The idea is that you could have your data stored encrypted, such that the entity that is storing your data can’t read any of your data, but can still make calculations or updates to your data without ever learning anything about your data.

The use cases seems rather narrow to me, but there are probably many that I just can’t think of at the moment.

One idea could be something like a VPN service that wants to store as little data about the customer as possible. They could keep the account balance in an encrypted format. When you then add money to the balance, they can increment your balance by however much you paid, without knowing what your old balance was or what the new balance is. And they could then have another homomorphic function that can check whether your balance is positive. If your balance is positive you are allowed onto the service, if it’s not positive you don’t get access. And the company wouldn’t be able to know whether you had $5 in your account or $5000, just that your balance is currently positive.

So yeah fundamentally it’s just being able to store and update some data, while the data is fully encrypted, never decrypting the data, to ensure some form of privacy or confidentiality

I have been on Arch , and I’m now running NixOS as my daily driver… IMO NixOS is less of a hassle to set up, and nearly maintenance free compared to Arch… Twice a year when the channel updates there’s a bit of stuff, but every change I need to make is usually explained in the output of my nixos-rebuild… If something suddenly breaks in an update, I just boot into my previous generation, roll back my flake.lock and wait a few days for a fix to be available…

Last time I used EndeavourOS, I managed to get the graphical installer to install BTRFS on LUKS, it did require custom partitioning in the graphical installer, snapper just worked after that.

Zram (or was it Zswap?) was pretty easy to enable after installatiok

The bootloader might be beyond what the graphical installer can do though… I never really bothered switching…

I gotta ask, what is it you want that the installer doesn’t provide?

These DDOS for hire services make use of hacked machines as botnets to perform the DDOS attacks.

So while the people paying for the service didn’t hack anything, the people performing the DDOS certainly did.