• 2 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle



  • Non-developer searches seem to work Ok. I honestly havent tried that much. It seems like most the time I do engage with Phind its usually code related. Its become a pretty good utility for debugging.

    Strip out any sensitive bits, paste it over asking the questions and or presenting the error while running usually results in figuring out my mistakes (or at least gets me closer).



  • I’ve patched on to Phind(phind.com) a bit more lately and for the first time in a while thought that i would absolutely pay for it if the service can remain the same.

    I’m all for paying for services that make sense for the better of my own data. I’ve been running a SearXNG instance for a bit though. I’ll likely check out Kagi, as SearXNG hasn’t been too quick to return results.


  • Current have two Yubikeys for personal use. One is a backup and remains in a fireproof safe, while the other is on my most / all of the time via my keyring. Agree the individual side is a bit more complex.

    For me I took the approach of not relying that much on cloud services and rolling a lot of it myself. My data then gets backed up to a backup repository via borgbase in the EU. Usually try to follow the 3,2,1 rule for backups. Three copies of your data on two different medias with one copy offsite (ok the two different medias thing i cheat a bit and have a couple extra disks).

    The enterprise side we’ve talked about implementing Yubikeys in the org, but havent gotten all the buy in on that yet.


  • What’s funny working in the cybersecurity space is we’ve actually adopted Bitwarden I’m out org. Now, with that said to your point not all our eggs are in one basket.

    Most of our auth (if not all) relies on another mechanism for authentication. Typically some other 2FA mechanism that isn’t stored in our org Bitwarden vault. We enforce that separation with the assumption that if our vault is compromised the core aspects of the business easily accessible isn’t necessary breached.

    The break glass accounts / etc that are not protected by 2FA are 99% of the time locked down to only be able to use that use from very specific subnets and or source systems. The ones that are accessible outside (say a AWS account) is always locked down with a hardware key. This isn’t fool proof either as technically in a very targeted attack you could focus on the admin/IT user and work your way through their system. To your point…it’s Electron based, but we also found not offering it and making it easy for the typical user often led to even worse practices being adhered to.

    We’ve embraced Bitwarden at this point pretty heavily, but at some point we will be rolling our own instance and migrating that way. This will allow a bit more separation and control for more of our break glass based accounts.






  • MicroOS user here. Honestly I love the workflow of using distrobox for about everything I need.

    Essentially I have distrobox images setup for specific development workflows. I just hop into the one that is suited for the task I’m doing. It automatically sets up icons in the Gnome menu if you don’t want to use the cli commands.

    Between flatpaks and containers I couldn’t be happier with my setup. Combine that with the fact I can potentially trust the underlying OS to not crap the bed via updates (and when it does I can roll back my filesystem snapshots) is a win/win.




  • Agree, there’s likely subtle differences between the interaction. Let along adding in the other layer of Apple silicon (aka ARM). I’m actually intrigued on the overall performance of this.

    Most of the anti-cheat could be fixed by the game developers to allow Wine. I know there are numerous posts about it to Epic games and the overall consensus is they are purposefully detecting Wine. Having Apple back this direction might help the community overall push the AAA game studios to finally allow it? One can dream…


  • Silverblue and MicroOS are very similar in nature. You have a strong immutable rolling core and then everything in user space pretty much runs as containers, flatpaks, etc.

    MicroOS I havent had any issues with daily usage for the desktop side. Updates in the immutable layer are applied in a new filesystem level snapshot that you boot into on the next reboot. This also makes it easier to roll back if theres a issue. I think Silverblue does something similar, but not sure. Filesystem snapshots have been a awesome to have feature.

    I use MacOS in the workplace, but often prefer my Linux setup over it (but its hard to break a Linux fanboy after 20 years of usage). MacOS im fairly certain enforces a similar immutable based OS under the hood.



  • Debian up until the last couple of years was my go to in the server realm. The desktop side is fine if you want stability. The only real downside on the desktop side is the packages tend to drift in versioning as the distro lifecycle progresses.

    Agree on snaps though, never been a fan and I used to be a huge Ubuntu fan pushing that on to family / etc. I haven’t given them a shot in a while, the last time I used them (circa 20.04) the performance was not anywhere close to Flatpaks.

    These days my primary desktop / laptop driver is OpenSUSE MicroOS and when its not that its usually Fedora / Nix. Server side still remains a mixed bag of Debian and OpenSUSE.


  • Ouch, yea the only downside with that methodology is maintaining it while also keeping up with the active project (Wine). Apply has always been a bit weird about open source, which I get they want to maintain a level of control.

    I’d be curious how this plays out for them longer term since it could possibly create diverged paths to what Valve (Proton) have been pushing towards for years. Do i necessarily think Windows emulation for gaming on either platform is the longer term play…no… but its sorta the gaming world we are stuck with at the moment.

    The one aspect I will be keeping a eye on is how Apple handles some of the newer titles. Specifically ones with anti-cheat / drm. One of the reasons I haven’t been able to switch my sons computer over to Linux fully is because Fortnite (I know…) doesn’t play well with Wine due to its anti-cheat).