stilic

https://social.oss.zone/users/stilic

Public Key

npub13v048y7apfmjn56vm4x4wnc67s7r94z2a5xe9qy29zr0g3dvfu6s56afrn

NIP-05 Address

stilic_at_social.oss.zone@momostr.pink

Profile Code

nprofile1qqsgk86nj0ws5aef6dxd6n2hfud0g0pj639w6rvjsz9z3ph5gkky7dgprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnttg46ne

Publishing to

relay.momostr.pink

Author Public Key

npub13v048y7apfmjn56vm4x4wnc67s7r94z2a5xe9qy29zr0g3dvfu6s56afrn

Show more details

Last Notes

2026-05-06 05:43:32 UTC

- reply

What the fuck are you on? WHAT YOU'RE PROMOTING IS LITERALLY ILLEGAL.
I'm not even queerphobic, you passing literal incest at it was fine and making shit up about me and this wiki I used is just... weird and fucked up
For fuck sakes, get out of fedi if you can't understand where YOU are going

2026-05-06 05:18:29 UTC

- reply

I'm sorry but if it's mentioned in https://lgbtqia.wiki/wiki/Harmful_Terminology#Paraphilic_Terminology you don't really have a say
It's just Bad, period.

2026-05-06 05:06:09 UTC

- reply

y'know what
I'm not going to argue with someone who is openly supporting incest
That's it, you lost all your credibility

2026-05-06 04:48:39 UTC

- reply

Well this is coming from a security researcher who knows a lot about Linux security issues so I think they know what they're doing unless someone proves me wrong or smth
Bubblewrap is pretty much able to do around 90% of the stuff systemd already does in terms of sandboxing without having to get its features reimplemented in the init system itself
There are use cases for sandboxing a whole bootstrap process (https://github.com/fosslinux/live-bootstrap) or just building a few packages in an isolated environment (as done by a few package build systems), so I'm pretty sure that is sufficient on its own along with seccomp
Bubblewrap has a large amount of CLI options if you have specific requirements in mind, it's very polyvalent
Even ChromeOS has a tool for similar purposes (https://google.github.io/minijail/)

2026-05-06 04:33:33 UTC

- reply

what do you think about the approach described in the last paragraph of this? https://madaidans-insecurities.github.io/guides/linux-hardening.html#systemd-service-sandboxing
i don't necessarily think it's needed to reimplement that on your own but that's how i see things on my own so i dunno tbh

2026-04-10 19:36:35 UTC

- reply

AFAIK GrapheneOS or even AOSP without custom patches is still hundred times more secure than most Linux desktop distros
There's a reason GOS in particular is used by criminals