deleted by creator

I wasn’t trying to give a positive side, I was just explaining why Microsoft wants the feature

If the executable binary has to be signed with a key, similar to the module signing key, Microsoft could sign their binaries

This, along with secureboot, would prevent the owner of the machine from running eBPF programs Microsoft doesn’t want you to run, even with root

The Ubuntu security team only supports the ~2,000 packages in “main”

Things like ffmpeg are in “universe” and only get security updates if you subscribe to Ubuntu Pro

ubuntu.com/security/esm

Debian’s security team has always been significantly more responsive than Ubuntu. It’s regularly had CVE fixes in older versions of Debian that newer versions of Ubuntu don’t bother to pull into universe

FWIW, if you decode to go with KDE and manage to delete your panel, it’s

• right click on the desktop
• enter edit mode
• add panel
• default panel

😉

My job is literally to make Linux distros using Yocto for various boards. I’m constantly writing new build scripts or updating build scripts, debugging the kernel/systemd/glibc and whatever libraries are on the system.

All of my work and personal desktops run some version of Fedora Atomic or a uBlue variant right now.

With distrobox/toybox/brew and using podman/docker/KVM+qemu, even as a tinkerer, it’s great