• 0 Posts
  • 26 Comments
Joined 7 months ago
cake
Cake day: January 29th, 2026

help-circle





  • you’re right, it was also one of the reasons I avoided fedora originally. Company of Heroes for example would work OOTB in any other distro, but on fedora it would crash as soon the game opened - unless I skipped the intro movies with the steam command. My guess it was the codecs, even though I supposedly had installed them.

    But just you know, if someday you give it another shot, you can use this link: https://nattdf.streamlit.app/

    It’s basically a script builder that helps you get fedora up and running with everything you want. Codecs was never an issue since I used it


  • I’ve been using Fedora in my gaming desktop with a nvidia GPU - which not that long ago, would be a recipe for a disaster since nvidia + wayland = problems. But so far, the experience has been very stable, despite me being an update addict that updates the OS almost daily.

    From my experience, it’s been more stable than EndeavourOS (which is basically Arch), Ubuntu and Mint. YMMV and all that. Edit: I’ve been using it for 5-6 months now

    PS: you will want to give this a go, if you go Fedora: https://nattdf.streamlit.app/

    It’s a tool created to get your Fedora up and running in one go. You can use it to configure flathub, install codecs, etc.





  • For clarity sake, that’s not what’s happening here. (Don’t misunderstand this comment as defending google, I could write a book about how much they suck)

    The model downloaded is a LLM called Gemini Nano, and it’s used for things like “help me write”, checking if an incoming message is scam, summaries, etc.

    Don’t worry about it itself being a spyware. It’s not; but for argument sake, if we were to assume that it was: they already know a lot about you through their usual apps and services, and get a lot more info out of you through them. This LLM would hardly move that needle.

    The actual issue is that they download it for everyone, even if their devices don’t match the minimum requirements. And without consent. And to enable it, you need to go through several menus, as the default behaviour is to use the cloud (this could change eventually, my understanding is that in this update they’re just laying the foundation)

    But, it’s Google that we’re talking about. Last year they were sentenced to pay a fine for spying on users despite them having their tracking settings off. And it wasn’t the first time iirc. This kind of behaviour is par for the course with them









  • Copy pasting a comment that I saw on Reddit

    ——

    Link to the original study (with a less sensationalized title):

    https://zkae.io

    A few important notes:

    • the study is about Bitwarden, LastPass, Dashlane and 1Password. Proton Pass isn’t mentioned.

    • the study presumes that they’re working with a malicious server (read this as compromised server, controlled by an attacker). The attacks they talk about in the article would not work on a normal server. Here’s their quote:

    No need to panic: all of our attacks presume a malicious server. We have no reason to believe that the password manager vendors are currently malicious or compromised, and as long as things stay that way, your passwords are safe. That said, password managers are high-value targets, and breaches do happen.

    • Here’s another quote, about other password managers:

    You can ask your provider the following questions:

    1. ⁠Do you offer end-to-end encryption? What security do you provide in case your server infrastructure were to be compromised?
    1. How do you check that public keys and public-key ciphertexts are authentic?
    1. How do you authenticate security-critical settings, such as the KDF type and the iteration count?
    1. Do you provide integrity guarantees for a user’s vault as a whole? Can a malicious server add items to your vault?

    You can also ask your favourite password manager to commission an audit checking for our attacks in their products.

    • If you still feel unsure/unsafe, then adopt an offline password manager (I highly recommend keepassXC).