They are stored behind luks and I think they are readable only by root. But bootkit can probably only infect UEFI from Linux that is running on that machine. And to interact to UEFI you probably have to be root, right?
I'll look into more options, either store keys on a seperate luks usb key or on a hardware securety key like Nitrokey. For sbctl there is already a roadmap feature for hardware security keys, I hope this comes soon :)
Well... if you have your own keys (like I do) you have to store them somewhere. That somewhere is probably somewhere on a computer where they are used so you can update the kernel. If you have private keys, you can probably bypass secure boot.
Is there a way to have private keys stored on a nitrokey that has to be plugged in for every kernel update?
I always open settings on every app or website to see what I can change. This gives me feeling like this is something made just for me and I will use it for longer. Except KDE, this has way too many settings.
So that means the brain is simple enough to understand, but we are too simple to understand it.
So they are searching for owner of the drone or what?
Pixel 7a is more expensive than Pixel 8a???
Slovenia
Yes, primary school is teacher, anything higher is professor.
I know KDE is the most similar to windows but I would never install it due to 2 reasons:
Oh, thats why my old samsung phone lasts for a month without usage, but pixel loses 5% per night on airplane.
Nope, I'm not doing that. If they want that, they can do it themselves.
I'm 100% sure that Raspberry Pi has that. I can set how much of ram will go for the gpu. But raspberry pi's gpu isn't really a gpu.
And not just that, you also have a higher chance to get elected.
Interesting, yet another proof that math is useful!
Much better, thank you :)
This is not less pixels, they are just very compressed.
They are stored behind luks and I think they are readable only by root. But bootkit can probably only infect UEFI from Linux that is running on that machine. And to interact to UEFI you probably have to be root, right?
I'll look into more options, either store keys on a seperate luks usb key or on a hardware securety key like Nitrokey. For
sbctlthere is already a roadmap feature for hardware security keys, I hope this comes soon :)100% if you have enabled "Safe browsing" (which is enabled by default). This also applies to Firefox, but I don't know if there is enabled by default.
Well... if you have your own keys (like I do) you have to store them somewhere. That somewhere is probably somewhere on a computer where they are used so you can update the kernel. If you have private keys, you can probably bypass secure boot.
Is there a way to have private keys stored on a nitrokey that has to be plugged in for every kernel update?
We can switch ISP???
I always open settings on every app or website to see what I can change. This gives me feeling like this is something made just for me and I will use it for longer. Except KDE, this has way too many settings.
Yes, Tor recently made a change to that. This does increase fingerprinting but not by much. A lot of Tor users are using Linux rather than Windows.
Nice stuff, I use a lot of them. And for things that are missing:
Phone: Fossify Phone
Contacts: Fossify Contacts
VPN:
Office: Collabora Office
PDF viewer (when full office app is jut too much): PDF Viewer from GrapheneOS Apps Store
PDF scanner: OSS document scanner
Camera: Stick with preinstalled, it always works the best.
YT Music: Harmony Music
Maps: Organic Maps
Keyboard: FlorisBoard