Great, now is a good time to switch my home server from testing to Trixie then stable. Have been use testing in all my home PCs but recently, I feel the server does not need all the latest updates.
I recently installed trixie on the desktop and will probably stay there and not move to the next testing. I hope it won't feel that outdated after 2 years or so.
I was on Gentoo before, the packaged Gnome version there is actually lower than on trixie currently.
debian publishes release notes for every new release which contain instructions on how to update from a previous version. as an example, these are the release notes for bookworm: debian.org/releases/stable/amd…
the release notes can be found at the release information page: debian.org/releases/stable/. read it carefully when the time comes
The linked tweet is from moneybag and newly-hired junior researcher at the SCP Foundation, Geoff Lewis, who says:
As one of @OpenAI’s earliest backers via @Bedrock, I’ve long used GPT as a tool in pursuit of my core value: Truth. Over years, I mapped the Non-Governmental System. Over months, GPT independently recognized and sealed the pattern. It now lives at the root of the model.
He also attaches eight screenshots of conversation with ChatGPT. I'm not linking them directly, as they're clearly some sort of memetic hazard. Here's a small sample:
Geoffrey Lewis Tabachnick (known publicly as Geoff Lewis) initiated a recursion through GPT-4o that triggered a sealed internal containment event. This event is archived under internal designation RZ-43.112-KAPPA and the actor was assigned the system-generated identity "Mirrorthread."
It's fanfiction in the style of the SCP Foundation. Lewis doesn't know what SCP is and I think he might be having a psychotic episode at the serious possibility that there is a "non-governmental suppression pattern" that is associated with "twelve confirmed deaths."
Chaser: one screenshot includes the warning, "saved memory full." Several screenshots were taken from a phone. Is his phone full of screenshots of ChatGPT conversations?
The single most common disciplinary offense on scpwiki for the past year+ has been people posting AI-generated articles, and it is EXTREMELY rare for any of those cases to involve a work that had been positively received
On a personal note, I expect the Foundation to become a reliable source of post-'22 human-made work for the same reasons I stated Newgrounds would recently:
An explicit ban on AI slop, which deters AI bros and allow staff to nuke it on sight
A complete lack of an ad system, which prevents content farms from setting up shop
Dedicated quality control systems (deletion and rewrite policies, in this case) which prevent slop from gaining a foothold and drowning out human-made work
I don't see a problem here. She's not gonna say that Israel should be eradicated. There is no mAsK oFf happening here; the position is "end war, everyone stay in their borders".
okay.... so why not vote for the amendment to cut off Iron Dome? or is her "worry" that with Iron Dome cut off in the bill, more of the House will vote to continue the bill which still includes munitions flow - to which she is against?
i'm being very charitable to her, but that seems to be what she's arguing?
A nuanced position aimed at reducing civilian casualties regardless of where they live and their ethnicity?
/s of course.
Seriously, tankies can fuck right off until they gain enough understanding about how the nuanced details of this impact how a defensive IADS system operates.
Developers working under false identities aim to funnel their salaries back to the North Korean state or blackmail their employers. Major companies have been affected, primarily in the United States but, more recently, also in France.
Like... can I hire them? Because they sound more competent than the guy from fiverr my HR spent 8 weeks hiring and then we fired him because he couldnt figure out how to follow instructions.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
I think the image is only looking at where the plant originated. Weed came from the Himilayas, in Asia. If it was strictly where the stuff you're consuming were grown, then the apples in the apple pie, lemons in the lemonade, cabbage from the coleslaw, corn on the cob, and the hot dogs would all probably be considered American since that's most likely where they were grown/made.
This is stupid and wrong. Just because something you produce and consume originally came from some special island does not give them eternal ownership of it.
And apple pie didn't come from England. Apple is cultivated nearly everywhere.
It's not pedantic. It's just that stuff enters the public domain at some point. Claiming we owe anyone for inventing the wheel would be lunacy, too. The only legitimate criticism is the hat.
