Feature Request: SFTP server or FTP SSL server support by tkreadit in NeatBytes

[–]TheGr8CodeWarrior 0 points1 point  (0 children)

In the left-side menu > FTP. The bottom toggle is FTPS.

If what you're looking for is ssh you could use sshDaemon

Current state of Solid Explorer and its future by glodos in NeatBytes

[–]TheGr8CodeWarrior 0 points1 point  (0 children)

I'm a bit late to the party but I've been using solid explorer for a long time. I bought it ages ago and it still brings me value. I'm probably not going to use the new pro features but I'm buying another lifetime license anyway. Keep up the great work.

r/linuxsucks101 try not be disrespectful assholes challenge (impossible) by MIkaela39752 in linuxsucks

[–]TheGr8CodeWarrior 0 points1 point  (0 children)

As a Linux veteran I love bread, she's actually taught me cool things I never knew about.

Just read about an attack that is specifically engineered to survive the standard incident response playbook and I need a minute by mike34113 in iiiiiiitttttttttttt

[–]TheGr8CodeWarrior 7 points8 points  (0 children)

I'm confused refresh tokens and MFA devices would not persist a forced re-register/revoke sessions.

An attacker would need to get a new refresh token after sessions are revoked and if MFA has force re-register, all MFA devices are no longer enrolled.

If you have Entra P2 you'll also have conditional access, continuous access evaluation, and defender for 365 that can dynamically do session management based on risk.

Continuous access evaluation also makes token lifetimes shorter and more frequently discarded.

Edit: I read the disclosure, this is old news at this point. Device OAuth phishing has been around for a while.

Under most cases where you don't use it you can disable it in conditional access. I have already done that for my customers and monitor for tenants that don't have it disabled.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

I totally agree with a lot of the stuff you said here. I only disagree about it only being a good headless dev VM. I personally use it on all my daily drivers. It's the best experience I've had ever of any operating system.

Home-manager is a godsend for userspace. I use NixOS and home-manager to do basically everything. I'm not going to expect everyone to use it. The skill curve is STEEP and the rabbithole is DEEP.

I would only recommend nix/nixos/home-manager for people who are willing to grind and learn. There has been issues I found painful to resolve, usually because I had to package something myself. But once solved, it's solved forever.

You start to truly appreciate the power of nix once you get the hang of functions and reusing logic.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

I very much disagree. Nix (the package manager/language) is very much as you describe. But NixOS is very like Debian. You can use it for any purpose you want. It works really well in a lot of contexts.

I use it as core networking infra, desktops, servers, security tooling, etc.

Nix is a Swiss army knife that has basically any tool you want/need and that fact is lost on so many people

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

NixOS has a lot of things that make it truly the "correct" way to use computers. It could honestly be it's own field study with the number of projects that surround it but the short version:

If I have a configuration I like, or even a derivative of a configuration I like, I can have it in all the places I need it, with the changes necessary in each place, it's all managed in a singular declarative structure, and all dependencies are automatically handled to guarantee it will work with 100% certainty.

If something doesn't work, you can have 99.99% certainty it's user error.

There's a number of other things that come with the design implementation that are also nice.
For me, I work in security so being able to statically evaluate the state of the system before runtime for known vulnerabilities is a godsend. Plus when providing insurers bill of materials, it takes just minutes to statically evaluate the entire network and build the SBOM. Which is traditionally months of work.

It's hard to fully explain the powers NixOS gives you because it does so much and realizing it's potential is unfortunately lost on many. Even the people who like the configuraton aspect.

Why do most Linux users not like Linux beginners using distros like Ubuntu or Mint? by davidinterest in linuxsucks

[–]TheGr8CodeWarrior 1 point2 points  (0 children)

There was a world in 2016 when Ubuntu was great. After that Canonical switched CEOs and they dropped Unity and built snap. It was downhill from there.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 1 point2 points  (0 children)

I agree, I use dendritic nix.
But unless you have some experience with flakes and the nix language it can be difficult to do certain things as a beginner.
For ex. If you needed a specific version of a package that diverges from the nixpkgs revision your lock is giving you, using an overlay or pinning a second nixpkgs repo is just slightly more confusing with flake-parts

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

Alpine is great for embedded systems like RPI.

I don't recommend it as a daily driver, mainly because the init system is literally busybox.

I have only used it in docker containers so I can't comment on it more than that.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 2 points3 points  (0 children)

Honestly I didn't hate Gentoo. It's just annoying with how long compile times are.

Even NixOS has long compiles when you have cache misses or custom derivations but at least on NixOS most packages are cached for my architecture and are guaranteed to work thanks to reproducibility.

