Just to be clear @the-amnesiac-philospher

I was saying your comment was racy not that I necessarily agreed with you posting it.

;P

@The-Amnesiac-Philospher Ain't that the truth...

A person goes to scottland and notices a huge jail with lots of water in the middle and asks someone why there is so much?

The person says, we need it to keep the monster happy, or it won't be locked up anymore. You know, the lock-ness

A donkey, a mob boss and a mad man all walk into a bar and the bartender says, former president what can I get for you?

@quickfur your last one was lame. But I have to admit, most of yours were pretty good in a decent punny way.

@LU344928 so... a  good summary for me from that, is that... its not just google that is not your friend, but also bloomberg and other corporate nonsense that is similar or worse.

Then again, I kind of guessed that long time ago...

@glennW the coreboot + intel me disabled + ath9k wifi card thoughts should be more than sufficient for most.

The ath9k wifi card is if you don't want to depend on non-free software blobs in particular.

@the-amnesiac-philospher

Yeah... my answer originally for an apple a day keeps the doctor away was similar.

"All you have to do is throw them hard enough at him"

Always remember not to mix debian repos with ubuntu repos, or similar. Repos that only have one or the other, are a different case if they are from unofficial repos, but still be careful of what depends get pulled in.

@fanderal

Interesting, didnt 'know that intel ucode did that. Although there is a better option still, use a more libre bios, such as coreboot and have intel me disabled. You need to buy from an OEM though who would disable it for you though.

Otherwise, you are on your own regarding intel me.

Securing a computer requires three things to my knowledge:

Using as few blobs as possible, wifi included preferably meaning ath9k or similar

Coreboot + disabled me or similar

A distro that doesn't have blobs installed and refusing proprietary software that does remote dialing which means basically most of it.

Technically, emulators do use proprietary software, but they don't escape their sandboxes much if at all.

I currently use iceweasel-uxp + ematrix, httpsalways, httpsinquirer, modifyhttpresponse (blocks some useragentsniffers!) a custom ublock origin legacy, getemall, greasemonkey fork and other minor stuff.  icedove-uxp and no other addons which means no google accounts!

Using a firefox equivalent, with arkenfox config and privacy badger, ublock origin and some script blocker is wise too though if you don't use the above.

The rest? Idk...

I still been using Hyperbola. They were struggling with some issue, but I think they are getting back on track now.

Devuan however, I have on my other SSD for disk cloning.

Having two SSDs on a computer can be wise sometimes.

@pcalvert

He doesn't really make it clear that he is talking about the kernel and also, windows security features of being locked down are largely meaningless due to being proprietary and it having backdoors.

Linux can be hardened if you know how, however. firejail is one way. I don't understand the criticisms about firejail either. Besides, windows executables are marked as executable once downloaded. The same is not true for linux. Which is why windows gets malware easily... so yeah...

@GlennW fun fact, btw, minus the fun.

But seriously, that github is mocked on reddit and I have trolled them as well in the past.

I did so making a fake issue on github.

LOL!

I wonder how many other social media websites make fun of them.

They must think people are stupid to why corporations even are funding "open source"

Preferably libre software because its open source minus the possibility of proprietary with a huge focus on freedom.