jamesbunagna

joined 1 month ago
[–] jamesbunagna 6 points 5 hours ago* (last edited 4 hours ago)

Fam, please, as other kind people have already reminded you, make your texts look crisp. You're talking about UI/UX and how Linux is seemingly bad at it and how you would like to put in effort so that it may improve. Then, please, at the very least, start with putting money where your mouth is and show that your communication-skills and writing are on point. You can't work with others if communication fails.

I'll try to digest your ramblings and provide answers wherever I can. So without further a due.

I just had a shower an was thinking why linux OSes cannot look pretty like mac? Do linux programmers have no idea what looks good?

It's all a matter of taste, anyways. Linux offers you great standards from the get-go. And you can mold it to your heart's content, see here for some inspiration. If you, for whatever reason, didn't like what you saw on Linux Mint, then it's on you to make it look better for you. If you want something that looks better by default, I'd argue that the likes GNOME, KDE Plasma, Budgie and Pantheon offer a step-up.

Because I met people in my life who are so good at programming and that other boring stuff but do not know what sells or looks good. You know what I mean? Look what you are wearing, do you really cannot afford something that suits you, you probably making 3 times what I do. Is similar thing happening with linux GUI, can afford it but dont know that it would make your community 100x bigger? And yes i noticed it is getting better over past 10 years or so. Slightly. Currently im trying linux mint with MACOS wallpaper. I do have macbook, I just wanted to try linux after i realized I cannot install freetube on mac (not the end of the world and not final decision stop using mac or windows which I also have for gaming). Not unless i run some commands to disable “security”. And i do not feel comfortable doing it. Trying freetube happened after the day when apple locked my secondary icloud account which I used to try Indian youtube premium subscription by redeeming indian itunes card to top up the balance and buy subscription via appstore. it worked for a month, good that I bought only one months youtube price worth of itunes rupees. Was about 3 euros or dollars. I am quite new even to MacOS - 5 years or so, maybe 8. 99.9% of time not using terminal.

I've ignored the above as it didn't feel like you were making a point or asking a question. Please feel free to enlighten me if I'm wrong.

So again what is it with Linux GUI? Can someone collaborate with me or ideally other aspiring and avid UX/UI designers to create something that would blow everyone’s even apple users’ minds? I mean if nobody wants I can help to make linux look amazing can you just do the coding and materialize it. I mean i have no xperience and never even tried to make an os GUI concept, should I do it first and then do similar rant? using gimp or photoshop? I have both. Photoshop GUI looks better lol and I even downloaded GIMP 3.something RC…

  • Step 1: Make a cool rice (read: theme/customization) using whatever Desktop Environment or Window Manager you like to use as a base.
  • Step 2: Share it on one of the many unixporn platforms; we even got some of them on Lemmy.
  • Step 3: If people actually like it, you can share the associated dotfiles or what have you through GitHub or elsewhere.
  • Step 4: Grofit. That's all there is to it.

P.S. do good looking linux themes exist and I just dont know it yet?

If you liked any of the ones in the link shared above, then yes.

If they do, why they are not default for distros

Why should they? They are just creations that others made for themselves. There's no universal design language that's universally liked/praised or whatnot. If you like what's there by default, then use it. If not, then don't; instead make something of your own. Linux clearly owns the scene when it comes to customized setups anyways. So just do what others like you have done: do your own ricing.

why you have to download “some code” after that.

How can they share their personal configs if you don't download them? You could technically copy and paste all raws, but the end-result is the same; you just made it more cumbersome for yourself. Btw, I believe KDE Plasma might have a platform for sharing themes and whatnot. But please don't quote me on this. Though, still, you'd have to download 'stuff'.

How do I know it is not malicious?

Good question. If you can read code, then it's quite easy. If you can't, then ensure it's from a reputable source. Like, if it's from GitHub, look at:

  • how many stars it has received
  • how active development is

etc.

