get it anyway, if you login remotely, why don’t you just open firefox locally but on the remote servers? This makes not much sense.\n
    \n
    But If you absolutely have to. … At least be careful with your surf-targets. A search-engine and wiki would most likely be fine. Some pron-, stream- or warez-sites? Nah. Surely not.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704274431 {#4931
    date: 2024-01-03 10:33:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4937 …}
  +nested: Doctrine\ORM\PersistentCollection {#4939 …}
  +votes: Doctrine\ORM\PersistentCollection {#4941 …}
  +reports: Doctrine\ORM\PersistentCollection {#4943 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4945 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4947 …}
  -id: 275998
  -bodyTs: "'absolut':37 'anyway':11 'care':43 'engin':52 'fine':59 'firefox':22 'get':9 'least':41 'like':57 'local':23 'login':14 'make':30 'much':32 'nah':67 'open':21 'pron':61 'remot':15,27 'search':51 'search-engin':50 'sens':33 'server':28 'site':66 'stream':62 'sure':68 'surf':47 'surf-target':46 'target':48 'warez':65 'warez-sit':64 'wiki':54 'would':55"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5937875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274431 {#4932
    date: 2024-01-03 10:33:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
60 DENIED moderate 
App\Entity\EntryComment {#4936
  +user: App\Entity\User {#4949 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: """
    Just don’t do that 😁\n
    \n
    I don’t get it anyway, if you login remotely, why don’t you just open firefox locally but on the remote servers? This makes not much sense.\n
    \n
    But If you absolutely have to. … At least be careful with your surf-targets. A search-engine and wiki would most likely be fine. Some pron-, stream- or warez-sites? Nah. Surely not.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1704274431 {#4931
    date: 2024-01-03 10:33:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4937 …}
  +nested: Doctrine\ORM\PersistentCollection {#4939 …}
  +votes: Doctrine\ORM\PersistentCollection {#4941 …}
  +reports: Doctrine\ORM\PersistentCollection {#4943 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4945 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4947 …}
  -id: 275998
  -bodyTs: "'absolut':37 'anyway':11 'care':43 'engin':52 'fine':59 'firefox':22 'get':9 'least':41 'like':57 'local':23 'login':14 'make':30 'much':32 'nah':67 'open':21 'pron':61 'remot':15,27 'search':51 'search-engin':50 'sens':33 'server':28 'site':66 'stream':62 'sure':68 'surf':47 'surf-target':46 'target':48 'warez':65 'warez-sit':64 'wiki':54 'would':55"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/5937875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274431 {#4932
    date: 2024-01-03 10:33:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
61 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
62 DENIED moderate 
App\Entity\EntryComment {#5009
  +user: App\Entity\User {#5022 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "It’s about as dangerous as using IE in the old days, or Edge in administrator mode."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1704320141 {#5004
    date: 2024-01-03 23:15:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5010 …}
  +nested: Doctrine\ORM\PersistentCollection {#5012 …}
  +votes: Doctrine\ORM\PersistentCollection {#5014 …}
  +reports: Doctrine\ORM\PersistentCollection {#5016 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5020 …}
  -id: 277770
  -bodyTs: "'administr':16 'danger':5 'day':12 'edg':14 'ie':8 'mode':17 'old':11 'use':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7052341"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704320141 {#5005
    date: 2024-01-03 23:15:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
63 DENIED edit 
App\Entity\EntryComment {#5009
  +user: App\Entity\User {#5022 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "It’s about as dangerous as using IE in the old days, or Edge in administrator mode."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1704320141 {#5004
    date: 2024-01-03 23:15:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5010 …}
  +nested: Doctrine\ORM\PersistentCollection {#5012 …}
  +votes: Doctrine\ORM\PersistentCollection {#5014 …}
  +reports: Doctrine\ORM\PersistentCollection {#5016 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5020 …}
  -id: 277770
  -bodyTs: "'administr':16 'danger':5 'day':12 'edg':14 'ie':8 'mode':17 'old':11 'use':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7052341"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704320141 {#5005
    date: 2024-01-03 23:15:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
64 DENIED moderate 
App\Entity\EntryComment {#5009
  +user: App\Entity\User {#5022 …}
  +entry: App\Entity\Entry {#2400
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-it-actually-dangerous-to-run-Firefox-as-root"
    +title: "Is it actually dangerous to run Firefox as root?"
