observantTrapezium

  • 4 Posts
  • 76 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle




  • still it is concerning, that any program can know about the sites I visit

    As other noted, that’s the case in Linux, by default all processes are equal, so if your shell process can access a file, the Firefox process can access that file.

    But there are in fact many ways to sandbox processes and prevent exactly what you are worried about. One way is to install applications via Flatpak (or Snap), that can limit what files the app can see, while still running as your user.

    If there is an app you need and don’t trust that’s not available as a flatpak (or snap), there are ways to sanbox it manually. It does require some tinkering, but people can help you on !linux@lemmy.ml




  • I don’t really need the encryption

    In this case I’d say, LUKS is an overkill and just complicates your life. Try to think of a worst case scenario and what you are trying to protect against. Full disk encryption protects you against someone physically and clandestinely tampering with your server to compromise you by altering your OS, I’d say most selfhosters aren’t at risk of this (I do use LUKS on my laptop, because if I’m not available to decrypt the drive then there’s no reason for it to get decrypted). My approach to the server is to have encrypted directories as needed. For example the SFTP directory, the logic being that some of what’s there may be sensitive, so encryption at rest prevents leakage after the drive is eventually disposed of. But my Git repos (including private ones) and calendar aren’t encrypted at rest. Other services (e.g. Matrix, Borg, Vaultwarden) provide E2E so don’t really need further encryption.




  • I don’t know if OOP knows it but there’s actually a dinosaur called Albertosaurus, named after the province (it went extinct before the mass extinction though). Edmontosaurus though was one of the dinosaur genera to have lived until the very end of the Cretaceous, and witness the asteroid that ended it.