cross-posted from: https://programming.dev/post/24574658
was checking my old favourite posts and found this.
yeah but if you want actual security you use Qubes
and for the love of Torvalds don’t use Tails as a daily driver, it’s not for that
also have you seen Stallman’s other video?
Wow, Qubes seems pretty badass! Do you run it? How heavy is it? (Like, how beefy a PC do ya need for decent performance?) How intuitive do you find the experience, from your perspective? 🙂
I have run it on a laptop in the past, and I think it’s a good option for a mobile system that you may be using on public/unsafe wifi and/or if your laptop is your primary computer and is actively carrying sensitive data (e.g. PII, financial records, health records, etc) that you want to keep in a separate environment from normal activities (though my advice would still be to keep such data on an external drive that is normally unplugged). It’s not a good choice if you want to use that system for gaming - the hardware driver abstraction and segregation causes problems.
I don’t really have a use case for it at the moment so I don’t have any systems running it. It’s OK for general use if you’re not doing anything particularly complicated. Document editing, web browsing, code development - no problem. I wouldn’t recommend it if you’re doing CAD/3D modeling, graphics, audio/video editing, &etc - it’s not really a good platform for doing creative work, too many complications.
The base system is not particularly heavy, though obviously the more VMs you run concurrently the more resources you’ll need. It does require specific virtualization features for the CPU (documented in Choosing Hardware), which are not always available especially on laptop processors. My laptop had a mobile version of AMD Ryzen which worked. That was a 13" lightweight laptop, nothing too beefy, and it ran Qubes with a couple Debian VMs just fine.
Once you understand the basics of using dom0 to control the other VMs (and that you don’t ever use dom0 for anything besides configuring and launching the other VMs) it’s fairly straightforward. You do have to get used to virtually unplugging any USB devices from one VM and then plugging them into another (no bridging VMs via USB, that would break data security) but it makes sense if you think of those VMs as separate computers.
I think it’s great if you’re traveling a lot with a personal laptop and you won’t have control over the networks you connect to, because you can basically seal off any sensitive data from any external/untrusted connections in completely separate virtual environments. You can have VMs which just don’t ever have network access and so are “air gapped” by virtue of not even having network drivers installed, and then just manually transfer specific pieces of data as needed.
Thank you for the response!! I will definitely give it a go sometime!
What’s the first browser under newborn paranoid?
Qute browser
Thanks :)
Isn’t qute just a chromium wrapper?
Don’t know, never used it.
Seems like I’m a newborn paranoid. Favorite os = arch Favorite browser = librewolf Favorite apps = f-droid
I disable cookies on virtually all websites. And I do fear the slippery slope sometimes.
FYI, there are uBlock filters to block most cookie popups - you just have to enable them. From memory, I think they are called annoyances
“Has hundreds of private messaging applications that their friends won’t use” Stop, the wound is still fresh.
true lol
I’d say I’m tech conservative/cynic with a bit of normie - as I’ve long accepted that forgoing big tech completely means losing the ability to talk to most of my friends and relatives (because there’s zilch chance of me convincing them to move away)
So i’m a conservative just a bit paranoid, gotcha 👌.
I live on the right side of the second box, between second and third. I venture into the fourth maybe once or twice a year. It is a good life.
yeah me to
At some point I just need to jump off the ship and live full time Linux. I remember my Linux friend from high school telling me how cool gentoo was back in 2k3, and I got a disk and was like wtf… what do I do??? I need to try it again.
Try one of the distros in the second panel next time.
I’m feel so called out
we are all
deleted by creator
Lmao nice
I’m a bit of 2,3 and 4.
This chart doesn’t represent me lol
Favorite OS: “everything sucks” Favorite browser: “everything sucks” Favorite Apps: mpv and rtorrent (I pirate a lot of media)
best pirate in the seas
Hey now, I’ve been paranoid for years. Don’t call me a newborn.
I’m less familiar with the icons starting at around section 4 onwards.
Could anyone share / link what some of them are?
after that arch and its distros lastlsy temple os and holy c you can search about them
I see, thank you!
after that emacs and fsf things
The FSF-approved distributions that are shown are: Trisquel, Parabola and GNU Guix (this one is actually quite neat, it’s based on NixOS with its own ideas like the importance of being able to bootstrap an entire system from a minimal binary seed)
The browser with logo shown is GNU IceCat, with binary blobs removed and with some extra security and privacy features (among them an addon that prevents the browser from running proprietary javascript)
lynx is a simple TUI web browser and w3m also is a similar browser but running in GNU Emacs
The last three are all the GNU Emacs logo.
tails gentoo tor irc chat with self hosting 4
Between IRC and the picture representing the idea of self-hosting, there’s the XMPP logo, which like IRC, is an instant messaging protocol (but with more features than IRC).
- Panel 1: You know these.
- Panel 2:
- OS: ZorinOS, Manjaro, Ubuntu, Fedora
- Browser: Brave, Firefox
- Apps: Telegram, Signal
- Panel 3:
- OS: Debian, Arch, VoidLinux, LineageOs (Android ROM)
- Browser: qutebrowser, Librewolf
- Apps: Jami, Briar (first time hear about them), Fdroid, Element (Matrix client)
- Panel 4:
- OS: Tails (Live distro for privacy), Gentoo (DIY distro)
- Browser: Tor
- Apps: IRC (text chat rooms), XMPP/Jabber (messaging protocol), self-hosted community (applications you can put on your own server, I presume)
- Panel 5:
- OS: Trisquel, Parabola, Guix (all three approved by FSF as “actually free”)
- Browser: Icecat (gnu firefox fork), lynx, w3m (both terminal-based browsers), (missed opportunity to put emacs here as well =))
- Apps: Emacs, Emacs, Emacs (powerful os with built-in text editor)
- Panel 6:
- OS: Garuda, No idea (something arch-based), Arco Linux, Arch Linux
- ???
- Apps: Kvantum (qt theme manager), Latte (macOS style application dock for KDE), Plank (also app dock)
- Panel 7:
- OS: Temple OS
- Browser: Bible
- Apps: Racing game, Tanks game from TempleOS, Amen.
Thank you for the detailed breakdown! Lots of new ones on there for me
I think that the arch-based distro is Xerolinux
Never heard about it, but seems like it is, indeed. Thank you.