this post was submitted on 02 Apr 2025
34 points (100.0% liked)

libre

9933 readers
25 users here now

Welcome to libre

A comm dedicated to the fight for free software with an anti-capitalist perspective.

The struggle for libre computing cannot be disentangled from other forms of socialist reform. One must be willing to reject proprietary software as fiercely as they would reject capitalism. Luckily, we are not alone.

libretion

Resources

  1. Free Software, Free Society provides an excellent primer in the origins and theory around free software and the GNU Project, the pioneers of the Free Software Movement.
  2. Switch to GNU/Linux! If you're still using Windows in $CURRENT_YEAR, flock to Linux Mint!; Apple Silicon users will want to check out Asahi Linux.

Rules

  1. Be on topic: Posts should be about free software and other hacktivst struggles. Topics about general tech news should be in the technology comm or programming comm. That doesn't mean all posts have to be serious though, memes are welcome!
  2. Avoid using misleading terms/speading misinformation: Here's a great article about what those words are. In short, try to avoid parroting common Techbro lingo and topics.
  3. Avoid being confrontational: People are in different stages of liberating their computing, focus on informing rather than accusing. Debatebro nonsense is not tolerated.
  4. All site-wide rules still apply

Artwork

founded 4 years ago
MODERATORS
 

Asking for a friend

you are viewing a single comment's thread
view the rest of the comments
[–] lurkerlady@hexbear.net 13 points 2 days ago* (last edited 2 days ago) (2 children)

Its absurdly safe, they are basically their own containers (can't read outside of the container, sandboxed) and if you have bottles installed as a flatpak that is also a container. Linux also doesnt give easy root access to programs, so they can't do much damage. Most malware targets Windows, MacOS, and server side Linux. Due to how containerized most linux distros are, they avoid targeting linux desktop users.

[–] Edie@hexbear.net 18 points 2 days ago

Wine does not sandbox in any way at all. When run under Wine, a Windows app can do anything your user can. Wine does not (and cannot) stop a Windows app directly making native syscalls, messing with your files, altering your startup scripts, or doing other nasty things.
You need to use AppArmor, SELinux or some type of virtual machine if you want to properly sandbox Windows apps.
Note that the winetricks sandbox verb merely removes the desktop integration and Z: drive symlinks and is not a true sandbox. It protects against errors rather than malice. It's useful for, e.g., keeping games from saving their settings in random subdirectories of your home directory.

[–] dannoffs@hexbear.net 9 points 2 days ago

Due to how containerized most linux distros are, they avoid targeting linux desktop users.

What? Most desktop linux installs only have a few programs in containers. I think the only "containerized" thing I have on my system is the steam flatpak. It is growing in desktop use but containerization is much more of a server side thing.