Is Linux Actually More Secure?

The boys return to talk about Linux security. It sounds dull, but we'll have a good time. Promise.
👇 PULL IT DOWN FOR THE GOOD STUFF 👇
==== Special Thanks to Our Patrons! ====
thelinuxcast.org/patrons/
===== Follow us 🐧🐧 ======
MERCH - shop.thelinuxcast.org
Discord - / discord
Odysee - odysee.com/$/invite/@thelinux...
Mastodon- fosstodon.org/@thelinuxcast
Subscribe at thelinuxcast.org
Contact us [e-mail]
/ thelinuxcast
Telegram Group - t.me/+9lYoIuLh0JIyMzcx
Matrix - matrix.to/#/#the-linux-cast:matrix.org
Tyler - bit.ly/3wk9LNy on Odysee , / zaneyog on KZbin and on Discord / discord
Drew - odysee.com/@justaguylinux:c on Odyssey, / justaguylinux on KZbin, fosstodon.org/@justaguylinux on Fosstodon.
/ thelinuxcast
Patreon - / thelinuxcast
PayPal - paypal.me/thelinuxcast
Kofi - ko-fi.com/thelinuxcast
Logo Courtesy of pedropaulo.net
Intro Courtesy of www.fragcgi.com/?i=1
[show notes]
gitlab.com/thelinuxcast/podca...
[time stamps]
0:00 Intro
1:50 Our Week in FOSS
2:00 Tyler's Week In FOSS
6:27 Drew's Week in Linux
8:04 Matt's Week in FOSS
17:09 Is Linux Secure?
1:10:14 Nuggies of the Week
1:10:38 Drew's Nuggie
1:11:44 Tyler's Nuggie of the Week
1:14:38 Matt's Nuggie
1:16:01 Contact Info and Goodbyes

[@stephentsatchell3306]

I do check the ISO checksums. After the initial download, and after writing the ISO contents to CD/DVD

[@thesaigoneer]

Great pod; nice to see Drew on there as well. Thanks guys!

[@TheLinuxCast]

Help support the pod! patreon.com/thelinuxcast . Weekly exclusive podcasts! 0:00 Intro 1:50 Our Week in FOSS 2:00 Tyler's Week In FOSS 6:27 Drew's Week in Linux 8:04 Matt's Week in FOSS 17:09 Is Linux Secure? 1:10:14 Nuggies of the Week 1:10:38 Drew's Nuggie 1:11:44 Tyler's Nuggie of the Week 1:14:38 Matt's Nuggie 1:16:01 Contact Info and Goodbyes

[@JoSaN585]

i've been trying to use kavita last weeks and it is kinda a pain. For academic books you have the problem that kavita wants to detect them as if they were part of a series and that forces you to have them in a specific directory for each one. I have also tried with manga, and it is true that it has detected them well, but I have had a problem related to how the program sorts the copies even though the names of the files are its own sorting. I have read how this may be a problem with the latest version, but I have not had time to check.

[@jdotson41041]

I always check the check sum if it does not come back good it gets deleted.

[@eleah2665]

Hi and thanks.

[@tablettablete186]

"It depends"

[@jamesb2877]

I check my checksums on my iso's, every time, all the time.

[@tablettablete186]

But do you also check the authenticity of the ISOs? Take Mint as an example, the hacker also changed the checksums in the website

[@daorkykid]

But do you also check the checksums?

[@rusi6219]

@@tablettablete186 bittorrent

[@mrCastrinho_]

@@tablettablete186 what??? 💀

[@tablettablete186]

@@mrCastrinho_ Hashes only verify integrity. You need to use signatures to verify authenticity and integrity (something like GPG)

[@johanb.7869]

Maybe you can do a video about ISO checksums and how to use them? I never check them to be honest because I don't understand the how-tos. My simple brain just can't handle it😭

[@Lizard_of_Linux_Lane]

I would be okay with more background fan noise. ✅️

[@SkinnyGeek_1010]

Aerospace is a recent window manager for macOS that works pretty well! The rest have never been worth using for me but it at least lets you have a decent i3 clone on the mac. The new window vs new app instance is the only pain that I run into but has workarounds.

[@oscs4556]

I check the checksums and signatures of iso every time before loading it on my ventoy usb thumb drivers.

[@notuxnobux]

where do you get the checksum? if you get it from the same site you download it at the same moment then it means nothing. It only means something if you got the checksum long time ago, saved it locally and used that to compare. But that only works if the distro hasn't updated since. So checksums are often useless in practice.

[@24wherath36]

@@notuxnobux Not at all.. Checksums only verify the integrity of a downloaded file, it says nothing about what person created the package. Signatures with a verifiable certificate chain is what should be used for verifying file origins.

[@oscs4556]

Nixos is not a corporate distro, it’s govern by the Nixos foundation that can take donations from companies. It’s community distro similar to Debian.

[@TheLinuxCast]

Funded primarily by a company. At least afaik.

