• 0 Posts
  • 19 Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle





  • If Mint works for you, just stick with it. No need to try a different distribution to compare. You’ll know when you need it.

    I would only go to Fedora if you need it. For example newer drivers (kernel, mesa). Don’t go change the kernel and/or mesa on a distribution, probably better to switch at that point. Or if you need KDE or GNOME for some reason. Wayland is disabled in Mint by default, but can be enabled. It’s been over a year IIRC since they added experimental Wayland support so it may be fine by now.

    Differences between Linux distributions are exaggerated.


  • F04118F@feddit.nltoLinux@lemmy.mlAnother help me choose a distro
    link
    fedilink
    arrow-up
    16
    arrow-down
    1
    ·
    5 months ago

    Mint is a great choice, it is very stable, and it really holds your hand via the Software Center.

    However, stable also means old: it does not support the latest hardware.

    If you have hardware that released after (rough estimate) April 2024, consider something based on Fedora, such as Bazzite, instead. It comes with modern drivers and should support modern hardware much better.


  • keep it on cache since I do a lot of code compilation, but I will usually switch it to frequency for gaming and stuff.

    Isn’t gaming the most cache-heavy CPU workload there is? The X3D CPUs have consistently topped gaming benchmarks, even outperforming much more modern CPUs that lack 3D cache.

    I’d sooner do it the other way around: frequency for compiling, rendering, transcoding, etc. Cache for gaming!









  • You keep using the word “maintenance”. All I’m worried about is not installing any security patches for months.

    The problem that I tried to highlight with my “cherry picking” is:

    • Running a machine with open vulnerabilities for which patches exist also “paints a target on your back”: even if your data is worthless, you are essentially offering free cloud compute.
    • But mostly, a single compromised machine can be an entrypoint towards your entire home network.

    So unless you have separated this Orange Pi into its own VLAN or done some other advanced router magic, the Orange Pi can reach, and thus more easily attack all your other devices on the network.

    Unless you treat your entire home network as untrusted and have everything shut off on the computers where you do keep private data, the Orange Pi will still be a security risk to your entire home network, regardless of what can be found on the little machine itself.


  • No it is

    https://www.pandasecurity.com/en/mediacenter/consequences-not-applying-patches/

    And:

    You’re allowing for more attack vectors that would not be there if the system were to be patched. Depending on the severity of the vulnerability, this can result in something like crashes or something as bad as remote code execution, which means attackers can essentially do whatever they want with the pwned machine, such as dropping malware and such. If you wanna try this in action, just spin up a old EOL Windows machine and throw a bunch of metasploit payloads at it and see what you can get.

    While nothing sensitive may be going to or on the machine (which may seem to be the case but rarely is the case), this acts as an initial foothold in your environment and can be used as a jumpbox of sorts for the attacker to enumerate the rest of your network.

    And:

    Not having vulnerability fixes that are already public. Once a patch/update is released, it inherently exposes to a wider audience that a vulnerability exists (assuming we’re only talking about security updates). That then sets a target on all devices running that software that they are vulnerable until updated.

    There’s a reason after windows Patch Tuesday there is Exploit Wednesday.

    Yes, a computer with vulnerabilities can allow access to others on the network. That’s what it means to step through a network. If computer A is compromised, computer B doesn’t know that so it will still have the same permissions as pre-compromise. If computer A was allowed admin access to computer B, now there are 2 compromised computers.

    From https://www.reddit.com/r/cybersecurity/comments/18nt1o2/for_individuals_what_are_the_actual_security/