jman6495

A modern UI for ClamAV or a Subsonic Music Streaming client (In gtk4)

My recommendation would be Fedora or CentOS if you want a stable workstation you won't have to reinstall. Debian is also a great choice. OpenSUSE Tumbleweed is okay but I found it a little clunky compared to the others. Avoid EndevourOS and Manjaro like the plague.

This article sounds extremely fishy and borderline conspiracy-like to me.

Imho the only guarantee of privacy I need is the source code.

Yes, but if you intend to mainly use flatpak you might want to try fedora Silverblue

No, you can't : in an immutable distro I can reasonably trace almost any file in the filesystem back to the package that created it, and know with a reasonable degree of certainty that the installed version of said file has not been tampered with. That isn't possible an a normal distro.

Please do share with me what I do not understand.

A mostly read only filesystem built from a limited number of packages, with other files being in a fixed number of locations mean it is harder for malware to hide.

Very good choice :D

I used to daily drive arch, until university, when I got frustrated at the issues it caused me and the time I needed to solve them.

I'd recommend fedora if you want real solid stability.

I don't think the DE itself matters, but I can recommend using an immutable OS (makes it harder to install malware) and installing flatpak apps only. You can also use software like flatseal to further lock down permissions

There is so much wrong with this post. Half of the points raised are utter bullshit

We have to wait and see for eIDAS, let's hope with the changes to eIDAS dead, we'll have at least a few years of the Commission not proposing some dumb surveillance shit

The latest text has not yet been released, but when it is you will see a separation between Identification and Encryption. It is also clearly stated that browsers are allowed to do whatever they want regarding recognition of CAs for encryption. tl;dr the status quo for encryption (linking a domain to a server) does not change, browsers will only be forced to recognise identity (linking a organisation to a server). This will force a re-engineering of QWACs/EV certs in general in favour of something like ntqwacs.