alt

I am thankful that zypak exists so that Chromium-based browsers and Electron apps don't have to explicitly flag --no-sandbox to continue functioning. However, it doesn't undermine the fact that native Chromium's sandbox is more powerful than Flatpak's sandbox. As such, if one desires security, then one should gravitate towards the native installed one.

It lets Chromium use flatpak sub-sandboxes

Are you sure that's the case?

It's unfortunate to hear that; with the chassis being my biggest concern as I don't think you would be able to find suitable replacement for that. As for the keyboard, perhaps an affordable and portable external keyboard might help you with that.

I wholeheartedly agree.

Though, this shouldn't stop one to pick their fights and savor the wins. The defeatist mentality is our biggest enemy, we will not be victorious in the end if we don't resist.

Let's hope an excellent implementation of RISC-V with eye for open-source, processing power, efficiency and affordability comes out so that we're not limited to the expensive (but otherwise excellent) Talos II by Raptor Computing Systems.

Would you mind elaborating? First time hearing this and a quick search didn't resolve it.

Officially supported doesnt mean its more stable.

Never implied that anyways. Official merely ensures that the amount of trusted parties can be minimized.

Bubblewrap is not insecure.

Bubblewrap, when properly applied is indeed excellent; perhaps the best utility to sandbox applications on Linux. I'm thankful that flatpaks makes use of bubblewrap, namespaces and seccomp to offer relatively safe/secure apps/binaries, I'm unaware of any other '(universal) package manager' within the Linux-space that offers similar feats in that regard. Unfortunately, Chromium-based browsers just happen to have an even stronger sandbox -if properly configured- than flatpaks are currently capable of.

Read the part after P.S 😅.

Hehe :P , consider to keep us updated on how it goes ;) !

Clevo MZ41

Would that be the Clevo model that NovaCustom's NV41 Series is 'based' on?

Thank you!

What's MOBO?

Not sure why you would want to.

😅, it's explained in OP.

Linux package managers are state of the art.

I wonder if Nix-users would agree 🤔.

Thanks for clarifying!

they wouldn’t be above breaking the law in compiling spyware or other malware into their closed source product for profit.

I might misremember this, but wasn't it only something like a key (or something similar) that they held to themselves? And if so, is it even sensible that spyware can be put in their 'key'?

Thanks anyways!