I would guess yast, merlyn, zypper, no rpm fusion (?), but you get OPI, good security defaults like apparmor and ufw (which messes with printers). I like it so far. I’ve found most packages im looking for and it hasn’t broken on me once during an upgrade. Zypper also recently got a big speed buff that I’m aware of.
Opensuse tumbleweed if you want stability, rpm packages, and bleeding edge. They also have a fantastic KDE edition.
Why is silksong $8 lol
I don’t believe Debian is susceptible to worms — it wasn’t even susceptible to last year’s xz attack — and if you have a network firewall with port forwarding disabled, there is no way in unless your router’s firmware is compromised. If you’re running any community driven software like, for example, game plugins for servers you’re hosting, those could be suspect. Anything not FOSS is also a suspect. Otherwise, if you’ve already done a secure wipe (using dd, hdparm/nvme, or your UEFI) and used another motherboard then it probably isn’t your firmware that is compromised. You mentioned SSH and credential reuse, so this leads me to think a device on your network, like an IoT device (thermometer, baby monitor, home assistant, Roku, etc.) could be infected with malware. You really can’t trust these things to have any security whatsoever and they need to be placed on a segmented or guest network. This attack honestly seems very immature, something a script kiddie would do, or perhaps it is automated. On that note, automation loves vulnerabilities, so if you forgot to change the default credential on your router for example, I would fix that. Make sure everything is on the latest version and patch everything. I would also start suspecting neighbors and juvenile kids around high school age. If nothing else works then I would do a full Mr. Robot wipe down ;)
I like flatpaks, kinda. If something is in the standard repo, I install it. If it’s a library or CLI tool, I add the repository. If it has simple build instructions, I build it. If all of those things are too complicated or they want me to run a script, I just install the flatpak.
Just use WHOIS protection (which should be free, but whatever).
Because they were 11. Lol.