• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: May 29th, 2024

help-circle
  • Yeah, it doesn’t actually make much of a difference:

    Fundamentally the idea of having a separate admin account, which is completely protected, and a user account where everything can mingle together and see everything else, is a 1960s security model. It was originally created for a world where the owner of the computer and the user of the computer were two different people. In that world the user provides all the software that they want to run in their account (they probably wrote it) and the OS’s job is to protect the admin account from users and the users from each other.

    Fast forward to the present day and this security model is completely mismatched with the reality of a personal computer. The internet exists, the user and owner are the same person, and they’re probably not writing all their software themselves. A piece of malicious or compromised software can encrypt every file in your user folder, steal your browser history, your saved passwords, and (on xwindows) record your keystrokes and make your screen display anything it wants, all without privilege escalation. But you can rest assured knowing that the user account can’t violate any timeshare limits that the root account placed on it.

    The one thing you could argue is that a separate admin account makes it easier to detect and fix a compromised user account, but:

    1. Most people are not in the habit of regularly logging into their root account and examining all the processes that are running in their user account. In fact many distributions do not even have a separate root account.

    2. If you do think your computer has been compromised the sensible thing is to wipe the disk and restore from backup. It just doesn’t make any sense to fiddle around trying to figure out just how compromised you are and trying to reverse the process in a running system.

    3. If you’re running xwindows I hope you never install updates or type your password for any other reason while some malicious software is running, since, as previously stated, anything running under your account can record your keystrokes. In that case your admin account is compromised anyway without having to use any privilege escalation exploits. Can you see how all this stuff was built with the assumption that the user and owner are two separate people with two separate passwords?

    With Wayland and containerized applications we are slowly moving away from that 1960s security posture, which is something that’s long overdo. But currently something like Linux Mint is not really much better off than Haiku, from a pure security model standpoint.

    In any case its security model is not the interesting thing about Haiku.


  • Neither Haiku or 9front use systemd, and they’re both very interesting from a technical and design perspective (though not for their init systems).

    If it has to be a Linux distribution I would say Damn Small Linux (DSL), because its really impressive just how few resources it requires. You can run x windows and even browse the web (using Dillo) on a system that’s small enough to fit in the L3 cache of some modern CPUs.

    I don’t daily drive any of these though, so they might not count as my “favorite”.




  • The thing to understand about large organizations is that appearances matter a lot and the people working in them have to look busy. This is well known phenomenon among low level employees but it applies to managers and even executives too (who have to put on a show that they’re increasing shareholder value and that their company is special somehow).

    So, why do advertisers care if someone says “fuck” but not about someone whose spewing pseudointellectual misogynistic bullshit? Because there’s someone whose job description is “brand value” and if they’re not upset about something then they don’t look busy. The amount of “fucks” per minute is a really simple metric that (now that speech recognition is as good as it is) is really easy to measure. In other words its an easy way to look busy.

    Of course it doesn’t hurt that the guy’s boss is probably a conservative anyway, and so doesn’t mind the misogyny so much, but looking busy is the main reason.





  • In addition to what groet said, I’ll add that this is a little bit like asking “what’s the difference between a public library and Amazon?”.

    Yes, there are other public libraries you could go to if the one you subscribe to didn’t have something you wanted or ‘went bad’ somehow, but the most important difference is you don’t have an antagonistic relationship with your public library. Your public library doesn’t have a financial incentive to try to trap you or screw you over.


  • drosophila@lemmy.blahaj.zonetolinuxmemes@lemmy.worldWe dont need one
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    1
    ·
    3 months ago

    An antivirus is mostly just a blacklist of known malware. Sometimes heuristics are used such as ‘this piece of software isn’t installed on many PCs, and it appears to be doing shady stuff like, monitoring keystrokes or listening to your microphone’. But unless your antivirus is actually sentient there’s no way for it to really distinguish between a chat application that listens to your microphone so you can talk to your friends / monitor your keystrokes to know when you’ve hit the push-to-talk key, and a piece of actual malware that intends to spy on you and blackmail you.

