lemmyvore

@lemmyvore@feddit.nl

This profile is from a federated server and may be incomplete. Browse more on the original instance.

lemmyvore,

Strawberry is basically a fork of Clementine from when it was abandoned.

lemmyvore, (edited )

With the second bug OP laments that Wayland compositors are implemented in C, an unsafe language.

That’s not what they’re saying. They’re saying wlroots is full of race conditions, which will be very hard to fix because they’re part of a fundamental design problem.

lemmyvore,

That security argument is like advocating wearing a motorcycle helmet when walking down the street. It sounds like a great idea and super safe, but it’s also super impractical and the things it’s supposed to protect against are extremely unlikely.

But ok, more security isn’t a bad thing. But why not make it an option, like SELinux for example? That way users can choose a degree on a scale between security and convenience that suits their use case and circumstances. Why make it all or nothing?

lemmyvore, (edited )

I remember reading through that thread when it came out and those are extremely worrying points. Wayland has extremely deep core issues. #2 there alone is horrible.

There are and were alarm bells ringing all around btw with Wayland. From a software developing perspective the approach is terrible. You cannot solve super complex problems by throwing away 30 years worth of code and redoing everything from scratch. You’ll just run into the exact same issues again. Which no, haven’t gone away as the technology advanced as many people would like to believe, we’re still using displays and networking and keyboards and mice.

There is a lot of legacy in X but there’s also a lot of accumulated experience and battle-hardened code. The obvious path would have been to keep the good and remove the bad.

Wayland will eventually since those issues but it will take just as long as it took X, because that’s what happens when you start everything from scratch again.

This is filling me with deja vu because it’s exactly what some of us went through with X, trying to piece together a working desktop out of dozens of pieces. But when you point that out you get “ha ha grandpa that’s old stuff, this new stuff won’t have that problem because [insert magic here]!”

Keep in mind that when Wayland started it was supposed to be a mini-server, to be used for the login screen only. Then the idea came to make it usable for stable, controlled and simple devices where there isn’t a lot of user configuration or hardware variation.

How it got from there to “let’s use it for everything on the Linux desktop and ditch X” I’ll never understand.

Is it actually dangerous to run Firefox as root?

I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the...

lemmyvore,

You seriously need to stop what you’re doing. Log in with ssh only. If you need multiple terminals use multiple ssh sessions, or screen/tmux. If you need to search something do it on your desktop system.

The server should not have Firefox installed, or KDE, or anything related to desktop apps. There’s no point and nothing good can come of it.

lemmyvore,

Packages can break, not the distro. Packages can break at any time because there’s thousands of them and nobody can check all of them thoroughly. A rolling distro gets you both the bugs and the fixes faster.

Non-apt and non-rolling will limit your options considerably.

lemmyvore,

Yeah that’s why I use Nvidia, because AMD drivers are super stable.

lemmyvore, (edited )

I’m on 545 and I have no issues. But I’m also not using Ubuntu…

Maybe it’s the distro that’s the problem not the backup. I mean I’d rather have a distro with smooth updates than one that makes me need snapshots.

What’s even the point with such a distro, ok so I restore previous working state, then what, I can’t do updates anymore? Living in fear of official updates sounds terrible.

lemmyvore,

No, I’m implying that official updates breaking the system is insane and should not be accepted as the norm to the point you casually need to use snapshots just to keep your system working.

lemmyvore,

And a filesystem snapshotting tool would help you restore bootloader how?..

lemmyvore,

A major distro breaking your system is the equivalent of a flower pot falling on your head walking down the street. Does it happen? Sure. Do I want to spend my life wearing a motorcycle helmet and looking up all the time? No.

I’m not saying distros can’t crap on you, I’m saying stop tolerating it. Raise a stink or switch distro. There are distros out there where you don’t have to live in constant fear and where nothing happens if you don’t have snapshots.

I do have backups, precisely because shit happens. But there’s a difference between a helmet and health insurance.

lemmyvore,

.deb distros are doomed from the start if you need to use third-party repos (which you do, for a desktop system) because they always end up undermining the stability of the packages from the core repos in the long run.

Try an Arch-based distro, they’re super stable because their compatibility model is more robust, and there are options depending on how much hand-holding you want — ranging from vanilla Arch to Endeavour to Manjaro.

lemmyvore,

You make a good point. Ubuntu gives you so many ways to shoot yourself in the foot that it’s pretty much a given that it will get messed up eventually. So you have to use snapshots.

