13 ms·
Enlighten me - what's the problem with the linux desktops?
by _wdzx 10y ago
Enlighten me - what's the problem with the linux desktops?
- aaron-lebo 10y agoBased on this thread, I'd say the problem is a lot of people haven't given them the time. If you select your hardware, they work pretty flawlessly. Certainly right there with Windows or OSX or anything else. In a lot of cases you don't even need to be very selective, you just need to have a modern machine.
- eropple 10y agoI run a Linux desktop for work (typing on it right now) as a dual-boot with my Windows setup. It is a "modern machine", at least if an i7-6700K and a 980Ti are modern, and I couldn't get X to start with Ubuntu 16.04 LTS. And yet it did with Ubuntu 14.04, which is bizarre. My time is valuable enough that I didn't debug it further than that--if I wanted to light my time on fire I'd just go set up a Hackintosh and have a better desktop experience, so for now I'm getting by with 14.04. But that sucks profoundly; it was my first attempt at a Linux desktop in probably three years and I was pretty disheartened by how things have gotten worse for my use cases in that time. "If you select your hardware," you can definitely have a decent time. But I don't know many people for whom the operating system is more important than what you can do with it, and part of "what you can do with it" is "use your hardware."
- aaron-lebo 10y agoThat is bizarre. I don't use a lot of Ubuntu. Having had an issue with Ubuntu and nvidia in the past, you might want to google NOMODESET and setting it at boot, which should let you boot into X/Unity and get the latest drivers. > But I don't know many people for whom the operating system is more important than what you can do with it, and part of "what you can do with it" is "use your hardware." Absolutely. But if OSes aren't directly equivalent (and the hackability of a nix gives it more power than Windows can ever have), then it's worth sorting out those hardware issues (as frustrating as they are).
- eropple 10y ago> Having had an issue with Ubuntu and nvidia in the past, you might want to google NOMODESET and setting it at boot. Thanks; I later ran into something that hinted at that. Frankly, though, at this point I don't care. I have something that works and will be patched until 2019. I don't care about my desktops. Every second I spend debugging something stupid on a desktop is a wasted second. This is bad for me and I resent it. > and the hackability of a nix gives it more power than Windows can ever have Ehh--if you have to use that "hackability" to get something that is minimally usable, that's kind of a push. (Or, when you consider OS X, a serious negative, because the only thing I have to do to get OS X to where I want is install Homebrew and a short list of packages, none of which require configuration.) I don't care about desktop environments or tiled window managers, the extent of my interaction with my WM, which I could not name, is a sort-of reimplementation of Aero Snap. Again, if I wanted to throw a bunch of time away on an operating system, I would set up a Hackintosh and actually be able to use Photoshop. Which, in keeping with the theme of "Linux desktops are a fractal of unusability", would be a significant improvement. I tried to avoid a reboot and use the GIMP yesterday for something. I think I need counseling now. I ended up using Pinta, whose layered image format ("OpenRaster", which wants to be a standard but it seems like nobody uses it?) is so bonkers and edge-case that ImageMagick doesn't even support it, to say nothing of Photoshop or even Paint.NET. It turned out, kind of to my surprise, that Linux on the desktop offers very little to me as a Linux developer, sysadmin, and long-time entrails-reading "power user". That's pretty damning, in my book.
- vbernat 10y agoWithout a bug report, nobody can tell if your case is unique or general. You spend time to rant here but with a bit of additional time, you could have opened a bug report with the appropriate information and maybe help people running into the same problem.
- eropple 10y agoI think it should be obvious that I don't have a reproducible case anymore; this was a couple months ago now, after I built a desktop. Nor am I interested in expending multiple hours creating one, because that doesn't benefit me--my stuff works now, if suboptimally. I couldn't leave it in that state then, because I had work to do with that hardware; I couldn't leave it in a trashed state just in case somebody had questions and needed to autopsy it, now, could I? Expending more time than I did would be better served just biting the bullet and setting up a Hackintosh so I have an environment I like, rather than tolerate. And this isn't a "rant". I promise you, when I'm ranting, you will know.
- criddell 10y ago> if I wanted to light my time on fire I'd just go set up a Hackintosh and have a better desktop experience As I understand it, installing macOS on non-Apple hardware is a license violation. Your employer is okay with that?
- eropple 10y agoI'm self-employed, so yes. I've got four grand of Apple gear in my office, and if they sold an xMac I'd buy one tomorrow. I don't consider it to be a moral question, and in practice Apple doesn't seem to really care.
