chevy9294

joined 1 year ago
[–] chevy9294@monero.town 6 points 2 months ago

I know KDE is the most similar to windows but I would never install it due to 2 reasons:

  • too many options for them
  • too many options for me (the support guy)
[–] chevy9294@monero.town 6 points 2 months ago (1 children)

Nope, I'm not doing that. If they want that, they can do it themselves.

119
submitted 2 months ago* (last edited 2 months ago) by chevy9294@monero.town to c/linux@lemmy.ml
 

Around a year ago my grandparents asked me to update their computers to Windows 10. One from 7 and one from 8.1. I couldn't update from 7 to 10 so I just reinstalled directly to 10. The license was lost but grandfather didn't mind that "activate windows". And for office I installed libreoffice (or onlyoffice, I dont remember). On 7 he was using Chrome so I installed him Brave, which is similar enough and has an adblocker. He never complained about anything... until now.

Both grantfather and grandmother on the same day they got some notification (probably fullscreen, otherwise they wouldn't even told me) about end of 10 and that they should upgrade. So I told them Windows 10 support is ending in about a year. I gave them 3 options:

  1. Buy a new computer for windows 11
  2. Use windows 10 without updates - more likely to be hacked.
  3. Try linux. As soon as I said "Linux" my grandfatger said: "Linux, thats something... lightweight... right?". I'm a gentoo user and I forced my brother and sister to install linux but I never mentiond a word to my grandparents. I have no idea where he heard that. But I'm happy he did!

So the main question: What distro? I'm thinking of Fedora with Gnome. Something stable, modern, secure, and simple. Gnome is different, I know, but I also think Gnome is the simplest. Should I go with Silverblue or normal version? I will also definitely install rustdesk and make backups of windows. And I will first try liveusb so they can decide if they like gnome.

Edit: I'm currently trying to liveboot linux. I rebooted the computer and windows started updating...

Edit: I livebooted Fedora and Mint DE, they said they like Mint more so I installed Mint. Grandfather's scanner and printer were detected out of the box with preinstalled apps, ptinter sadlly doesn't work but that was also with windows - probably hardware failed. Now I'm Installing Brave for grandfather and uBlock Origin for firefox for grandmother. Everything good so far!

[–] chevy9294@monero.town 4 points 2 months ago

I'm 100% sure that Raspberry Pi has that. I can set how much of ram will go for the gpu. But raspberry pi's gpu isn't really a gpu.

[–] chevy9294@monero.town 1 points 2 months ago

They are stored behind luks and I think they are readable only by root. But bootkit can probably only infect UEFI from Linux that is running on that machine. And to interact to UEFI you probably have to be root, right?

I'll look into more options, either store keys on a seperate luks usb key or on a hardware securety key like Nitrokey. For sbctl there is already a roadmap feature for hardware security keys, I hope this comes soon :)

[–] chevy9294@monero.town 5 points 2 months ago (2 children)

Well... if you have your own keys (like I do) you have to store them somewhere. That somewhere is probably somewhere on a computer where they are used so you can update the kernel. If you have private keys, you can probably bypass secure boot.

Is there a way to have private keys stored on a nitrokey that has to be plugged in for every kernel update?

[–] chevy9294@monero.town 2 points 2 months ago (3 children)

We can switch ISP???

[–] chevy9294@monero.town 7 points 2 months ago

I always open settings on every app or website to see what I can change. This gives me feeling like this is something made just for me and I will use it for longer. Except KDE, this has way too many settings.

[–] chevy9294@monero.town 1 points 2 months ago

Yes, Tor recently made a change to that. This does increase fingerprinting but not by much. A lot of Tor users are using Linux rather than Windows.

[–] chevy9294@monero.town 9 points 2 months ago

Thats the important part ;)

[–] chevy9294@monero.town 10 points 2 months ago
[–] chevy9294@monero.town 3 points 3 months ago (1 children)

Arch, you can fully customize it to your needs, and has access to AUR for more hacking tools.

[–] chevy9294@monero.town 3 points 3 months ago

Proton does but only paid version and not free.

 

Hi, I'm in a process of making fast, (extrenely) secure, and modern laptop. Currently I have Arch Linux with encrypted root partition (unlocked with Nitrokey or long password), secure boot, linux-hardened, firewalld, etc.

