• 1 Post
  • 109 Comments
Joined 3 years ago
cake
Cake day: June 10th, 2023

help-circle





  • Stable (Debian) means that when you get it working it is less likely to break when you update. A broken installation on a server is quite stressful. Downside for desktop/laptop is that it may not support the latest games and hardware.

    Ubuntu is probably more stable than Mint, but less stable than Debian. Which you choose may be more personal preference than objective value.





  • jdnewmil@lemmy.catoLinux@lemmy.worldsandboxing software, how to get started?
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    2 months ago

    The best approach is to not run untrusted software. Second best is to be a security expert and run it under the control of a debugger and analyze each instruction before it runs.

    This is probably not what you wanted to hear, but every sandbox has flaws and software that is written by someone aware of those flaws can conceivably exploit them.

    Tools like firejail are often useful early to mid software life cycle… before exploits become common for them. But there eventually comes a point where a zero day exploit is released and your peace of mind leads you to think you are safe. Their utility varies over time, and it is the nature of zero day exploits that they surprise you.

    I think flatpak is a configuration management tool… not a security sandbox… but really the question comes back to what is your use case… do you want to become a security consultant, or are you just looking for a bit more protection from common exploits? There is no magic bullet… even dealing with the minutiae of locking down specific system calls will not protect you perfectly yet it can significantly increase the hassle of onboarding new software. Simply relying on signed software packages most of the can reduce the chance of encountering malicious software significantly over using unsigned packages if you are an ordinary computer user… and getting wrapped up in security issues when you are not aiming to be an expert can just add overhead to your life without making you significantly safer. Beware of the rabbit hole… it can feed your hypochondria rather than protect you if you let the wolf in through the front door and hope the locks scattered around will stop it from harming you.







  • Trying too hard to get a reaction by threatening to load Windows, the hardware hog? Way too low to even be believable.

    First thing that comes to mind with a thrifted laptop is that you need to use an older distro compiled for 32bit cpu. But honestly, modern laptops are cheap and the overall experience regardless of OS is that very old hardware is going to look bad by comparison with anything on a store shelf so unless you are familiar with Linux already and committed to rehab old hardware (e.g. for standalone use) then it probably isn’t worth your time.


  • That is not an ideal experience. However, hardware gremlins are not a universal experience either.

    Others have pointed out that getting a slightly older laptop to put Linux on can give the tinkerers time to get the key drivers working, and avoiding bleeding edge revisions of your distro can help.

    It is quite possible that my comfortable experience with Mint and Ubuntu over the years have been influenced by my low expectations of getting all the bells and whistles working the way they would in Windows. I like the software environment that typically comes on Linux and I don’t stress when Windows software (esp games) doesn’t work (though Steam makes a lot of games work anyway).

    I did have to spend more time getting the bios and fingerprint reader straightened out on my latest laptop (Dell Inspiron), but Google and blogs walked me through it and the only remaining problem is that sometimes when the fingerprint prompt times out I have to use the password until I reboot.