• 0 Posts
  • 16 Comments
Joined 1 year ago
cake
Cake day: June 24th, 2024

help-circle



  • There was a major focus shift maybe 5 or 10 years ago towards security in Linux design, especially with the development of Wayland, pipewire and systemd. The problem is that accessibility software behaves in many ways like spyware or malware. It reads all windows, it hooks themselves in programs, it redirects output and input. The security focused (even security first) approach of many developers broke all the accessibility workflows and proper API to do it the new and safe way have low priority. A few exist but it is still far away from feature parity.

    That’s why I am against the Wayland default or even worse Wayland only approach that many distributions have nowadays, Wayland is still barely useable for many people who need working accessibility solutions and that should be seen as a major stopper issue for a wide release like that.





  • Atomic/immutable distros are just another tool in the tool box. It is great for systems with a limited use scenario like the SteamDeck or HTPCs. I also love to install immutable distributions on systems where the user (often IT-illiterate) and the administrator are different people.

    On my desktop PC I will, for the foreseeable future, use a normal distro (ArchLinux in my case) but i am planing to look into changing my servers to immutable with docker. That could make updates/maintenance easier and reduce the risk for full server compromises






  • A new homepage for the business of my wife.

    I plan to use Hugo for it, I just wish the documentation would be better.

    For the homepage I need a few additional “non-blog” pages and from the documentation I am not sure how to do that the best way.

    But to be honest, I have not really looked deeper into that, so it is very possible that I just missed something.




  • I only bind applications to ports on the Internet facing network interfaces that need to be reachable from outside, and have all other ports closed because nothing is listening on them. A firewall in this case would bring me no further protection from external threats, because all those ports have to be open in the firewall too.

    But Linux comes with a firewall build in, so I use it even if it is not strictly needed with my strict port management regime for my services. And a firewall has the added benefit to limit outgoing network traffic to only allowed ports/applications.