    +url: null
    +body: """
      I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the system), but if I have an issue, I’ve just been absentmindedly searching stuff up and trying to find solutions using the preinstalled Firefox instance from within the remote desktop itself, which would also be running as root.\n
      \n
      I never even thought to install uBlock Origin on it or anything, but the servers are all configured to use a PiHole instance which blocks the vast majority of ads. However, I do also remember using the browser in my main server to figure out how to set up the PiHole instance in the first place, and that server also happens to be the most important one and is my main NAS.\n
      \n
      I never went on any particularly shady websites, but I also don’t remember exactly which websites I’ve been on as root, though I do seem to remember seeing ads during the initial pihole setup, because it didn’t go very smoothly and I was searching up error messages trying to get it to work.\n
      \n
      This is definitely on me, but it never crossed my mind until recently that it might be a bad idea to use a browser as root, and searching online everyone just states the general cybersecurity doctrine to never do it (which I’m now realizing I shouldn’t have) but no one seems to be discussing how risky it actually is. Shouldn’t Firefox be sandboxing every website and not allowing anything to access the base system? Between “just stop doing it” and “you have to reinstall the OS right now there’s probably already a virus on there,” how much danger do you suppose I’m in? I’m mainly worried about the security/privacy of my personal data I have stored on the servers. All my servers run Fedora KDE Spin and have Intel processors if that makes a difference?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 88
    +favouriteCount: 93
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712572029 {#2414
      date: 2024-04-08 12:27:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 26893
    -titleTs: "'actual':3 'danger':4 'firefox':7 'root':9 'run':6"
    -bodyTs: "'absentmind':73 'access':301 'actual':287 'ad':129,202 'allow':298 'alreadi':322 'also':95,133,159,182 'anyth':111,299 'bad':246 'base':303 'block':124 'browser':137,251 'command':30,48 'configur':117 'conveni':44 'cross':236 'cybersecur':262 'danger':329 'data':346 'definit':230 'desktop':53,91 'didn':210 'differ':368 'direct':56 'discuss':283 'doctrin':263 'error':220 'even':102 'everi':294 'everyon':257 'exact':186 'fedora':357 'figur':143 'file':35 'find':41,80 'firefox':85,291 'first':154 'general':261 'get':224 'go':212 'happen':160 'home':8 'howev':130 'idea':247 'import':165 'ing':59 'initi':205 'instal':105 'instanc':86,122,151 'instead':54 'intel':362 'issu':68 'kde':21,358 'line':31,49 'linux':5 'log':19 'm':270,334,337 'main':140,170,338 'major':127 'make':366 'manag':17,36 'messag':221 'might':243 'mind':238 'much':328 'nas':171 'never':101,173,235,265 'one':166,279 'onlin':256 'open':37 'order':15 'origin':107 'os':316 'particular':177 'person':39,345 'pihol':121,150,206 'place':155 'plasma':22 'preinstal':84 'probabl':321 'processor':363 'realiz':272 'recent':240 'regular':11 'reinstal':314 'rememb':134,185,200 'remot':12,52,90 'right':317 'riski':285 'root':24,99,194,253 'run':97,356 'sandbox':293 'search':74,218,255 'security/privacy':342 'see':201 'seem':198,280 'server':6,114,141,158,352,355 'set':147 'setup':207 'sever':29 'shadi':178 'shouldn':274,289 'smooth':214 'solut':81 'spin':359 'ssh':58 'ssh-ing':57 'state':259 'stop':307 'store':349 'stuff':75 'suppos':332 'system':62,304 'though':195 'thought':103 'tri':78,222 'ublock':106 'use':46,82,119,135,249 'usual':18,25 'vast':126 've':70,190 'virus':324 'websit':179,188,295 'went':174 'window':32 'within':88 'work':227 'worri':339 'would':94"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704359289
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10062491"
    +editedAt: DateTimeImmutable @1711170613 {#1793
      date: 2024-03-23 06:10:13.0 +01:00
    }
    +createdAt: DateTimeImmutable @1704272889 {#2402
      date: 2024-01-03 10:08:09.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "It’s about as dangerous as using IE in the old days, or Edge in administrator mode."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1704320141 {#5004
    date: 2024-01-03 23:15:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5010 …}
  +nested: Doctrine\ORM\PersistentCollection {#5012 …}
  +votes: Doctrine\ORM\PersistentCollection {#5014 …}
  +reports: Doctrine\ORM\PersistentCollection {#5016 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5018 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5020 …}
  -id: 277770
  -bodyTs: "'administr':16 'danger':5 'day':12 'edg':14 'ie':8 'mode':17 'old':11 'use':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7052341"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704320141 {#5005
    date: 2024-01-03 23:15:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
65 DENIED edit 
App\Entity\Magazine {#265
  +icon: Proxies\__CG__\App\Entity\Image {#246 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#275
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#237 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
  +entries: Doctrine\ORM\PersistentCollection {#180 …}
  +posts: Doctrine\ORM\PersistentCollection {#138 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
  +bans: Doctrine\ORM\PersistentCollection {#117 …}
  +reports: Doctrine\ORM\PersistentCollection {#103 …}
  +badges: Doctrine\ORM\PersistentCollection {#81 …}
  +logs: Doctrine\ORM\PersistentCollection {#71 …}
  +awards: Doctrine\ORM\PersistentCollection {#1346 …}
  +categories: Doctrine\ORM\PersistentCollection {#1823 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#269
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#271
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details