An Initial Benchmark Of Bcachefs vs. Btrfs vs. EXT4 vs. F2FS vs. XFS On Linux 6.11
- 0 Followers
- 0 Following
- 0 Posts
IIRC, it stops working whenever you disable JavaScript.
What are the main advantages of using this, that make it more secure?
More secure compared to your average distro? Or more secure compared to a specific set of distros? Unless, this is properly specified, this comment could become very unwieldy 😅.
Thanks in advance for specifying!
I daily drive secureblue; or, to be more precise, its bluefin-main-userns-hardened image.
“Why?”, you ask. Because security is my number one priority.
I dismiss other often mentioned hardened systems for the following reasons:
- Qubes OS; my laptop doesn’t satisfy its hardware requirements. Otherwise, this would have been my daily driver.
- Kicksecure; primary reason would be how it’s dependent on backports for security updates.
- Tails; while excellent for protection against forensics, its security model is far from impressive otherwise. It’s not really meant as a daily driver for general use anyways.
- Spectrum OS; heavily inspired by Qubes OS and NixOS, which is a big W. Unfortunately, it’s not ready yet.
Maybe they’ve fixed it by now but at the time of my comment the page led to the mentioned empty standard folder path you’d expect on a regular installation.
Alright, so through the flathub remote-info --log flathub org.mozilla.firefox command, we can view which commit was active at that moment.
Command yields:
Firefox - Fast, Private & Safe Web Browser ID: org.mozilla.firefox Ref: app/org.mozilla.firefox/x86_64/stable Arch: x86_64 Branch: stable Version: 129.0 License: MPL-2.0 Collection: org.flathub.Stable Download: 98.6 MB Installed: 259.6 MB Runtime: org.freedesktop.Platform/x86_64/23.08 Sdk: org.freedesktop.Sdk/x86_64/23.08 Commit: 57fc35d29f0ee4915ebd903e2b9ce5497972c175cf0a6950153ec91d6f1b3e33 Parent: 6a16f6a509340ad3bb833c9d9aa794ed78910aa43803a7420438b880aa0a6ce0 Subject: Export org.mozilla.firefox Date: 2024-08-06 12:45:05 +0000 History: Commit: 6a16f6a509340ad3bb833c9d9aa794ed78910aa43803a7420438b880aa0a6ce0 Subject: Export org.mozilla.firefox Date: 2024-07-26 13:29:41 +0000 Commit: 5b92a5aa533a8f68fe1d73f3910392018c4d4bb9f4370ee0577384e101999ce8 Subject: Export org.mozilla.firefox Date: 2024-07-23 14:34:25 +0000So, at the time of your comment, commit 6a16f6a509340ad3bb833c9d9aa794ed78910aa43803a7420438b880aa0a6ce0 was active and deployed on your system. Let’s find out what downgrading to this commit yields.
Downgrading through sudo flatpak update --commit=6a16f6a509340ad3bb833c9d9aa794ed78910aa43803a7420438b880aa0a6ce0 org.mozilla.firefox, after which the about:profiles page is opened on this downgraded Firefox yields:
The beautiful part is that, as Flatpak is containerized anyways, anyone can downgrade to the earlier commit and it yields the exact same result. So, please feel free to verify this for yourself.
So, as a result, if the logic and the appliance is sound, then this showcases that your claim is either still true and portrays an anomaly -which I would deem as highly unlikely- or it’s simply false and you were just mistaken.
Finally, if I’ve messed up at any of the steps, then please feel free to correct me.
lol, the full answer I had written somehow was ripped to pieces. I’ll therefore keep it brief.
- Thank you for the reply!
- Apologies for making you wait so long for an answer! Thank you for your patience!
- Thank you for correcting me when I had wrongfully suggested that it’s found in
about:supportwhile it’s found (as seen below) inabout:profilesinstead. I know it’s found in Firefox, I (just) messed up the exact spot. Therefore, thank you for countering misinformation!
- You’ve mentioned stuff that require to be addressed and corrected, but I’ll leave it at this. You should read documentation and don’t take people’s words anyways.
Nix, the package manager, is distro-agnostic. Add Home Manager on top of it and you’re good to go; both packages and dotfiles are dealt with.
An Initial Benchmark Of Bcachefs vs. Btrfs vs. EXT4 vs. F2FS vs. XFS On Linux 6.11
If security is a serious concern of yours, perhaps consider NovaCustom’s offerings instead. Intel BootGuard is coming to their new models (i.e. the 14 inch V54 the 16 inch V56). Add Dasharo’s coreboot, the possibility to disable Intel Management Engine, (soon hardware-based) kill switches, open source EC, ongoing work to get it Qubes OS certified (like how they managed on their NV41) and perhaps even Heads (also like how they did on NV41). We haven’t even talked about how they’ll soon achieve HSI-3 and their plans to tackle Trenchboot next year.
It’s a lot of good stuff. And simply unheard of for vendors that are Linux-first. Heck, if their ongoing work on lvfs delivers and they manage to put out updates like industry leader (at least in this regard) Dell does^[1]^, they might even be a contender for most secure laptop for general use.
While it may seem as if I’ve been gushing a lot already, I have not even mentioned how they fare in other important aspects:
- Communication and support is excellent and a lot better than any other Linux-first vendor; including both Star Labs and TUXEDO.
- They’re committed to repairability and sustainability. While they definitely can’t compete with Framework in this regard, they do offer spare parts (including motherboard, CPU, fans, cmos battery and a lot more) for up to 7 years.
It’s a pity that they’re underappreciated and underrated for not putting as much money into advertising as they do on delivering an excellent product.