Instead of securing the "chain", we should instead isolate every library we import and run it under a sandbox. We should adopt the model of QubesOS. It follows security by isolation. There are lots of native sandboxing in linux kernel. Bubblewrap, landlock, gvisor and kata (containers, not native), microVMs, namespaces (user, network), etc
It's not even a distro lmao. You are fully DHH-pilled. I would point you to this article: https://xn--gckvb8fzb.com/a-word-on-omarchy/, although it hardly covers the main points, it's still good enough to explain what's actually wrong with that bloated INSTALL SCRIPT, NOT a distro!
I am not surprised that you have such a horrible taste. HN userbase is full of normies now, especially the ones who cannot think and have no more than 1 brain cell but yet again, that's the actual definition of a normie if I am being generous
How long have you been using ubuntu? From my past unpleasant experience of using it, one thing I learned is never rely on apt for package updates. Most will just keep rotting and hardly get any updates. It's the same with debian. Either use install scripts from packages or switch to a much more serious distro like Arch, where packages are always updated
omarchy is a shitshow. Please stay away from it. It's a disaster waiting to happen. It's the most bloated install script I have ever seen. DHH is fucking liar and taking up all the credit for himself by ripping off of bunch of well established open source projects
No one ever said TUIs are a new thing. It's been there since the beginning, when programs explicitly ran on terminals before WWW took off. It's the bloated web which ruined a lot of things
You have google to blame. GrapheneOS tried very hard to make sure they have those security patches as google delays publishing the source tree and it's only available to OEMs
Why spread FUD? Why prove to the world how fucking dumb you are? Graphene is non-profit. It doesn't allow criminal activities at all. It was never made for it. They do real security research and used to report lots of CVEs to google. It's the most cutting edge android security you're gonna see
He's a fucking ignorant normie. He has never even tried to install GOS because if he did, he would know how almost identical the experience is with Android and there are no privileged google processes running on your phone which not only hog the resources but sends every single bit of information about your whole life
Put up what exactly? You think privacy and security is readily available to everyone who just desires so? If by "put up", you mean not even putting normal efforts, then sure. That user, along with you, fully deserves to get tracked, profiled and fingerprinted to the maximum extent of mass surveillance
That's like saying we should ban knife because it could kill people. Please. Every adult can make an informed choice on what "manipulates" them. If they can't, if they prefer convenience over critical thinking, then you don't stand a chance and will be exploited by the capitalistic overlords.
> also an issue of privacy
Welcome to the age of obsessive and relentless mass surveillance. Want privacy? Impossible unless you have discipline and patience to not give in to the digital overlords
EU is the same. Maybe slightly better but with the amount of data breaches increasing exponentially, I don't think any amount of "regulations" is going to stop data leaks. The worst thing is, companies are facing lesser and lesser consequences. Look at the recent discord breach, nothing happened after millions of IDs were exposed. They are just blaming it on customer support, who are blaming it back on discord. The only thing we can do is promote E2EE and homophoric encryption
Not sure about tailscale coordination server but once you establish connection to a headscale server, the clients don't strictly need headscale after that (although it's recommended to keep it active). So, maybe the only difference is headscale acts as a relay for once
It still blows my mind how git has lost it's original ideas of decentralized development because of github and how github, a for-profit - centralized - close-sourced forge, became the center for lots of important open source projects. We need radicle, forgejo, gitea to catch up even more!
No one should use this script, EVER. It's a disaster waiting to happen. DHH is a fucking liar, it's not even a distro and he's ripping off the hard work of Arch and several other open source projects and using it as his own creation