bricked

joined 2 years ago
[–] bricked@feddit.org 2 points 1 day ago* (last edited 1 day ago)

I don't need to tell you this, but Nix is pretty good:

  • NixOS configurations force you to declare attack surfaces (user groups, open ports) explicitly
  • Nixpkgs is the largest package repository ever, so you rarely have to rely on 3rd-party packages
  • Nixpkgs tends to ship security fixes quickly
  • NixOS and many of its packages are open source

But it comes with a few pitfalls:

  • Only import Flakes or modules from trusted authors. I would avoid the NUR completely, because it incentivizes the opposite
  • Some far-reaching security fixes (such as the recent one for PHP) trigger long rebuilds before they reach the main nixos channels. Use nixos-unstable-small to override vulnerable packages in the meantime

I use LUKS disk encryption and Lanzabote secure boot to secure my data at rest. Not because I'm scared of anyone breaking into my house, but for the peace of mind that the data is gone once I erase the encryption key.

For privacy, I use LibreWolf with default security settings and a VPN.

Other than that, I don't feel the need to harden my personal computer. That is of course a different story for servers with open ports. The NixOS wiki entry for Security also contains some useful links.

[–] bricked@feddit.org 11 points 1 week ago

The update reached the nixos-26.05-small and nixos-unstable-small channels. Many programs depend on PHP, so the main channels need time rebuilding and fixing potential build failures.

[–] bricked@feddit.org 1 points 2 months ago (1 children)

So.. why don't those abrasive materials destroy the hair in the drain?? Explain yourself

[–] bricked@feddit.org 2 points 4 months ago (1 children)

I recently dreamt vividly that I ate something. I didn't know I could feel taste in my dreams

[–] bricked@feddit.org 1 points 4 months ago* (last edited 4 months ago) (2 children)

nix-collect-garbage has a --dry-run flag which should print deletable paths without actually deleting them. Check out the nix-collect-garbage reference

[–] bricked@feddit.org 1 points 5 months ago

YT-DLP on desktop or YTDLnis on Android let you download videos from almost any URL. They sometimes get blocked though

[–] bricked@feddit.org 49 points 5 months ago (1 children)

Aaand... it's Turing-complete!

[–] bricked@feddit.org 2 points 5 months ago (1 children)

You did all this as a teenager? Impressive

[–] bricked@feddit.org 2 points 5 months ago

Typst and LaTeX libraries can be used to create a variety of graphs within a text document, but no animations

[–] bricked@feddit.org 3 points 5 months ago* (last edited 5 months ago)

You can use WinBoat or WinApps or even LinOffice to run Microsoft Office in a VM that feels like a native app. Or you can instead try Collabora Office which looks like Microsoft Office, but is based on LibreOffice

[–] bricked@feddit.org 59 points 5 months ago (2 children)

$10 per TB is actually crazy cheap even for used enterprise drives! Unimaginable in this day and age

 

Alt text: A GitHub PR from 2021 by Tylersuard with the title "Quality of code is too high". The author comments: "Please refactor to reduce quality of code to match industry standards."

 
 

A photo of a cake with 8 candles in a row. The first and fifth candle from the right are lit. The caption reads "Happy 17th Birthday"

 

Whenever I see this picture I think of this:

| Creature | Swims | Walks | Flies |
| -------- | ----- | ----- | ----- |
| Dog      | X     | X     |       |
| Fish     | X     |       |       |
| Bird     |       | X     | X     |
| Duck     | X     | X     | X     |

Notice how for each combination of swimming, walking and flying, there is a living creature that can do just that, with the exception of swimming and flying.

Sure there are flying fish, but they glide rather than fly. Did evolution really forget to cover this niche?

 

McMahon reaction meme depicting increasing satisfaction. Descriptions read as follows:

  1. "You discover a new app"
  2. "It's in Nixpkgs"
  3. "It has a NixOS module"
  4. "It has a Home Manager module"
  5. "It has a Stylix module which makes it look awesome"
509
submitted 1 year ago* (last edited 1 year ago) by bricked@feddit.org to c/linuxmemes@lemmy.world
 

Sayori meme representing Linux users. Sayori is disgusted by text reading "receiving pre-installed bloatware" and instead approves "accumulating bloatware over time". Bloatware refers to unused packages.

Edit: You are so kind to give me advice on how to remove bloatware, but I don't need it :D

 

An enlarged thonk emoji as background, caption reads "If POSIX is so great, why don't they release POSEVEN?".

view more: next ›