Is it that you linux users do not want big community

I think that most people would agree that having a greater piece of the pie definitely helps to be taken more seriously by all parties. So, no: Linux users would like Linux to be more mainstream.

and make linux look bad on purpose

Fam, I've been on Linux for almost three years now and I'm very happy with it. Once, I had to do some work on the Windows laptop of my brother. The damn thing just wouldn't open; updating and rebooting over and over. Accepting that is nothing but Stockholm's syndrome.

so there is no viruses and other shit that you can find for example on Windows, because I think if same amount of people who are using windows would use linux, linux would not be this secure.

Security through obscurity is definitely a thing. And while server Linux is battle-tested and pretty safe -if you know what you're doing-, I wouldn't say the same necessarily when it comes to desktop Linux. It's a nuanced topic, though.

is it secure actually?

It's as secure as you'd want it to be. See here the security section of the excellent ArchWiki. Contrary to what you might expect, most of those instructions translate pretty well to other distros. So, if you want, you can make a fortress out of your distro that would put most Windows installations to shame. But, again, it's on you.

Can you simply explain how is it secure compared let’s say to windows?

When comparing your average distro on default settings to Windows S mode, I think I have to give it to Windows S mode; but you can't even install software outside of the Microsoft Store, that's part of the reason why it's safe. But even then, the Microsoft Store isn't a beacon of secure software to begin with... Comparing Windows S mode to Qubes OS, however, is a clear victory for Qubes OS. Though, I'd have to admit that Qubes OS is technically not a Linux distro*. Linux is only used within dom0 and the qubes; which is 99% of what how one engages with Qubes OS, though. So I understand where the confusion may stem from.

But you see, we can't even meaningfully engage in this conversation as I don't know what you mean exactly with Windows.

Scripts do not start running themselves? Explain me like im five please.

This can differ between distros. On RPM-based systems, we find SELinux, a piece of software that has been developed by the NSA and is to this day actively used in Android for what it brings in terms of security. Though, the distinction should be made that Android makes better use of SELinux than these RPM-based distros do. But, to give some personal insight on this; I've had scripts blocked that I ran on Fedora (an RPM-based distro), but most of them went through. It ultimately depends on what the script tries to do. However, scripts running by themselves is pretty wild. Though, it could happen on insecure systems.

On Linux Mint, we find AppArmor, which behaves similar to SELinux. While the latter is infamous for its complexity, it's generally considered to be more powerful. So much so, even, that disabling SELinux was a thing peeps used to do for 'comfort'. To give a present issue I'm dealing with myself :P ; I'm pretty sure I'm experiencing difficulty with getting Waydroid to work due to issues relating to SELinux. It's what it is 😅. But, the piece of mind is pretty neat. Btw, Waydroid should work on most RPM-based systems, mine is just a little special :P .

But some distros don't ship either one of the two, nor any replacement or whatsoever. So, obviously, that should raise some red flags regarding security. The distros that do this either expect the user to do it themselves, or they just don't care for whatever reason. Losing this kind of protection isn't necessarily fatal, but I would personally not feel comfortable.

In case you're really bothered about security, then consider using Kicksecure or secureblue. These are the most secure general purpose Linux distros that are meant to be used as daily drivers. The aforementioned Qubes OS is still way more secure than these, but Qubes OS is technically based on Xen and not Linux. Though, note that all three of these are known as harder distros. They assume (some) knowledge and lots of reading (comprehension). Use something else first. Become comfortable with Linux. And then consider the move to these more advanced distros.

[–] jamesbunagna 0 points 1 day ago (1 children)

Regarding what you said about Red Hat, I'm sure that -at least historically- RPM-based distros were simply a pita to work with when compared to the alternatives. I'm a relative new Linux user (only about 3 years so far), so I've only seen its better days :P .

I think you can't, because it requires each voter to rank their preferences, which requires a specific form of voting mechanism. I didn't participate in the poll, but if it was run as ranked choice, and if we had access to the raw, per-voter results, and if the sample size was sufficiently large; then yeah - we could run a full Condorcet count and get some interesting answers!

