Unfortunately you chose the wrong distro for your friend - Linux Mint isn't good for gaming - it uses an outdated kernel/drivers/other packages, which means you'll be missing out on all the performance improvements (and fixes) found in more up-to-date distros. Gaming on Linux is a very fast moving target, the landscape is changing at a rapid pace thanks to the development efforts of Valve and the community. So for gaming, you'd generally want to be on the latest kernel+mesa+wine stack.

Also, as you've experienced, on Mint you'd have to manually install things like Waydroid and other gaming software, which can be a PITA for newbies.

So instead, I'd highly recommend a gaming-oriented distro such as Nobara or Bazzite. Personally, I'm a big fan of Bazzite - it has everything you'd need for gaming out-of-the-box, and you can even get a console/Steam Deck-like experience, if you install the -deck variant. Also, because it's an immutable distro with atomic updates, it has a very low chance of breaking, and in the rare ocassion that an update has some issues - you can just select the previous image from the boot menu. So this would be pretty ideal for someone who's new to Linux, likes to game, and just wants stuff to work.

In saying that, getting games to run in Linux can be tricky sometimes, depending on the game. The general rule of thumb is: try running the game using Proton-GE, and if that fails, check Proton DB for any fixes/tweaks needed for that game - with this, you would never again have to spend hours on troubleshooting, unless you're playing some niche game that no one has tested before.

From what I've heard so far, it's NOT an authentication bypass, but a gated remote code execution.

There's some discussion on that here: https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

But it would be nice to have a similar digram like OP's to understand how exactly it does the RCE and implements the SSH backdoor. If we understand how, maybe we can take measures to prevent similar exploits in the future.

This is informative, but unfortunately it doesn't explain how the actual payload works - how does it compromise SSH exactly?

FYI: The blog post by binarly is a cleaner source and was published a whole week ago.

If I'm not mistaken, I believe the 2018 J3 has a locked bootloader. The fact that I can't find even a SINGLE custom ROM on XDA for this model means it's highly likely that the bootloader is locked, and/or the device isn't dev friendly (no kernel sources available etc).

so I guess doing the same on my smartphone wouldn't be too hard.

Mate, you've no idea... Smartphones are a completely different ball game to desktops. You could try and compile your distro, but without the kernel sources and drivers for your specific model, nothings gonna work. You won't even be able to boot the damn thing. And even if you did have those, it's going to take a LOT of effort just to get basic OS functionality working. Forget getting actual phone stuff working, like making calls etc - that's next to impossible. Even large projects like PostmarketOS struggle to get basic functionality going even on dev-friendly phones.

But you can stop dreaming about all the above if you can't even unlock the bootloader.

Basically, what all this means is that there's no point wasting your time on the J3. Stop right now and don't waste any further time on this.

If you'd really like to run GrapheneOS / Linux on your phone, your best option is to sell your J3, and get a used Google Pixel from Swappa/eBay or something.

They should open up RCS first before making demands of Apple.

$19bil is still way too overestimated. I'd laugh at anyone who pay this much if Musk ever decided to sell.

Is Android going in the right direction?

Not really, IMO. As a user of Android since v1.5 Cupcake, it's disappointing to see how locked down Android has become over the years. I still recall how I took a leap of faith when I ditched the then highly customisable and feature-full Windows Mobile, to the barebones Android - I believed in the opensource nature of Android, thinking how exciting it was to be on what could be a developer's and power user's dream mobile platform. Although the Android dev scene at the time was ascent, I could forsee an explosion of root utilities, mods and custom ROMs. And I was right - the early Android dev scene was so exciting. From cool and useful utility such as DriveDroid or Chainfire's CF.Lumen, to innovative custom ROMs such as Paranoid Android with their per-app DPI, Halo, Pie controls etc, the early Android scene was full of activity and really exciting as a power user.

But even as Android got more and more locked down, I still enjoyed following many of it's developments such as the projects Butter, Svelte, Volta, Treble and Mainline. However, I can't recall anything major or exciting in recent years.

As someone else here mentioned, nowadays all the good stuff seems to be Pixel exclusives (like motion deblur, 7 years or software updates etc). Plus, Google keep pushing more and more stuff towards their proprietary Play Services stack, encouraging developers dependency on them - including anti-freedom features such as Play Integrity (SafetyNet). All of this makes it increasingly harder to break free from Google's grasps, and as former fanboy of a company which once claimed to "not be evil", it makes me sad that the ecosystem I once looked fondly towards, is now something that I'm looking to move away from.

Pixel 8. No bloatware (except the Google bloat of course, but you can get rid of this easily), plus Google has now promised 7 years of updates - which is more than the iPhone. This would increase the resale value of the phone, and even if you don't want to sell it, you could always give it to a family member or something after say 3-4 years of use, and they'd still get many years of official updates remaining. This is great for reducing e-waste whilst still maintaining a good security posture.

And if you're privacy conscious, you could ditch the Google ecosystem completely and load GrapheneOS on it, and GrapheneOS is simple amazing in terms of privacy and security, and arguably has better battery life too (thanks to no Google bloatware running on it).

Solid Explorer. Why? Because I bought it ages ago and it still works fine. Even a decade later, it still gets regular updates, which shows that the dev cares about the app.

More importantly, I like that it jumps straight into my filesystem without any nonsensical abstract views, and I like that it doesn't come with any bloat (no junk cleaner or RAM booster crap), unlike other file managers. With other file managers these days, you open them and instead of seeing your files you get a bunch of mini apps or collections, which is NOT what I want. I just want a simple file manager, not an ecosystem. Thankfully, Solid isn't like that.

So even after all these years and all these updates, the app remains true to its original purpose and hasn't sold out or gone down the enshittification path, which is a refreshing change compared to what we've been seeing with other apps.

It's only good because of all the hard work being put in by the moderators. Unfortunately, behind the scenes, Lemmy sucks and is severely lacking in moderation tools to deal with spammers, trolls and sick people who post illegal content.

See this post for instance, I feel pretty bad for the mods who have to deal with such stuff: https://beehaw.org/post/7943139

Probably zero, since LibreOffice is a part of the repo.

And so far we’ve had 1,587,383 downloads from our site! (So that doesn’t include Linux distributions that package it themselves.)