Spyke

Replies

Comment on

What's the fundamental difference between sudo and doas ?

Reply in thread

The list of functional differences is too long to write here. I'm sure you can ask some llm to do the google search for you and it will shit out an ungodly amount of differences.

But I'd say roughly they are about:

  • how you configure it (sudo has a much more complex and expressive syntax, doas needs many more lines for the same result)
  • how it preserves env variables (sudo has more options for that, it excludes some by default while keeping others and can spawn subshells differently with -l -i)
  • how it does persisting authorization over some period of time :

doas on OpenBSD caches via a kernel API.

The slicer69 portable doas port has no persist on Linux/FreeBSD - you re-enter your password every invocation.

OpenDoas implements persist via timestamp files, similar to sudo but with fewer tuning options.

Comment on

How do you protect a remote backup from a compromised account?

Reply in thread

OP asked:

How can you grant access to an account to write remotely, but also protect the data from this account?

So I was thinking that the account should not be able to delete the filesystem in an unrecoverable way. Like overriding the current fs with random data or an encrypted fs and filling it etc.

Like I said on a Hetzner storage box, multiple users get access to the same system, but each one only has file editing commands, not fs editing and they can only access their assigned directory. So if the system does scheduled snapshots (outside of that user's scope of access) there is no way for a user to delete the files beyond recoverability. (no matter if their own files or other users files).

The user can still delete their own data. But because the fs is cow with snapshots (like btrfs) and they can not touch that, the data can be recovered easily.

Comment on

How do you protect a remote backup from a compromised account?

I think you could do it somewhat like hetzner does for their storage boxes. You get an account that has read and write access to a directory and nothing outside. The accound can only run a limited set of commands, like ls, cat, nano, rsync etc. but has no access to commands that modify the filesystem.

Then you can use a copy on write fs like btrfs and make scheduled staggered snapshots.

I usually do 1x per year, 1x per month of current year, 4 per week of current montg, 7 per day in current week.

I have no clue what they use to limit the user accounts like that btw. but maybe that gives you a new jump off point for further research.

Comment on

Some things never change

Reply in thread

Unintuitive.

I heard of photoshop when I was 13 and I installed a pirated version, just started clicking around and I always found what I wanted in a minute.

10 Years later, I switch 100% to Linux, I have to do some light design work, I open gimp - I CLICK AROUND FOR HALF AN HOUR FOR SOMETHING SIMPLE - can't find it to save my life. Give up and google it, it gives me a reply like yours "just go to a completely unrelated menu to conjure a hack out of your ass that barely resembles what you originally intended to do".

Fuck that UX man. I am so glad pirated photoshop works well in wine nowadays and I have a VM with a legit Adobe suite if I ever need to actually whip up my license for some reason (fuck adobe as well btw.)

I pray that one day there is a real competitor that works natively on Linux. I pay, take my hard earned money every month, whatever it takes, just make it intuitive and reach near feature parity with PS.

If anybody is still reading, sorry for venting, the GIMPs always trigger me, have a nice day.

linux

Comment on

Chat Control 2.0 has passed the first round of approval

Reply in thread

mainstream

is the keyword here. Mainstream is really big.

They come for the lions share first. You do nothing because you think you're unaffected. Then later they will come for you. And nobody will do anything for you either.

Of course, professional criminals like yourself (sarcasm) will find a way to escape the law. But I doubt it's nice to live on the edge of society like that anyway, being unable to interact with most services.

piracy

Comment on

When you are unable to obtain a "free" copy of something, do y'all just give in and pay for the thing? Or just give up on having the thing altogether?

Reply in thread

I have a funny storry:

there is a book I really wanted to read. It is an old af psychology science book. There is no pirated version of it anywhere.

I found one copy of it on the used market and bought it because the price was ok.

At home, I open it up and see that THE MOST IMPORTANT CHAPTER WAS CUT OUT!!! Literally there were the ends of the pages still bound with strings and you can see a wavy scalpel cut where the rest of the page would be.

Thats the physical equivalent of an incomplete torrent. Felt so bad.

linux

Comment on

Will I survive the Linux CLI if I only switch because I'm a student and Arch distro speed?

Any linux distro is significantly more lightweight than windows. But I'd say that there is not much difference between arch and for example the most bloated distro: ubuntu.

If you are a coder, the CLI will be easy. Most of the time the use of CLI is comparable to a single line in your code where you call a function with some parameters.

But arch is difficult for a beginner. (I wrote some more about my experience with it here: https://lemy.lol/post/61578059/24360161 )

If you have time, interest and discipline to read the documentation and learn a lot, then arch is great.

If you just want to use a Linux OS, install Mint and just use it. It's no big deal, just a normal OS. It's very intuitive, low friction and no microslop bloat.