Yup. You can only add the nopax flag as root, so if your system is already hosed, not much else you can protect. Root has access to ring 0 so anything goes with access like that. Stuff like pax would slow them down for sure and stop script kiddies, but root access is root access.

No privileged accounts can’t do anything with the nopax flag. That’s why you should configure your system to not run things as root as much as possible. Personally; on desktops, I don’t even use a sudoer natively. I have to su into my sudoer account in order to run root commands.

GrSecurity adds so many layers of protections to the kernel. They are literally decades ahead of the vanilla Linux kernel in terms of security. With all of the hardened GrSec settings checked/configured correctly, it stops the majority of 0 ring exploits (at least when I was running it before they went full GPLv2).

PaX is an awesome part of GrSec. Mprotect stops any read and write and execute access to memory in both user and kernel lands (only rx or wx). Stuff like web browsers won’t work unless you have a program to mark it in elf to not use pax. However, this kills a lot of exploits with that turned on by itself (though there are probably work arounds if you are developing exploits which the other features would hopefully catch). That’s why people installed 3rd party unmainlined security patches, but that’s just me maybe idk.

I hope this venture will be more fruitful than the copy paste code that people kept trying to push to the hardened Linux kernel project (despite the maintainers best intentions and countless efforts to stop that)

Uhh sir Linus, this is a Wendy’s Linux kernel.

.

Why force your political beliefs on something that has nothing to do with?

Its about the same difference, but you can definitely tell the difference between 1600p and 720p.

I got a onexplayer for like $600 and it has the 7840u in it. No matter how you slice it, the 7840u is much more powerful than the steam deck. However, it doesn’t do well in low tdp. That’s what the steam deck is best at - low tdp gaming and battery life.

But so long as I’m near an outlet, I can play more AAA games and on much higher resolution and graphics than the steam deck for however long I’d like. On battery, only about 3-4 hours vs 6-8 hours on a steam deck.

I think the main reason Firefox isn’t on there is because redox os doesn’t use Wayland and x11. Porting firefox would be a massive effort unfortunately.

😂

If you want something like Mac, use elementary os.

If libre/open office isn’t your thing, there’s always cloud based ones like office365 and google docs.

I also found this. Never heard of some of these things, so I can’t really recommend them.

https://itsfoss.com/libreoffice-alternatives-linux/

You can also use ms word in wine if you’re writing. However; if you’re opening docs from the internet, I wouldn’t recommend opening them up in anything running in wine. Remember, wine is a windows emulator based on windows 2000.

Good find! I want to test this out this weekend :)

But the add-on isn’t sandboxed like in chrome. Like i remember, depending on if you use an external MAC like apparmor or not, where if you’re runnimg in Linux and you’re using Firefox, websites could steal your ssh keys from ~/.ssh/

Malicious addons or websites could easily do the same thing, and steal your bitwarden credentials. Unless you have the premium version, you can’t put otp on it.

deleted by creator

My biggest problem is the security and sandboxing around Firefox. I use both, but I feel my passwords are safer in Chrome tbh

Grsecurity stopped providing their kernel patches for free years ago. The alpine grsec patches are years old – like before spectre/meltdown. Don’t use them. Just use hardenedbsd/netbsd/openbsd.

Source?

I mean, if I buy a game on steam and valve goes belly up, how do I retain my games? Game companies were all too eager to stop selling physical discs for PC games and instead give you a code for you to redeem. And you can’t sell it after you play it like with console games, because it goes against most PC game companies’ terms of service (edit - …to sell your account)

If you buy a security camera that is only available through the cloud and the company stops paying for the cloud service, all you have is a paper weight

Just another reminder that you don’t own anything digital - companies do. Forgo these cheap cloud products, use hardware that you can control

Launch the game offline. Which if you’ve ever done with a game made in the last 5 or so years and launching legitamitly, it is increasingly harder to do so.

I take my gaming laptop into work. I can launch older games without an internet connection, but stuff like red dead redemption 2 doesn’t like to start offline – presumably due to telemetry.

Which is why I like tinywall or simplewall – it uses the windows firewall to block all apps by default.

deleted by creator