Update: yes this is still true. MullvadVPN and ProtonVPN (which I dont recommend) both patch wireguard to work with less logs.

Officially, Wireguard cannot be no-log

Immer nach unten. Alter, Bäcker werden durch REWE etc. arm, nicht dadurch dass Leute einen auf Lokalwirtschaft machen.

Fixing their damn sandbox would be something truly useful.

Implementing a fork server so Flatpak AND Android Firefox can stop being fucking insecure for no reason.

The app is fine but prett huge. The alternative client “Loopless” is not available like a normal software project

Hm ok but I also cannot login

The app is huge and “Loopless” is only available if you have a google account so…

fuck

I dont have an app, i use it through Mull. Javascript JIT is disabled

The desktop version uses Electron, a shitty Chromium + Node.js framework for devs that really only want javascript and web tech

Can someone else not log into loops? I have an account but clicking the login button does nothing

True, forgot about that.

Alternatively yeah some system to load the data online, autodelete after a while of not logging into something.

But the question really is “why?”

Disk encryption should deal with everything. Secure boot and usbguard are useful anyways.

THIS prevented you from switching?

Afaik screenshare always worked when using Discord in a browser

Which it isnt

Yeah because Flatpak firefox is damn insecure!

Please dont use it. Firefox devs dont care. Flatpak restricts browsers from spawning “user namespace” sandboxes for filesystem isolation.

Chromium uses a fork server (zygote) and breaks when it cannot spawn these sandboxes. So developers created zypak, which allows to isolate processes using bubblewrap, the Flatpak sandbox.

Firefox just runs without a sandbox, and doesnt have a fork server, so nobody cares.

Without process isolation, you have less duplicated content. This saves space but IT IS INSECURE.

Please use a non-Flatpak Firefox version.

There is no reason why a “Zen Browser” should use less RAM than Firefox.

Blender exists since 2002??

• use a non sudo user for the user
• somehow get the IP address of that laptop all the time. There are dynDNS solutions like this where the client just needs to automatically download a certain file daily and you know his IP, my implementation is here.
• have ssh access to root with a ssh key. The usual hardening, fail2ban, block using passwords
• open the port for ssh on the clients system

If something goes wrong, login via ssh (you know the dynamically changing IP) and remove a directory or the entire user.

You cannot avoid that a user would copy files from there to a usb stick. Well you could, by using usbguard. Works really well in my experience, just prevent nonsudo users from adding new devices.

And then you need to prevent the user from booting another system, or taking out the SSD and reading it. TPM and boot lock is the right thing here, what Max-P wrote.

Sedimenteeeee

Everything that does something is a file. No files, no existence ;)

All these “slam a triangle on top of an old building” things are fkn ugly though XD

like, modern, nice architecture why not.

https://www.youtube.com/watch?v=49UkBsiFVcY

Lol as a Fedora Discussion member, NVIDIA issues are there but like 10%