hparadiz

38 ms·

751.
by hparadiz 9mo ago
I'm betting someone included the desktop file in the upstream and it has nothing to do with the distro.
752.
by hparadiz 9mo ago
Debian testing is rolling release. More akin to Arch or Gentoo really.
753.
by hparadiz 9mo ago
All of them will work. What "support". What is this nonsense. Seriously.
754.
by hparadiz 9mo ago
Please don't recommend Mint. It's slow to merge upstream and I find noobs installing it all the time then complaining about features missing that were already in upstream for two years.
755.
by hparadiz 9mo ago
> I've tried nothing and I'm all out of ideas
756.
by hparadiz 9mo ago
This is actually a super useful summary. Thank you.
757.
by hparadiz 9mo ago
> pure luck this is actually skill, bravery, and fortitude
758.
by hparadiz 9mo ago
OpenRC on Gentoo works great. I have a full bleeding edge Wayland KDE Plasma with Pipewire setup that I game on. OpenRC recently added user "units" aka services running as a user after a session start. Something that many new GUI
759.
by hparadiz 9mo ago
If they actually did this they would vendor lock you into a custom DM after one or two iterations and then anyone not using that DM would be locked out of any real software. It's a Trojan horse.
760.
by hparadiz 9mo ago
All corporate SSO providers.
761.
by hparadiz 9mo ago
The problem is as soon as you run something new and it doesn't scale properly in X11 you're gonna be making a bug report instead of using what everyone else is using. Currently just with the screen sharing thing it's not even
762.
by hparadiz 9mo ago
> Odd. Every few months, I see a new xorg-server version in my distro's package manager. Yea these are security updates but the eco system requires a lot of desktop manager scaffolding in user space. That has basically stopped. It&#
763.
by hparadiz 9mo ago
We're gonna be using this to validate someone didn't move your login to another device. Which will protect you from session hijacking. Your work stuff will start requiring it. Your media accounts will too. Or else linux will simpl
764.
by hparadiz 9mo ago
I don't recommend Mint for this reason. SteamOS or Nobara for the white glove premium experience.
765.
by hparadiz 9mo ago
X11 has basically no development anymore. That means regressions are entirely ignored. I switched my Gentoo box from X11 to Wayland three years ago at this point. It's shocking that people still install X11 as a default in 2026 except
766.
by hparadiz 9mo ago
You should only ever be using Wayland from now on.
767.
by hparadiz 9mo ago
That's cause you're using a distro like mint which is using older builds of stuff. Get yourself a most recent plasma 6 Wayland setup with pipewire for audio. It even has rdp server now. What's most likely happening is your us
768.
by hparadiz 9mo ago
Remote attestation is just generating a random blob on the remote side and then making the tpm 2.0 module on a computer sign the blob with a private key. You then provide the signature and the public key to the remote for verification. That
769.
by hparadiz 9mo ago
Secureboot is something else. It verifies the boot loader at the BIOS. This can be broken by the system itself (like if it's hacked). So it's protecting you against modifications to the boot loader. This is where kernel modules ca
770.
by hparadiz 9mo ago
Yea I was looking at this for work. We require full disk encryption for all operating systems but linux is the one where it's a passphrase or a yubikey. In my personal life it would just make managing my PC more annoying. Imagine a mot
771.
by hparadiz 9mo ago
Aren't you guys actually talking about a TPM 2.0 device being present on the machine and not a CPU specifically? Cause the whole Windows 11 thing was (I thought) full disk encryption with TPM 2.0 attestation booted from a secure boot B
772.
by hparadiz 9mo ago
They just entirely ignore them instead.
773.
by hparadiz 10mo ago
Me trying to run Falcon 4.0 on a 166 mhz P1 with 16 mb of edo ram.
774.
by hparadiz 10mo ago
The profit margin has to be significantly higher than simply plopping that cash straight into an index fund. The risk of a project failure is simply too high.
775.
by hparadiz 10mo ago
Tpm isn't designed for this use case. You can use it for disk encryption or for identity attestation but step 1 for id attestation is asking the tpm to generate a key and then trusting that fingerprint from then on after doing a test s
776.
by hparadiz 10mo ago
The bpf api isn't the only telemetry source for an anti cheat module. There's a lot of other things you can look at. A bpf api showing blanks for known pid descendent trees would be a big red flag. You're right that it's
777.
by hparadiz 10mo ago
Firefox exists.
778.
by hparadiz 10mo ago
All it takes is going to cd usr src linux and running make menuconfig. Turning off a few build flags. Hitting save. And then running make to recompile. But that's like saying "well if I remove a fat32 support I can't use fat3
779.
by hparadiz 10mo ago
Well yeah but then eBPF would not work and then the anti cheat could just show that it's not working and lock you out. This isn't complicated. Even the Crowdstrike falcon agent has switched to bpf because it lowers the risk that a
780.
by hparadiz 10mo ago
The Linux kernel has eBPF now so if they wanted to start spying on everything you do they can just do it.

More ›