Introduction:
I decided to post because, even though I did research, I could not find much information about the below. I hope this post ends in clarification that strengthens my, and potentially others’, understanding about Linux. Any piece of clarification is appreciated!
I placed key pieces of information and questions in bold for those wanting a concise, yet informative overview on my query.
Context, Distros & Issues:
I despise Windows 11 and wish to move away from it, and, as you know, some annoying features have, without my knowledge, been enabled by default. I disabled OneDrive sync once I was aware of this. I later found out Microsoft was willing to push out their terrible AI feature which was postponed due to backlash.
My goal is a migration to Linux, and I’m considering Fedora Workstation. (It fitted perfectly into my workflow when I tested it in a live session; I got used to the GNOME DE surprisingly - to me - in a few minutes.)
One question is Fedora Workstation doesn’t seem to be suitable for a Linux beginner like myself, especially after reading this post. In that case, what would be an adequate recommendation or is Fedora Workstation still fine? Someone spoke about openSUSE Aeon, which I tried to test, but had trouble booting a live session. However, openSUSE Aeon is still in “release candidate” stage, and the lack of document is unacceptable for my use-case, as someone said here. (I couldn’t have said it better myself.)
I would prefer to have activities, such as schoolwork, hobbies, and the like, done without worrying about my operating system. However, if I have to do some configuring or learning curve, by all means I will!
I dislike Ubuntu and Linux Mint since they seem to all have their share of cons I don’t want to accept. For example Linux Mint having Wayland in beta stage. In Ubuntu’s case, I tried to boot a live session, and it seems to have - in my opinion - completely ruined the GNOME DE; so that was the end of considering that, along with this post against Ubuntu. (I don’t want to come to another operating system just to de-bloat it like I did with Windows 11) Pop!_OS seemed interesting but this post stopped my entire consideration of it.
Threat Model & Examples:
My threat model is to avoid surveillance capitalism, mass surveillance, public exposure, and passive attacks without making extreme sacrifices to convenience. For instance, I do not want to use QubesOS since the tradeoff is substantial, especially after reading this post. Neither will I use something like KeepassXC. (Although I like their design over Bitwarden and Proton Pass.)
In summary, I want to have a balance of privacy, security, and convenience.
I have little to no reliance on “Big Tech”, except using Microsoft Word which I’m currently forced to use for school. Positively, for that situation, I’m convincing my teacher to accept more privacy-respecting alternatives to Microsoft Word.
Unfortunately, I rely heavily on using a HP Printer for scanning documents, again, for school. More specifically, a HP LaserJet MFP 234dw.
I briefly looked for any ways to mitigate this issue, and reliance on Windows, then came across Linux Mint being able to scan. (Apologies if your IP address is blocked.) I also found this concerning Fedora’s HP printer issues. I can’t seem to find anything about Fedora Workstation’s HP printer scanning capabilities though, which is my issue.
Another issue I have is understanding Linux sandboxing, and the best ways to install applications. I would greatly appreciate if someone directs me to a trustworthy source to answer all or the majority of my query.
Flatpaks, Sandboxing & Applications:
Are all flatpaks not safe? Most, if not all, are labelled as “Potentially Unsafe”. I also noticed that nearly all applications on Flathub, by default, have broad permissions, including verified ones. Please elucidate this to me, since I am quite new to Linux.
Apparently, Signal’s unofficial flatpak should be avoided. Others say that you could read and vet the manifest file. Although that would be an adequate solution, time is precious and I would rather spend my time on other various issues.
In addition to that, while it does make sense unofficial flatpaks should be avoided, what about verified applications like Notesnook? Does a verified flatpak that mean it is safe to use? I read this post, but it doesn’t seem to answer my questions very well.
I researched into whether I can install software from official sources and found out I could. Does that change anything? Is the sandboxing better? I believe MacOS has more robust sandboxing, permissions control, decent privacy, and convenience compared to other operating systems, and would be my go-to. If I am wrong, please feel free to clarify.
In addition to all that, flatpaks, by default, require broad permissions, like OnlyOffice, as an example, unless that is normal? I read that unofficial applications maintained by the community, such as flatpak Signal, may ship with malware or insecurities. Is a VM a viable option? If so, which VM would be fine? How do VMs work. I admit that I have no experience and little knowledge about them, which is why I am asking.
My concern with browsers on Linux stems from sandboxing. Furthermore, is Brave, or Chromium-based browsers in general, on Linux, a decent option? I have read somewhere - on this forum or Techlore Forums - that Firefox is the best browser for Linux. Is that true, and can I use Brave, or other browsers, from its official download, without worrying about it shipping a weakened sandbox?
Linux’s Security Issues:
I became very concerned about Linux security after reading this post. Apparently its apps sandboxing lags behind MacOS and Android. Neither does it have verified boot, but I assume Windows does not either, since it’s not mentioned on posts like this and this other. Nonetheless, Fedora seems to be aiming towards being as secure as MacOS.
Conclusion:
I genuinely thank you for reading this! I wrote this in Cryptee, and it took me roughly 4 days to compile, and was very exhausting to find information to backup my claims.
