Notices by atom (470m@mstdn.social)

@aral @EUCommission Never thought we'd be going back to the pre-DNS /etc/hosts days, but I'm here for it!

EAS just went off for the first time (apart from the tests). Someone really needs to guillotine those oil execs...

@dalias @tinker It's not HTTPS that I'm worried about. I may have mentioned the wrong type of attack.

One example of a vulnerability I found was on the WiFi in my old student halls. The entire site was on one subnet, seemingly with no separation. I could ping PlayStations on the other side of the building and turn people's speakers on at 3AM, all from the comfort of my own room using nothing more than an Android tablet. This didn't fill me with confidence about other aspects of the network.

@tinker I use a VPN to avoid MITM attacks on public WiFi and eduroam (cybersecurity students can be tricky, and a lot of networks I've come across have been kinda vulnerable), avoid the UK's internet restrictions, and use SkyTube (Google has crippled it in most countries, but switching my apparent location to, say, Vietnam usually works).

I used to also use a VPN alongside Mullvad Browser for privacy reasons; but now that I've switched to Tor Browser, this is redundant.

1/2

@simonzerafa @libreleah I'd say OpenBSD is probably the easiest, as it has a simple line-by-line installer and graphics out-of-the-box (either choose "yes" when asked about xenodm(1), or run startx when you log in). However, in my experience, this BSD tended to be a somewhat sluggish at times (they prioritise security over performance, which is fair).

@simonzerafa @libreleah

FreeBSD, NetBSD, and DragonFly BSD are a little more complex, but if you're familiar with setting up a system mostly from scratch you should be fine.

However, bear in mind that FreeBSD has been recently accepting AI-generated patches.

MidnightBSD is a little odd. Some of the features are neat, but there are a few that seem a little strange to me. They also added age declaration, which doesn't sit well with me.

@simonzerafa @libreleah

HardenedBSD is quite good. Basically just FreeBSD with additional security hardening (e.g. PaX); but the installation can be hit-or-miss, in my experience, and those AI-generated patches from upstream will be present.