    What you have with a package manager is a whitelist of programs that have been selected by your distro maintainers. Is it completely impossible for someone to sneak malware into a distro’s repository? No, but its a lot easier to maintain a list of known good software than it is to maintain a list of known bad software. And in that situation your antivirus isn’t going to help you anyway, since the people maintaining its malware list aren’t going to magically know that something is malware before the distro maintainers do.

    So, generally, just using your package manager instead of running random shit you find online is going to be a lot better than any antivirus. With things like Wayland and Flatseal becoming more common we’re heading towards a situation where fine-grained per-package permissions will become the standard way distros do things, making antivirus even more unnecessary.

    We should have done that a long time ago, as the security model of ‘any program you run can do anything you can by default’, then blacklist the ones that inevitability abuse that privilege, is completely backwards.


  • drosophila@lemmy.blahaj.zonetoRust@programming.devRust is now a government conspiracy
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    1
    ·
    edit-2
    4 months ago

    This is such an incredible self-own.

    Either:

    • C++ is such a horrific language and Rust is so vastly superior that a person with 6 months of experience in Rust can be as productive and valuable as someone with 30 years of experience in C++.

    • The person writing the post, and according to them C++ programmers in general, bring virtually nothing to the table other than knowing the syntax and semantics of C++, even after 30 years of programming.




  • Honestly your situation is kind of a worst case scenario.

    At this point Linux works really well if all you want to do is browse the web and play (single player) games.

    It also works pretty well if you’re an expert who understands the system in and out and can comfortably edit any config file on their drive to achieve what they want.

    But if you’re a Windows power user whose used to being able to set up all kinds of niche functionality its a rough experience when all of your knowledge is now suddenly useless and there’s a different set of things that are easy or hard to do.

    Its actually kind of a similar experience going the other way. For example there are some things that Linux users are used to being able to script that can’t really be accomplished on Windows except via autohotkey, which from a Linux user’s perspective just seems incredibly dumb.


  • drosophila@lemmy.blahaj.zonetolinuxmemes@lemmy.worldIt broke again
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    5 months ago

    I haven’t had any problems on Linux Mint with a 3060 Ti aside from some artifacting when I try to do screen recordings (unless I disable flipping).

    EDIT: I’ve had that GPU for about 2 years. I had a 1050 Ti for about 4 years before that.

    Actually now that I think about it an update did break my graphics at one point, but that might’ve been partially my fault. I just reverted and reinstalled the same update right after though, and that worked just fine, so it wasn’t a huge deal.

    Overall I would say its been more than 10 years since I’ve had an actual major graphics issue (having to open xorg.conf).


  • I think there’s a sort of perfect storm that can happen. Suppose there are two types of YouTube users (I think there are other types too, but for the sake of this discussion we’ll just consider these two groups):

    • Type A watches a lot of niche content of which there’s not a lot on YouTube. The channels they’re subscribed to might only upload once a month to once a year or less.

    • Type B tends to watch one kind of content, of which there’s hundreds of hours of it from hundreds of different channels. And they tend to watch a lot of it.

    If a person from group A happens to click on a video that people from group B tend to watch that person’s homepage will then be flooded with more of that type of video, blocking out all of the stuff they’d normally be interested in.

    IMO YouTube’s algorithm has vacillated wildly over the years in terms of quality. At one point in time if you were a type A user it didn’t know what to do with you at all, and your homepage would consist exclusively of live streams with 3 viewers and family guy funny moments compilation #39.




  • While I agree that it’s somewhat bad that there is no distinction between lossless and lossy jxl in the file extension, I think it’s really not a big deal compared to the present situation with jpg/png.

    The reason being that if you download a png file you have no idea if its been converted from jpg, if it’s a screenshot of a jpg, or if it’s been subjected to lossy reencoding by a tool or a website upload process.

    The only thing you can really do to try and see if the file you’ve downloaded has suffered encoding loss is to do an image search on it and see if there are any better quality versions out there. You’d do the exact same thing with a jxl file.