• 0 Posts
  • 118 Comments
Joined 2 years ago
cake
Cake day: August 6th, 2023

help-circle
  • Majestic@lemmy.mltoLinux@lemmy.mlAntiviruses?
    link
    fedilink
    arrow-up
    13
    ·
    edit-2
    2 days ago

    I would say there are not any worth recommending and that best practices are avoiding running random scripts you don’t understand, keeping software up to date with package managers, and using virtualization tools. Also look into Portmaster perhaps which is an interactive firewall.

    Meta rant on this subject

    What frustrates me about the answers these questions get is no one ever offers tools comparable to Windows tools, perhaps I think increasingly because they simply don’t exist outside of very expensive subscription enterprise offerings that require plunking down no less than a thousand dollars a year. (Certainly none of the major AV vendors offers consumer Linux versions of their software though most offer enterprise endpoint Linux that comes with the caveat of minimum spends of several hundred dollars if not several thousand a year)

    ClamAV is primarily a definition AV, the very weakest and most useless kind. Sure it’s kind of useful to make sure your file server isn’t passing around year old malware but it’s basically useless for real time prevention of emerging and unknown threats. For that you needs HIPS, behavior control, conditional/mandatory access control, heuristics, etc. ClamAV has one of the worst detection rates in the industry. It’s just laughably bad (often under 60%) so it’s really not a front line contender at all.

    Compare clam to consumer offerings with complex behavioral control like ESET, Kaspersky, etc that offered “suite” software that featured the aforementioned HIPS, behavioral control, complex heuristics to detect and in real time block malware-like behavior (for example accessing and then seeking to upload your keepass database files or starting to surreptitiously encrypt all your user files using RSA4096) and it just isn’t in the same ballpark as anything competently done in the last 20 years.

    I haven’t used or relied on a traditional AV for definition detections for years. They’re worthless, it’s impossible to keep up. The AV’s I’ve deployed are for their heuristics, behavior control, HIPS, etc which actually stops new and emerging and unknown threats or at least puts real obstacles in their way. So what Linux needs, what users need is software like that, forget the traditional virus definitions, something with behavior control, HIPS, and some basic heuristics for “gee this sure looks like malware behavior, better ask the user whether they want and intend this”.

    “Just be smart about what you run” isn’t a realistic solution when people say Linux is for everyone including their tech illiterate relatives. Yes, Linux is a lot safer if you just install things from package managers but that isn’t bulletproof either as we’ve seen a number of spectacular impact upstream malware insertions into build repos for huge software projects in recent years.

    Just maintain back-ups isn’t helpful with smart cryptolocker software which may hide itself for weeks or months and encrypt your files as you back them up. Nor does it protect against account compromise from all your passwords being stolen or a keylogger. Nor does it defend you against persecution after being hit by mercenary/government police-ware and spyware from overreaching governments and makes the bar for them getting evidence you’re an illegal gay person or whatever that much lower technically in terms of capabilities.

    Back-ups are disaster recovery. Everyone should have them but part of a layered defense is preventing the disaster and inconvenience and invasion of privacy and so on before it happens. Having your identity stolen or accounts taken over isn’t as simple as reverting to a back-up, it can result in hours, days of phone calls, emails, stress, hassle, etc that can drag on for weeks or months.

    Portmaster is a start for this type of system control and protection as it’s a very effective interactive firewall but as far as I know there aren’t any consumer available comprehensive behavior control + HIPS type Linux desktop security solutions. There are several vendors of default deny mandatory access control with interactive mode for Windows but none offer solutions for Linux that aren’t part of enterprise sized contracts beyond affordability and reason. If anyone knows otherwise I would love to know of these solutions as I want to implement them on my Linux machines as I am not comfortable with just my network IPS and firewall solutions by themselves without comprehensive end-point security.



  • I think the home media collector usecase is actually a complete outlier in terms of what these formats are actually being developed for.

    Well yeah given who makes it but it’s what I care about. I couldn’t care less about obscure and academic efforts (or the profits of some evil tech companies) except as vague curiosities. HEVC wasn’t designed with people like me in mind either yet it means I can have oh 30% more stuff for the same space usage and the enccoders are mature enough that the difference in encode time between it and AVC is negligible on a decently powered server.

    Transparency (or great visual fidelity period) also isn’t likely the top concern here because development is driven by companies that want to save money on bandwidth and perhaps on CDN storage.

