chevy9294 @ chevy9294 @monero.town

Posts

20

Comments

234

Joined

2 yr. ago

Thank you very much for this detailed explanation! Looks like kptr and kexec are already disabled and enabled randomized virtual memory address in the hardened kernel. I will check for ebpf. Security certs seem interesting, I will defenetly look into them.

You can do that with some search engines like Kagi.

Voyager is way more popular, but I don't like it's iOS-like UI, so I went with Thunder

You should keep your phone and install GrapheneOS. It's not hard, you just have to reboot your phone and press few clicks in your browser. You can install Google Play and every Google service should work (except Android Auto and you can't use NFC with GPay).

I have -j12

You clearly don't have Discord.

*only Serbia likes this

Imagine how many download buttons would be if Github had ads.

Bitwarden can be also self-hosted and it's FOSS. It's convinient to have access to all your passwords on all your devices. This can probably also be done with keepass, but you need another app to sync the database.

That could be your browser saving html instead of showing it.

I'm running self compiled hardened kernel and I enabled kernel lockdown mode. Before that it was disabled. Maybe Arch team disabled it.

Now I've installed it and Librewolf works nornally. Is that normal or is malloc not working or is Librewolf compiled with hardened malloc?

I've heard about googerteller and I never thought someone will use it (except to try it)

Thank you for the list! Do you maybe know where can I find explanations what does each option do? I know only half of them and I already use some of them.

Actually it's not (but it was) a fork of OpenBSD's allocator, but rewrite of a fork. They wanted too much changes so they decided to rewrite it from scratch.

I love Gnome's look, but this is better.

That would be too big performance hit

I will try hardened_malloc, I already use it on my phone. I have GrapheneOS.

On laptop with Ryzen 5 5500U (12 threads) it takes 50 minutes and on desktop with Ryzen 7 3700X (16 threads) it takes 20 minutes. I use all threads to compile the kernel.

It compiles way waster with Gentoo, because it has minimal config. I used the default config from Arch repos and modified it. It's full of unneeded drivers, but I'm scared of disabling them. I already disabled wrong drivers a few times and had to use different kernel to boot.

I will try it out, thank you :)