Yup. You can only add the nopax flag as root, so if your system is already hosed, not much else you can protect. Root has access to ring 0 so anything goes with access like that. Stuff like pax would slow them down for sure and stop script kiddies, but root access is root access.

No privileged accounts can't do anything with the nopax flag. That's why you should configure your system to not run things as root as much as possible. Personally; on desktops, I don't even use a sudoer natively. I have to su into my sudoer account in order to run root commands.

GrSecurity adds so many layers of protections to the kernel. They are literally decades ahead of the vanilla Linux kernel in terms of security. With all of the hardened GrSec settings checked/configured correctly, it stops the majority of 0 ring exploits (at least when I was running it before they went full GPLv2).

PaX is an awesome part of GrSec. Mprotect stops any read and write and execute access to memory in both user and kernel lands (only rx or wx). Stuff like web browsers won't work unless you have a program to mark it in elf to not use pax. However, this kills a lot of exploits with that turned on by itself (though there are probably work arounds if you are developing exploits which the other features would hopefully catch). That's why people installed 3rd party unmainlined security patches, but that's just me maybe idk.

I hope this venture will be more fruitful than the copy paste code that people kept trying to push to the hardened Linux kernel project (despite the maintainers best intentions and countless efforts to stop that)

I left a negative review on a "AAA" game and the dev responded to it by gas lighting me that I didn't play it right.

TL;DR starfield sucks

i like putting a comma in the middle of my password so when they export it out in csv, it separates the password into a new line and probably messes everyone of their passwords on that list from then on.

I just hate murderous regimes that murder millions of their own people

FTFY

People can and do make idols of anything, but Linux in itself is not a religion.

What's wrong with clapping when the airplane land? I miss that when it was the norm when I was a kid

Non- phone carrier variants of Google Pixels because of Grapheme OS. The crap that Verizon pumps out blocks the boot loader to be unlocked, but the ones google and amazon sells can do OEM boot loader unlocks.

Edit: also want to point out, pixels usually get the most updates out of all androids. So long as its in the support window, google will update drivers and kernels for it.

Lord have mercy. Canada has lost their minds.

Just another reminder that you don't own anything digital - companies do. Forgo these cheap cloud products, use hardware that you can control

Googles warranties are the worst. I bought a pixel 7a, and within 5 weeks it died. They would not fix it or return it because it was outside the 30 days, but they did have a year manufacturer warranty. However, when an authorized repair shop I took it in noticed a small little scratch where the case snapped on, they wouldn't honor it. Don't ever get a warranty from Google for anything, they're awful.

My GF lives by a mosque where they blast their off-tone, lazy chants at full blast. Its awful. Its so loud it rattles her windows. Apparently its to evangelize, but I can't imagine anyone getting swayed when their ear drums burst from poorly toned chants.