Skip Navigation

N.E.P.T.R

@ Neptr @lemmy.blahaj.zone

Posts
8
Comments
486
Joined
1 yr. ago

I'm the Never Ending Pie Throwing Robot, aka NEPTR.

Linux enthusiast, programmer, and privacy advocate. I'm nearly done with an IT Security degree.

TL;DR I am a nerd.

  • Deleted

    Permanently Deleted

    Jump

  • Privacy, freedom to choose whatever I want, focus on FOSS (I hate/dont trust proprietary software), and security features for hardening Linux (Landlock, SELinux, Bubblewrap, sysctl, hardened_malloc).

  • puppyRule

    Jump

  • I am disappointed that i am in this picture.

  • internetRule

    Jump

  • You filthy creature, of course I would.

  • internetRule

    Jump

  • "I'm killing you! I'm killing you! I don't give a shit about anything else!"

  • The Quest for Reasonably Secure Operating Systems

    Jump

  • Thanks for the info! Didn't realize it was dash.

  • The Quest for Reasonably Secure Operating Systems

    Jump

  • Rust (Golang or any mem-safe lang) is/are useful for designing secure applications, but not the reason Syd is so great. It is impressive because it is unprivileged, simple yet very granular, has tons of exploit mitigations and hardening options, defaults to hardened_malloc (on arm64 and x64), it's multilayered sandbox (using landlock, seccomp, namespaces, and more), but of course being written in a memory safe language is an important plus (as memory corruption vulnerabilities are a very large class of common vuln). It abstracts the complexity of working with low-level sandboxing API (such as landlock) while allowing you still construct complicated sandboxes). The dev is also very open to add new ideas.

  • internetRule

    Jump

  • I will beat your ass for even suggesting this.

  • Command line tip of the day

    Jump

  • LMDE is mostly just the apps and visual config. It is verg close to regular Debian. I know for a fact it is basically just regular Debian because I have distromorphed it into Kicksecure several times, which only works on Debian.

  • The Quest for Reasonably Secure Operating Systems

    Jump

  • I thought about it (and I might still) but the project is still in beta and implementing sysctl and MAC would slow everything down development-wise. Switching to Fish would be easy and cool though.

  • The Quest for Reasonably Secure Operating Systems

    Jump

  • I am excited to see Chimera Linux mature because iy seems like a distro which prioritizes a simple but modern software stack.

    Features of Chimera that I like include:

    • Not run by fascists
    • Not SystemD (dinit)
    • Not GNU coreutils (BSD utils)
    • Not glibc (musl)
    • Not jemalloc (mimalloc)
    • Proper build system, not just Bash scripts in a trenchcoat

    What I would like:

    • MAC (SELinux)
    • Switch to Fish over Bash (because it is a much lighter codebase)
    • Switch from mimalloc to hardened_malloc (or mimalloc built with secure flag). Sadly hardened_malloc is only x64 or aarch64
    • Hardened sysctl kernel policy

  • The Quest for Reasonably Secure Operating Systems

    Jump

  • What I want out of a secure Linux (or BSD) system is full (top-to-bottom) sandboxing of all components to enforce least privilege. I am want to learn how to make my own distro (most likely for personal use) which uses strong SELinux policies, in conjunction with syd-3 sandboxing, which seems like the most robust and feature rich, unprivileged sandbox in both the Linux/BSD worlds (also it's totally in safe Rust from what i can tell).

    Another thing that I would love to make is a drop-in replacement for Flatpak that is backwards compatible but uses syd-3 instead. It has much better exploit protections than Bubblewrap, and is actually an OOTB secure sandbox. I dont know much about the internals of Flatpak, or how to use xdg-desktop-portal, but I am going to start more simple with a Bubblejail alternative. One major advantage of syd is that you can modify an already running sandbox, so theoretical you could show a popup that says something like "App1 is requesting microphone access.", where you could toggle on without needing to restart the app.

    Need to get better at coding tho lol

  • For browser option, should I chose Kagi or Swisscows?

    Jump

  • Kagi requires an account, therefore associating all your searches to your account. With DuckDuckGo HTML, you can restrict it so it can't access JavaScript (which it doesn't do anyways), therefore reducing the risk of fingerprinting or other tracking.

  • biterule

    Jump

  • Check out this website by the DivestOS creator for a privacy friendly online test (for many things, not just the 'tism): https://kairoscope.org/

  • What open-source Android apps should people know about?

    Jump

  • Combine this with Librera Reader and you can listen to eBooks easily.

  • Valve's version of Android on Linux (based on Waydroid) is now called Lepton

    Jump

  • Yeah, I already understood that. I just thought the comment above was saying it already had ARM emulation, but it was bad or something. I just misunderstood what the above comment was saying.

  • Bazzite just delivered over a petabyte of ISOs in a single month

    Jump

  • IIRC, it is a current limitation of rpm-ostree, which results in an ISO that is nearly double in size.

  • Valve's version of Android on Linux (based on Waydroid) is now called Lepton

    Jump

  • Pretty sure Waydroid uses the x86 image of LineageOS, cus last time I used it (like a year or more ago) I had to get x86 version of APKs I wanted to install.

  • Be Your Own Privacy-Respecting Google, Bing & Brave

    Jump

  • If I had to guess, they probably don't use the APIs, inside using scrapping of some sort.

  • China rule

    Jump

  • rule

    Jump

  • It is just a very accepting community tjat doesn't tolerate bigotry, so a lot of LGBTQ people have gathered here. Lotta queer and trans people.