• 0 Posts
  • 10 Comments
Joined 11 months ago
cake
Cake day: August 15th, 2023

help-circle

  • Only when there is a real need . Debian runs on everything and it is a no nonsense distro so I’ve been happy with that for years… Started on Debian 6 and continued until now on laptops servers and SBCs. Before that it was Ubuntu and crunchbang for a few years and before that was fedora core that came on like 6 cds with KDE3.

    At this point the only interesting thing for me are security changes. Games are largely sorted due to wine , proton and vulkan and all of the great work going on there.

    I keep and eye on quebesOS , NixOS, silverblue ,subgraphOS and openBSD and alpine.

    The dream OS would be hardened by default. Hardened Kernel with ACLs for everything defined by default. Like each app should be required to list all of the files it accessed and the type of access in a manifest, list permissions it needs and of URLs it accesses. Obviously there is a need for some wildcard stuff but it could be limited in scope. More of the kernel in rust would be nice with legacy systems removed to reduce the technical debt.

    I know we have apparmor and selinux and pax/grsec (if you pay) but I think they dont scale well and require a massive investment in time to understand and debug.



  • I’d try each application one by one. Maybe write a script to monitor load and stop the program if it goes past your desired threshold and notify you.

    It could also be a setting in some app like photoprism or immich … I think one of them uses tensorflow to classify images. That would increase the load if thats running in the background.

    Maybe try them with an empty directory so there is no data to process and see if you encounter the error. Then add some data and see how the load is.







  • If I was going to do it I would only host the site on tor or i2p. I’d only host magnet links with minimal metadata and aim to have the site work without JavaScript. Maybe a small flask application or something to populate the pages using templates. Very basic, light weight and secure.

    I would also release a monthly dump of the site to allow it to survive in the event of a takedown .

    This way you have a minimal attack surface , you are protected from legal threats as they dont know where or who is hosting and they dont have a hosting provider to send the notices to.

    With regular dumps of the site , taking it down becomes futile as there are copies out there in the wild, that can spring up the next day if needed. Its like a diversified seed bank if you will 😉.