pull down to refresh

All people gotta do is not curl | sh anything and they'll be fine.

reply

Unless it's umbrel

reply

Obviously trust is involved but can be minimized by inspecting before running, revision control, and community oversight.

reply

What about QubesOS? https://www.qubes-os.org/

reply

I use qubes as a daily driver, it's actually really handy to separate work stuff from other projects

reply

QubesOS has wonderful security by way of jt's novel approach to virtualizing application workdlows, but it's a PITA to setup and use so I often avoid using my Qubes rig if I don't have to.

For my daily driver, I find that I much prefer VanillaOS. See the other comment for details.

reply

Lately I've been running VanillaOS to improve the Linux desktop experience by isolating the root operating system in an immutable boot partition using abroot and installs all applications in userspace via containerization.

This affords the user better security but also better UX since users can install apps from any package manager (snap, flatpak, AppImage, nix, apt, dnf, pacman) thanks to apx which installs and seamlessly integrates apps into distro-specific containers.

https://vanillaos.org/

reply

__

So, install chromeos? The OS whose spyware cannot be disabled?

I am keeping my eye on Haiku OS. A stable R2 release will have multi-user support, and presumably other next-level security features.

__

reply

Desktop Linux distributions, including Debian, Fedora, Ubuntu, Arch, Gentoo, all suffer from a complete neglect of basic security principles. Windows 11 pro and good antivirus like kaspersky on a dell precision workstation is magnitudes better than any Linux.
With Linux your bitcoin will be gone in 1..2..3

reply

This link was posted by bjornpagen 41 minutes ago on HN. It received 26 points and 12 comments.

reply