[–] 5 points 1 month ago

For example, one of the first vulnerabilities I found, that was used for the introduction hook in the 39c3 talk, remains unpatched to this day. Instead of being fixed with code, Werner Koch - the main developer of GnuPG - published a blog post declaring the widely-used feature being "harmful"; while they had weeks in advance, they published this on day one of 39c3, not even giving us time to respond.

what the actual fuck

  • source
  • [–] 8 points 3 months ago (2 children)

    impermanence forces you to be intentional with your system, where files are persisted, which is great for: hygiene like feeling like the computer was freshly formatted on each boot; using NixOS as intended by keeping things declarative (in other words, "nixmaxxing"); security also, to a lesser extent tbh, but it'd be protecting against malware nesting at impermanent paths

  • source
  • parent
  • context
  • view more: next ›