[@oscs4556]

Nope, it’s funded by many companies because a lot corporations use it including the us military too

[@greycell2442]

Android is immutable overlay, and it doesn't stop hacks. It's important to containerize the browser now. But in Linux, it's all approachable, unlike a proprietary OS. At least you can see yourself getting screwed. There's no services I can't turn off. I'm more comfortable with the situation. Toolbox, distrobox, podman has given me an extra level beyond immutable. Scripts are dangerous, python. You gotta file watch that. Write a filewatcher that uses sqlcipher instead of sqlite or another script. I wouldn't know what to not scan in Windows.

[@sitaroartworks]

"So...is it safe?" ~ "Marathon Man" quote :)

[@Петар1]

Hah, nice one 😂

[@jdotson41041]

and then I'm still weary. lol. the latest XZ showed us that.

[@esra_erimez]

Hello, and thank you.

[@OlSkunGun]

Can you guys write down nuggies of the week? Edit them as text into video, put them in video description or pin them in comment section? Because I'm European[Poland] and it's sometimes hard to figure out what the exact correct name of nuggie is

[@TheLinuxCast]

They are always in the show notes. Link in the description.

[@OlSkunGun]

​@@TheLinuxCastOhhh, thnx

[@tablettablete186]

26:40 This is what reproducible builds are trying to solve, so the software binary is the same across distros

[@MrSnivvel]

Reproducible builds are not about being the same across distros, they're about creating the same build artifacts and checksums within a distro. Different versions of libraries used and the toolchain that built the binary will always be different between distros.

[@tablettablete186]

@@MrSnivvel True, I've missed that point

[@ltxr9973]

No, it depends on the user's mentality, not the OS. All 3 big operating systems offer good levels of security, for a tinkerer even too much security

[@BanduTheGreat]

What's wrong with Calibre?

[@user-gh4lv2ub2j]

Yes; it is.

[@IceBlade1992]

bit of a stickler coment but shuld you not add there youtube links in bio? sure i could just search my self.

[@Marc42]

youtube.com/@justaguylinux + video description :)

[@Lizard_of_Linux_Lane]

Tyler's Odysee link is in the description, not sure if Drew has a channel. I think you're trolling based on your spelling & misuse of "there" also, this is a livestream so the information could be updated later.

[@TheLinuxCast]

In my defense, it's Drew's first episode. It'll be there from now on.

[@bertnijhof5413]

I don't distrohop, since 2008 I use Ubuntu. If I want to have a look at a distro, I use a VM :)

[@92redferrari]

I've done plenty stupid stuff. 😊

[@conjurermast]

I think not checking code is far beyond just laziness. Writing complex code is one thing, but understanding someone else's is another. You better get paid for the latter, amirite?

[@BarbarasMilk]

*Yes* it is.

[@russellmania5349]

Linux is more secure than Windows. Windows has had a malware problem for years.

[@markjones2349]

This is completely off topic but, I've been on Linux for 16 years and it's always been exciting seeing new apps, features, kernel updates, but holy crap is Linux boring now in 2024. Is it just because I run Debian and everything just works and never breaks or is it like this for everyone?

[@eobardthawnemcoc]

Bait comment

[@markjones2349]

@@eobardthawnemcoc Oh ok so this isn't a place where we talk about Linux stuff? Figured we were all adults here and liked having Linux conversations. I was just curious to know if what I was experiencing was just because of my choice of distro or if it's pretty much boring to every distro user. It's not like KZbinrs haven't made videos on this very topic not too too long ago. There is just a lot of nothing going on in Linux from what I can tell. Very boring.

[@aarholodian]

@@markjones2349 Not sure what you want to hear. Go make a secure LFS, assemble Bedrock, or tardwrangle Hurd into working on anything that isn't a replica of Stallman's thinkpad. Be the change you want, as it were

[@MyAmazingUsername]

You're right. Debian users are boring.

[@pyepye-io4vu]

Yes it is, and boring is good. If you want non-boring then try bleeding edge stuff. Lots of experimental distros there.

[@MENTOKz]

i got like 2 subs and i have not made anything for 10 plus years

[@92redferrari]

As long as nobody of your subs is called Titan!😊

[@igorgiuseppe1862]

27:45 its not about being lazy, but about not being paid to do that...

[@Visentinel]

I made it so sudo and polkit dont bother me for password. I know its bad but I do it anyway lol.

[@j2sk]

Hackers are putting you on their watchlist for sure now that you made it public lol

[@Visentinel]

@@j2sk If a hacker wants to enter my house and use my pc knowing they dont need to know my password in the command line, they are welcome to but not sure its a good idea in a stand your ground state.

[@vladimir_k_bestplayerna1217]

@@Visentinel If you're connected to the internet, a hacker doesn't need to enter your house for that.

[@Visentinel]

@@vladimir_k_bestplayerna1217 hackers dont just magically gain access to your systems command shell either without you installing compromised code.

[@86ericg]

It' not moore secure

[@CyrusBrinkworthRAS]

you can not compare WIN/MAC with LINUX, Linux is man made!!!

[@dhaneshdutta]

what isnt safe is your health, spend some time in the gym