• 0 Posts
  • 7 Comments
Joined 6 months ago
cake
Cake day: June 12th, 2025

help-circle

  • So, it’s a way for applications to make themselves more hardened against exploitation? Was really confused on first reading the title, but that makes some sense. Applications declare what permissions they need, up-front, so any exploits during normal operation can only operate under that umbrella. Unless the startup processes of the application itself are exploited.


  • DDoS stands for Distributed Denial of Service.

    Denial of Service is the concept of overwhelming a system (digital/computer or otherwise) with bogus usage, to the point that legitimate users can no longer access it. Imagine submitting thousands of FOIA requests to your local city government. Legally, they have to respond to them, even if it’s to reject them as bogus. So, if anyone else submits one, it’s just gonna get buried in the pile. Maybe they get to it, eventually, or maybe it actually just gets lost, or even accidentally thrown out when they decide to just throw away all the bogus ones.

    Now, if you were to actuallly do this, your city government would probably just start binning all your requests, immediately, when they realize you’re not submitting them in good faith. Hell, maybe they even get you banned from the building, for harassment. That’s where “Distributed” comes into play. To combat this, what you’d do is get a whole bunch of your friends (you’ve got thousands of friends willing to waste time dealing with the government, right?) to each submit just one or two applications. They can no longer just throw them out based on the name of the submitter, they have to again spend more time inspecting each one, to see if it’s legit, and then process it, if it is. MUCH tougher to defend against.


  • Are you me and your friend is also me?

    This sounds a HELL of a lot like my scenario. I swapped to Bazzite from Mint on account of NVidia/gaming issues, and IMMEDIATELY noticed a big improvement, but I’ve had a handful of issues dealing with the flatpak of JetBrains Rider, and Firefox for that matter.

    One thing I figured out early was to configure permissions to allow Rider to access the filesystem outside of its sandbox. That seems to be not something that flatpaks are setup for, by default.

    More recently, I found that flatpak sandboxes don’t inherit PATH or other global system variables. Which makes sense, but I haven’t figured out the solution yet.

    I would definitely take a shot at another KDE distro, cause I also have liked KDE/Plasma (that’s what Bazzite runs, right?) more than I did Cinnamon, but I don’t know anything about what Bazzite does to get great NVidia performance for gaming, or how I might replicate it on a non-immutable distro.