Maybe it sounds a bit like a conspiracy theory but with how often people make this “mistake” i really believe it’s a deliberate effort to undermine the meaning of open-source

I am only messing with KVM/libvirt for fun so i have no professional experience in this but wouldn’t you want to use virtio disks for best performance?

I don’t have a solution just another experience: i have a Acer Xb270hu that i never got to work 100% . without edid tweaks it would only show a tiny picture and with the tweaks it only ever got to 120 hz. Now i have a Alienware AW2725DF and it works at 360hz out if the box no issues

I must be doing something wrong because a 3060 ti on fedora 41 with proprietary drivers from rpm fusiion was entirely unusable for gaming. Absolutely unplayable performance on X11 and bad performance with steam glitching on wayland.

Switched to amd and it works now

Im also not an expert but i believe since there Is still an ephemeral DH key exchange happening an attacker needs to actively MITM while having the certificate private key to decrypt the session. Passive capturing wont work

Fedora has firewalld by default but in the desktop version all ports are open by default. Pretty sure the server version only has ssh and cockpit exposed by default

Did setting OnCalendar to the empty string not work? https://unix.stackexchange.com/a/479745

The system tray is the one thing i need to see that/if email/steam/chat is running and if there’s new messages. Otherwise gnome works great for me

There are portals: https://docs.flatpak.org/en/latest/desktop-integration.html#portals . they allow secure access to many features. Also any flatpak app still have access to a private app-specific filesystem, just not to the host.

Doesn’t work for all applications but for many sand boxing is possible without a loss of features.

I get screen tearing when gaming on x11 so i use wayland and I only switch to x11 if i need to screenshare on discord.

Well it being in the middle of a desert makes it more wasteful.

But yes giant festivals that encourage a lot of travel and needlessly burning things are in general wasteful and potentially excessive. There are other leisure activities, so discouraging festivals is not equivalent to working nonstop.

yes these are the terms that are not supposed to be used in product naming or by consumers and are just intended for use by people developing USB devices.

Well you have to differentiate somehow and USB 5, 10, 20, 40 or 80 gbps sound like reasonable terms for normal people.

Yes it was never intended that any consumer hears about something like “USB 3.2 Gen 2” that was strictly internal naming for people developing USB devices.

In fact the naming guidelines we’re simplified even further than in the older version you linked: https://cdn.arstechnica.net/wp-content/uploads/2022/09/USB-IF-language-usage-guideliens.pdf

But yea borderline fraudulent manufacturers and uninformed tech journalists are to blame for all this confusion

The v2 part here really just refers to the fact that it’s version 2 of the specification. Consumerrs only need to know the term USB4 and the speed that their device operates at. It’s sort of like complaining that the ietf has terrible naming schemes because HTTP is defined in half a dozen RFCs with 4 digit numbers. This versioning is just meant for people developing USB things.

Actually this article here is one of the few times where even mentioning the version 2 part is reasonable since the details of these specifications actually matter to kernel developerrs. For everybody else it’s just USB4 80 gbps.

Get a cross body sling, One of those travel digital nomad things. The brand ones aren’t cheap but it’s like somewhat fashionable. Maybe that could work?

Anytype looks interesting but it looks like most of it is non-free non-opensource software:

While our core solutions, the infrastructure protocol any-sync, and the data protocol any-block, are released as open source under the permissive MIT license, we distribute the remaining layers, including the middleware library any-heart, and applications like anytype-js, anytype-swift, and anytype-kotlin, under the Any Source Available License. This license grants individuals the freedom to review, modify, and utilize the code for personal, academic, scientific, research, and development purposes. However, for commercial use, consent from the Any Association is required.

from https://blog.anytype.io/our-open-philosophy/

Sorry to ask but why is get/set facl not sufficient for acls on linux?

They had some serious cryptography issues (including no perfect forwards secrecy!!!) but they have promised to fix that. I’ve not yet seen any paper analyzing the new protocol. But maybe it could be good?

Edit: Here’s a paper with some of the issues: https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/623004/main.pdf

They conclude that:

The seven attacks we have presented highlight fundamental weaknesses in the design of Threema. Indeed, the Threema protocols lack basic properties that are nowadays considered de rigueur for a messenger app to be regarded as secure: forward secrecy with respect to a malicious server, and protection against replay, reflection, and reordering attacks. We believe that the cryptography in Threema has design flaws that need to be addressed in order to meet the security expectations of its users

They have redesigned their protocol since then but again i have yet to see a third party look at it but TBH i haven’t looked into it.

Well if they are in the repos i assume it be less likely to have incompatibilites when updates happen?