- criddell 10y agoI work for a software company and it's pretty strict about honoring license terms because we want our customers to do the same.
- eropple 10y agoThat's a fair position. From mine, Apple gets its vig from me in plenty of other ways. There's zero pirated software, music, videos, etc. in my house or my business; giving Apple another channel through which to sell me stuff, from developer licenses to apps, doesn't trouble me.
- merijnv 10y ago> Based on this thread, I'd say the problem is a lot of people haven't given them the time. > If you select your hardware, they work pretty flawlessly. Maybe the fact that I have to give them time is one of the major problems? You know how much time I invested in getting my Windows and OSX desktops to work flawlessly? Zero.
- aaron-lebo 10y agoWe're literally talking about a 15 minute setup on a variety of nixes on a wide-range of hardware. Intel chipsets and their graphics drivers have excellent support out of the box. That goes for everything from refurbished Thinkpads to Chromebooks to used Macbook Pros to new desktops.
- pbhjpbhj 10y agoAre you comparing like with like, your Windows & OSX desktops were preinstalled presumably, same price brackets too?
- belorn 10y agoI do a windows reinstallation about once every second year, and I routinely get problems. Network drivers are almost always missing. Looking at the device manager, about 5-10 different devices fails to auto-install, all part of the motherboards. The default graphic drivers tend to "start", but is limited in refresh rate and resolution, and moving around windows shows a noticeable stutter until I install some official drivers from the graphic card manufacturer. Sound normally works without issues. On linux, the problems are almost the reverse. I have yet to have network problems on a fresh debian installation. Graphic is a all-or-nothing deal, which means either x-server starts up normally or it refuses to start completely. Sound is normally a pain, but looks to have better default behavior in the last 3 years or so.
- Decade 10y ago> I do a windows reinstallation about once every second year, and I routinely get problems. Network drivers are almost always missing. Looking at the device manager, about 5-10 different devices fails to auto-install, all part of the motherboards. What are you reinstalling, Windows XP every time? Newer versions of Windows are getting better at finding and installing sane drivers for the hardware. It’s still not perfect, Windows Update doesn’t have all the latest drivers and OEMs ruin everything especially on laptops, but these days I install the latest Windows and everything usually just works.
- eropple 10y agoI would suggest reading (and comprehending) this excellent post for a review as to some of the tire-fire issues of X: http://blog.mecheye.net/2012/06/the-linux-graphics-stack/ http://blog.mecheye.net/2012/06/the-linux-graphics-stack/ DRI2 is an improvement over DRI, of course (which was already about five to eight years behind SOTA for GPUs when it came out), but it's still a rickety, insecure mess--for one, any application can fire messages at any window in the X environment and read input sent to any window, which has some obvious implications for the usefulness of containers on the desktop--that is sorely in need of replacement. This isn't to criticize X when it was developed, mind you--it was fine then. It should have been defenestrated by 2002. Full disclosure: I get the feeling from your posts that you're looking to win an argument, rather than learn anything, so I'm not likely to respond to you further unless your tone changes. HTH. HAND.
- _wdzx 10y agoFor summary - X is just as insecure as windows/macos - we know it: wayland, mir and snappy is coming. For your disclosure - don't be too lofty with me - I'm trying to understand your problems because I've a very different experience.
- roblabla 10y agoIt's not a security problem really. That's just a side issue. The problem is, today, if I want to watch a movie, play a game, do anything that requires using some slightly advanced GPU stuff, I'll get tearing, artifacts, or downright crashes. This is mostly because X11 sucks. (It's also partly because the proprietary nvidia drivers sucks). Nowadays I reboot on windows to watch netflix or play games (even linux-compatible ones) because the experience is just much better. Linux has been constrained to work stuff. Now wayland is coming (apparently. NVidia is still trying to pull some shit[0]) and should fix all that. That's great ! I tested wayland a few months ago though, and my GPU's proprietary drivers weren't supported. So still no games, still no movies. :(. 0: http://www.phoronix.com/scan.php?page=news_item&px=NVIDIA-Wayland-Discussion http://www.phoronix.com/scan.php?page=news_item&px=NVIDIA-Wa...
- 10y ago
- deleted 10y ago[deleted]
- danieldk 10y agoFor a start, X11's security model. Every X11 application can read all keystrokes, mouse events, do screengrabs of other window's contents, etc. In other words, your browser can snoop on what passwords you type into an X terminal if it wanted to or is compromised.
