all 26 comments

sorted by: hot top controversial new old
[–] 1 point 1 year ago

Sorry for the triple post, refreshed a couple times too much when it didn't respond

  • source
  • [–] 10 points 1 year ago (1 child)

    There are no open security bugs against TDE that I'm aware of—if there were, I'd expect them to be fixed in the next release. In my experience, the development team, while not huge, is active and competent.

    I've been using TDE since a little while after Gentoo sunsetted KDE3, and I've had no issues. Just make sure your X server is secure—-nolisten and all that stuff—and don't try to use Konqueror as a web browser (it remains an excellent file manager), and you should be fine.

    Wayland is "more secure" than X in that it makes less LAN contact by default and tries to sandbox programs from one another to an extent, just in case some future browser exploit that can copy random swathes of your screen tries to screenshot your password manager or something. There are no active exploits against a correctly-configured X server at this time that will magically vanish if you switch to Wayland, as far as I'm aware—it's more future-proofing stuff.

  • source
  • hideshow 1 child comment
  • [+] [S] 5 points 1 year ago* (1 child)
  • [–] 5 points 1 year ago

    -nolisten is an actual option passed to the X server—your distro may do so by default—to work around a known security issue in some versions. I admit I'd have to look up the details, as it's been a couple of years since that issue was reported. Recent X versions almost certainly have a patch.

  • source
  • parent
  • load more comments (-1 replies)
    [–] 5 points 1 year ago (1 child)

    It appears to be maintained, which is a point in its favour.

    You could send them a message on their mailing list and ask the question.

  • source
  • hideshow 1 child comment
  • load more comments (-1 replies)
    [–] 4 points 1 year ago

    Probably not significantly less secure than Xorg itself, I wouldn't mind using in your place. DE security is usually not a huge problem, if someone can exploit these vulnerabilities usually you are quite bonked.

    Remember most of what happens on screen is xorg, the wm is a simply interacting with xorg and other parts of your DE are simple user level programs like the panel etc..

  • source
  • [–] 4 points 1 year ago (6 children)

    Before you give up on XFCE and/or Chicago95 - have you replaced the default menu with Whisker Menu? For me, Whisker Menu is a must-have for any sane XFCE user. When I used it with Chicago95, I found I could have a Windows 7 style interface with Windows 95 aesthetics.

    Honestly, even if Chicago95 is aesthetically not what you want, I'd recommend trying an alternate theme on XFCE - I currently use modified DesktopPal '97 combined with a pack of Haiku-style icons.

    Overall, I'd be interested to know more about your qualms with XFCE and see if customization can help you overcome them. A lot of distros have annoying defaults for XFCE, but I changed a few simple settings and have a desktop I rather enjoy using. It is totally fine if it still isn't the thing for you after any potential discussion, but I just want to make sure you really know what XFCE has to offer before you move on.

  • source
  • hideshow 6 child comments
  • [+] [S] 3 points 1 year ago* (last edited 1 year ago) (5 children)
  • [–] 1 point 1 year ago (3 children)

    What do you mean by "window roll-up"?

    Also, the settings menu thing is weird - mine takes less than a second to load, and I'm on a machine with a 7 year old processor at this point. I almost worry that if that takes a long time KDE will be more miserable performance-wise, unless you've already tried it on here.

    By the way, what distro and XFCE version are you running - just for good measure.

    The outdated sentiment is probably based, honestly. I think it's gotten better, but there are rough edges. In the end, do what works for you.

  • source
  • parent
  • hideshow 3 child comments
  • [+] [S] 1 point 1 year ago* (last edited 1 year ago) (3 children)
  • [–] 1 point 1 year ago (2 children)

    Oh yeh. The font menu is crap. I can’t argue with that.

    It’s one of those mysterious annoying things that’s up there with the GTK file picker in some apps taking 10 seconds to load.

    But I also don’t change fonts that often. Still, that has much room for improvement.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (-1 replies)
  • [–] 3 points 1 year ago* (last edited 1 year ago)

    Window roll-up can be disabled under Window Manager Tweaks > Accessibility > Use mouse wheel on title bar to roll up the window

    Getting the bitmap font right goes a long way towards making the theme much more cohesive: https://github.com/grassmunk/Chicago95/issues/218

    If you decide to return to any GTK-based desktop environments, I'd suggest trying out the GTK3 port of the Raleigh theme (https://github.com/thesquash/gtk-theme-raleigh). It's a much less involved install compared to Chicago 95 but gets you most of the look-and-feel.

    The Whisker menu properties menu also has settings to make it fit the Windows 95 style a bit better. Here's how it could look:

  • source
  • parent
  • [–] 6 points 1 year ago (1 child)

    Desktop environments are not equal form the security perspective, but they all are rather insecure, because security is hard and harms UX, and the GNU/Linux desktop is traditionally focused on UX and the user freedom by sacrificing security. However it is possible to build a secure environment based on an insecure DE, what Qubes OS does with XFCE, for example.

  • source
  • hideshow 1 child comment
  • load more comments (-1 replies)
    [–] 3 points 1 year ago (1 child)

    It TDE secure (for personal use)?

    Depends on your threat modeling. Though, unfortunately, none of the DEs/WMs on Linux offer perfect security; this even applies to a hardened distro like secureblue.

    So, practically-speaking, it probably ain't great. But we aren't used to great anyways 😅.

  • source
  • hideshow 1 child comment
  • load more comments (-1 replies)
    [–] 2 points 1 year ago (1 child)

    You don't need Trinity for that, you can theme up KDE Plasma 6 to look and feel old school too.

  • source
  • hideshow 1 child comment
  • load more comments (-1 replies)
    [–] 3 points 1 year ago

    My issue would be the old version of Qt it runs on, which is not maintained anymore. That itself is a bit of a problem security-wise.

  • source