Linux

non copyleft software in general1

Uh, um... I do not like how I have to install microsoft fonts seperately to have times new roman on my resume?

Bluetooth support can be a mix bag one point my keyboard constantly disconnects for every few minutes likely due to the hardware aggressively try to save power.

Suspending can be 50/50 especially on old hardware. Either you get it back up and running or you will have to forcibly shut it down since it refuses to accept any commands.

Security should be the default, but instead a lot of security features are optional things we have dig through docs to set.

TPM support is getting more common, using it should be too. Detected during install? Set it up as part of LUKs during install, and enable a password, and provide option for TANG (both usage or deployment).

fscrypt should be enabled by default and keys set by logical differences of file types. (Yes on top of LUKS). Honestly setup following selinux profiles and per user is a reasonable default. Hardware wrapped keys should be default.

Encrypted memory an option for this CPU? Enable it. Features for multiple key memory encryption? Enable it. Encrypt on a per VM and per container level by default.

Each service should be containerized, connections made explicit (ideally with l7 rules, l4 at least). If a user want to tinker with have a dev mode that opens that service up, with expectation that it's temporary (track and warn user when active). Each service should run as it's own non root user.

Each application should containerized. Wayland should be default to minimize shared data. Access by apps should be explicit and user approved and user configurable. Application should never run as root and escalations should be temporary and explicitly approved by the user. Application to the network should be explicit per connection and l7 aware.

MACSec WPA3 pki should be available during install. Wireless WPA3 PKI option should be default on wireless setup. IPSec/Wire guard VPN/Tor should be available option by default on setup. Vlan tagging should be available options on setup.

FIPS or equivalents should be enforced by default. Old encryption methods/cipher/etc should require explicit approval by the user.

Selinux should enabled by default and selinux tagging should be exposed in user applications, so users can choose the security levels, privacy tags (medical or tax docs or etc), or pseudonym access they want.

Sudo should be setup by default for least privileged roles and not god mode access. The combination of those into a single user could look indistinguishable but it should be set and ready for adding users that are limited in scope.

Encrypted backups following the 321 rule (at least 3 backups, 2 different types of media, 1 off site) should be the default and configurable on install. Schedule and triggered backups should be frequently (ideally constantly backup, with snapshot ting being periodic).

Multiple factor logins should be the default. Support for smart card, key fob, OTP, biometric, plus password built-in and encouraged on install.

Number of known CVEs for hardware, packages, and configurations should be tracked and obviously available for privileged users. Hardware missing for full best practices (like TPM 2.0, memory encryption support, etc). Software source should be kept easily accessable to users for remove and modifications. Software should adhere to SLSA build practices, exception explicitly choosen the user.

Systems should be immutable with expectations being explicit to the user and triggering snapshot ting.

DNSSEC and DNSoTLS/DNSoHTTPS should be default and configurable on install.

NTS should be default for NTP configuration. Hardware time sources should be configurable on install.

Applications should be privacy preserving by default (not defaulting to Google for example).

These are just off the top of my head stuff, stuff I had to annoyingly learn and set up myself to harden systems instead of it just being part of sane defauls. CIS bench mark has more controls that should be set.

I would love to figure out how to make the back and forward buttons on my super basic logitech mouse work. Last I looked, I had to install some mouse configuration app and do some manual stuff to program the buttons. I gave up.

Nothing to hate... some forums have turned pretty caustic but other than that, the software and the community are awesome

Re Flatpaks, I did not like them so I do not use them.. not need to hate a thing I have barely any interaction with, choosing not to use them has not limited me at all

Never had wifi power management issues either (15 years on Linux)

Honestly, the fact I don't have as much time as I'd like to contribute workarounds.

Take yesterday, I got Magic and Mayhem (the classic) running via wine, but I had to create a new wine prefix to remove dpi scaling (because, Apparently, the winecfg graphic tab is global, and if dpi scaling is used it truncates the game's display). Still can't get the music working, but that's what MOC is for, and I did use an old cracked version.

I want to make a lutris install script for this, but I lack the time. That's my main dislike of Linux - I wish there was a solid indexed forum to share game workarounds that had a drop-down search by game.

You are still rolling the dice whenever you really need some specific specialized proprietary software. Especially if you need to get it running ASAP and without major issues. It might work out of the box with wine, or it might not. You just don't know and that

Gaming is better, but it's still gaming, just toys.

Mostly video related.

YouTube videos are hella pixelated and sometimes the audio de syncs.

Also the active blocking some companies do with DRM. Things like competitive online games and some streaming services like Peacock.

Just the absolute resistance a lot of developers have.

I hate that smb is still the standard lan filesharing protocol. I used nfs once and it kinda sucked. I just want smb but without mangled filenames. Basically I hate when I have a substandard experience because of Microsoft.

There are always problems with the global menu widget on Plasma. And recently it has been refusing to work as a single button, instead I have to switch to showing all options as separate buttons which looks terrible with my panel setup.

Also applications making packages that could have easily been optional, required, just because users will think the app has broken functionality otherwise. KDE Plasma handles this best by replacing setting pages in the setting app with a note with instructions and showing normal warnings in other apps.

Lack of a single standard way of installing and removing software.

Some software on my computer comes from APT, some are installed using deb file, some from Flatpak, some from Snap, some are AppImages, some are installed by a random shell script, some are Progressive Web Apps and finally some have custom installers (like Jetbrains). If I want to uninstall an app, I often don't know where to even look.

All of that happens despite Linux Mint (the distro I'm using) have an app for installing software. It makes things a little easier, but still doesn't cover every possible option.

Bluetooth support that only sometimes works with my soundcore q30's.

Multithreaded performance is awful. The system becomes completely unresponsive if a single process uses a lot of CPU despite another core being available. Copying a file in the background slows everything down to a crawl.

That and laptops. Will hibernation work this time? Will it wake up or do I need to forcefully restart it? Will my second monitor work after hot-plugging it? Will the battery last 2 or 6 hours this time?

Unreproducible, random bugs that can be temporarily solved by repeating your actions a bunch of times until it works. Drives me nuts, and they show up all over the place.

Electron apps (more like erection apps), I rather burn my computer quit civilization and live on a deserted island than using any apps that has electron as a dependency.

Systemd.

Only because I've used something else - anything else - as an integrator and packager, and everything else is more stable, more consistent, more reliable and more isolated.

This thing is looking for sploits.