• [deleted]

  • Post #112

I'm an avid user of Debian Sid and it's my go-to operating system that powers all of my computers.

10 days later

overpass

mythodical

some easy security tips:

Use Flatpak, on non-KDE use Flatseal to control the permissions and restrict them as much as possible.

If you dont mind some apps missing, use the verified flatpak apps only

flatpak remote-add --subset=verified flathub-verified https://dl.flathub.org/repo/flathub.flatpakrepo

But you can also just install the apps via terminal and using flathub.org to find them, there security level and the blue "verified check" are displayed.

Use automatic updates / update very often. Know that stable Distros hold back nearly all updates, which means things will stay broken and not all security updates are backported. Exception is Firefox ESR (used in Torbrowser and Thunderbird) which seems to get all security patches, of various levels.

Use a user account not in the wheel/sudo group. Apps are either installed via flatpak or the system, so in both cases they appear on all user accounts by default.

Some things may not be possible, but I will upload some polkit rules with a guide on how to fix those. (the repo is still empty for now)

Using an account with no sudo permissions is important, as apps and scripts on Linux can pretty much do whatever they want, Malware is incredibly easy.

Dont use Desktops using X11, use Wayland. GNOME, KDE are long done, but LXQt and more are also working on it. If you use Mint, dont. It relies on old buggy software (Xorg) and their Wayland transition will take forever. (Also they theme apps, which is very controversial).

There are many Distros with modern packages

  • Fedora (including the immutable variants and ublue.it)
  • Opensuse Tumbleweed
  • Arch, EndeavorOS
  • Debian Sid

And also Distros with pretty updated packages

  • Opensuse Slowroll
  • Ubuntu Spins

Give Software least permissions via Flatseal, use as little as possible, and checkout (and contribute to!) my list of recommended Software!

Use a Firewall. Block all ports by default, you likely dont need them.

Disable CUPS if you dont print

sudo systemctl disable cups
sudo systemctl mask cups

      hello!
      i used for years qubesos on my pc.i liked very mutch.i dont use right now because i not have any more pc and until now i cant get a laptop that have the specivication that qubesos need . but qubesos is very privet located os for pc's .

      5 days later

      Install minimal arch Linux and then add Gnome as your desktop environment (Wayland). Not easy for beginners but its super fast + beautiful desktop UI and no adverts popping up on your OS unlike Windows 11

        I use Windows 10 for what remains on Gmail accounts, FB etc. I's heavily tweaked with no automatic sevices allowed...like updates and other normally enabled services.

        I use Linux Mint as a daily driver and have Virtualbox installed with with Kali OS and Whonix OS for secure stuff. I also use Tails occasionally.

          raccoondad I use different browsers for different functions. I use Mullvad, Brave, Firefox and Librewolf to name a few.

          Seems my original post has been deleted? Strange...

              20 days later

              Mint, I tried QubesOS but it did not like my graphics card

              • mmmm replied to this.

                mmmm
                Yeah I read that on their forums the other day, I am now only working in VM's that I will be able to export when I change hardware

                • mmmm replied to this.

                    Olive I just use it for secure browsing and research etc, it’s also my airgapped office suite. I have to use a Mac, iPad and an iPhone for work which I play on if I feel like it - so this aspect somewhat missing from Qubes doesn’t matter to me.

                      raccoondad jackFang For a beginner Manjaro might be of interest if they want pacman + a clean desktop

                      Manjaro is not a good choice for a few reasons. It delays updates, mixing it with AUR is a mess and they fucked up basic security things like renewing certificates too many times.

                      Better use EndeavourOS. Will give you a minimalistic Arch install with an easy-to-use installer without the downsides of Manjaro.

                          Anyone knows if Linux Kodachi is going to revive?

                          Currently I only use Windows 11 Pro. Tried to use Linux (Mint & Steam OS mostly) as a daily driver for a while. Originally, I just wanted to try W11 out briefly when I got my new laptop and then reinstall Linux, but I ended up sticking with it. I'm probably in the minority with that opinion, but the UI of Windows 11 is beautiful and mostly really user friendly. And I'm tired of looking for work arounds in Linux, can't decide on a distro (though I'm very interested in VanillaOS and ZorinOS) and honestly don't see much of a reason why I should give up on the convenience that windows gives me. Of course I've debloated it as much as possible with my own NTLite ISO and the CTT Tool (love that tool!) and activated bitlocker. I think for my threat model that is sufficient, though of course I still feel a bit "naked" using Windows.

                            Clueless

                            "but the UI of Windows 11 is beautiful and mostly really user friendly.", understandable

                            "And I'm tired of looking for work arounds in Linux", VERY understandable

                            I struggle to use Linux sometimes and I have my Linux+ cert...maybe that says more about me than Linux but still, its not always easy to fix a very specific issue.

                              TheGodfather Better use EndeavourOS.

                              EndeavourOS is a young OS (2019).
                              It's your main OS ?
                              Or you use it through an hypervisor ?