• 13 Posts
  • 268 Comments
Joined 5 months ago
cake
Cake day: March 19th, 2024

help-circle


  • For context, my threat model doesn’t need to account for real people breaking in and accessing my computer, the damage would be very contained.

    I mean if you don’t have open ssh ports on your computer or whatever I don’t think you need a strong password, given that you’re not concerned about physical access. I would say that at the very least have a reasonably secure root password (/user password if you’re a sudoer/anyone else who can get root permissions with your user account) because if you end up with some malware on your computer that can, say, enter passwords, you don’t want it to be ridiculously easy to bruteforce.


  • Yeah I agree I don’t want bleeding edge hence why I won’t be using anything Arch-based (despite the fact that Arch-based systems are the ones I’m most familiar with, I’m typing this on an Artix system rn). But there is definitely a middle ground between bleeding edge and outdated, and I imagine a server should want to be somewhere between the middle and outdated, depending on how they balance stability and security.

    I’m also not categorically opposed to using Debian. Ubuntu was my first Linux distro so I’m at least more familiar with Debian-based distros than most other popular server distros. I was just thinking probably not Debian because of how old its packages are and that I’m fairly concerned with security.



  • I don’t justify Mozilla’s bullshit, and I don’t use upstream Firefox for that reason (I use LibreWolf). Asking Mozilla to implement their own adblocker is asking them to reinvent the wheel. They should ship Firefox with uBlock Origin pre-installed like I said. Asking Mozilla to write their own adblocker which will likely be less effective than a third-party adblocker, is absolutely not the same thing as justifying them sneaking in opt-out PPA. How on earth do you even see those things as remotely comparable

    I’m saying that your suggestion is ridiculous, not that what Mozilla is currently doing is correct.