The good news is that in order to exploit the new vulnerability, the attacker first has to obtain kernel level access to the system somehow - by exploiting some other vulnerabilities perhaps.
The bad news is once Sinkclose attack is performed, it can be hard to detect and mitigate: it can even survive an OS reinstall.
Release blog post by the infamous “please remove my packages from NixOS” developer: https://community.home-assistant.io/t/consider-to-avoid-adding-library-dependencies-from-frenck/315185/20
That makes some sense I suppose. What was it about DragonFlyBSD and macOS kernel?
Faster in what sense? Would you kindly point me to the benchmarks used? It’s easy to find the opposite results so I’m curious.
You’re right - I misunderstood the question and thought you meant the distribution images
At least Kali and Arch do
Focuses on garbage these days
Cloudflare tunnel is an option, you can even scrap your own nginx
Sounds like you have a pretty okay experience but some specific things don’t work - please take some time to report bugs if you haven’t yet!
Sounds like a strategy or a simulator
Are you confusing security and privacy?
You can try OpenCore Legacy Patcher: https://dortania.github.io/OpenCore-Legacy-Patcher/MODELS.html
What are some alternatives where I can get targeted ads?
Still waiting on the list of those swinging/swiping changes that the other DEs are making
I’ll bite: big swiping changes like what?
Unless you’ve used something secure for formatting or wrote data to the SD after, consider attempting data recovery.
That’s not my experience - have been using arch for around four years and it broke only once by not letting me log into the system after I failed to update pam configs after the system upgrade.
I often stumble on this example of nix usage - a one-off shell with a a specific package. This is such a niche and seemingly unimportant use case, that it’s really strange to have it mentioned so often.
Like literally what’s the point of having a shell with ffmpeg? Why not simply install it? Even if you need something just once, just install it and then uninstall it, takes like 10 seconds.
The other use case that is often brought up is for managing dev environments, but for a lot of popular languages (Python, Node, Java, Rust, etc. ) there are proven environment management options already (pyenv and poetry, nvm, jenv, rustup). Not to mention Docker. In the corporate setting I haven’t seen nix replacing any of these.
From my limited experience using home manager under Linux and macOS:
All in all nix seems like a pretty concept but not too practical at the moment.
There’s no ZFS support in OpenBSD is there?
From https://www.cloudflare.com/products/tunnel/