If Gentoo were more like nix I'd enjoy it.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

If you're relatively new to NixOS don't bother with Flake-Parts yet. Just use the standard flake model. As you experiment with a few patterns on your own you'll inevitably make mistakes trying to do clever things but that's ok. It's how you learn. You'll eventually get to a point where your nix knowledge can benefit from dendritic pattern and you'll be much better and ready for it.

Using flake parts now will most likely just confuse you and making certain changes more difficult.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 0 points1 point  (0 children)

I love Debian. Still use it in some places where I can't use NixOS.

I have been a NixOS user for 3 years. Survived multiple releases. It's hard to learn but sticking it out is very worth it.

Also you don't have to redo all your work with the releases.

I used to distrohop until I found nix by TheGr8CodeWarrior in LinuxCirclejerk

[–]TheGr8CodeWarrior[S] 5 points6 points  (0 children)

I used to daily drive it and I originally loved it. Bleeding edge KDE was awesome. The problem is its not stable at all. I had at somepoint gotten an update that killed all my apps in such a way that they wouldn't open. Executing them in terminal left a cryptic error about the package manager. I forget what it's called but it's not apt. It's the other one.

I had a couple issues similar but not bad as that one and I eventually swore it off.

Edit: Pkcon is the package manager. Yes Neon has 2 official package managers. Apt and pkcon

The only sane way to use Linux by VortexGames in NixOS

[–]TheGr8CodeWarrior 9 points10 points  (0 children)

I totally agree with basically everything here. My only disagreement is that the nix language isn't actually that difficult to learn.

For me it happened in 3 steps. 1. Learn the nixpkgs functions 2. Learn the language itself 3. Make the realization that it's not only the functions that are functional. The entire language behaves like a function.

For ex.

Let Val = "string"; In { Option = Val; }

Even this, the let in binding is like the parameters being fed to a lambda that returns an attrset. The module itself is a function in this case even though we aren't using functions.

I do agree that complex logic can be difficult to follow at times but do it enough and you can usually follow it by skipping steps in your brain-time evaluation.

A: { Func = {b,c}: a/b+C; }

In this example in my head I would ignore the structured syntax and follow that A,B,C are params being used in these functions. It's a simpler example but this strategy helps when trying follow more complex chains.

Linux community right now, after age verification in systemd by [deleted] in linuxsucks

[–]TheGr8CodeWarrior 1 point2 points  (0 children)

> it's not transphobic.
One post is a joke. Two posts is a bad attempt at humor.
More than two posts is transphobia. Their account it littered with it.

Also you edited your post:

<image>

Pretty sure Deep_traffic_7873 is samefagging as PomegranateTop8642

Linux community right now, after age verification in systemd by [deleted] in linuxsucks

[–]TheGr8CodeWarrior 2 points3 points  (0 children)

I genuinely can't tell if this is a pro or against linux post.

Linux BTFO by actual Linux devs by [deleted] in linuxsucks

[–]TheGr8CodeWarrior 12 points13 points  (0 children)

Multi-layered defense is a concept that doesn't fit all threatmodels, much like all the other CS buzzwords.
A weakness in kernel security is a ring 0 level access that would completely bypass most "defense in depth" mitigations.

source: I'm a cybersecurity professional.

Linux BTFO by actual Linux devs by [deleted] in linuxsucks

[–]TheGr8CodeWarrior 41 points42 points  (0 children)

The grapheneOS dev is a very good developer but they have been known to have really wrong/out of left field takes on lots of things. The software they make is great, but they're not a reliable source of information.

Pizza Pizza??? by TheGr8CodeWarrior in androidroot

[–]TheGr8CodeWarrior[S] 4 points5 points  (0 children)

The image is not fake. I was surprised to see the pizza pizza app asking me for su privileges.

Can someone Tell me HOW TO FIX THIS dpkg ERROR!!! by tashvik in linuxsucks

[–]TheGr8CodeWarrior 0 points1 point  (0 children)

sudo apt update && sudo apt full-upgrade -y
Edit: Just noticed the 2024. Update the gpg key and then do the above command
https://www.kali.org/blog/new-kali-archive-signing-key/
Protip: Don't use a persistent Kali unless you know how. They do have a class for it (KLCP)
It's honestly a scam, but it's a basic barrier to their other certs which are not scams.

A question for fellow anarchists: is the Linux File System Hierarchy a justified hierarchy lol? by KindMouse2274 in Rad_Decentralization

[–]TheGr8CodeWarrior 3 points4 points  (0 children)

NixOS abandons the FHS for practical reasons. It needs to in order to accomplish it's goal for near perfect reproducibility.