Tech Dude // Linux Infrastructure Admin // Automation Nut // Privacy Advocate

Accounts:

  • 1 Post
  • 7 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle




  • BoneALisa@lemm.eetolinuxmemes@lemmy.worldIndeed
    link
    fedilink
    English
    arrow-up
    1
    ·
    7 months ago

    Agreed, i had more issues on Manjaro than i ever did on raw Arch. The Manjaro team, at least during the time i used it, didnt seem very good at keeping things working. So many issues with bad packages, keys expiring, stuff like that.

    Arch was a blessing.

    However, NixOS has ascended me to heaven lol.




  • Its worth noting, you cant actually MITM most traffic without device acess. To MITM my lemmy traffic, you would need either a copy of the certificate and private key of for example lemmy.world, which they would never willingly provide, or you would need to get a valid certificate from a CA for lemmy.world, which you could never get without verifying ownership of the domain.

    If you are using a company owned device to browse Lemmy, then 100% they can very easily install a custom Root CA and make their own certificates, and you should assume all your traffic is monitored. But if they allow BYOB or for your phone to be on the network, then they would be unable to see that traffic without you being able to tell, because you would get certificate errors.

    But if they allow you to install a VPN, then just use TOR with a TOR bridge and you wouldnt have issues, because they cant tell its VPN / TOR traffic akaik