    Which I think is a shame. Lower bitrates for transparency -should- be the goal. The goal should be to get streaming content to consumers at a very high quality, ideally close to or equivalent to UHD BluRay for 4k. Instead we get companies that bit-starve and hop onto these new encoders because they can use fewer bits as long as they use plenty of tricks to maintain a certain baseline of perceptual visual image quality that passes the sniff test for your average viewer so instead of getting quality bumps we just get them using less bits and passing the savings onto themselves with little meaningful upgrade in visual fidelity for the viewer. Which is why it’s hard to care at all really about a lot of this stuff if it doesn’t benefit the user in any way really.


  • And which will be so resource intensive to encode with compared to existing standards that it’ll probably take 14 years before home media collectors (or yar har types) are able and willing to use it over HEVC and AV1. :\

    As an example AV1 encodes to this day are extremely rare in the p2p scene. Most groups still work with h264 or h265 even those focusing specifically on reducing sizes while maintaining quality. By contrast HEVC had significant uptake within 3-4 years of its release in the p2p scene (we’re on year 7 for AV1).

    These greedy, race to the bottom device-makers are still fighting AV1. With people keeping devices longer and not upgrading as much as well as tons of people relying on under-powered smart-TVs for watching (forcing streaming services to maintain older codecs like h264/h265 to keep those customers) means it’s going to take a depressingly long time to be anything but a web streaming phenomenon I fear.




  • Read the linked source FFS.

    Me: Provides evidence that in decades past last century they were paid for and did dirty work of British intelligence, at no point were the people responsible cast out, at no point was this influence purged and processes and organs put in place to prevent this

    Me: Also provides evidence they are in the bag as of the twenty-teens they were doing propaganda work for the British against Russia in coordination with the British state through cutouts

    You: um acktually do you have any proof they’re still doing that this month? No? Checkmate.

    Yeah it’s called a pattern of behavior. Why would they change? What would cause this? Sudden secret come to Jesus moment that fits your idealistic wants and needs in this particular argument? The burden of proof is on YOU and on THEM to show a sustained pattern of change. More than to show that but to admit, call out, and have a reckoning about their past behavior, bring it to the front, make everyone aware of it, apologize, and explain how they’re changing and what they’re specifically doing to prove this isn’t happening.

    Partnering with Tass in what way? As wire agencies? Carrying some of their stories? That’s proof of nothing. You think because some org that’s deep in with the intelligence apparatus of one state has some casual or professional cover level contact with a state media organ of a rival state that is proof of what? Impartiality? That they’re actually Russian spies using British intelligence?

    What I linked claims they agreed to use journalistic contacts within Russia to influence Russians and others within the CIS sphere for the interests and goals of the UK. If I was doing that I’d want contacts like that including contracts to carry out that work and legitimize my stories to my targets. I’d want to pretend to be friendly, professional and open while carrying out this work.

    The new leaks illustrate in alarming detail how Reuters and the BBC – two of the largest and most distinguished news organizations in the world – attempted to answer the British foreign ministry’s call for help in improving its “ability to respond and to promote our message across Russia,” and to “counter the Russian government’s narrative.” Among the UK FCO’s stated goals, according to the director of the CDMD, was to “weaken the Russian State’s influence on its near neighbours.”

    Reuters and the BBC solicited multimillion-dollar contracts to advance the British state’s interventionist aims, promising to cultivate Russian journalists through FCO-funded tours and training sessions, establish influence networks in and around Russia, and promote pro-NATO narratives in Russian-speaking regions.

    In several proposals to the British Foreign Office, Reuters boasted of a global influence network of 15,000 journalists and staff, including 400 inside Russia.


  • No.

    They are a British government and intelligence cut-out. That doesn’t mean they always lie but they skew coverage, are manipulative, dishonest, and serve the interests of the British state. They’ve been that way for decades, receiving funding in the 1960s and 1970s from MI6.

    https://thegrayzone.com/2021/02/20/reuters-bbc-uk-foreign-office-russian-media/

    A series of official documents declassified in January 2020 revealed that Reuters was secretly funded by the British government throughout the 1960s and 1970s to assist an anti-Soviet propaganda organization run by the MI6 intelligence agency. The UK government used the BBC as a pass-through to conceal payments to the news group.

    In the modern era they still target Russia under the direction and funding of the UK government. One cannot be in bed with spies like these and hope to hold them and their friends like the US, EU, etc to account.

    The fourth estate in general in the west is highly compromised. Russia and China and many others openly fund state media and the west decries it as propaganda, but they never hide it. Whereas the west secretly funds, manipulates, and controls supposedly independent press and declares itself the free one while it lies to the rest of the world and their own populations.

    As a wire agency Reuters does tend to have less room for deception than say Fox News due to a lot of short form news breaks. So in that regard they’re more trustworthy than say CNN or Fox News but that doesn’t mean a lot.



