I haven’t seen this mentioned yet, and there’s a good number of responses so maybe I’m up in the night, but it seems to me Manjaro’s philosophy is somewhat counterintuitive to Arch’s. Arch pointedly obfuscates system internals as little as is reasonable to “keep it simple” from a system perspective. Manjaro simplifies things for the user but creates additional obfuscation. I can see some people who value Arch’s approach being less than amenable to that.
But that’s not a reason to not use it. If Manjaro’s approach appeals to you, use it.
I usually use Lemmy at my smartphone with 4G that was released 3 years ago, I’m happy with it, and I don’t need other one more new and expensive.
The area of 4G is very congested, then the connection is slower in peak hours.
Only rich people has last medium and high end smartphone with 5G, and live in area with that coverage.
I live now in downtown, and just got slow fiber connection 3 months ago, there are a lot buildings with only ADSL in this area, and it’s the capital.
Maybe you are lucky, with good connection.
Is not so hard to optimize the image for everyone in the world, and maybe put a link to original big image of you want.
There’s a lot of ways to optimize, like changing resolution, reduce colors, clean image. And compression, using webp lossy 95% you got a very small file that looks very close to the original, usually got less than 1MB.
Today’s web is very bloated for no reason, and very slow in old computers. Browsers are the main RAM eaters.
Either you’re trolling - in which case, sod off back to Reddit - or you have a woeful misunderstanding of how Linux user permissions work.
Please explain how someone might “simply change” someone else’s .bashrc without either already having access to that user account, or root access on the whole machine?
The idea is malware you installed would presumably run under your user account and have access. You could explicitly give it different UIDs or even containerize it to counteract that, but by default a process can access everything it’s UID can, which isn’t great. And even still to this day that’s how users execute a lot of processes.
Regarding Windows all I read is that this “admin permission dialog” is launched in some form of sandbox where no software can access it. Not sure about faking input devices though, and I am also not promoting Windows for Security
True, but that doesn’t necessarily matter if I can compromise the privileged app instead. I could replace it, modify it on disk, or really any number of things in order to get myself a hook into a privileged position.
Just injecting code in some function call which launches malware.exe would do the trick. Ofc signature checks and the like can help here - but those aren’t a given. There’s any number of ways you can elevate yourself on a system based off of user security if your threat model is malicious processes. Linux (and windows) will stop users from accessing each other’s crap by default, but not processes.
Or: supply chain attacks. Now your official app without any modifications is malicious.
If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.
Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).
In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
Yep! You can also get pretty far even without containers. At the end of the day containers are just sandboxing using namespaces, and systemd can expose that pretty trivially for services, and tools like bubble wrap / flatpak let you do it for desktop apps. In an ideal world every package would only use the namespaces it needs, and stuff like this would largely not be a concern.
Nearly all tools (with flatpak and portals progressing into better directions but probably never finished) have rw permissions everwhere.
The modern OS threat model is not other users, as private users mostly have single user systems. It is malware and software doing nasty things.
On Linux this always worked out somehow, but grabbing your sudo password is not hard, just alias sudo to a script reading your argument, reading your password, and piping the password to the real sudo. You dont even notice it but that script just got your sudo password.
It’s not about someone, it’s about something. A lot of us aren’t (only) using Linux as a server OS, but for desktop too, and desktop usage involves running much more different kinds of software that you simply just can’t afford to audit, and at times there are programs that you can’t choose to not use, because it’s not on you but on someone on whom you depend.
Then it’s not even only that. It’s not only random shit or a game you got that can edit your bashrc and such, but if let’s say there’s a critical vulnerability in a complex software you use, like a web browser, an attacker could make use of that to take over your account with the use of a bashrc alias.
I.e. how malware could easily catch your Sudo password without root access.
Peeps, bad news, Linux is damn insecure.
By simply placing an alias in your bashrc they could already grab your sudo password.
Another bad news, this Windows “okay” Button without any password is actually more secure.
In other words: a compromised system at the User level can easily compromised at the admin level if there are no additional checks/measures in place. Same for Windows. Just change the link to a Programm you commonly need the press OK to to you maleware. Profit.
The proper way to handle issues like these is process level permissions (i.e. capability systems), instead of user level. Linux CGroups, namespaces, etc. are already moving that way, and in effect that’s the way windows is trying to head too. (Windows has its own form of containerization called AppContainers, which UWP apps use. Windows also has its own capability system).
Opensource has a forking problem. So much time spent maintaing projects with only a few tweaks differentiating them.
Mint at least improves upon Ubuntu significantly and undoes a lot of their unpopular corporatey decisions. Zorin is literally just Ubuntu with a different face.
I have the Go gen 1 with 4 Gb ram, for the exact same user cases ad you described.
The compatibility with Linux is great, but be mindful that you need a Windows installation to boot from USB (!). But the pen and touchscreen works out of the box.
The performance though is not the best, boot can take some time. I’d say forget about YouTube. But light coding and non-demanding websites could work. The form factor is great though… 😊
OP, if you’re interested in buying a used one, we could perhaps arrange something, if you live in Europe? Message me in that case.
PS. A Linux surface community would be great, I’d happily join it!
wait but there is one thing that I need to know!! The “Magma” version of Aggie gives you a commercial license, does that mean that the free version of Aggie will not let you do that?? So that means no commissions or selling your art?? Oh no!!
I’ve been running Nobara on my Surface Pro 4, which is based on Fedora. It comes with all the surface drivers built in, which really helps. It’s been working pretty well for me.
I understand but I would like to manage all of my files and backup my chrome Linux and by the way, Xenia would suggest that any browser is ok and any operating system too because in the end, all software companies work with each other.
I was setting up the containers to fix a problem when using wine, but found a different solution. I checked the system status. 0 units failed and x.509 isn’t mentioned
I don’t know where you are from, and what laptop you are using, but as others have said: use keyboard stickers. Just search for „colemak dh stickers [your laptop model]“
linux
Top
This magazine is from a federated server and may be incomplete. Browse more on the original instance.