• 0 Posts
  • 20 Comments
Joined 5 days ago
cake
Cake day: November 20th, 2024

help-circle
  • Some made a pull request with all the changes made already. The issue that the PR addressed was the excessive use of he/him in the docs when referring to developers (aka the person reading the docs). Contributors expressed that they didnt think using male only pronouns in the docs made much sense when referring to any developer reading the docs. This wasn’t some entitled person trying to force the ladybird dev to rewrite the docs, all they needed to do was merge the changes.






  • N.E.P.T.R@lemmy.blahaj.zonetoLinux@lemmy.worldNyxt - lisp browser
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    9 hours ago

    In addition, on that website under “Manual>Troubleshooting”, the manual states the following:

    Bwrap error on initialization (Ubuntu)

    If Nyxt crashes on start due to bwrap, then disable or configure the apparmor service.

    This vague wording is terrible advice. Disabling AppArmor outright destroys Snap sandboxing and the general security of your operating system. Configuring AppArmor is a better option, but a specific should be given as an example.

    For example, from the readme file on Cromite’s Github repo:

    “”" 1. Creating an apparmor profile for cromite

    Create /etc/apparmor.d/chrome, and write:

    abi <abi/4.0>,
    include <tunables/global>
    profile cromite /home/user/cromite/chrome-lin/chrome flags=(unconfined) {
    userns,
    include if exists <local/chrome>
    }

    replacing the cromite binary path with where you have placed cromite.

    Now, run sudo apparmor_parser -r /etc/apparmor.d/cromite to apply the changes.

    2. Disabling the restriction until next reboot

    sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

    3. Disabling the restriction permanently

    Add kernel.apparmor_restrict_unprivileged_userns=0 to the file /etc/sysctl.d 60-apparmor-namespace.conf. Create the file if not exists. “”"

    EDIT: I hate trying to get Lemmy to format multiline code blocks.


  • Currently only supports WebKit and Blink (experimental) as underlying browser renderers. The description of the browser starting with the words “Nyxt is a browser with deeply integrated AI […]” is a turn-off for me. If it is for powerusers, call it what it is. It could be a LLM or some algorithm, idk.

    I may check it in a year. For now, for Blink (Chromium) engine use Cromite browser + uBlock Origin Lite, for Gecko (Firefox) use Librewolf or Mullvad browsers.

    The browser app is the only program where (to me) Security/Privacy fully supersedes any concerns customizability and usability.








  • I don’t like Snaps either, but it isn’t a that big of a deal. Ubuntu is still vastly more private than Windows. I do prefer Fedora much more because it actually sandboxes system services with SELinux polices. Snap creates a better sandbox for applications than Flatpak, but it is slower to launch applications, depends on AppArmor (which is less secure than SELinux), and uses hard coded package repo (centralized design).