Why kill anything to begin with? IMO better to error or slow down.

What is family link? Active directory control for Android?

Not Authentik, something home made. Wireguard is unfortunately open for the whole world but as far as I know there has not been any security whole in it. But Wireguard is at least a security product. It is not about hiding my public IP. It is about closing the attack surface. Bots cant connect to my home server at all. This means zero days vun cant be used. Yes, Oracle server can be compromises but it itself cant connect to my home server and it cannot authenticate any user as it does not have my phone to do that. It just generate an internal adress that is only accessible when connected with Wireguard. So only those I manually add have a chance and I will notice if the source IP is wrong or if it was not generated by that server as I use public key that is just base64 encoded url

Wireguard VPN. I actually have a public hosted Oracle server that when authentic opens port 443 for that source IP temporary so no VPN will be needed. Computer visit free pub Oracle VM. Android Phone scan QR, start Wireguard and auth that user. Computer can now reach my home server on port 443 and 22 for 24 hours as the source IP is allowed.

I do this instead of crowdsec etc. I expect zero days vulnerabilities that someone will utilize so dont trust nginx and ssh to be wide open.

I am just trying to understand where the problem is. To me it looks like a way to lure Windows users to Linux. Yes, we all have different opinions but that is exactly what all Linux distros are for. Since Omarchy is open source I don’t see a big problem. It is not backed by Google or someone else so there is no monopol here that cant be won.

I just see it as a experiment, showcase, of what can be done and what people actually want. That other distributions can copy and take the good parts from.

This makes users try Omarchy. Users learn about the author and move to a different Linux distribution. All good?

Sorry. Autocomplete on phone triggered.

I think new machines are bought for school start in august. They come with Windows preinstalled. However, it just take a little time until they start to game and realize they dont get those drops if they chose any other OS.

It is sad but true. Microsoft is responsible for this. Lets hope it brings some good as people leave.

Maybe federated git with Forgejo is the solution.

Sounds like a loop hole to run WSL and let compliance only check the host OS and not the WSL OS

I have been thinking about it until I realize that nginx still can have zero days vulnerabilities that could be even in the tls layer or so and decided to actually close the port completely in the Firewall and just run Wireguard on devices. And as fallback I have external program that have a webbserver with qr code with link and ip query encrypted so when i scan it on smartphone i have to follow the link to internal server that i only can access with Wireguard so then only that public ip is then added to my Firewall rules temporary.

I recent noticed my drive is dying but it cost about the same as I bought it for, 12 years ago.

What do you use for desktop?

I wonder why not more people choose XMPP. What do you think?

I have never understood why there is no protocol that allows for multi-master node setup(if a message is written to one, then queue to write to the second one and ignore timestamp missmatchning and conflict resolution(It does not have to be perfect) - matrix put too much effort into this IMO).

For family i use Signal. My coworkers use IRC and I have it setup in link-mode for multi master support(but IRC does not have new features like send image, thread, reactions, emoji, text-styling, audio/video calls). Using unrealircd. Neat when the local city network is up but the fiber connection from the city network to the internet is down so I can still write to some friends, or dont care about uptime on my server since they fallback to the second, free, Oracle VM.

I think the problem is also that chat / communication protocol change over time. The user base is lost with every new protocol. And it might be some users that want to stay with the old protocol. This you need a bridge between all protocols, and many will lose some functionality in the transition.

Yes, that is the hard part. But it can be done. Geoip blocking like only allow your country - blocking every China or Russian user etc. If you are selfhosting at home and worry about your SSH access, then you can do a lot of things to block then early. It is all about authentication. Lets say you require VPN access in - example Wireguard. You could require access only through somebody else, like Cloud flare tunnel. You could also do “port knocking” but that is not encrypted. You could require the user first has to be authenticated somewhere else, like require first Microsoft login and only then your ip is allowed.

I believe it is a good start with crowdsec but feels like it gives false protection. The blocking only happens after they have done a couple of attempts and not before.

I wonder if the move to Wayland will fix this.

Not on the kernel itself, just a minor bug that got fixed in the next release but could still choose the older kernel until then. OOM sounds like a bad idea when running out of memory - let the user chose what program to stop and handle it gracefully. Picking random process is bad. Others? DRM video at 1080p does not work on raspberry pi and it is not Linux fault really. Transition between X11 and Wayland took a long time to happen. Needed it earlier. Like before Ubuntu MIR. What impressed me is Linux and live cd. It is golden. Be able to surf the web while installing or just troubleshooting. Tiling Windows Manager and you can do whatever you want and customization.

It looks like Windows computers is going to unknown. So they are just bad at detecting OS.