A spreadsheet

The Tunnel daemon creates an encrypted tunnel between your origin web server and Cloudflare’s nearest data center, all without opening any public inbound ports.

From https://www.cloudflare.com/products/tunnel/

The good news is that in order to exploit the new vulnerability, the attacker first has to obtain kernel level access to the system somehow - by exploiting some other vulnerabilities perhaps.

The bad news is once Sinkclose attack is performed, it can be hard to detect and mitigate: it can even survive an OS reinstall.

That makes some sense I suppose. What was it about DragonFlyBSD and macOS kernel?

Faster in what sense? Would you kindly point me to the benchmarks used? It’s easy to find the opposite results so I’m curious.

You’re right - I misunderstood the question and thought you meant the distribution images

At least Kali and Arch do

Cloudflare tunnel is an option, you can even scrap your own nginx

Sounds like you have a pretty okay experience but some specific things don’t work - please take some time to report bugs if you haven’t yet!

Are you confusing security and privacy?

You can try OpenCore Legacy Patcher: https://dortania.github.io/OpenCore-Legacy-Patcher/MODELS.html

Still waiting on the list of those swinging/swiping changes that the other DEs are making

I’ll bite: big swiping changes like what?

Unless you’ve used something secure for formatting or wrote data to the SD after, consider attempting data recovery.

That’s not my experience - have been using arch for around four years and it broke only once by not letting me log into the system after I failed to update pam configs after the system upgrade.

I often stumble on this example of nix usage - a one-off shell with a a specific package. This is such a niche and seemingly unimportant use case, that it’s really strange to have it mentioned so often.

Like literally what’s the point of having a shell with ffmpeg? Why not simply install it? Even if you need something just once, just install it and then uninstall it, takes like 10 seconds.

The other use case that is often brought up is for managing dev environments, but for a lot of popular languages (Python, Node, Java, Rust, etc. ) there are proven environment management options already (pyenv and poetry, nvm, jenv, rustup). Not to mention Docker. In the corporate setting I haven’t seen nix replacing any of these.

From my limited experience using home manager under Linux and macOS:

• GUI app shortcuts work in neither of the OSs
• error messages are about as readable as the ones you get for C++ templates
• a lot of troubleshooting searches to unsolved GitHub issues

All in all nix seems like a pretty concept but not too practical at the moment.

There’s no ZFS support in OpenBSD is there?