As an actual M1+Asahi user and a gamer: Asahi is not there yet. Right now, if you're on macOS, Crossover (or Porting Kit) and/or Parallels is able to run more games and with better performance compared to Asahi (using krun + FEX). Also, Steam on macOS (non-native) is much more peformant compared to Asahi, where it's currently slow and glitchy.

But that will all change in the future once the Vulkan driver and TSO patches are ready. FEX is also seeing a lot of improvements, so by the end of the year, there's a good chance that gaming on Asahi would be much better than macOS.

It refers to modern Intel CPUs where there are two types of cores - performance cores (P-cores) and efficient cores (E-cores). This is similar to ARM's big.LITTLE architecture which we've seen in smartphones for many years already.

See: https://www.intel.com/content/www/us/en/gaming/resources/how-hybrid-design-works.html

First of all, I'm not the author of the article, so you're barking up the wrong tree.

You're using the unstable channel.

That doesn't matter in the big scheme of things - it doesn't solve the fundamental issue of slow security updates.

You could literally build it on your own, or patch your own change without having to wait - all you have to do is update the SHA256 hash and the tag/commit hash.

Do you seriously expect people to do that every time there's a security update? Especially considering how large the ecosystem is? And what if someone wasn't aware of the issue, do you really expect people to be across every single vulnerability across the hundreds or thousands of OSS projects that may be tied to the packages you've got on your machine?

The rest of your points also assume that the older packages don't have a vulnerability. The point of this post isn't really about the xz backdoor, but to highlight the issue of slow security updates.

If you're not using Nix the way it is intended to be, it is on you. Your over-reliance on Hydra is not the fault of Nix in any way.

Citation needed. I've never seen the Nix developers state that in any official capacity.

Don't use Flatpak etc for VPNs, it's limited, insecure and pointless.

It's highly likely that the Flatpak version is not routing your DNS queries, thus leaking your location. I wouldn't be surprised if other traffic is being leaked as well.

Since you're on normal Fedora, just use the normal app (.rpm): https://protonvpn.com/support/official-linux-vpn-fedora/. Don't use the CLI version though, as it's still on the old version (v3).

I have a Zen 2, Zen 3+ and a Zen 4 system and they all work well very with various Linux distros (Arch, Fedora) and recent kernels.

It's very likely that your bug is specific to early Ryzen CPUs/chipsets. A couple of folks on those reports mentioned their issues went away after a motherboard/BIOS upgrade. So I think you'll be fine if you went for a more recent AMD CPU+mobo.

It'll really depend on your local job market. I was on a serious job hunt earlier this year and I couldn't find a single Linux job which asked for LFCS certs. There were a couple which asked for Red Hat certs though. Of course, this could be specific to where I live, so I'd recommend looking at some popular job sites for where you live (+ remote jobs too) and see how many, if any, ask for LFCS, and you'd get your answer.

Should I focus more on dev ops? Security? Straight SysAdmin?

From what I've seen so far, the days of "traditional" Linux sysadmin roles are numbered, if not long gone already - it's all mostly DevOps-y stuff. Same with traditional security, these days it's more about DevSecOps.

As a modern Linux sysadmin, the technologies you should be looking at would be Ansible, Kubernetes, Terraform, containers (Docker mainly, but also Podman/LXD), GitOps, CI/CD and Infrastructure as Code (IaC) concepts and tools.

Some Red Hat shops may also ask for OpenShift, Ansible Tower, Satellite etc experience. IBM shops also use a lot of IBM tools such as IBM Could Paks, Multicloud Management, and AIOps/Watson etc.

And finally there's all the "cloud" stuff like AWS, Azure, GCP specific things - and they have their own terminologies that you'd need to know and understand (eg "S3", "Lambda" etc) and they have their own certs to go with it. I suspect a "cloud" cert will net you more jobs than LFCS.

So as you'd probably be thinking by now, all of the above isn't something you'd know from just using desktop Linux. Of course, desktop Linux experience is certainly useful for understanding some of the core concepts and how it all works under the hood, but unfortunately that experience alone just isn't going to cut it if you're out looking for a job.

As I mentioned before, start looking for jobs in your area/relevant to you and look at the technologies they're asking for, note down the terms which appear most frequently and the certs they're asking for, and start preparing for them. That is, assuming it's something you want to work with in the future.

Personally, I'm not a big fan all this new tech (I'm fine with Ansible and containers, but don't like the industry's dependency on proprietary techs like Docker Desktop, Amazon or Red Hat's stuff). I just wanted to work on pure Linux, with all the all standard POSIX/GNU tools and DEs that we're familiar with, but sadly those sort of jobs don't really exist anymore.

Here's a more exhaustive list: https://github.com/TaKO8Ki/awesome-alternatives-in-rust

I'm not the one who created this community, but I highly suspect that this community was named after the r/opensource sub on Reddit, like many other communites here. r/opensource has (or had) 200k users whereas r/foss only had 8k users, so I guess it was a natural choice to pick the more popular sub out of the two.

Manufacturers and vendors in general increasingly removing choice from both hardware and software.

Examples:

• Manufacturers removing the headphone jack
• Laptop manufacturers removing options from the BIOS (Surface laptops)
• Laptop manufacturers getting rid of extra ports
• Microsoft getting rid of many customisation options from Windows (such as missing taskbar options in Win 11, or the window color options that was dropped a few years ago, or the old Mail app)
• Apple removing more and more features, from macOS such as the ability to quickly switch between different sets of Wi-Fi, Ethernet and other network settings depending on the location
• Google removing features from Android and locking down the OS with each new release (such as removing the ability to use custom CA certificates, which impacts ad blockers and network monitoring tools; moving more features from AOSP into proprietary Goole Play Services, thereby impacting de-Googled ROM users)
• Google progressively locking down the web by introducing unwanted features in Chrome, such as Manifest V3 and Web Environment Integrity.

The same can be said of all the paper/cardboard being used in the food industry - paper straws, cardboard takeaway containers etc are all lined with PFAS and other "forever" chemicals that leach into your food. We really need a law to force companies to disclose the composition of products that come in contact with food.

In some of those countries, it's not really a choice. Like, WhatsApp is the only way of contacting a company's customer care (via chat bots that run on it), colleges and universities may have study groups on it and teachers may hand out notes etc in those groups, also apparently it's also the only way to contact even some government agencies.

Clickbaity article

Zoom [...] is now asking all employees within 50 miles of a company office to go in at least two days a week on a hybrid schedule.

So it's not "all of it's employees". Plus, it's a hybrid schedule, which, for better or worse, has now become a standard across most organisations around the world.