• 0 Posts
  • 28 Comments
Joined 3 years ago
cake
Cake day: October 1st, 2023

help-circle

  • The problem is trust. Sandboxing is all well and good, but what of the data I give the app directly and the resources it has access to?
    If a person installs the Steam client from FlatHub and logs in to it with their account credentials, how will they know the app wasn’t actually published by a third party who modified it to act as a man in the middle to steal account credentials. They’d need to be vigilant and follow a flathub link provided by Valve themselves. The app could also be a crypto miner, capped to use 10% CPU to avoid suspicion… now I’m searching the internet why steam is constantly using 10% of my CPU…

    I don’t actually know if flathub does checks or anything so this isn’t a jab at them specifically. I personally distrust all package distribution platforms by default and don’t use sandboxed packages on any of my installs.

    I guess we all have to define where the lines are and how far we’re prepared to go. Technically, you should read the actual source code fetched from AUR and only build once you’ve confirmed it does what you expect it to… for every thing you install and for every update. Maybe thats good for Richard Stallman, but the general populace will look for trust outside of only trusting themselves.


  • You add the rpmfusion repo and install a few nvidia packages from there. Kernel modules are then built for the driver. If secure boot is used, they need to be signed too. Sometimes the grub entry isnt updated and doesnt load nvidia drivers. Sometimes you boot into a black screen, sometimes Wayland throws a hissy fit. Hardware accelerated video decoding needs more packages, in browsers it may need extra configuration…
    The components are all there and they work, but sometimes the stars don’t align and you just curse a little and wonder why you didn’t just buy AMD because that, just works.


  • I don’t want to be a steam shill, but does the prevention of selling games cheaper (if this is true or effectively enforced) even do any good? I have over a thousand games on Steam, but I doubt I bought 10% of the games from them. Heck, the latest game I remember buying at release was Oblivion Remaster, and I got it from GMG because it was 17% cheaper on release day then on steam. This happens constantly.
    If we are to objectively look at the problem, why would lifting this rule automatically mean games would be cheaper elsewhere? One of the biggest slogans in favor of Brexit was something along the lines: “of EU membership costing 350m pounds per week, we could spend it on the NHS instead”.
    We are paying $70 for games because of Steam, we could be buying them for $55! That **could **there is holding the whole thing up. And its not even real. Its a word on paper. Effectively today; cheaper games than on steam are available, where steam gets a 0% cut and it stuck with the bill of hosting and delivering the game for free. This is the reality. Consumers arent the ones crying here.

    If there is a fight worth fighting, it is the one to be able to transfer digital ownership of game licenses. This is a fight we can take to everyone including Steam. This would be an actual win for consumers. Not bickering about something that in the end wont effect any consumer anywhere. The above is a fight between publishers and distributors…







  • This kinda kills the value proposition of a deck. Its a good machine, but struggles with high end titles. Were the performance or battery life better, I’d have overlooked the price but its still the same machine. A more powerful successor would fit this price point, not the original machine.

    As long as alternatives or similar products exist at current prices, the deck will be a hard sell.


  • My use cases are:

    • Connect from multiple devices on the same home network (with the application)
    • Connect from a phone device on the internet (with the application)
    • Connect from some PC’s and devices on the internet (with the application and from web browser)

    For home networked devices, I don’t care about security that much. I try to lock it down on the router level and by using VLANs for less secure devices. I connect via IP directly (or .local domain).

    Jellyfin runs under its own user with read access to a media library.

    For devices on the internet, I have jellyfin exposed on a specific url path of my domain - through a reverse proxy all through 443. A bit of security through obscurity here. I’m proxied through cloudflare on the DNS side with very restrictive IP rules.
    I think this is enough for the security flaws jellyfin does have. I’d sleep better at night if it had client certificate support, but Its not a big deal imo. If security flaws allowing remote code execution are found, I’ll shut it down and allow access through wireguard only and lose access from some devices on the internet where I cant use VPNs. Not a bit deal either.




  • Two extremes here. Debian is slow to update while arch is bleeding edge.

    I avoid containerized desktop apps (snap, flatpak) so I couldn’t run Debian as a daily driver. You’d want to use the latest FireFox and their repo’s release is old. You you can get it from flatpak, but I don’t want to do that. Running on recent (<1y) hardware will also be problematic. I guess you could keep on adding 3rd party repos to your install, though some post from debian forums always stuck with me: “Debian is only what is released + whats in the official repo. Install anything else and you’re not running debian anymore.”. Its a whacky OS and I love it, but daily drive it only on my server.

    Arch puts everything on their repo straight away. And if its not there, you’re downloading code from AUR and building it yourself. I actually appreciate this since it complies with the philosophy that you can’t really trust your applications unless you read the source and build it yourself. Awesome, but the general public shouldn’t be doing this… I don’t mind applications being distributed in binary form. I am able to trust linux community maintained repositories. Arch is for the geeks imo.

    I found Fedora to be a good middle ground, since it gets package updates straight away while still maintaining fixed OS releases. No need for snap or flatpaks since their repo has everything and is updated. Its also widely supported by software vendors (just like debian). Id go with it as a recommendation, but still note that its philosophy is free software only and this can potentially mean tinkering with additional stuff from RPM fusion, especially if you dance with nvidia and watch videos encoded with non free codecs.

    It takes a bit of time to find the right distro and that is the biggest obstacle to linux imo.