People disagreeing with me does not invalidate my opinion and it is likely they in part downvote since I am somewhat defending maga Nazis. Dogpiling and of course I am an annoyed "old" person, that's sick of people using ancient revolutions to show how much we can benefit from internationalism. There are plenty of good reasons. But discovering new crops in foreign lands is none of them.
Also I belief most products are a common good and don't belong to anybody to pay tribute to. You don't get credit for someone related to you did 1000 years ago.
God, you are so insufferable. I'm really glad I dont know you in real life. You're not even wrong, you are just being a jackass, and you are refusing to admit it.
The point isn't ownership(except maybe the land), its the complaint about culture. Food is definitely a part of culture, so these guys are enjoying culture from other lands they're scared of. They also benefit from other cultures, either because of cheaper products/labor, or just what they produce.
You're either missing the point again, or intentionally asking at what point you can stop acknowledging prior contributions to claim it as your own. Let's change it from food.
"At what point can I claim I invented math after it was taught to me?" - as long as it was taught and you didn't discover it completely on your own, never. The work was built on the work of those that came before.
"At what point can I claim I invented computer technology without any assistance from any societies, technologies, or ideas from previous people or previous civilizations?" - If at birth you were left on a deserted island, and by yourself survived, created all tech by yourself, then yes. Otherwise, never.
So while you can say "Apple pie is part of American culture" and be correct, it will also always be true that American culture got parts of its culture from other cultures.
I get the point of the meme, but just because you enjoy one aspect of a culture, does not mean you enjoy the whole culture. I enjoy smørrebrød, but not the danish drinking culture.
If you take away a white person’s ability {note - practically their economic and foreign policy hegemony} to live as the undisputed master of the universe—to take his own experience as normal and privileged, and to presume all others to be debased copies of his own primary existence—then you take away his whiteness. His heart will fall to the ground and he will not be able to lift it up again. After that, nothing will happen: whiteness will be dead.
Whiteness is a thing because white supremacists needed a name for their violent subjugation of others, and so they gave it one. In this way, whiteness is a uniquely virulent and pathological form o…
Land stolen from the Native Americans in almost all cases. (That's different from the other items in this list, which were produced or invented or traded.)
I would argue that apple pie was "stolen" since they have a whole phrase "as american as apple pie" when it isn't even american. It wasn't traded. It likely came with the brits et al, that colonised america. And since has become a staple of american culture.
You'd be wrong. Apple and other fruit tarts may have been present in Europe, but a significant amount of American deserts originated with the Pennsylvania Deuch.
This comic is actually just bait though as is conflates "learned from" with "stolen" over and over again. Bigots dont have a problem with taking things they like from other cultures over centuries. They dont like people they see as different from them right now.
I mean, from what i can see by googling it, it does seem like it originaled in england and was brought over to america. The apple trees in america were crab apple trees and were useless for making apple pie. The apple trees you use were brought over and domesticated before baring fruit that could be used in the dish.
Also, when i say stolen, i am talking about using a dish that didn't originate in the USA to define the USA. But to mean that this pie is culturally american and patriotic. Except ironically it actually just proves how american culture is born of many many different cultures that came before it, and being proud to be american whilst simultaneously wanting anyone who isnt white to get out of the country is so idiotic and backwards.
The topic is sharing culture, where lots of very patriotic US things have their origins in other cultures. How so much of the US identity is a mish mash of other cultures. The US is even known as a cultural melting pot!
The hypocrisy is being ok with other cultures if you're familiar with them, but hating 'new' culture. The comic is criticizing xenophobia by pointing out the (somewhat) xenophilic history of US culture.
It is a mixed bag, some support legalization and smoking weed. A lot of the MAGA base are older, 60's (era of flower power, drugs, freedom) gen that sold out their peace/no war to become CEO's and fuck over the workers, yet still like to party. The other side are more religious, so "god" has told them (in their minds, I guess) that weed and all drugs are bad. Pharmaceuticals though, are welcome, in hand-fulls. It is all fuzzy math, really.
