81·
2 months agoHe apologized IIRC. He has many other toxic beliefs, a quick web search will show that. It is good that he is no longer part of the greater linux community.
N.E.P.T.R
I’m the Never Ending Pie Throwing Robot, aka NEPTR.
Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.
TL;DR I am a nerd.
- 0 Posts
- 3 Comments
Joined 2 years ago
Cake day: November 20th, 2024
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Distrobox is not an isolated environment, it is quite the opposite. They say so themselves on their page:
Security implications
Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain
docker/podmancontainer or a Flatpak.I would argue that Docker isn’t a good way to stop malware either, since it is highly vulnerable to sandbox escape leveraging the shared host-guest kernel, like the many of LPEs that have been found in the last few months (example using copy-fail).
Docker is not a secure sandbox, Podman is not a secure sandbox, Flatpak is not a secure sandbox. Use a VM, or better yet, don’t use the AUR.
8·3 months agoGet the Windows 11 IoT LTSC specifically. IoT is better according to nassgrave, and Windows 11 so you get good compatibility with new games. Not much debloating is needed, just use WinUtil by CTT and tweak/disable shit.
Removed by mod