I'm not particularly well-versed on some of these terms. However, isn't it possible to retroactively make the gradings work as ranked choice? So, say a user gave:

  • Arch a 4,
  • EndeavourOS a 5
  • and Manjaro a 3

Wouldn't this imply that they rank EndeavourOS higher than Arch, and both of them higher than Manjaro? Sure, we won't always have strict orderings. But I'm pretty sure this doesn't necessarily constitute a problem.

Regarding 'distro-buckets', I think that defining a distro different from another whenever (an attempt at) applying the inverse of the changes doesn't produce a functional system is cool. I hadn't considered that before. But, as you've noted yourself, this is a gargantuan effort and (probably) not worth it. Like, e.g. let's look at Deepin, it's mostly Ubuntu with the Deepin desktop environment. However, their respective auras are very different. I think we'd lose a lot of nuance by placing them in the same bucket. Just my 2 cents*.

[–] jamesbunagna 2 points 1 day ago* (last edited 1 day ago) (3 children)

I’m surprised to see Fedora ranked so highly.

I actually think it's to be expected.

If it was done last year, then -with the whole "Red Hat gOiNg ClOsEd SoUrCe" fiasco- it might have dropped. But most peeps seem to have forgotten about that, or just stopped caring (most prominent example for me personally would be Chris Titus; who went from an outright hater that wouldn't even touch Fedora derivatives (like the many uBlue projects) to outright praising Bazzite).

In case one's out of the loop, these two articles by Jeff Geerling should give a complete yet nuanced take on the matter. TL;DR: Red Hat made it harder for projects like Oracle Linux to cannibalize their work, but this came at the price of closing off public access to RHEL's complete source code, and using a EULA Subscription Agreement to try to stop customers from sharing the source code. Which, actually is allowed under the GPL licence; even if some would argue goes against the spirit.

Btw, why are you actually even surprised by it? While Fedora has historically made drastic changes that might have alienated its user base (read: being the first that went all-in on the likes of systemd, Wayland etc.), they've demonstrated to show some restraint in the last couple of years; acknowledging even that such radical changes aren't desirable. In turn, the community rewarded such efforts, making it go from "Red Hat's testbed distro" to a very respected mainstream distro. In the more recent ProtonDB reports, one can see how significantly it has managed to close the gap in usage between its ecosystem and the other big shots (read: Arch and Debian/Ubuntu).

Did they provide raw scores?

Yup! Here: https://nextcloud.thelinuxexp.com/index.php/s/PQPoRZo7n8dSkjw

one is which could be determined from vote counts

Ah, would this comment help?

I’m more interested in a ranked-choice version of this poll.

Me too. I suppose you could retro-actively use the raw scores for this. I'm curious of your findings!

[–] jamesbunagna 13 points 2 days ago* (last edited 2 days ago) (11 children)

You may find (most of it) in the description; I'll paste that below together with the ones he left out so that we have a complete list:

  • 34th Deepin
  • 33rd ChromeOS Flex
  • 32nd Manjaro
  • 31st elementaryOS
  • 30th Solus
  • 29th mageia
  • 28th Rhino Linux
  • 27th KDE Neon
  • 26th VanillaOS
  • 25th ZorinOS
  • 24th Peppermint OS
  • 23rd Slackware
  • 22nd OpenSUSE Leap
  • 21st & 20th Puppy Linux & Linux Lite
  • 19th MX Linux
  • 18th Ubuntu
  • 17th Gentoo
  • 16th Tuxedo OS
  • 15th NixOS
  • 14th & 13th Debian Stable & Testing
  • 12th Tumbleweed
  • 11th Alpine
  • 10th Nobara
  • 9th Fedora Silverblue
  • 8th Asahi Linux
  • 7th CachyOS
  • 6th EndeavourOS
  • 5th Linux Mint
  • 4th & 3rd Arch & Bazzite
  • 2nd Fedora
  • 1st SteamOS
[–] jamesbunagna 2 points 6 days ago

My all-time personal favorite is probably MarkText. I'm actually surprised no one else has mentioned it; knowing it has garnered almost 50k stars on GitHub.

