A Sharky Anthro

Just a dude on the internet, looking for content and fun! I love Linux, gaming, writing, reading, music, anime, walks, and occasionally movies too. Chronically ill and anxious too, that makes life quite interesting…At times. Also learning about my anthro shark leanings…Thanks furries for providing me with a safe place to explore this part of me!

I might blog a lot more at: https://brainbox.micro.blog/

Blogging, remains to be seen!

  • 0 posts
  • 18 comments
Joined 1 year ago
Cake day: July 1st, 2025
  • Yeah, that is why I read everything before deciding on installing anything. As a user, if you trust a distro enough to install it directly, you have to be aware of all it’s features first. Yeah, personally I wouldn’t keep an unsupported feature enabled for any length of time, that is just asking for a preventable breakage (though easier to rollback with Bazzite or any distro with Snapshots).

    If it does bother you enough, it might warrant a distro change…I still say it’s not a huge deal. The atomic nature of Bazzite is one of its greatest strengths as there are inherent security advantages. Nothing is absolutely immune to cyberattacks or malware (as there are numerous paths to exploit) but immutable distros are a good and solid thing!

  • It’s unlikely that anyone could really leverage a vulnerability within the Bazzite OS Build updates and sneak something malicious in there…That is the reason why nobody is really talking about it. Some of the measures used are discussed at the link that I put here.

    There is always a slim chance of it happening though; I am sure that people understand the reality of supply chain attacks and know when a malicious actor is determined enough, they’d find a way. If this concerns you so much, wouldn’t it be wiser to use a distro that doesn’t automatically update? One that simply checks for them and allows you to decide if or when you’d like to?

    A healthy amount of caution is just right for anything OS related, but, you seem a bit too worried about it.

  • Nah, nobody is recommending that you just rawdog this freaking script in a terminal, as it is only useful if you make use of the AUR! The golden rule is to evaluate every script that you see, decide if it is a good or bad, personally having read it there aren’t any malicious instructions present in it. ML tools aren’t particularly reliable, can be tricked, deliver false negative or false positive results, and will just dull your mind.

    If one cannot read, evaluate, and come to a decision based on the information available…Arch simply isn’t a good fit for the person in question. That is okay, and there are plenty of options.

    Granted the AUR shouldn’t be as easy to exploit as it was in this instance, it’s a bit too wild west for my liking. There needs to be better protections that prevent such exploitation in the future, as there are clear exploitable weaknesses present with the AUR which need to be closed to prevent something low effort from happening again. The axiomatic truth of the AUR remains true: Do not trust, verify any PKGbuilds before installing software and before every single update.

  • LOL If I want to form community or interact with people within said community, them being decent is a requirement…I didn’t judge the distro as bad. As Artix itself is pretty solid if you look at it in a vacuum, a basic base that could be customized to one’s content. There was the weird choice that they decided to go with Xlibre instead of just Xorg, if you had to go with a depreciated display manager (like wayland is right there, why ignore the diva of the hour). I honestly used a lot of flatpaks, so init/unit script weren’t a huge deal. I only needed to write one and it wasn’t terrible in my personal experience before I switched away. As runit was quite straightforward, uncomplicated, it just did what it said on the tin and nothing extra. It was weird that a goose on the loose like me could do it. ROFL

    The trade-off is worth it given that I think systemd is just doing a little TOO much in my opinion, becoming a lynch pin and critical in too many parts of distros. To the point that certain programs won’t work without it installed, I just feel something is wrong with that. Technically it works for now, but, it could go to shit if systemd decides to pull a mini-Google maneuver.

  • I have that site saved already, I was contemplating trying some of the distros on that list to be honest. Some of them scare me as the set-up is a bit more hands-on than I am currently comfortable with. It would require additional preparation to execute an install. Artix is probably one of the easiest to install, but some of the users say rancid shit all willy-nilly and I didn’t want to be part of their community as a result. Since nobody batted an eye.

  • Yikes, I better look at some alternatives to distros that use Systemd as that contributor really rubbed me the wrong way…He was way TOO eager to comply, much like the corporations like Distro and Microsoft are. KaOS looks like a cool option, but Garuda Linux for the time being has no interest in complying with any age verification laws that are happening overseas in places that don’t have anything to do with their European home base. I’d really have to change from Fedora because…Yeah, they’d be jumping on that Age Verification train in all likelyhood. KaOS would be a fine diversion away from systemd because they plan on switching to dinit (as the devs are experimenting with it as we speak).

  • Given that code was mostly written by hand until the advent of LLM garbage that techbros are trying to make fetch…I think it is possible to do this as both to serve the multiple intended purposes. I would even suggest the teams be named after the women who made computing possible with their efforts throughout the ages! Exceptional members could belong to the Ada Lovelace, Annie Easley, Kathryn Peddrew, and Gladys West groups. As that would both honor these intelligent women who did a lot of hard work to improve computers…It would also ruffle the feathers of techbros. Which is a win-win situation for me.