Pro/Con of Linux Distributions from a CypherPunk perspective
Linux Mint:
Pro: Very stable, things are likely to just work. Updates rarely break the system. And installs of Ubuntu versions of software usually work, but you don’t get the slow speed of Ubuntu’s snaps.
Con: Very slow update cycle, so you’re getting security updates last. Some newer software either won’t work or you have to manually get debian packages from their website. You can change the desktop environment, but if you leave it cinnamon then you can’t use Wayland yet. (which is a more secure display protocol)
Fedora:
Pro: Ships with Wayland and SELinux out of the box. This is a pro if you trust the academic research on SELinux but...
Con: The NSA made SELinux and even though it’s open source, how many impartial non-US firms have audited it with enough expertise to really know if there’s a backdoor? My questioning of this will cause controversy, but it’s a fair question. At least be aware if you disagree with me.
Kicksecure:
Pro: Live mode let’s you erase everything. Can be used as a VM or even the host OS. AppArmor is default as is Firejail. Although you could just run these things on any distro.
Con: It’s still debian, so you are getting slower updates. But debian has large software support
Arch:
Pro: Bleeding edge of updates. Huge amount of software.
Con: Updates may break things and require you to roll back things. (Luke Smith has a tutorial on this)
Void:
Pro: Faster and less attack surface by removing SystemD (the startup system for almost every other distro, btw Artix is Arch without it). Void also has a more secure version with it’s libraries (musl and GNU libc). And rolling release meaning faster security updates.
Con: A lot of software is not compatible with the more secure changes, but you can check their website to see which software works on which versions.
Qubes:
This is an OS that lets you run everything in virtual machines with a minimalist hypervisor
Pro: Least attack surface with a Xen hypervisor. Some experts consider it the hardest to attack.
Con: Requires good computer specs, especially for things like fast video. And there’s potential USB issues
(btw an alternative to Qubes is Kicksecure in live mode as the base OS with KVM QEMU machines).
Gentoo:
Pro: Can be customized to the best security settings (think all the things mentioned in this article, SystemD removed, musl vs libc, wayland, ect).
Con: Requires a large time investment to modify these things
Follow us on Nostr for more!
SimplifiedPrivacy.com
npub14s…jt5d6
2023-11-10 03:20:52
Author Public Key
npub14slk4lshtylkrqg9z0dvng09gn58h88frvnax7uga3v0h25szj4qzjt5d6Published at
2023-11-10 03:20:52Event JSON
{
"id": "c2bad9e4816fa360c0000a329d70f12bf282da84b6d2f0196d33eb9cedc43705",
"pubkey": "ac3f6afe17593f61810513dac9a1e544e87b9ce91b27d37b88ec58fbaa9014aa",
"created_at": 1699586452,
"kind": 1,
"tags": [],
"content": "Pro/Con of Linux Distributions from a CypherPunk perspective\n\nLinux Mint:\nPro: Very stable, things are likely to just work. Updates rarely break the system. And installs of Ubuntu versions of software usually work, but you don’t get the slow speed of Ubuntu’s snaps.\nCon: Very slow update cycle, so you’re getting security updates last. Some newer software either won’t work or you have to manually get debian packages from their website. You can change the desktop environment, but if you leave it cinnamon then you can’t use Wayland yet. (which is a more secure display protocol)\n\nFedora:\nPro: Ships with Wayland and SELinux out of the box. This is a pro if you trust the academic research on SELinux but...\nCon: The NSA made SELinux and even though it’s open source, how many impartial non-US firms have audited it with enough expertise to really know if there’s a backdoor? My questioning of this will cause controversy, but it’s a fair question. At least be aware if you disagree with me.\n\nKicksecure:\nPro: Live mode let’s you erase everything. Can be used as a VM or even the host OS. AppArmor is default as is Firejail. Although you could just run these things on any distro. \nCon: It’s still debian, so you are getting slower updates. But debian has large software support\n\nArch:\nPro: Bleeding edge of updates. Huge amount of software.\nCon: Updates may break things and require you to roll back things. (Luke Smith has a tutorial on this)\n\nVoid:\nPro: Faster and less attack surface by removing SystemD (the startup system for almost every other distro, btw Artix is Arch without it). Void also has a more secure version with it’s libraries (musl and GNU libc). And rolling release meaning faster security updates.\nCon: A lot of software is not compatible with the more secure changes, but you can check their website to see which software works on which versions.\n\nQubes:\nThis is an OS that lets you run everything in virtual machines with a minimalist hypervisor\nPro: Least attack surface with a Xen hypervisor. Some experts consider it the hardest to attack.\nCon: Requires good computer specs, especially for things like fast video. And there’s potential USB issues\n\n(btw an alternative to Qubes is Kicksecure in live mode as the base OS with KVM QEMU machines).\n\nGentoo:\nPro: Can be customized to the best security settings (think all the things mentioned in this article, SystemD removed, musl vs libc, wayland, ect).\nCon: Requires a large time investment to modify these things\n\nFollow us on Nostr for more!",
"sig": "00074ce85a0b724f3959f5b5397f6d7be4b9a21667d46c0508454f59dd5870965701e1c564a0473ce21778cb937e73cc70db9b08fb394b32f9184af7e5ff193c"
}