I'm running linux-hardened with custom config. I enabled AMD SME, kernel lockdown, added some xanmod patch for more specific cpus, and disabled some unnedded drivers (only those that I'm 100% sure I don't need - Intel, NVidia, Microsoft, Google, Amazon, Virtio). Currently it takes ~50 minutes to recompile the kernel. Are there any tutorials what drivers to disable to speed up this process? After doing that I will try to compile it with -O3 and LTO. Do you know any patches for performance?

I'm planning to enable encrypted swap, install ClaimAV and install flatpak versions for every non open-source app I have.

I also want to have SELinux. Does anyone know where can I learn it? I had it on Fedora and it was not fun using it.

What are other ways I can make my laptop more secure?

45
submitted 1 year ago* (last edited 1 year ago) by chevy9294@monero.town to c/linux@lemmy.ml
 

I have Arch Linux on Ryzen 7 3700X, 32gb of ram, and some Gigabyte motherboard with updated bios.

Few weeks ago my computer would startet crashing (screen would freeze) soon after login or even at boot about 50% of the time. I was lazy so when it crashed I just forced rebooted it (the power button). Then crashes became more common untill my system wouldn't even boot.

So I reinstalled and I had some trouble generating dracut bundles, because some zstd copression was corrupted. After booting freshly installed os it would crash again right before the login should show up. Switching kernel (from hardened to zen) fixed the problem. Then I installed basic apps (browsers, office, crypto stuff, steam, etc.) I rebooted and when I typed the password for my encrypted root it was wrong (Im sure I typed it correctly).

I have no idea wtf went wrong with my system. I have almost the same everthing on my laptop (hardened, btrfs, luks encrytped drives, systemd boot, etc.) and it works great. And I never experienced any crashes on live usb on my pc.

I ran some random test (its passmark memtest86 v9.3 pro) on my medicat usb. Right now its 92% finished with 1070 errors. This just can't be good :(

Now I will play with some bios settings (like disable xmp), reflash other version, maybe switch a ssd... I will also try other distro, but I can't daily drive them. Arch gives me a ton of flexibility and I don't want to lose it. Maybe NixOS or Gentoo, but gentoo doesnt have systemd (I want to use Mullvad as my vpn and their app reqires it).

Do you maybe know what could be wrong and how to fix it. Thank you for reading this post and thank you very much for answering.

I don't know if this is arch bug or its something wrong with my system. If this is not right community to ask this, plese direct me to the right one (just please not reddit).

Edit: I ran memtest again without one ramstick and it gave me no errors! Thank you for all help and suggestions :)

Edit: I also tried only the faulty ram stick and the PC wouldn't even boot.

Edit: Booting PC with only the faulty ram stick corrupted my bios... I guess I will have to reflash bios anyway.

 

I want to make my own website, like a blog where I talk about tech and tutorials and such. Something like https://kerkour.com and https://lukesmith.xyz. Any ideas for simple but modern design?

 

Hi, I'm looking for a distro for my laptop. My first distro was Pop!_OS, then I switched to Fedora, then Arch for a year and 2 months ago I switched to Fedora Silverblue, because I wanted to try immutable distro that relies on containers and flatpaks to be usefull. Silverblue is great but not so much for me, its not flexible enough.

I'm thinking of switching to Arch but maybe it's time for something else. Maybe NixOS or Void, Gentoo probably not, I don't have time for compiling everything. What do you recommend?

It must support full disk encryption, secure boot with signing with YOUR OWN KEYS, systemd (because of MullvadVPN), everything else I think can work on any distro (Gnome, podman, kvm, etc.).

 

Hi, Im searching for a secure distro for normal daily use for my laptop. Currently Im running arch linux with full disk encryption, secure boot, linux hardened, firewalld and most apps as flatpaks (with some disabled permissions using flatseal). I think its pretty secure laptop but it could be more secure.

Tails and Whonix are the most secure but they are not ment for normal daily use...

There is a lot of new immutable distros. Getting (system) malware is harder to get on them. Im most interested in blendOS, because its based. Does anyone know if it has full disk encryption, secure boot, etc. or can it be done by the user? What about other distros like Fedora Silverblue?

Any other recommendations?

Thank you :)

view more: next ›