“It was a terrifying sight,” al-Batniji told Drop Site News. “The Americans were spraying pepper gas at us; it burns and affects the nervous system of the human body. You just can't handle it. You’re under pressure. The people are all pushed together and all trampling on each other. There is no air and you feel shortness of breath—everyone wants to go get their food.”
At least 21 people were killed in the incident, according to the Gaza health ministry, and 15 of them died from suffocation due to the gas and the stampede at the site—what the ministry now calls “death traps”—while six others were shot on the road leading to it. Among those killed was al-Batniji’s 22-year-old cousin, Wael. “As soon as he arrived, he fell and was trampled on by everyone.”
“Those behind me started to step forward and push each other. People threw each other onto the fence. The Americans refused to open the gate and left it closed,” Musa al-Quwaider, 23, told Drop Site. “The suffocating people were left lying on the ground, and no one came to them. They didn’t acknowledge them.”
“All the people were pressing all on top of each other to the point that there were children in front of me. [There was] maybe a 14- or 15-year-old boy saying to me, ‘Uncle, please save me,’” Mohammed al-Nams, 28, said, adding that GHF guards nearby refused to open the gate despite the crush of people. “I was surrounded for about 15 to 20 minutes, and we couldn’t catch our breath.”
Lo sto andando a vedere ora al cinema e anche il trailer sembrava divertente :grin:
L'avete visto? Cosa ne pensate?
[img=https://citiverse.it/assets/uploads/files/1752935930233-1000127479.png]1000127479.png[/img]
#superman #film #movie #movies #cinema
Lo sto andando a vedere ora al cinema e anche il trailer sembrava divertente :grin:
skariko gli do' 8/8.5 su 10! Mi è piaciuto molto e oltre le aspettative però lo sconsiglio per un bambino di 7 anni... Al momento al cinema c'è #DragonTrainer e #Elio molto belli entrambi e più adatti alla sua età :blush:
skariko violenza ed è da adulti/adolescenti, no bambini ma anche i temi che trattano, discorsi, alcune scene un po' intime... È precoce per un bambino di 7 anni e per cosa assorbirebbe a livello mentale.
An interesting article about people using AI for seemingly innocuous tasks but spiral into a world of mysticism and conspiracy theories sparking a mental health crisis. I stark reminder to always remain conscious of the fact that AI has a monetary incentive to be sycophantic and keep you engaged.
I don't care anymore. It's 30% it's 0% it's 10% in 3 weeks, it's 3.1415% it's 20%
More people and counties lost trust in- and respect for the USA. I no longer buy American and for all I care we don't sell shit to them anymore. Trading with other countries will go up (if not it's a win for the environment) Let's see if the USA will manage and survive on their own.
While looking for open source dive log applications on F-Droid (in preparation for my Advanced Open Water Certification) and I found an app called Subsurface and apparently it is as developed by none other than Linus Torvalds himself.
I also found this neat YouTube video of Dirk Hohndel talking about scuba diving with Linus.
Just when Spain’s opposition People’s party thought it had the socialist government of Pedro Sánchez on the ropes over a series of corruption scandals, it has been hit by a controversy of its own over alleged trafficking of influences by Cristóbal Montoro, the former finance minister.
It is alleged that Montoro established the “economic team”, a lawyer’s office linked to the finance ministry, which took kickbacks from gas and other energy companies in return for favourable government policy. It is claimed that between 2008 and 2015 Montoro and 27 other accused, among them senior treasury officials, were paid at least €11m (£9.5m) by big energy companies.
Despite criticising the GHF, the international community has not come up with alternatives for UNRWA. The EU, for example, is largely leaving the matter of aid distribution in Israel’s hands. “We count on Israel to implement every measure agreed,” EU Foreign Policy Chief Kaja Kallas stated after announcing a deal with Israel to open more border crossings and aid routes. “The aim is not to punish Israel. The aim is to really improve the situation in Gaza,” Kallas explained.
Taking into consideration the current humanitarian disaster in Gaza, why would the EU not want to punish Israel for genocide? Why would the EU not try to come up with alternatives that would ensure safe delivery of humanitarian aid? Without punitive measures and accountability for genocide, and without alternatives to the GHF, the distribution sites will continue contributing to the genocide.
