

GrapheneOS devs have a problem with this guy https://discuss.grapheneos.org/d/20165-response-to-dishonest-attacks-on-the-grapheneos-project-by-robert-braxman
GrapheneOS devs have a problem with this guy https://discuss.grapheneos.org/d/20165-response-to-dishonest-attacks-on-the-grapheneos-project-by-robert-braxman
This is a review with Windows installed, not SteamOS
Vesktop is great. However, with the Discord IPO looming (https://www.ign.com/articles/discord-is-reportedly-exploring-an-ipo) it is definitely time to abandon ship.
So it looks like the protocol was audited, but I don’t know about the app or servers. https://www.pindrop.com/article/audit-signal-protocol-finds-secure-trustworthy/
Lmao this is amazing. The future is now…
The openSUSE matrix server had this happen last year, and the admins came up with a good solution of bots that seems to keep things very clean now. I’m sure they might be happy to help if you asked in their admins group
Maybe because… automatically recording calls is literally illegal in some places around the world? It should probably be user choice to opt in to that so it wouldn’t be on by default. And then, if you have it on while travelling, you could forget and break the law when going through a jurisdiction that does not allow it. Better to explicitly allow for each call, like it does currently.
Is it difficult to add them to more trackers? I’ve often wondered about this, how to keep stuff alive…
Gooner librarian lmfao
Apparently this is a tough problem for mobile devices… GrapheneOS (security hardened OS based on Android) took months to fix a leak someone reported, and had to collaborate with the VPN app providers to do it https://github.com/GrapheneOS/os-issue-tracker/issues/3442
Yeah… I’m laughing at this guy saying the AUR is much better than installing from a random Github repo. Same level of trust haha.
Also, not everybody NEEDS to know how something works to use it. And, just getting someone onto Linux in the first place with a 90% working system seems better to me than them working hours and hours to build a minimal system in Arch … because it would take even more hours to replicate their workflow on Windows or Mac. I think this is a great example of “perfect is the enemy of good” when trying to get people to adopt something.
However, I definitely believe that if you want perfection, you go to Arch or a derivative and you do it yourself, no automation. But that should be a choice… I do plan on one day switching from Tumbleweed to Arch, but I am not ready for the time commitment. Plus, NVIDIA finally fixed their shit, so I want to enjoy playing games for a while now that the weird issues and visual artifacts caused by the old non-explicit-sync drivers are gone!
Yeah I actually am slowly realizing that I agree with that. Lots of bigots in Phoronix comment sections… and that doesn’t even include the obviously psychotic rants, its just the ones that unashamedly shit on DEI all the fucking time
If it works on chromium I’d consider that even if it is a quirk on the bank website, chromium is handling it cleanly and allowing you to use the site. That’s something we probably want incorporated in Firefox. I’d encourage submitting the bug report to Mozilla, and don’t assume too much about what they can/cannot do!
I think the key part here is that it’s a guess on your part whether using Firefox is the cause. Do you get any specific error when using the website? Or does something just “not work”, such as you click a button and it does nothing?
Also, I’ve run into stuff like this before, and my best bet has been to be flexible about using other browsers to work around issues. I would suggest testing the banking website with Chromium (or even Chrome). If it works, file a bug with Mozilla (https://support.mozilla.org/en-US/kb/file-bug-report-or-feature-request-mozilla) and just use Chromium/Chrome for only that website until the bug is fixed.
This will allow you to still do business, while still participating in open source via a helpful bug report that could end up benefitting others as well.
Because beginners have no idea about OS architecture concepts. If they are a true beginner coming from Windows or MacOS they may not understand things like the Linux boot process. Of course they can read the Arch install procedure which I’ve heard is excellent, but many people are easily intimidated by documentation and often view computers as a tool that should just work out of the box without them needing to understand it. Mint is an attempt at making that happen. Obviously, once you start to modify your Mint install alot you are going to run into issues, and a highly modified or customized system is where distros like Arch and Tumbleweed actually become easier to maintain. I’d argue Mint is a natural first step to the Linux pipeline. People who only need a web browser will probably stop there, while others will continue to explore distros that better fit their needs.
So, basically shitposting poisons AI training. Good to know 👍
Fairly simple explanation by arstechnica: “The malicious versions [of xz], researchers said, intentionally interfere with authentication performed by SSH, a commonly used protocol for connecting remotely to systems. SSH provides robust encryption to ensure that only authorized parties connect to a remote system. The backdoor is designed to allow a malicious actor to break the authentication and, from there, gain unauthorized access to the entire system. The backdoor works by injecting code during a key phase of the login process.”
Also from the article, you should check if your distro is offering a downgrade from the affected 5.6.x packages. Right now the exploit is not fully understood. For example, openSUSE recommends a full reinstall of Tumbleweed if an SSH server was enabled, just to mitigate risk.
The two have completely different goals, and SimpleX’s goal (anonymity) comes with difficulties such as not having typical “accounts”, which means no true simultaneous multi-device support.