I’m the Never Ending Pie Throwing Robot, aka NEPTR.

Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.

TL;DR I am a nerd.

  • 0 Posts
  • 69 Comments
Joined 1 year ago
cake
Cake day: November 20th, 2024

help-circle



  • You say “all the privacy settings on”, but what does that mean. I assume FFP but probably not RFP. I also assume it keeps JS JIT enabled which is a massive attack surface. I am not going to get into more detail but if people are looking for a more security/privacy focused Firefox fork, use Librewolf. If all you are looking for is Firefox with the privacy settings on, just use Firefox. Even with Librewolf, you can (mostly) replicate the experience by using Phoenix or Arkenfox with vanilla Firefox. I recommend everyone reconsider using a fork that is amounts to a few preinstalled extensions and just some (good) default settings. Using a fork just introduces a new party into the mix, which at best slows down how fast you get (security) updates from upstream, and at worst leads to supply chain attacks.

    That being said, I keep seeing people talk about how much they like Waterfox. I tried it and figured it wasn’t for me. That isn’t me saying that it isn’t the right choice for others. I would love to better understand what people enjoy about Waterfox over/instead of Firefox/Librewolf/Zen/etc., pros/cons and the like.




  • I would prefer webapps to native if there was a protocol to fully load the page and disable network traffic for apps that work fully offline. It is more secure to run an app in the browser because off the layers of isolation in modern browsers. Native apps can access all sorts of information and system resources, which could be used to compromise the host OS.




  • Security and bug fixes have made Plasma 6 run better for me. Wayland support is better now too (which matters to me). Minor features that improve usability. Newer kernel means i can use newer features, which some of the apps I use depend on. The main thing with your setup I was surprised about is that it isn’t an LTS kernel (from what I can tell). If you are just not updating and not using LTS software (i can’t tell), then you are missing plenty of security fixes.











  • N.E.P.T.R@lemmy.blahaj.zonetoLinux@lemmy.worldLinux Antivirus?
    link
    fedilink
    English
    arrow-up
    24
    arrow-down
    2
    ·
    edit-2
    2 months ago

    To be more clear, antivirus in general are mostly scams because they are advertised to do much more than they are actually capable (especially proprietary ones that act as spyware such as Norton or Avast, which have been caught selling user data). Hash based antivirus solutions (such as ClamAV) aren’t effective either because they rely on “badness enumeration”, in which you try to determine all the bad samples (through a sample list(s)) and alert or delete them when detected. This isn’t a good solution because a threat actor only has to add for example a single whitespace character into the code and it will produce a wildly different hash (which has not been sampled before). Badness enumeration is shit way to deal with real problems, much better is an allowlist approach, such as a permission system where to minimize the access given and soften the security until the app runs.

    TLDR: Antivirus bad at job of stopping malware, and sandboxed apps good for security of your device.