  • I need at least sheets that are thick enough not to let light through, not super thin sheets. It’s annoying in summer months. I need my feet covered because I’m paranoid about mosquitos though it’s rare for them to actually get inside and I need my head/eyes covered as well or it just doesn’t feel right, partly about light and muffling noise.

    And for me it’s definitely a horizontal sleeping thing too. Propped up I can fall asleep while being only partially covered or hardly at all but horizontal I have to have it.


  • Okay you say this but these tools are privately owned. What happens when one day the provider slams them with a 1000% price increase? They can either pay or go back to doctors who detect cancer even worse. It gives these AI companies undue influence and turns a tool into a crutch and an addiction which can be leveraged to drive up healthcare costs and punish providers who don’t play ball perhaps resulting in deaths from doctors in systems that don’t have access to the tool because they’re in a payment dispute with it or they had it but stopped paying for it and patients may not know any of this.

    This is a nightmare for human beings who have fought hard to grow smart, to be intelligent as a species and to have educated professionals who have learned to use their brains be instead trained by these machines to stop using their brains, to atrophy them, to become dependent on these systems and worse than before the moment they are removed.

    It will be used to attack the wages of doctors and I guarantee that they won’t be compensated with cheaper schooling (doctors need at least 6 years of university plus additional years in training before being able to practice on their own, it’s an immense expense and burden in a time of rising costs and huge debt). Which will lead to shortages of doctors and they’ll be replaced with AI and nurses not up to the task and we’ll be told this is fine. Having access to a thinking human being may become a gated luxury that few insurance companies want to shell out for until after you’ve been evaluated by AI systems several times and only IF those systems deem it necessary. Some AI systems will make mistakes that kill patients and insurance companies will be fine with this as a quickly dead patient is usually cheaper than paying for months or years of treatments and/or surgeries so they’ll have a perverse incentive to push patients towards those systems. Doctors take an oath not to do harm, not all take that as seriously as they should but usually there’s some compassion there whereas a computer system would not care one bit if you’re denied and unlike a doctor won’t fight for you against the insurance companies.


  • Probably the best choice if OP is dreading 11. Put it off, hope that in 3 years Linux support has matured even more for their use cases.

    MS support has used this software themselves in an edge case where they couldn’t get Windows to active properly.

    You have two options here:

    1. Enable the extended support (no pay needed with this software but if OP absolutely refuses to run it they can pay Microsoft money directly though it takes work to find where to do that at) and run on that for 3 years until 2028.

    2. Upgrade to LTSC IOT using the method they outline at the link there. Again they have two options, one is free, the other is following that guide but paying for a gray-market key (G2a for instance) for LTSC IOT which would avoid running this software on their PC but would mean paying someone some money for a corporate volume key they’re not technically allowed to sell. Which means support until 2032.







    • Mustard, lots (none of that Frenches garbage, either a good dijon or spicy brown),
    • diced raw onions,
    • finely diced garlic
    • dill relish,
    • peppers (cayenne or jalapeno)
    • sauerkraut
    • chili sauce (optional overload topping)

    It’s a real challenge getting hot dog buns that can accommodate all those toppings, I swear the manufacturers either expect really skinny dogs or hate toppings. Only a few premium brands seem to carry buns that will bear it all, the store brands and things like ballpark are hopelessly inadequate for more than mustard and one other topping at best.



  • Not even a choice.

    If you choose over 100F you will see electronics failing more often, working harder, less efficient, working badly, etc because the heat is causing them to throttle in various ways. In the modern world it is far, far easier to heat up a space with a house full of electronics and humans than it is to keep it cool. The energy required to raise the temperature from say 5 degrees F to a more comfortable 40 degrees (35 degree change) pales in comparison to the energy required to keep yourself and your devices cool a mere 10-15 degrees less to around 90 degrees which is still uncomfortably hot and sweaty.

    I’ll note that a constant 100 degrees is more than hot enough to cause various foods, medications, substances to break down and go bad. Check your medicine cabinet, most of your pills including over the counter are only rated for storage at up to 86 degrees. Your medicine will lose efficiency or go bad in some, perhaps many cases. Your food outside your fridge will spoil more quickly, mold and bacteria will grow more quickly and readily. Your fridge itself will work harder and die sooner.

    The tap water will run hot or warm most of the time meaning a shower won’t necessarily cool you off much.

    The colder temperatures are cheaper all costs considered, feel better, can be negated at a moment’s notice with socks, a jacket, and a blanket.

    It’s easy to insulate a home against extreme cold and just retain heat you generate inside including by your body and devices. It requires a lot more effort to keep the inside cold when both the outside and things inside are generating heat and trying to warm it up.

    This is a reason why climate change is a nightmare not just for human comfort but on so many levels. Our electronics are going to operate less efficiently in a warmer world and draw more power to do so.