Pantherina

@Pantherina@feddit.de

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Is linux good for someone tech illererate.

Now i’ve been considering moving to linux. I don’t have much of a history using a computer and find it tougher to use than my phone. But I also really appreciate the foss movement. I’ve currently got an old laptop running windows 11 I think and it would prolly speed up with linux too. But I’m afraid I’d fuck smth up...

Pantherina,

Yes just install something that never breaks, has a graphical appstore with the correct sources, and a good GUI.

I would say try Fedora Silverblue from Ublue.it. it updates automatically (at least it should), and all your apps can be installed from your software store.

Pantherina,

Florisboard if you want high customizability, clipboard actions and internal (!) history, great privacy option.

Openboard if you want swipe typing and autocomplete.

Thumbkey if you want a keyboard that is made for use with two thumbs.

Pantherina,

Aosp keyboard is the worst keyboard in existence.

Pantherina,

Grayjay, Freetube and Newpipe work.

So just use Googles resources, build decentralized identities (@ all content creators!) and you are just fine for the dooms day when Youtube uses DRM or something

Pantherina,

In the EU it is illegal to save unnecessary Cookies without active consent. So the best you can do for your privacy is use Ublock origin with a cookiebanner list!

But this should only be for EU I guess

Pantherina,

Same Wifi. If you want to not be identified to your home, use a VPN like Mullvad.

But yeah GFs with iphones, love it.

Librewolf but like... for chromium?

My main browser is Librewolf but I keep a chromium browser just in case. Previously used brave but their flatpak is shit. Ungoogled chromium seems ok but it looks like they don’t change much from upstream chromium. Any good chromium browsers which harden their browsers like librewolf does for more privacy?

Pantherina,

No the base Browser needs to be hardened. On top of that you can install addons but privacy badger is pretty weak afaik, and canvas is just one vector. There still is UA, Apis, referrer policies, WebGL etc

Pantherina,

Thats most often privacy improvements and not hardening, two different things.

I dont wanna use Chromium, but if I would, I would use Brave.

Pantherina,

I dont think Mozilla sends your account data to Google. And because the main homepage uses tracking, that is not a sign that the internal account database is shared. These are completely unrelated.

Pantherina,

I would try the Distro on an external SSD first maybe?

PopOS is way more modern that Mint, so you may have negative effects from switching

Pantherina,

Windows preloads the entire desktop it seems, before logging in. That is pretty great. Apps starting is the same, just more bloat often. Flatpaks make it more equal though. Firefox does some nice UI-preloading too, and FF on Windows is actually more secure than on Linux ironically.

So there are things to fix, but comparing breaking windows updates to never breaking and way faster immutable rpm-ostree updates, while you use the system normally, its worlds.

Pantherina,

Oh noooo, so I have a useless project now? But I guess I will just copy what I need and make it my own.

Thanks!

Pantherina,

In Germany every public wifi, train (ICE windows block cell internetand they are currently lasering small waves in them), hotels, cafes, private wifis even if you are a guest.

Because of “data protection” everyone needs to accept TOS so every network has them.

No idea where you live but cell data is often expensive.

I just use the MullvadVPN app, my systemd-resolved is plain and insecure and Mullvad does all the secure DNS stuff. Obviously sucks and is not scalable at all.

Systemd implementing a switch that could then be integrated into GUIs, like KDE6’s captive portal opener, is crucial. So for the portals you would make the DNS insecure, log in and secure it again. Best automatically.

Pantherina,

Cool!

Pantherina,

That is neat! It is a specific response so it should work.


<span style="color:#323232;">#!/bin/bash
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Function to set insecure DNS
</span><span style="color:#323232;">function insecure-dns() {
</span><span style="color:#323232;">  # Backup the original resolved.conf file
</span><span style="color:#323232;">  cp /etc/systemd/resolved.conf /etc/systemd/resolved.conf.bak
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Modify resolved.conf to disable custom DNS, DoT, and DNSSEC
</span><span style="color:#323232;">  sed -i 's/^DNS=.*/#DNS=/; s/^Domains=.*/#Domains=/; s/^DNSOverTLS=.*/#DNSOverTLS=/; s/^DNSSEC=.*/#DNSSEC=/' /etc/systemd/resolved.conf
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Restart systemd-resolved
</span><span style="color:#323232;">  systemctl restart systemd-resolved
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Function to set secure DNS
</span><span style="color:#323232;">function secure-dns() {
</span><span style="color:#323232;">  # Restore the original resolved.conf file
</span><span style="color:#323232;">  mv /etc/systemd/resolved.conf.bak /etc/systemd/resolved.conf
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Restart systemd-resolved
</span><span style="color:#323232;">  systemctl restart systemd-resolved
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;">while true; do
</span><span style="color:#323232;">  response=$(curl -sI captive.test.com | head -n 1 | cut -d' ' -f2)
</span><span style="color:#323232;">
</span><span style="color:#323232;">  if [ "$response" == "200" ]; then
</span><span style="color:#323232;">    insecure-dns
</span><span style="color:#323232;">    xdg-open captive.test.com
</span><span style="color:#323232;">    sleep 30
</span><span style="color:#323232;">    # something to wait until window is closed, otherwise spam!
</span><span style="color:#323232;">  else
</span><span style="color:#323232;">    secure-dns
</span><span style="color:#323232;">  fi
</span><span style="color:#323232;">
</span><span style="color:#323232;">  sleep 5
</span><span style="color:#323232;">done
</span>

This should work. What would be needed is to track the process of the login and only continue when the window is closed again.

Pantherina,

Yes I think you can exclude local IPs in systemd-resolved

Pantherina, (edited )

Yes if that works for sure. Problem here is that GNOME and KDE use different webengines, so yay no standards. Firefox doesnt support that I think?

I use a seperate firefox profile with a shortcut like


<span style="color:#323232;">blabla desktop entry
</span><span style="color:#323232;">Name=Captive Portal
</span><span style="color:#323232;">Exec=mullvad-exclude firefox -P captive http://captive.kuketz.de
</span>

I wanted to do something with mullvad-exclude but that didnt work for some reason, as when excluding it I think it had no internet?

Pantherina,

Is that nvidia card old, do you need very fast performance? You could use the nouveau drivers which are mostly FOSS.

If you need the proprietary drivers though, I advise against updated Distros except ublue.it

Debian might be an exception as it upgrages so slowly, but I also wouldnt recommend Debian really. Debian + GNOME is probably very fine, even though also here you will miss a lot of cool new updates, but Debian + KDE is simply not ready and all those bugs are now only fixed in Plasma 6.

So my recommendation is a ublue-nvidia image, no matter what desktop you like

Pantherina,

No Telegram lol. Thats way worse. Whatsapp sais they are E2EE but its all “trust me bro” because you cannot look at the code.

With Telegram its a little pain to open encrypted chats and groups are always unencrypted. So its useless.

Let them try Signal, its nearly identical but you can trust it.

OpenSUSE Leap 15.5 -> Tumbleweed conversion

Thinking of trying to morph my Leap workstation into Tumbleweed (and potentially Slowroll once that project matures enough). I’ve seen that you can do it . I reckon I can rollback relatively easily via the BTRFS snapshots if it goes sideways, but just curious to see what others’ experience with doing so has been.

Pantherina,

Slowroll seems just as mature as TW? Just update, upgrade, change repos, upgrade?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #