this post was submitted on 19 Nov 2023
701 points (90.7% liked)
linuxmemes
21210 readers
67 users here now
Hint: :q!
Sister communities:
- LemmyMemes: Memes
- LemmyShitpost: Anything and everything goes.
- RISA: Star Trek memes and shitposts
Community rules (click to expand)
1. Follow the site-wide rules
- Instance-wide TOS: https://legal.lemmy.world/tos/
- Lemmy code of conduct: https://join-lemmy.org/docs/code_of_conduct.html
2. Be civil
- Understand the difference between a joke and an insult.
- Do not harrass or attack members of the community for any reason.
- Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
- Bigotry will not be tolerated.
- These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
3. Post Linux-related content
- Including Unix and BSD.
- Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of
sudoin Windows. - No porn. Even if you watch it on a Linux machine.
4. No recent reposts
- Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.
Please report posts and comments that break these rules!
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Just use trusted repos π
We have GPG for a reason.
Possibly, but Firefox & Chrome based browsers have the same built-in isolation and other security measures as on Windows. Plus you can use Ublock Origins to get rid of malvertisements. If you really wanted, you can also isolate the browser entirely with something like firejail.
Hardend forks like LibreWolf are good too.
Oh, and Wayland also isolates clients from each other too.
I don't think it's that big of a threat as long as you keep some level of common sense.
One of the biggest reasons I might want to say goodbye to xfce sooner than later.
I can't make use of most of Waylands' features and improvements, but this kind of isolation is very much worth it anyway.
Xfce does have a w-i-p porting effort to Wayland.
I have confidence that they'll do it right, but looking at its past, it will take a looong while until it's ready
True, but at least development is steady for now. Maybe in a few years.
And if itβs flatpak, it should be contained
Thanks to bubblewrap.
There are a lot more ways to sneak malware into a system. Especially if some apps aren't being maintained anymore. Linux is definitely safer, but you shouldn't let your guard down
especially if you're a developer. There are a lot of shenanigans going on with malware npm packages that prey on easy typos. I imagine it's the same with other library installers for other languages too
Funny you bring this up because it's exactly what I was thinking of. A million small packages and dependencies and who knows if the repos got hijacked
Okay, what happens if your repo doesn't have a specific software you are looking for? A trusted repo is good, but it won't have everything you might want. This is especially true for new software or less popular software.
Install nix, flatpack, etc. ββ βΏβ β
You audit the code