• 2 Posts
  • 356 Comments
Joined 1 year ago
cake
Cake day: June 19th, 2023

help-circle
  • Compared to Arch(-based): Accesing the latest packages. It’s not impossible, especially if you go for Debian testing repos, but it’s definitely extra work.

    Compared to special-purpose distros (i.e. gaming, portable, high security/privacy, pen-testing): Whatever their special purpose is will usually be harder to achieve.

    Compared to huge corpo distros (SUSE/Fedora and derivatives): Ease of more intricate setups and maybe some security testing.

    Compared to Ubuntu: Paying a corporation to not withhold security patches from you.









  • In short: No. It’s getting better, but Flatpak is by no means secure. Think of it as a Windows .exe or .msi with some (not that hardened) rights management.

    In addition, Flatpaks afe often community made and not even “signed” (which is not really a thing in Flatpak to begin with (yet) ((afaik))).

    Something really secure would be a container, something really, really secure would be a VM, something really, really, really secure would be a separate machine. Flatpak is less secure than the least secure thing in this enumeration.






  • Israel does want the land, but they can’t “just take it”. The humanitarian crisis and the many civilian casualties they have caused, or are at the very least willing to accept, are seriously damaging their relations with the rest of the world. They have to make this go away, one way or another, otherwise they will be isolated at some point, and they really can’t afford to reach it.

    If they were to occupy Gaza and expell all Palestinians now, you’d have hundreds of thousands of refugees. No one wants to take in that many people, so it would cause significant tension with everyone around them and play into the hands of their enemies. If they don’t drive them off but suppress them (or worse…), the problem continues, so that’s not really a good option either. Giving up on some land, that isn’t theirs to begin with, is a small price to pay to (maybe) make their problem go away. At the same time, they will likely even keep a bunch of land they already occupy.

    As for Saudi Arabia: They want influence. And this would give them a whole lot of it, even if they only kinda solve this conflict.







  • If I had to do encrypted btrfs RAID from scratch, I would probably:

    1. Set up LUKS on both discs
    2. Unlock both
    3. Create a btrfs partition on one mapper
    4. Add the other with btfs device add /path/to/mapper /path/to/btrfs/part
    5. Balance with btrfs balance start -mconvert=raid1 -dconvert=raid1 /path/to/btrfs/part
    6. Add LUKS’ to crypttab, btrfs partition to fstab and rebuild/configure bootloader as necessary

    In that scenario, you would probably want to use a keyfile to unlock the other disc without rentering some password.

    Now, that’s from the top of my head and seems kinda stupidly complicated to me. iirc btrfs has a stable feature to convert ext4 to btrfs. It shouldn’t matter whatever happens outside, so you could take your chances and just try that on your ext volume

    (Edit: But to be absolutely clear: I would perform a backup first :D)