aordogvan

joined 3 years ago
[–] aordogvan@lemmy.world 2 points 1 year ago (1 children)

Surprised to read so many answers talking about capitalism, social media and wealth concentration. But no one mentioned that we're at an unprecedented point in history of mankind. Ecological collapse, the lightening fast rise of AI. No example of past historical processes can be very useful in this very unique context.

And don't forget that with AI and, coming fast, robots, humans will not be needed for labor anymore. Most of you might feel this is rubbish about something you think is science fiction. I suggest you think again.

Think again and you will quickly realize that the future is not rosy for 99.5% of us.

[–] aordogvan@lemmy.world 1 points 2 years ago

+1 for Watcharr

[–] aordogvan@lemmy.world 1 points 2 years ago

I'm also using Traccar. Found this yesterday and was going to give it a try. It's called Dawarich.

[–] aordogvan@lemmy.world 3 points 2 years ago

Surprised nobody mentioned Yakuake. Just discovered it's just for kde. Been using it for years. It hides at the top of my screen and slides down when the cursor hits the top. Full desktop when not used and can access it no matter which app I'm using.

[–] aordogvan@lemmy.world 1 points 2 years ago

Thanks, good to know about firewall.

[–] aordogvan@lemmy.world 1 points 2 years ago* (last edited 2 years ago) (1 children)

While what you're saying is theoretically true, don't forget that as far as I know, most attacks are perpetrated by bots. And while it is true that in a fedora based version one could run ostree admin unlock etc... this particular command would need to be included in the attack script.

Now if the script has to be modified to include all possible different immutable systems that could possibly run it would increase the complexity and most importantly the size of said script making it easier to detect.

I'm not saying that its a bulletproof method, I'm just saying that by itself it greatly minimizes the risk, at least until all servers run immutable systems. And even then it still complicates matters for potential attackers quite a bit. So therefore reducing or at least greatly minimizing the potential of the system being compromised.

[–] aordogvan@lemmy.world 2 points 2 years ago (1 children)

Thank you for the tip. Unless my understanding is wrong both OS are similar, Coreos targeting more precisely Kubernetes and cluster management. Had a quick look, but definitively will read more about it.

[–] aordogvan@lemmy.world 2 points 2 years ago

Thank you, good to know. Not as straightforward as directly installing distro but certainly worth considering.

As to why it reduces attack surface please see answer provided to other comment.

[–] aordogvan@lemmy.world -1 points 2 years ago (16 children)

Because even if an attacker could gain access even as root he cannot modify system files. This is why immutable OS distros are called immutable.

 

Does anyone know of a hosting service that offers Silverblue as a possible choice for OS?

It seems to me that for a server running only docker services the greatly reduced attack surface of an immutable distro presents a definitive advantage.