• 0 Posts
  • 38 Comments
Joined 4 years ago
cake
Cake day: February 19th, 2021

help-circle

  • Not a single mention of secure boot? Weird.

    I would say you are already secure enough if you are using software from official/trusted repositories and updating them on a regular basis.

    That said, if you want extra security. Drop all software that cannot run on Wayland and go even further by isolating all desktop applications with the Flatpak sandbox. This is made extremely easy with Flatseal. Maximum points if you setup secure boot.









  • I’ve broken installations many many times. But here’s a recent one that comes to mind.

    I was playing around with audit and some file was not responding as I wanted it to. Somehow my pea brain got the great idea to remove all config, uninstall audit then have the new install refresh the configs. Did this straight through the warnings and effectively broke sudo, a dependency of audit. Good thing arch-chroot exists.







  • Warp is 2 products. A wireguard-go VPN that changes your IP and uses cloudflare’s network instead of your ISP. This service doesn’t necessarily require the 1.1.1.1 app (desktop app is called cloudflared) since it’s just Wireguard under the hood.

    And Warp is also a VPN tunnel that allows you to reach services hosted on Cloudflare’s network with their client cloudflared as you just described. This allows you to make any service available on the internet and further manage its access using Cloudflare’s firewall options or Zero Trust for secure private applications.

    The latter use is more popular than the former in my observance since not many people I know aside from the Chinese use it as a VPN. (mainly for circumventing their national firewall).