- eropple 10y agoYup yup. Like, I recall a blog post by a Docker core contributor and employee saying, "Run your desktop apps in Docker containers to sandbox them! Just volume the X socket into the container." (Of course, the Dockerfiles were also running apps--like, say, Chrome--as root, with no user namespaces, so it wasn't exactly great anyway.)
- Filligree 10y agoSure it's breakable, but that still isn't bad advice. In practice, an application run with the evil bit set won't know how to break out of such a container, nor how to abuse the X socket. It's only bad advice if you're relying on Docker to provide security against targeted threats. Know your enemy.
- lisivka 10y agoI.e. X11 working in same way as Windows, OS/2, BeOS, MacOS, OSX, etc. But in Linux, I can run application in container or VM and then use VNC, RDP, or Spice to connect to it in secure manner.
- deleted 10y ago[deleted]
- danieldk 10y agoI.e. X11 working in same way as Windows, OS/2, BeOS, MacOS, OSX, etc. No, it's not. OS X has GUI isolation, an application cannot read keystrokes or read other application's contents, unless you explicitly give permission to do so. This is the reason why applications that can do more, such as Alfred, require you to explicitly enable these rights in the Privacy section of the Security & Privacy prefpane. Windows also has GUI isolation (UIPI), but it's a bit murkier. As far as I understand, lower-privileged applications cannot read events from higher-privileged applications. https://msdn.microsoft.com/en-us/library/bb625963.aspx https://msdn.microsoft.com/en-us/library/bb625963.aspx
- Anthony-G 10y agoBack in 2011, security researcher, Joanna Rutkowska wrote a very enlightening article on the inherent security deficiencies of the X server architecture which allows allows any windowed application to control any other one: http://blog.invisiblethings.org/2011/04/23/linux-security-circus-on-gui-isolation.html http://blog.invisiblethings.org/2011/04/23/linux-security-ci...
- velodrome 10y agohttps://www.qubes-os.org/ https://www.qubes-os.org/
- nickpsecurity 10y agoBack in the 90's, the high-assurance community fleshed out the issues and solved many of them on top of strong endpoints. Here's an example: https://www.acsac.org/2006/papers/epstein-paper.pdf https://www.acsac.org/2006/papers/epstein-paper.pdf One from 2005 that I sent Joanna in gripe about Qubes not having a trusted path: https://www.acsac.org/2005/papers/54.pdf https://www.acsac.org/2005/papers/54.pdf Good to see she added a better graphics system at some point. I suggest looking at prior work, though, as it's by security engineers with knowledge of adding it to every aspect of lifecycle and intent to minimize TCB. For example, GenodeOS is using Nitpicker + a microkernel. The abandoned EROS OS, whose site is still up, combined a different windowing system with a capability kernel and new networking stack. All to minimize risk in system in fine-grained way.
- mozumder 10y agoThey're Linux. How are you supposed to run Adobe inDesign on a Linux desktop? Or any other useful application, really. Linux should just kill off its desktop. Mac OS X won the Unix desktop wars, and has the expected use models of a desktop, with a proper modern GUI API as well, instead of the ancient X hacks.
- _wdzx 10y ago> Linux should just kill off its desktop. Mac OS X won the Unix desktop wars, and has the expected use models of a desktop, with a proper modern GUI API as well, instead of the ancient X hacks. Mac OSX won the "desktop wars"? That's not even funny - it's one of the most awful DEs. You people have clearly no experience with any other OS besides the one from your favorite brand. "Hacker news"... more like "Noob Army News".
- _wdzx 10y ago> How are you supposed to run Adobe inDesign on a Linux desktop? With wine... > Or any other useful application, really. You search in the software center or in your menu and start the app. Simple. FUD elsewhere, apple-noob.
- dang 10y agoWe've banned this account for repeatedly violating the HN guidelines. If you don't want it to be banned, you're welcome to email hn@ycombinator.com. We're happy to unban people when there's reason to believe that they'll only post civil and substantive comments in the future.
- cbd1984 10y agoPlease stop disrupting conversations.
- dang 10y agoYou have a longstanding pattern of abusing HN, including (I believe) with multiple accounts that we've had to ban in the past. We've given you many warnings and requests to stop. Since it seems you can't or won't stop, I'm banning this account as well.