• 0 Posts
  • 30 Comments
Joined 6 months ago
cake
Cake day: August 28th, 2025

help-circle


  • RFC 98 was co-created and championed mostly by a person who has a history of within-organization agitation, first within Google, and now within Nix. They have a history of social activism and labor organization, and as far as I can tell, they are employed or contracted in various capacities that allow them to pursue these goals. By any reading, they are extremely polite and accommodating in the absolutely mind-endingly long RFC 98 doom-shedding.

    I’m very confused about where those is going. the way it was prefaced made it seem like they were about to blame said co-creator from a right-wing perspective, but then the end of the paragraph affirmed their cordial collaboration and politeness.

    as far as I was aware, the drama was largely Determinate Systems making a lot of QoL improvements gated behind their products + flakes eternally in beta and then the contract with Anduril















  • missfrizzle@discuss.tchncs.detoLinux@lemmy.mlLinux security
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    edit-2
    5 months ago

    the most secure possible? you’ll need to learn a ton. you’ll get there, but it’ll take a while.

    decently secure? install Linux Mint, install your updates, don’t run sketchy commands with URLs in them unless you know what you’re doing, maybe follow a hardening guide. you’ll be okay.

    if you need to be extremely secure and private, install Tails on a USB stick. it will be slow and frustrating, and you’ll need to save files to a second USB drive, but it will probably keep you pretty safe, and it’s decently user-friendly. just make sure you keep Tails updated! you’ll have to do that by flashing the new Tails onto a new USB drive, there’s no easy way around that.

    those are your two most user-friendly, safe approaches.



  • yeah! there’s a punishing learning curve but it’s sooo frikkin powerful once you get it. for my NixOS config on WSL2, I have it cross-compile age-plugin-yubikey for Windows, then stuff the (absolute) path in a wrapper script to use agenix with passage as a git-credential-helper storage, all of which gets set up using home-manager as my default git config. and it all just gets automatically built and configured when I nixos-rebuild switch, so I can sync it to my other machines.

    unfortunately I have no idea how it works anymore lol. that’s the problem, it’s so resilient I forget how to change it! but I can’t imagine doing that in any other Linux distro.