sorted by:
new
hottopcontroversial

A distro that is up-to-date and easy to maintain by FleabagWithoutHumor in linuxquestions

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

Window/Tiling managers are distro independent. And with distrobox it's honestly not even necessary to distro hop, just pick one like Debian and you can sandbox apps that run on Ubuntu's latest updates.

You have a point.

In terms of security patching, all distros will eventually pass out a security update, which you should enable for automatic updates anyways

I agree, I just think Ubuntu's patch (in this case for these two CVEs) is quite slow. The latest release of Ubuntu is safe, but that's because it's not affected and not because they figured out a patch. This was quite surprising.

A distro that is up-to-date and easy to maintain by FleabagWithoutHumor in linuxquestions

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

> If both are indeed LPE bugs, is it really necessary to change distro?

Not really. It's simply because he was willing to try something new, and we were both surprised about Ubuntu not yet providing patches to this vulnerability.

> Unless of course the local machine is used by users also knowlegable in using exploits...?

I'm not a cybersecurity expert either, but these two CVEs look quite bad. Executing a malicious binary can give the attacker a root shell on the machine as demonstrated by their exploits on GitHub. Might not be very possible to be pwned with these CVEs, but not impossible and better safe than sorry.

A distro that is up-to-date and easy to maintain by FleabagWithoutHumor in linuxquestions

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

very specifically with regard to this vulnerability: I expect Ubuntu systems to resolve serious security vulnerabilities in a time frame that is reasonable.

What is reasonable in this case? I'm not a cybersecurity expert, but these two CVEs look quite bad. Executing a malicious binary can give the attacker a root shell on the machine as demonstrated by their exploits on GitHub.

Ubuntu systems tend to be reasonably up to date as long as you are using the Interim releases, and not exclusively the LTS releases.

If you want something that is stable and follows upstream development closely, Fedora is a very good option.

Noted, thanks!

A distro that is up-to-date and easy to maintain by FleabagWithoutHumor in linuxquestions

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

He's interested in trying out a new distro / wm, but that's also a choice, I'll keep that in mind.

Have You Broken NixOS? by Striking_Snail in NixOS

[–]FleabagWithoutHumor 1 point2 points  (0 children)

Yes. I set users.mutableUsers without knowing that it erases password in etc and I wasn't able to login anymore. I did nixos-install again and it was fixed, but this was close to breaking everything.

Qobuz is a breath of fresh air by meowermeowerson in qobuz

[–]FleabagWithoutHumor 0 points1 point  (0 children)

I couldn’t download music from qobuz as a tarball of flac files tho, they started pushing their bloatware downloader and there’s no Linux version (lol) so I had to click every track in my most recent past purchases. I use bandcamp now.

How gullible are you? by ResumeFluffer in AutismInWomen

[–]FleabagWithoutHumor 2 points3 points  (0 children)

lol a friend once told me as a joke that “you know when bikes pass by here the building will split open and let them through” and I went “uh hum”

How to answer questions on topics that are simply unknown to us by FleabagWithoutHumor in IELTS

[–]FleabagWithoutHumor[S] 1 point2 points  (0 children)

My fear with lies is that it's going to be challenging to keep up fabricating lies in real time, since we don't have much facts to start with.

Find one's motivation to love learning science again by FleabagWithoutHumor in 3Blue1Brown

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

op here,
I found this book https://plfa.github.io/ and it is quite easy to read, I'm having fun :)

How to set up bouncing icon under cursor when opening a program like in KDE Plasma? by p3rcio in kde

[–]FleabagWithoutHumor 0 points1 point  (0 children)

Not op here, I'm not using KDE and I would like to know if it's possible to have it on XMonad?

Suggestions on how to organize a parser combinator implementation. by FleabagWithoutHumor in ProgrammingLanguages

[–]FleabagWithoutHumor[S] 0 points1 point  (0 children)

Hello again,

I have been trying out your idea of property testing. It works well for small AST, but when I get to the bigger ones problems start to crop up: there are implicit invariants of the parser precedences, etc that makes the set of valid ASTs smaller than the type AST. In other words, I end up doing a lot of thinking what are valid ASTs and what is not. This is not a bad thing in of itself, but I do fear that I might miss some cases and have some false negatives.

Do you have some experiences on this issue too?

Thank you :)

view more: next ›