keep in mind that phone number privacy does not mean that they don’t get your phone number, but that the official app does not reveal it.

but then, they have probably found you either by phone number or from a group

these only handle crypto. they’re not a replacement for stripe, and saying that it is is a very large stretch. stripe is used for handling fiat payments, and there’s a reason even Liberapay only supports that and Paypal: because all others are worse or questionable.

such services (recurring payment services) can’t really make use of crypto right now anyway, can they? they would either need to store your keys, or create a specialized wallet program and stop being a service, but the latter would also remove any possible transparency that the donation receiver may want to provide

Which which one?

netfilter, iptables, or one that is based on them

Firewalld isn’t a GUI

that’s right, but it has an official GUI: https://firewalld.org/documentation/utilities/firewall-config.html

I haven’t tried opensnitch.

it has per-app rules, and can show a popup for programs that don’t yet have a rule. you can also limit the access by time, destination, and port

DKMS is setup, and I still have to plan my kernel upgrades due to the compilation time.

in my experience every kind of update requires planning and a reboot because incompatibilities between new libs and already running older programs will cause problems. but DKMS may help in making it less of a work

hmm. I have to admit I don’t understand the difference. on windows it’s the desktop folder, plus a few separate icons to system utilities with some way to filter them. did you mean that?

requirement of the root password? why would it need that, when it normally doesn’t? to clarify, I didn’t mean the “sudo reboot” command, but the reboot button in the KDE application launcher

ok. what should we use instead? paypal?

solution: use their tor hidden service instead. It’s for exactly that

what parts of it do you miss exactly?

can’t you change the compression algorithm, or its compression level?

but yeah it would be much better if we could set it on a per-file basis, and also on demand so that it can compress/decompress a file in place

any of them could make it work through FUSE

Gui to manage firewall.

which one? did you try firewalld or opensnitch?

Desktop icons.

you mean the specific icons of an other OS, or something else?

Not having to recompile out of tree kernel modules after a kernel upgrade.

manually, or even automatically? if it’s the first, check out DKMS

I think most of us are grateful that we don’t have that spyware

What was that, punk??

AMATEURS!

2532, 19.7 TB

but that’s where it becomes more serious: when basic functions of the system fail, silently. when you can’t even reboot without a terminal, because the reboot dialog crashes

as more and more official things can/need to be done online, it will only get to be a bigger risk. I don’t think it’s low even today.

Usually you would only need to reboot if you want to use the new kernel right away after an update.

and the new version of all the software that is still running with the old version.

For most of the programs, you don’t even need to restart them if they’re already running.

how? won’t they keep being the old version?

However, if you restart them they will run as the newer updated version.

oh, yeah, we agree on that. but my point is that in my experience, a lot of software gets very confused if some libs it would use or resource files have changed after they were started. often that’s also the reason why holding back a package’s version makes trouble over time (because certain other packages can’t be updated either), or same with using custom repos that have a different release schedule or maybe are not even in sync with your distro

rest assured, the 300 MB common social network apps with ever increasing storage and memory usage and decreasing functionality won’t be marked appropriately

does any antivirus software report it?

I guess not, and it shows once again, that they are literally useless resource hogs

But an adversary could easily use a bad usb when they have physical access to the computer and glitter nail polish doesn’t detect that. I guess that this is why nail polish isn’t sufficient on its own and why we need also either trenchboor or Heads.

it would be interesting to know how much does usbguard protect against this. of course you also need to do something to limit booting from usb, but how effective is usbguard in practice?
what is the risk of sticks that tries to compromise the machine through kernel driver vulnerabilities?
is it possible that it compromises some other firmware on the machine (like the EC in laptops)?
or that it takes advantage of some hardware design failure?

Personally I’ve only heard about Heads so far, but I think this is an interesting topic. Could you give us a short explanation about why is SRTM not enough, and what is a better way?

Timeshift is explicitly designed to do that easily and automatically

by consuming much more space. but you’re right, I did not think about it

Backup before upgrade is a weird thing to cram into a file system.

I agree, but these are not really backups, but snapshots, which are stored more efficiently, without duplicating data. of course it does not replace an off site backup, but I think it has its use cases.