I really like it for its realtime preview and support for mathematical expressions. Though, it's wonderfully feature-rich; so please check out its README for the full list.

Unfortunately, it (currently) doesn't enjoy as much development as it previouslu did. Which has ultimately led me to pivot to ghostwriter more recently.

[–] jamesbunagna 30 points 1 week ago (5 children)

Looking at their page the prces look a bit steep for me.

I understand where this is coming from. Buying a spec-wise similar device from say Lenovo would definitely be cheaper. Unfortunately, whether it is System76, TUXEDO or NovaCustom, we pay a premium for the fact that they're Linux-first.

[–] jamesbunagna 4 points 1 week ago

I have daily driven (a) Fedora(-based distro) ever since I started using Linux. So I'm absolutely biased towards it. However, as Fedora is a semi-rolling release distro that really likes offline updates that involves a reboot, it simply falls flat when it comes to satisfying OP's needs. They would have a very similar experience to their current one with openSUSE Tumbleweed, the very same they actively want to get rid of.

[–] jamesbunagna 21 points 1 week ago (5 children)

As such, this distribution would need to be able to handle running for weeks on end without a reboot.

So, it has to be something stable (i.e. receive little to no updates) that's capable of updating without requiring a reboot. That makes any stable distro a candidate. As such, choose either:

  • Debian or something based on it
  • Gentoo (stable branch)
  • Nixos (stable channel)
  • openSUSE Leap
  • Ubuntu or something based on it
[–] jamesbunagna 4 points 2 weeks ago

As I noted in the footnotes of this comment, Qubes OS is technically not a Linux distro as it's based on Xen instead. But yeah, it's without a doubt the gold standard when it comes to secure by default desktop operating systems; far surpassing even Kicksecure and secureblue.

As for Tails, while its amnesiac property is excellent for protection against forensics, it's not meant as a daily driver for general computing; which was also touched upon in the aforementioned footnotes.

[–] jamesbunagna 2 points 2 weeks ago (2 children)

For this writing, I'll focus on the OOTB experience. Furthermore, a daily driver for general use is assumed. I'll also try to keep it (relatively) brief and concise for the sake of brevity. The tier list found below goes from worst to best.

  • Tier -1 : Actively detrimental distros. Joke/meme distros, abandoned/discontinued projects and even outright malicious products. Simply don't use for production. The likes of Hannah Montana Linux and Red Star OS comes to mind.
  • Tier 0 : Unopinionated distros. These should be regarded as blank canvases from which it's expected that you meld and forge it to your liking. As such, at least by default, they offer nothing in this regard. However, it's possible to build a fortress if you wish. Both Arch and Gentoo fall under this category.
  • Tier 1 : Distros that have put in some work into security, but ultimately fall short. These distributions include security features and maintain regular updates, but their implementation choices can introduce security compromises. This tier often includes derivatives that modify their parent distribution's security model, sometimes prioritizing convenience over security best practices. While it may be suitable for general use, they may not provide the same security guarantees as their upstream sources.
  • Tier 2 : Distros with sane security defaults that rely on backports for their security updates. These distributions prioritize stability while maintaining security through careful backporting of security fixes. Rather than updating entire packages, they selectively patch security vulnerabilities into their stable versions. This approach provides a good balance of security and stability, though it means newer security features might take longer to arrive (if at all). Debian and Ubuntu are prime examples of this.
  • Tier 3 : Distros with excellent security defaults and a (semi-)rolling release. For most normies, this is as secure as it needs to be. As it's on a (semi-)rolling release, it receives security updates as soon as they come. Furthermore, this also allows them to benefit from new security features as soon as they appear. Curiously, the two distros that most resonate with this, i.e. Fedora and openSUSE Tumbleweed, are also known to innovate (and thus are pack leaders) when it comes to security solutions. FWIW, their respective atomic/immutable distros also belong in this tier.
  • Tier 4 : Security-first distros. The crème de la crème. These are probably overkill for most people. This is also the first (and only) tier that may sacrifice usability and function for the sake of security. If your highest priority is security, then you can't go wrong with this one. Kicksecure and secureblue are its flag bearers.

