21 points amcclure 31 minutes ago 12 comments

toomuchtodo 27 minutes ago | parent

Great opportunity to migrate to NixOS for those needing to decision a migration path.

hollerith 25 minutes ago | parent

Last time I evaluated NixOS (Mar 2021) the project didn't care a whit about desktop security. Has that changed?

Fedora at least tries relatively consistently—and has been for decades.

chronogram 11 minutes ago | parent

What exactly do you mean by desktop security? Security from websites, installable software, physical access?

hollerith 6 minutes ago | parent

Being able to visit a web page, open a PDF or download an inspect a git repo made by someone you don't know without the web page, PDF or git repo's being able to completely pwn the entire machine including the bootloader and the firmware for all the hardware subsystems.

Desktop Linux is very bad at that, but some distros are much better than others, and Fedora is approximately the best outside of the two specialized distros Qubes and Secureblue, which approximately no one uses.

j1elo 4 minutes ago | parent

> Security from websites, installable software, physical access?

All those would be important, but don't let the perfect be the enemy of the good. We could start from the Vulnerability Of The Year: supply chain attacks.

amelius 24 minutes ago | parent

I'll wait until AI has translated all the nix scripts to a more user friendly language, thank you.

evanjrowley 20 minutes ago | parent

toomuchtodo 17 minutes ago | parent

notnullorvoid 2 minutes ago | parent

I'll stick with Fedora and RHEL.

From what I can tell NixOS still has no support for AppArmor or SELinux.

throwaway7356 18 minutes ago | parent

Untrustworthy blog reposts Twitter message from some person?

23ahGa17 10 minutes ago | parent

According to the tweet screenshot, IBM fires AI people! Hmm ...