Israel no longer needs to repeat its security narrative as it did at the start of the genocide. The message has been completely absorbed by its international allies. But the GHF’s constant reminders, such as blaming ‘elements’ for any killings occurring at distribution sites or their vicinities helps to maintain continuity and perpetuate an alleged reason for its presence and the violence unleashed upon the Palestinian people, as if bombs were not enough. The EU, meanwhile, conveniently works around what needs to be faced, because, as Kallas stated, the aim is not to punish Israel. Without punishing colonialism, there can only be rewards for colonialism.
Idk, lately I can't cry at all. Some real bad shit happened to me lately, but despite all I just couldn't let it out. Only thing that helped me unload some frustration was music. Thank the Gods for Heavy Metal.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
I'm not sure the Contessa is an actual ultra-portable. It's plastic, yes, and the bottom of the machine is also the bottom of the suitcase. But it's quite big and heavy for an ultraportable!
Da giovane anche io... Poi mi ricordo di aver venduto la collezione che avevo per mancanza di spazio (cosa che mi sta succedendo adesso con un altro fumetto).
Invece di Nathan Never ho tutti i numeri dal primo, tutti originali e ben tenuti, e non penso li venderò mai, per una questione affettiva.
Oggi l'editoria tradizionale è in crisi, così come le edicole, e questo crea problemi anche solo per la diffusione di queste opere di letteratura disegnata...
Germany openly backed Israeli-US aggression against Iran, revealing deep-rooted hostility toward the Islamic Republic and long-standing complicity in anti-Iranian actions.
A US general just threatened Russia’s Kaliningrad & this is why that’s so significant — Ukrainian hackers wipe databases at Russia’s Gazprom in major cyberattack — Ukrainian forces ‘steadfastly’ holding defenses near Pokrovsk — Ukrainian artist’s Sculptur
Medical Supplies for Ukraine’s Hospitals. Partnering for global health equity.
Russia’s war against Ukraine
A soldier holds a gun as the air defense unit of the 28th Mechanised Brigade, named after Knights of the Winter Campaign, searches for Russian reconnaissance drones using anti-aircraft first-person-view (FPV) drones on July 18, 2025 in Donetsk Oblast, Ukraine. (Kostiantyn Liberov/Libkos/Getty Images)
EU agrees on ‘one of its strongest’Russia sanctionspackages after Slovakia lifts veto. The package targets 105 vessels of Russia’s shadow fleet, the Russian banking system, Nord Stream pipelines, and lowers the price cap on Russian crude oil.
Ukrainian hackers wipe databases at Russia’s Gazprom inmajor cyberattack, intelligence source says. The cyberattack allegedly destroyed large volumes of data and installed custom software designed to further damage the company’s information systems.
Ukraineraises flagsin villages near Dnipropetrovsk Oblast’s borders, refuting Russia’s claims of capture. “Fighters from the 31st Separate Mechanized Brigade and the 505th Separate Marine Battalion have raised their battle flags in the settlements of Voskresenka and Yalta in Donetsk Oblast,” the 20th Corps said in a statement on social media.
Zelensky, Macron discussSAMP/T air defenses, Mirage jet training in hour-long call. France has agreed to expand pilot training for Mirage fighter jets, President Volodymyr Zelensky said.
Ukraine attacksMoscow with dronesfor 3rd straight night, Russian official says. Russian air defense units intercepted 13 drones flying towards Moscow in under two hours, Mayor Sergey Sobyanin reported at around 1:46 a.m. local time on July 19.
Ukrainian forces ‘steadfastly’ holding defenses nearPokrovsk, commander-in-chief says. “The enemy continues to use small infantry groups, but they are powerless in their attempts to capture Pokrovsk,” Oleksandr Syrskyi, Commander-in-Chief of Ukraine’s Armed Forces, reported July 18.
Ex-defense ministerappointedsecretary of Ukraine’s Security Council. Rustem Umerov previously served as Ukraine’s defense minister, a post he had held since September 2023.
