• 11 Posts
  • 1.19K Comments
Joined 3 years ago
cake
Cake day: June 25th, 2023

help-circle


  • Distrobox is not an isolated environment

    True, you’ll note I didn’t say it is sandboxed or isolated, but it is a different environment. Paths that point to normal things like /usr etc. will be in the distrobox environment. That said, unless you use a custom home for the distrobox (you should anyway), your home directory is hosed. At this point I expect the malware to not be distrobox aware and use things like distrobox-host-exec, that may change.

    A VM is absolutely a better approach, if significantly more frictional.


  • If possible do it in a distrobox and down networking before running, yes that won’t stop the curl | sh in the install, but at least you can blow it away without hurting your main install and it will likely infect only the distrobox. Bonus points for an immutable main OS.

    As the whole supply chain attack vector gets more sophisticated, and probably subtler in effect, these are going to be harder and harder to spot and likely start making it into main repos. Keep sharp people.

    Not real fun for a linuxmemes post, but I think it needs saying.


  • Zelazny’s Amber. You recomend?

    Hell yeah, give it a go. Not everyone’s cup of tea, but if you like it you tend to love it. It’s a product of the 70s, and Zelazny has a particular prose, economical, broad brush strokes that leaves the reader to fill in the details with imagination, each reading unique.

    Some dislike the second quintology. I think it’s not as good as the first and faded, along with the author’s life, at the end, but I liked it and bad Zelazny is IMO better than most out there. G.R.R. Martin and Neil Gaiman (yeah, I know, dick, but competent writer) both cite him as a major influence, and he has all the Hugos etc.

    If you want to try something else by him first, A Night in Lonesome October is special, one chapter a day. I (most years) and others start on Oct 1 and read a chapter a day, does not disappoint.
















  • We know Cellebrite can’t crack GrapheneOS.

    Yah, one of the reasons gOS is hated and I have it :) but you know Cellebrite is looking for that zero day. Still an issue for the other 99.9%.

    It’s my interpretation that “access” means you have to give them your phone physically. Otherwise Cellebrite wouldn’t be needed

    Your lips to gods ears… But until it’s clarified legally the pessimistic interpretation is you have to unlock it (otherwise impeding an investigation or some shit) and then they use Cellebrite to suck it dry.