stilic

French 19 y/o programming buddie with ASD
Taken

Pronouns: he/him/they/them
Website: https://stilic.oss.zone
PFP: https://x.com/daviseffy

Last Notes

2026-05-06 05:43:32 UTC

- reply

What the fuck are you on? WHAT YOU'RE PROMOTING IS LITERALLY ILLEGAL.
I'm not even queerphobic, you passing literal incest at it was fine and making shit up about me and this wiki I used is just... weird and fucked up
For fuck sakes, get out of fedi if you can't understand where YOU are going

2026-05-06 05:18:29 UTC

- reply

I'm sorry but if it's mentioned in https://lgbtqia.wiki/wiki/Harmful_Terminology#Paraphilic_Terminology you don't really have a say
It's just Bad, period.

2026-05-06 05:06:09 UTC

- reply

y'know what
I'm not going to argue with someone who is openly supporting incest
That's it, you lost all your credibility

2026-05-06 04:48:39 UTC

- reply

Well this is coming from a security researcher who knows a lot about Linux security issues so I think they know what they're doing unless someone proves me wrong or smth
Bubblewrap is pretty much able to do around 90% of the stuff systemd already does in terms of sandboxing without having to get its features reimplemented in the init system itself
There are use cases for sandboxing a whole bootstrap process (https://github.com/fosslinux/live-bootstrap) or just building a few packages in an isolated environment (as done by a few package build systems), so I'm pretty sure that is sufficient on its own along with seccomp
Bubblewrap has a large amount of CLI options if you have specific requirements in mind, it's very polyvalent
Even ChromeOS has a tool for similar purposes (https://google.github.io/minijail/)

2026-05-06 04:33:33 UTC

- reply

what do you think about the approach described in the last paragraph of this? https://madaidans-insecurities.github.io/guides/linux-hardening.html#systemd-service-sandboxing
i don't necessarily think it's needed to reimplement that on your own but that's how i see things on my own so i dunno tbh

2026-04-10 19:36:35 UTC

- reply

AFAIK GrapheneOS or even AOSP without custom patches is still hundred times more secure than most Linux desktop distros
There's a reason GOS in particular is used by criminals