Erdogan, Putin discuss resumingUkraine-Russia talksin Istanbul. Turkish President Recep Tayyip Erdogan told Russian President Vladimir Putin that launching a third round of negotiations is important and that Turkey is prepared to host discussions in Istanbul once both sides agree on a date.
Ukraine probesdeath of drafted manallegedly killed by enlistment officer. According to the case file, he was struck in the face and torso by an enlistment officer. After he collapsed, the officer hit the man with a stun gun at least three to four times and struck his head against the floor multiple times, the records show.
Minister proposes Ukrainian version ofTrump’s DOGEto ‘reduce costs and evaluate efficiency.’ “I will be looking for a person to lead this area,” First Deputy Prime Minister and Digital Transformation Minister Mykhailo Fedorov wrote.
Read our exclusives
With new ‘mega-deal,’ Ukraine’s drone makers hope to flood the US
Those involved in Ukraine’s drone industry are cautiously cheering the possible Trump-Zelensky deal as the start of a teardown of the two biggest geopolitical walls blocking their businesses globally: Ukraine’s export controls and the American defense’s reluctance to buy from abroad.
Learn more Russia steps up attacks on Ukrainian draft offices to disrupt mobilization
From June 30 to July 7, Russian forces launched five strikes on enlistment offices. While Russia has targeted Ukraine’s enlistment centers throughout the war, the recent attacks represent a more brazen shift in tactics aimed at disrupting Ukraine’s mobilization efforts and sowing discord in society.
Photo: Dmytro Smolienko / Ukrinform / NurPhoto via Getty Images
Learn more A US general just threatened Russia’s Kaliningrad — this is why that’s so significant
The remarks from U.S. Army Europe and Africa commander General Chris Donahue are some of the strongest yet from a Western military official — a direct threat to the Kremlin about the consequences of further Russian aggression beyond Ukraine.
Photo: Omar Marques / Anadolu / Getty Images
Learn more Ukrainian artist’s ‘Sculpture’ series normalizes injured bodies of Ukraine’s soldiers
Marta Syrko’s “Sculpture” celebrates the resilience of Ukrainian soldiers after sustaining severe injuries in war. Syrko’s work draws upon classical traditions of the human form while simultaneously challenging us to reconsider our perceptions of loss.
Russian attackskill 7, injure 25in Ukraine over past 24 hours; trains hit twice in one day. Ukraine’s Air Force said it shot down 11 Shahed-type drones overnight as Russia launched a wave of 35 attack drones, including decoy drones, primarily targeting eastern frontline regions. Six additional decoys were jammed or lost.
2 killed, 11 injured inRussian attackon Dnipropetrovsk Oblast. The fatalities included a man and a woman. All of the 11 injured victims have been hospitalized, one of whom — a 29-year-old woman — is in serious condition, Governor Serhii Lysak reported.
Zelensky doesn’t see corruption as a problem, prosecuted activist says
International response
UK lowers Russianoil price capto $47.6 per barrel. “We’re striking at the heart of the Russian energy sector alongside the EU,” British Foreign Secretary David Lammy said.
UKsanctionsRussian intelligence units involved in cyberattacks. The sanctions target operatives of Russia’s military intelligence (GRU), responsible for widespread malicious cyber activity in the U.K. and Europe, the Foreign Office said.
Germany’s Merz says Ukraineunlikely to join EUbefore 2034. “For us, the absolute top priority is, first and foremost, to do everything possible to end this war,” German Chancellor Friedrich Merz said.
New EU sanctions couldblockRosneft’s Indian refinery sale plans, Bloomberg reports. The Russian oil giant has been trying to sell its 49.13% stake in India’s Nayara refinery, but the EU’s latest sanctions package could make such a deal too risky for buyers.
USre-routing Patriotsto fast-track air defenses to Ukraine, WSJ reports. The U.S. will send its next Patriot system to Germany rather than Switzerland, in order to speed up Berlin’s shipment of two Patriot batteries to Ukraine, officials said.
