• 0 Posts
  • 67 Comments
Joined 1 year ago
cake
Cake day: June 6th, 2023

help-circle
















  • Most “standard” messaging apps (that includes signal, telegram) use the “OS provided” push service. On Android, they use firebase cloud messaging, a component of google play services.

    Degoogled Android means not having any notifications, unless the app supports UnifiedPush, runs in the background 24/7 (which drains battery), or runs in the background occasionally (which delays notifications).

    If the app runs in the background occasionaly, you can “burden” the people on the other side by being slow to respond.


  • It’s used often by novices, because outdated articles keep telling them it’s “the best Linux distro”. Canonical has gotten very corporate over the last several years, forcing things like snap onto users. Ubuntu used to be the number one user friendly distro, now they shove ads in the terminal. It’s not getting hate for being easy to use, it’s getting hate for marketing itself as such, then forcing corporate bs on the user (who are often new to Linux). Many other user-friendly distros have not seen the same amount of hate, because they aren’t objectively bad.


  • I recommend against using Manjaro, it is poorly maintained and has many downsides compared to something like EndeavourOS (which has a similar goal to manjaro with less downsides).

    If you’re comfortable using a specific package manager, go with a distro that uses that package manager. If you’re already familiar with Mint, something else Debian based might suit your needs.

    If you’re still looking for the distro that’s right for you, make sure to separate your / and /home into different partitions during your next installation. This allows you to switch distros while keeping all your documents and personal files.

    If you’re unsure which distro to try next, https://distrochooser.de/ gives you a set of questions and ranks distros on what would fit best to your needs.


  • Most malware is written for Windows, especially when it’s distributed as a Windows executable. (Almost) no Windows malware targets Wine specifically. However, Wine on its own is not a sandboxing tool, and Windows ransomware will ruin your day.

    Bottles does two things for security:

    1. Separate wineprefixes
    2. Being a flatpak

    By separating wineprefixes, as long as the host filesystem is not directly exposed (which iirc is default for bottles), any malware not written with Wine in mind will only affect its own “bottle”.

    By being a flatpak, even if some Windows malware specifically targets Wine, it would still have to escape the flatpak sandbox for elevated permissions. If the bottles flatpak has no access to personal files, “Wine-aware” malware won’t either.

    Although malware can still do damage, even in its own sandbox. For example, botnet type malware would still function. The host system is “safe”, but the damage can still be done externally. Usually application-defined “autostarting” of applications is broken under Wine (iirc), which means all non “Wine-aware” malware will only start when an infected windows application is started in bottles.

    Any sandbox will eventually be escaped, and malware sophisticated enough will be able to get access to everything on the host system. The chances of running into malware like this in the wild are extremely small.

    • Is it fully secure? No.
    • Is your virtual Windows environment safe? No.
    • Are other “bottles” safe? Likely, as long as the malware isn’t aware of Wine.
    • Is your Linux host safe? Most likely, depending on your flatpak settings. (and the malware has to specifically target Wine under Flatpak).