So how far does this mindset go to preempt a perceived security risk, not an actual risk? Lets start ripping build features out of xorg that might seem superfluous shall we?

I dont understand the reasoning as the password manager has features that directly relate to safe password storage and usage, nothing more nothing less. And on another note, from what i can gather is there could be two packages in the pipeline, one full one minimal. So why bother when the program itself has these build options/features that have been accused of having security risks as opt in not opt out and are turned off by default. On the one hand the full keepassxc is le bad but they will still ship it but have a minimal debian built version?? It kind of reminds me of something microsoft would do.

If there is package i would keep around it would be seatd over elogind. Seatd makes it possible to run graphics/input as a non root user. How do you login to openbox, using startx? The old way of starting x without a login manager or elogind was running X as root afaik?

Edit: more info here: https://sr.ht/~kennylevinsen/seatd/

Do you get audio on other devices, like a speaker or plug in earphones if you have them?

I had a similar issue with a xbox bluetooth gamepad and had to configure the main config file like so to keep a stable bluetooth connection.
Do note that below are my edits for the xbox gamepad and I have only copied in those edits not the entire main.conf file. It might be worth comparing the file /etc/bluetooth/main.conf from ubuntu for your bluetooth headphones and seeing if there are any differences.

# Default device class. Only the major and minor device class bits are
# considered. Defaults to '0x000000'.
#Class = 0x000100
Class = 0x000100

# Permanently enables the Fast Connectable setting for adapters that
# support it. When enabled other devices can connect faster to us,
# however the tradeoff is increased power consumptions. This feature
# will fully work only on kernel version 4.1 and newer. Defaults to
# 'false'.
#FastConnectable = false
FastConnectable = true

# - off: Local privacy disabled.
# - limited-device: Apply Limited Discoverable Mode to advertising, which
# follows the same policy as to BR/EDR that publishes the identity address when
# discoverable, and Device Privacy Mode for scanning.
#
# Defaults to "off"
#Privacy = off
Privacy = device

# Specify the policy to the JUST-WORKS repairing initiated by peer
# Possible values: "never", "confirm", "always"
# Defaults to "never"
#JustWorksRepairing = never
JustWorksRepairing = always

Perhaps admin might sticky this one instead of having more of these threads pop up, at least until this category 5 hurricane of an exploit is fully fleshed out and realized. No disrespect siva but this is about the 5th thread on this subject.

fixed that for you!

Got me a new toy

Graphics seem to be working ok thanks to non-free intel blobs.

I haven't really used the forum search function that much, but the times i have used it was ok. But in regards to 3rd party search engines, the duck (duckduckgo) is pretty good and a bit more comprehensively readable searching this way in my opinion.

For example this one line just searches dev1galaxy only, for the keyword 'boot'.

boot site:dev1galaxy.org

Or use the ducks bang feature.
!dev1galaxy boot

It was an empty environment variable set by the fff script because im using trash-cli i left it blank but with a space. In the script it calls mkdir -p $FFF_TRASH and i suppose if left empty with a space it creates the folder every time the script is run. Sorry for the noise, solved.

Thanks siva, ill have a look into those options, im hoping its nothing to do with malware.

aluma, its in the home folder. I deleted it and reboot today and same story. It has the same rights my user has for all files in home, that being unix file permission 755.

~ $ ls -bgiQu 
1049631 drwxr-xr-x 2 soren 4.0K Dec 19 18:38 " "

Ive learnt quite a bit from Luke, only just found out about mental outlaw. Im not aware of there political leanings nor do i care either.
Another tuber ive learnt quite a bit from is Gavin Freeborn, really good no nonsense content.
https://www.youtube.com/@GavinFreeborn