• 6 Posts
  • 220 Comments
Joined 1 year ago
cake
Cake day: July 8th, 2023

help-circle





  • That is absolutely not a slow laptop. If it takes a long time to boot there must be something wrong. I have a similar system that takes about ten seconds to boot.

    Anyways, like others said, LVM with LUKS is the simplest. It uses your hardware to quickly decrypt the drive on boot. While it is running access to your data is protected by your login manager or lock screen.









  • At it’s simplest you just start the programs with Wine. So when you have Wine installed you can just select to run an exe file with Wine. By itself it will install them to a hidden folder where a mock-Windows-folderstructure is created and add entries to your start-menu equivalent.

    Most people use helper apps that add a separate mock-Windows environment for every program. Makes it easier to manage them, especially if one program needs different settings from another to work.

    Bottles is such a helper for general programs. Heroic is mostly for GOG and Epic games. Lutris generally for games. And Steam uses it’s own Wine version Proton automatically for verified games and you can trivially configure it to automatically use it for every Windows game.

    Look at https://protondb.com for games and https://appdb.winehq.org/ for general programs.



  • Report them separately and clearly. Don’t hide by omission the fact that they are security bugs (common practice in Linux apparently). Coordinate with major vendors how to push fixes.

    That’s exactly how it works. Vulnerability found, reported and fixed in secret and when everything is in place everyone is informed to update.

    They are generally more important than other bugs so you should put more effort into detecting and preventing them. E.g. using fuzzing, sandboxing, formal methods, safer languages, safety annotations, etc.

    I don’t want to sound condescending, but what do you think all this talk about Rust and AI tools is about?

    In the end you want to prevent all bugs from happening. Some filesystem bug randomly deleting data can be just as catastrophic as remote code execution.

    And if some feature turns out to be a gaping security hole you’ll quickly see it turn into a bug. That’s what the quote is about. Every security issue is a bug so it has to be handled like a bug and squashed.

    Priority in bugs exist independent of them being security related or something else. A critical bug will always get the highest priority fix.