Since installing applications on Linux is usually done through some centralized package manager or app store (Flathub), it almost entirely eliminates this attack vector.

xz moment.

Yes, I see that weasel word “almost” in that sentence. I expect it’s going to be doing increasingly heavy lifting as Linux becomes a more lucrative target to attack over time.

Your point generally stands, though. Even if they’re fallible, at least someone is vetting it at all somewhere in this pipeline.

The two apps are identical and built from the same codebase anyway. K-9 is just a branding asset swap.

I’ve seen conflicting info from Thunderbird devs on how long they actually intend to keep both branding packages active. I’ve heard no longer than a year. I’ve heard only as long as it takes to get Thunderbird out of beta. I’ve heard they have some sort of agreement with FDroid that obligates them to keep it listed for some minimum duration of time (???). I’ve most recently heard indefinitely, because their build script is just a toggle now and it costs them nothing. Which one do I believe? I have no idea. I doubt K-9 will be kept around in perpetuity, though.

I’d be more than happy to sacrifice a distro I don’t care about like Ubuntu to the mainstream if it means Microsoft’s market cap gets a sizeable chunk taken out of it.

It’s also part of what makes FOSS niche.

why is there no replacement for x11 forwarding over ssh??

There kind of is. The project you’re looking for is waypipe.

Knowing how these things tend to go, I predict you’ll try to use it for your use case and it just won’t work for whatever stupid reason. But I successfully used it to tunnel an app from my Debian machine at home to a Windows machine under WSL.

The other day I learned that you can just grep an unmounted filesystem device. It will read the entire disk sequentially like it’s one huuuuge file. And it will reveal everything on that disk… whether a file inode points to it or not.

Used it to recover data from a file I accidentally clobbered with an errant mv command. It’s not reliable, but when you delete a file, it’s usually not truly gone yet… With a little luck, as long as you know a unique snippet that was in it, you can find it again before the space gets something else written there. Don’t even need special recovery tools to do it, just use dd in a for loop to read the disc in chunks that fit in RAM, and grep -a for your data.

I mean, yeah, kind of. In the same way pilots fly planes out of a stubborn sense of pride for knowing what all the flight deck controls do.