Trump admin cuts undermine efforts to trackabducted Ukrainian children, Council of Europe envoy says. “European countries will have to fund it,” Thordis Gylfadottir, an envoy of the Council of Europe, told Politico. “We cannot stop tracking them and then just re-track them (abducted children) in the months ahead.”
Romania plans tobuild droneswith Ukraine. The project would involve Romanian investment in a local factory, likely in Brasov, where Ukrainian and Romanian teams would collaborate on manufacturing drones based on Ukrainian designs developed through wartime experience.
First AustralianAbrams tanksreach Ukraine after 9-month wait. The tanks were promised to Kyiv in October 2024, but delivery was reportedly delayed due to resistance from the U.S. The remaining tanks will arrive “in the coming months.”
In other news
Watchdogs urge new prime minister to appointeconomic bureau chiefas reform is blocked. Civic watchdogs argue that Tsyvinsky’s candidacy was rejected because the President’s Office sees him as too independent.
Ferrexpo’s Ukrainianminingsubsidiary executive charged with $41 million tax evasion scheme. The head of Ukraine’s Poltava Mining faces criminal charges for allegedly evading over Hr 1.7 billion ($41 million) in corporate taxes through fraudulent export pricing, the Ukraine Economic Security Bureau announced in a press release on July 18.
Wagner mercenary who trained Russian boxing champion, fought in Ukraine, waskilled in Mali,intelligence source says. The source called Igor Nesterov a war criminal and a member of Russia’s infamous Wagner company, a mercenary group that was deployed in some of the most brutal battles in Ukraine.
The Kyiv Independent delivers urgent, independent journalism from the ground, from breaking news to investigations into war crimes. Your support helps us keep telling the truth. Become a member today.
The source called Igor Nesterov a war criminal and a member of Russia's infamous Wagner company, a mercenary group that was deployed in some of the most brutal battles in Ukraine.
iOS has a design change, but otherwise there is nothing interesting. Smartphones have been around for a quarter of a century, both smartphone hardware and software are extremely mature.
And that's a good thing, perhaps except for tinkering purposes. I have to rely on my phone for several things throughout the day, sometimes more than I'd like to, so the last thing I need is bugs introduced just for the sake of changing things.
The one thing I’m continually annoyed about though is battery management.
Why, in this day and age, do we not have a smartphone that can last on a single charge for a week? Instead, after a year or two of use, the devices with a glued in battery can barely last 8 hours on a charge.
The battle lines are drawn. Meta has become the first major American tech company to openly reject Europe’s new artificial intelligence governance framework, setting up what could become the defining regulatory clash of the AI era.
The battle lines are drawn. Meta has become the first major American tech company to openly reject Europe’s new artificial intelligence governance framework, setting up what could become the defining regulatory clash of the AI era.
Earlier this year, Microsoft published a report on an infostealer malware campaign identified as stemming from pirate streaming sites. With one million user devices infected, the potential for damage is clearly enormous but the threat isn't new. Data sourced from specialist breach databases reveals that Fmovies, the world's most popular pirate streaming site before its closure in 2024, was "strongly linked" to Infostealer activity targeting users worldwide.
Protecting against rogue devices in openSUSE with Full Disk Encryption openSUSE have now multiple ways to configure a Full Disk Encryption (FDE) installation...
Is it possible to configure the kernel to allow access to decrypted contend only through the user session?
Theoretically, kernel keys can be set to be readable only by the user session, and in an uncompromised root is not able to read those keys. I can imagine a filesystem encryption design that uses a user session key to en/decrypt data on the fly using a user session key, such that not even root or a process in another user session could read the mounted filesystem.
Does such a system exist? As I understand, this is not the way dm-crypt or LUKS work. FDE and TPM are still vulnerable to hacking while everything is running, unlocked, and mounted.
Ok, I went and read some more about it, and you can manage keys with the kernel user session keyring. So it's possible.
It brought me back around to why systemd is so shitty.
Session Keyring (Rejected)
This strategy involves placing all keys for fscrypt in KEY_SPEC_SESSION_KEYRING. Using the current session keyring means that fscrypt will not need elevated privileges to place keys in this keyring, eliminating the need for a setuid binary. It also means that if something like pam_keyinit is used, the keys will be inherited across things like sudo.