I'd personally grant Linux Mint a position in tier 2, though perhaps others would go with tier 1 instead. As such, a step-up would be a distro from either Fedora or openSUSE.

[–] jamesbunagna 4 points 2 weeks ago (4 children)

Thanks for the clarification!

If you trust both the source and the file, then downloading by itself shouldn't constitute a problem. Supply-chain attacks are still possible, but that's a hard problem to solve anyways. I suppose I'd only trust Qubes OS to handle that gracefully.

For general browsing, GrapheneOS-folk would advice against Firefox(-based browsers). Instead, they'd recommend (something based on) Chromium. Personally, I do follow that advice. But I understand if you'd like to stick to Firefox(-based browsers).

Coming back to Linux Mint, I won't go over my (personal) qualms with the security model of the distros it's based on. But as Linux Mint offers one of the best onboarding experiences, it would be a disservice to lead you elsewhere. Become comfortable with Linux through it. And, perhaps one day, if you feel like venturing elsewhere, you can try out distros that offer better security. Thankfully, Linux Mint's OOTB security should be sufficient until then.

As for the article, everything except for the fourth recommendation is a W. Utilizing ClamAV could be cool, but it's based on a very naive understanding. You wouldn't want an untrusted file on your system in the first place. Obviously, a lot more mileage^[1]^ is possible. But one has to learn to walk before they can run 😉.


  1. Note that the information and instructions found on the excellent ArchWiki often work on and/or apply to other distros as well.
[–] jamesbunagna 5 points 2 weeks ago

GNU-Linux hardening is useless

This opinion isn't shared by the author in their actions, as they are known for their contributions to Whonix; both as a security researcher (by their own admission) and (are to this day accredited) as a developer.

86
submitted 2 weeks ago* (last edited 2 weeks ago) by jamesbunagna to c/linux@lemmy.ml
 

https://github.com/AlfredoSequeida/hints

Disclaimer: I'm not affiliated to this excellent piece of software.

 

Disclaimer: I'm not affiliated to the project.

Aside from the fact that it's relatively new and unknown, does this hold a candle to other Firefox-based projects? They seem to be competent by their own comparison tables.

Has anyone got any first-hand experience?

 

Disclaimer: I'm not affiliated to the project.

Aside from the fact that it's relatively new and unknown, does this hold a candle to other Firefox-based projects? They seem to be competent by their own comparison tables.

Has anyone got any first-hand experience?

 

Hey folks! After using Fedora Atomic for quite a while and really appreciating its approach, I've been eyeing one particular feature from NixOS: its congruent system management. Inspired from Graham Christensen's "Erase your darlings" post, I'd like to explore implementing something similar to NixOS' impermanence module on Fedora Atomic as one step towards better state management.

Why not just switch to NixOS? Well, while NixOS's package management and declarative approach are incredible, I specifically value Fedora's stringent package vetting and security practices. The nixpkgs repository, despite its impressive scope, operates more like a user repository in terms of security standards.

I've already made some progress with the following:

  • Fedora Atomic's shift to bootable OCI containers has helped with base system reproducibility when one creates their own images. This process has thankfully been streamlined by templates offered by either uBlue or BlueBuild
  • Using chezmoi for dotfiles (would've loved home-manager if it played nicer with SELinux)

My current (most likely naive and perhaps even wrong) approach involves tmpfs mounts and bind mounts to /persist, along with systemd-tmpfiles. I'm well aware this won't give me the declarative goodness of NixOS, nor will it make the system truly stateless - there's surely plenty of state I'm missing - but I'm hoping it might be another step in the right direction.

Particularly interested in:

  • Best practices for managing persistent vs temporary state
  • Working with rpm-ostree's (or bootc') assumptions
  • Tools or scripts that might help
  • Alternative approaches that achieve similar goals

Thanks in advance!

view more: next ›