On Arch based distros the updates just work. I’ve never had to snapshot anything. But having just one single community repo (AUR) contributes to that a great deal.

lemmyvore,

That’s a very broad question that depends a lot on your usage. My needs may be different from yours.

I’m currently using Migadu because:

  • Unlimited domains, mailboxes, accounts and aliases for a flat fee. I’m managing accounts for myself as well as family and extended family members and it comes out much cheaper this way than services that ask $5-10/account.
  • Very nice management interface with all the bells and whistles but with reasonable defaults and easy to use.
  • The company is based in Switzerland and the mail hosted in EU (France).
  • Standard email service with everything you’d expect (the regular protocols, spam protection, webmail, full compatibility with clients etc.)
lemmyvore,

Proton has been gradually closing down access to proprietary apps only. After they’re done you won’t be able to take your email anywhere else.

If you have your own domain you’ll be able to host it elsewhere but you would leave behind email, calendar, aliases etc. and restarting from scratch.

At that point “encrypted” starts smelling more like “hostage”. It’s generally a bad idea to be tied down to a specific email provider.

You could wake up tomorrow to find out Proton has been acquired and the new owners can charge anything yet want for continued service.

lemmyvore,

Proton is in the process of removing their PC bridge in favor of a custom app. After they’re done you won’t be able to migrate your email away from their service anymore.

Which is ironic, when people are trying to flee from Google. Out of the fire and into the frying pan…

lemmyvore,

If you’re giving those companies personal info (name, phone, address, CC) they can track you regardless of what emails you use with each of them.

And if you’re not giving them personal info I don’t see how that works. Yeah so I register on both random site A and random site B with aliases @tfyuhegddssgvd.com, so what? How are they going to find out about each other? What will they tell each other even if they did? And why risk a GDPR violation for such silly reasons?

lemmyvore,

I don’t self host my email either. I got my registrar, DNS and email separate from each other so if any of them goes bad I can switch with minimum fuss.

But that makes it all the more important to be able to download all your mail from your provider.

Proton currently has two proprietary things you can use to download, a “bridge” PC app that pretends to speak IMAP, and a download tool. The bridge will be discontinued after they launch their propeietary PC mail app so that leaves just the proprietary download tool, which only does .eml. format.

lemmyvore,

They’ve announced they’re trialing the custom app currently, after which they’ll discontinue the IMAP/SMTP bridge.

lemmyvore,

It’s in restricted beta currently, only available to a small category of users, and still lacking features. They say it will launch early 2024 but it looks more like mid-year to me (at best).

Point is, it won’t happen very soon, but it will happen

lemmyvore, (edited )

As opposed to an email address that can be traced back to you?

And who and why are we talking about anyway? Who’s tracking you if you have a domain?

lemmyvore,

All the measures you listed amount to nothing against a zero day remote exploit. They bypass the normal authentication process.

If you’re not able to use a VPN then use a IAM layer, which requires you to login through another method. You can use a dedicated app like Authelia/Authentik in front of the reverse proxy, or if you use nginx as reverse proxy you also have to option of using the vouch-proxy plugin.

lemmyvore,

Honestly I would say just learn Docker. It only takes a few days, a week tops. You make a container with Mongo and one with Node, network them together, map the Express port and the data volumes for db/code/build to the host machine, and live happily ever after.

Which is super clean, not distro-dependent, reproducible, portable, easy to backup, you can swap Mongo and Node versions or use multiple versions side by side as you please, and you can use whatever features you want from the home distro without impacting anything in your dev stack.

lemmyvore,

That’s a good chip. As a rule of thumb, Realtek = best, Asmedia = good, JMicron = garbage. JMicron adapters run super hot and draw a lot of power, leading to low speeds and dropped connections.

The reason I suggested a Live CD with persistence is that they are better at autodetecting stuff on the host machine. You can definitely install an actual system on the SSD but it will make assumptions about things like the GPU for example – won’t expect to have to swap it at boot, you’ll have to do it manually. Or you can run your desktop environment with a pure software driver but that may get a bit annoying at times, depending on what you want to do with it.

lemmyvore,

What chipset does the adapter use? Check lsusb or dmesg.

Try adding a Manjaro install ISO with Ventoy, it works very well in live CD mode.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #