• 0 Posts
  • 25 Comments
Joined 1 month ago
cake
Cake day: August 28th, 2025

help-circle











  • missfrizzle@discuss.tchncs.detoLinux@lemmy.mlLinux security
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    edit-2
    18 days ago

    the most secure possible? you’ll need to learn a ton. you’ll get there, but it’ll take a while.

    decently secure? install Linux Mint, install your updates, don’t run sketchy commands with URLs in them unless you know what you’re doing, maybe follow a hardening guide. you’ll be okay.

    if you need to be extremely secure and private, install Tails on a USB stick. it will be slow and frustrating, and you’ll need to save files to a second USB drive, but it will probably keep you pretty safe, and it’s decently user-friendly. just make sure you keep Tails updated! you’ll have to do that by flashing the new Tails onto a new USB drive, there’s no easy way around that.

    those are your two most user-friendly, safe approaches.




  • yeah! there’s a punishing learning curve but it’s sooo frikkin powerful once you get it. for my NixOS config on WSL2, I have it cross-compile age-plugin-yubikey for Windows, then stuff the (absolute) path in a wrapper script to use agenix with passage as a git-credential-helper storage, all of which gets set up using home-manager as my default git config. and it all just gets automatically built and configured when I nixos-rebuild switch, so I can sync it to my other machines.

    unfortunately I have no idea how it works anymore lol. that’s the problem, it’s so resilient I forget how to change it! but I can’t imagine doing that in any other Linux distro.