The latter, it originates from the British parliament, as in I hear you and agree.
- 7 Posts
- 476 Comments
I replied to @muntedcrocodile@lemm.ee and understood the question like “Is distrobox as secure as QubesOS?”, which I replied with “No”.
Ahh, fair cop. Good point on Secureblue, but my threat model doesn’t take me there.
Eh, it’s fedora under the hood with SELinux enabled, and immutable, better than most security wise, I didn’t say much more.
Bazzite is the better distro because you install things in a distrobox. Muck around, break things in there, but your main distro stays safe, secure and stable.
MalReynolds@slrpnk.netto Privacy@lemmy.dbzer0.com•It's Time to Wake Up: A Darknet Anarchist's Case for Anonymity & Digital SafetyEnglish2·3 months agoFair enough, I got the wrong impression with the post (which I did read) finishing with
It is not impossible to circumvent these issues, for instance by paying for a jmp.chat phone number with monero XMR. In this case you don’t actually have the sim, but rather access it remotely over XMPP. If you do this over Tor very little can be used against you.
and so on, which I found wanting from a privacy perspective at the implied threat level. No phones (or perhaps faraday bags, or aircraft mode, if tested, depending on threat model) is a much more astute take home, hence the spycraft suggestion.
Anyhow, best of luck.
MalReynolds@slrpnk.netto Privacy@lemmy.dbzer0.com•It's Time to Wake Up: A Darknet Anarchist's Case for Anonymity & Digital SafetyEnglish114·3 months agoSo, your key takeaway seems to be getting an untraceable phone number. From an opsec point of view I see a few problems.
First, this is implicitly aimed at going against state level actors, which is a whole other game than random internet services. With that in mind…
You assume TOR is actually anonymous, but it has been shown that with enough compromised exit nodes that fails. It’s also a NSA project originally, which may or may not be relevant, the code may be good and is open and has had eyes on, but at the least shows they are intimately familiar with it.
You assume acquisition of Monero is uncompromised and untraceable. Perhaps cash at a machine might be pretty good, but a camera could easily invalidate it, or the machine itself be compromised, wouldn’t be hard to imagine a profit motive or false flag driving that.
What’s the security implications of the XMPP protocol ? Just using TOR may not be enough (I don’t know, just asking the questions). What about the other end of the phone call?
One approach, especially for local efforts, is just using old school spycraft, dead drops, one time pads etc.
You asked for feedback.
Until next week, sigh.
Huge kudos to Freetube, I love it. Just the opposite to Alphabet, go on, be evil again.
MalReynolds@slrpnk.netto Climate - truthful information about climate, related activism and politics.@slrpnk.net•Carbon capture more costly than switching to renewables, researchers findEnglish2·5 months agoThing is, the time for net-zero has passed, did you hear that whooshing sound?
To pull back from the brink, what is needed is net-negative, which ain’t happening without capture (alongside massive reduction in emissions), economics be damned, it’s an existential threat, it’s about survival. Could be as simple as massive reforestation, could be fusion generators pulling CO2 out of the air, will probably be many different things, but learning what works, as soon as possible, is imperative.
Not to my mind, science requires a testable hypothesis and evidence. I would argue that merely refuting someone else’s hypothesis without providing a new one doesn’t meet the bar of doing science.
Sorry, I don’t understand.
Counterexamples also refute, without necessarily being science.
You’ll be wanting sudo ostree admin pin 1 seeing as 0 was broken. Double check with rpm-ostree status.
Proceed to rpm-ostree update, if that does nothing it means 0 is up to date, personally I’d just wait for a new update using the working deployment, but you can blow away 0 and get it again if you’re keen.
MalReynolds@slrpnk.netto Privacy@lemmy.ml•KeePassXC: Convenience of single passwords file and security of having multiple protected databases possible?English7·5 months agoJust use multiple database files (e.g. one for unimportant, one for important) and automate the syncing with syncthing or something so the lazy doesn’t matter…
MalReynolds@slrpnk.netto Science Memes@mander.xyz•The Ljungavik Dog: A Mesolithic dog burialEnglish1·7 months agoVery much agree, evolution or no. Sometimes it’s just right.
MalReynolds@slrpnk.netto Privacy@lemmy.ml•Dutch & French police take down Matrix encrypted chat app; 2.3 million messages capturedEnglish2·7 months agoWhat is the Matrix?
A viral advertising campaign in 1999…
MalReynolds@slrpnk.netto Programming@programming.dev•How could digitial age verification be possibly implemented with privacy in mind?English5·7 months agoI’ve always thought that it should be the relevant ID issuing organisation, with whom the damage to privacy has already been done, might as well leverage it.
wut? I VPN all the time (for niche stuff Lemmy’s not there yet with).
MalReynolds@slrpnk.netto Linux@lemmy.ml•Nvidia Sunshiners (game streaming), how are you getting it to work?English1·8 months agoI’m on bazzite with a GTX980, and it’s been working flawlessly, so it’s not age. I assume you did
ujust sunshine-setup
but it’s worth checking.
MalReynolds@slrpnk.netto Linux@lemmy.ml•Linus Torvalds Lands A 2.6% Performance Improvement With Minor Linux Kernel PatchEnglish3·8 months agoThanks, got a new term today.
Gaming…straight to Bazzite, you’ll likely be playing in an hour. Why wait, just point the installer at an external drive and see what it’s like.