pull down to refresh

All people gotta do is not curl | sh anything and they'll be fine.
reply
Unless it's umbrel
reply
Obviously trust is involved but can be minimized by inspecting before running, revision control, and community oversight.
reply
What about QubesOS? https://www.qubes-os.org/
reply
I use qubes as a daily driver, it's actually really handy to separate work stuff from other projects
reply
QubesOS has wonderful security by way of jt's novel approach to virtualizing application workdlows, but it's a PITA to setup and use so I often avoid using my Qubes rig if I don't have to.
For my daily driver, I find that I much prefer VanillaOS. See the other comment for details.
reply
This link was posted by bjornpagen 41 minutes ago on HN. It received 26 points and 12 comments.
reply
Lately I've been running VanillaOS to improve the Linux desktop experience by isolating the root operating system in an immutable boot partition using abroot and installs all applications in userspace via containerization.
This affords the user better security but also better UX since users can install apps from any package manager (snap, flatpak, AppImage, nix, apt, dnf, pacman) thanks to apx which installs and seamlessly integrates apps into distro-specific containers.
reply
__
So, install chromeos? The OS whose spyware cannot be disabled?
I am keeping my eye on Haiku OS. A stable R2 release will have multi-user support, and presumably other next-level security features.
__
reply
Desktop Linux distributions, including Debian, Fedora, Ubuntu, Arch, Gentoo, all suffer from a complete neglect of basic security principles. Windows 11 pro and good antivirus like kaspersky on a dell precision workstation is magnitudes better than any Linux. With Linux your bitcoin will be gone in 1..2..3
reply