• 39 Posts
  • 187 Comments
Joined 2 years ago
cake
Cake day: November 5th, 2023

help-circle



  • Luffy@lemmy.mltoLinux@lemmy.ml*Permanently Deleted*
    ·
    21 days ago

    I have a multi monitor setup and regularly play helldivers, war thunder, etc on an rtx card on a display with gsync

    The games often have stuttering problems and behave generally unexpectedly when in full screen, and mouse capture dosent work, so 50% of the time I had to disable the monitor so it dosent go to the other screen and tab out of the game

    Tried on both endeavourOS and mint, so its probably a cinnamon thing

    I use it on my backup PC tho and never had a problem with normal applications, its great performance wise


  • Luffy@lemmy.mltoLinux@lemmy.ml*Permanently Deleted*
    ·
    21 days ago

    Fedora

    Used linux for 4 years now, I'll list it and the reason why I switched

    • Ubuntu (snaps, etc)

    • arch (too much setup)

    • opensuse (nvidia drivers don't get checked for size, broke my GUI many times

    • Gentoo (too much compile time)

    • bazzite (a bit boring)

    • fedora atomic (immutable, can't get mullvad on it), still use on my htpc

    • mint (cinnamon DE is shit)

    • endeavour (its still arch)

    • fedora regular




  • /e/ has Murena Services, which is a completely different can of worms

    Its basically the replacement to Google Photos, drive, etc, and it advertises itself as private, yet it has no privacy benefits over google. The data is still stored unencrypted on a server with your email/number and name on it, and it can just be sold or given out or hacked at any time. Its google with a different name

    Also, MicroG theoretically works, but its more like wine or a windows 11 TPM back than a replacement. It spoofs everything, which just means that besides the phone being insecure since there's no way you can verify if someone tampered with it, because it just spoofs the values anyway, it can also be disabled by google at any time by an update which makes the values unspoofable.

    If you ever wondered why enterprises don't just use win 11 with no TPM, its because Microsoft (like google) can at any time decide to say fuck you and brick all your systems, since they don't officially support it anyway


  • Banks cant trust every client device to be secure and not compromise their infra, therefore they are using a certificate from a software authority to make sure their apps only run on secure devices. Currently, this authority is Google.

    But since everything is using google as their authority, google can at any time decide if they want to exclude any devices/manufacturers/whatever from running most banking apps.

    For example, they are excluding everything that is not shipping their G services Spyware. (And to ship the G services, you need a license, so you can't have most banking apps without paying google)

    Now, volla, a maker of a Linux Phone is trying to make a new attestation API. This in no way mitigates any problem I mentioned in the paragraphs above. In that case, Volla is the Authority, and they can at any time exclude anyone for any reason.

    There is already an adequate Attestation system that mitigates every issue I mentioned built into android. Since the system is present at any time, this will not only reduce the attack vector on a system, but allow any app to add any authority they want.

    Every company will at some time become corrupt. This happened with google, this will happen with volla, every company will at some time become corrupt. Therefore, every software must be designed in a way that the company behind it dosent have total control over it.

    If the original Lemmy.ml defederates, it will not kill every other instance. If volla/google decides to exclude a specific phone model/OS from running it, be it for purely ideological reasons, no one will have any access to it. There are no alternatives in a system with volla attestation.

    If the app uses the android attestation api on the other hand, you simply add the OSs authority key. No rewrite required.





  • positing that the only way you can feel halfway safe and secure is by spending more money.

    Graphene is aimed to provide a secure os for people targeted by attacks which need such things. If you dont need something like this, dont use it.

    I like the analogy with cars: not everyone needs an off road ford, but just because you can't afford a humvee dosent mean that someone working at a state park won't need it. The same way, its great that your needs are fulfilled by a golf 4, but those aren't everyone's needs.

    Also lineage and calyx are the only real android based systems which address their actual audience. /e/, iode and whatever are worse than stock OS with their integrated subscription DNS blocker and unencrypted cloud services. Calling it anything but a google replacement, as in different name, same shit, is a lie.










  • EOS is in no way better than Google or others. It is a Google replacement. Not a google services alternative.

    They, with their services, still collect just as much info about you, in non-encrypted ways. The moment e decides to sell your info, or lock you out or share it with authorities (just like how google did it), you can do nothing against it.

    The permanent solution to not having your dataremovedd through any means is not giving anyone your data in the first place (for example, encrypting it with a key only you have access to, like proton enables you to), in which category Murena is just as bad as google or any other shady data hoster.