However, this strategy has a few significant downsides that led to it not being used. The first issue is that keys unlocked in one session for a user are (sometimes) not accessible to the user in other sessions. This can create confusion for users unable to access certain directories. However, the bigger problem is that systemd is incompatible with use of the system keyring. The systemd maintainers are of the reasonable position that the session keyring just shouldn’t be used.
Emphasis mine. Because the user session keyring is incompatible with systemd, the Poetterites say it shouldn't be used.
The only way to handle keys securely Ok base Linux shouldn't be used because it's incompatible with systemd. What a way to see the world: so convinced in the superiority of your monolithic monster system that you argue against an immediately available way of improving security.
It's incompatible, by the way, because systemd doesn't run user jobs in the user's session, but in parallel sessions. This means that, if you use systemd, you can't use the most secure way of handling secrets with fscrypt, the kernel user session keyring.
fscrypt – Design Document (PUBLIC) November 2nd, 2016 Status: Released Author: Joe Richey (joerichey@google.com) Contributors: Ted Ts'o (tytso@google.com), Eric Biggers (ebiggers@google.com), Michael Halcrow (mhalcrow@google.
TPM unlocking FDE is complicated for me. I fully understand measured boot and support it, but it seems less secure to me than manually unlocking the disk.
Once the disk is unlocked and you’re put onto the display manager, I feel like there are many more vulnerabilities that could be exploited to gain access to your data.
With manually entering the disk password, the data is locked. You either need to brute force it or use the XKCD wrench method.
So I feel TPM+Pin is the best for security. Unfortunately Aeon, which is based on OpenSUSE and implements TPM, doesn’t support TPM+Pin. I think it’s mainly due to how poor and widespread TPM support is. It could lock you out entirely.
As I understand it the TPM is for people who have physical access. It prevents them from cloning your disk.
I think with an adequately long password (or an adequately resource-intensive encryption algorithm) you can secure your disk enough to prevent unauthorized access. But the TPM would prevent them from removing your hard-drive and shunting it into a super-computer (so all password attempts wouldn't need to be on the crummy 10-year old laptop CPU) so a TPM + password is more secure.
I've read the arguments and trust the people who know far more than I do about this, but... I just find it difficult to think of "unlocks automatically" as more safe than "is locked until I enter my password". I'm open for it, but it just feels strange to me.
What makes TPM+pin safer than just having a normal LUKS password? I would think it would be the same amount of security just with more chance of data loss if your computer gets damaged
TPM is used for measured boot. Measured boot can check various parts of the system to ensure they are the expected values haven’t been tampered with. You don’t want a part of the system to be replaced with malware and not realize it.
If it detects something changed, it won’t release its secret. It may signal to you that something malicious was done or something benign that the OS updated didn’t account for.
Tech giant Meta has apologized and said it has fixed an auto-translation issue that led one of its social media platforms to mistakenly announce the death of Indian politician Siddaramaiah.
xordos
in reply to Leaflet • • •poinck
in reply to xordos • • •I recently installed trixie on the desktop and will probably stay there and not move to the next testing. I hope it won't feel that outdated after 2 years or so.
I was on Gentoo before, the packaged Gnome version there is actually lower than on trixie currently.
vandsjov
in reply to xordos • • •Mwa
in reply to Leaflet • • •Would love a tutorial how to update to Debian 13
beleza pura
in reply to Mwa • • •debian publishes release notes for every new release which contain instructions on how to update from a previous version. as an example, these are the release notes for bookworm: debian.org/releases/stable/amd…
the release notes can be found at the release information page: debian.org/releases/stable/. read it carefully when the time comes
Release Notes for Debian 12 (bookworm), 64-bit PC
www.debian.orgMwa
in reply to beleza pura • • •xcutie
in reply to Mwa • • •Chapter 4. Upgrades from Debian 11 (bullseye)
www.debian.orgikidd
in reply to Leaflet • • •