what daily os should i use?

Ive noticed a lot of lainons seem to strongly dislike any os using systemd and considering im currently trying to build a new pc to do sketchy soykaf on as well as normal daily activities and possibly even installing windows as well as arch on it i decided to lookup why systemd was hated on so much and quickly realized inplementing google fallback dns as well as complete control over all aspects of the os were controlled by red hat i quickly realized that i should probably not use arch. would artix linux be ok? would manjaro? also side note would a ryzen 7 3700x and 1660 super with a bdshh cheap soykaf board be safe or are there specific components i should be aiming to buy?

also >inb4 im dyslexic as soykaf and currently phone posting

>>16295 The decent options are either Linux or *BSD. OpenBSD works for me. Because you don't want systemd, Artix is probably a good choice. As far as Linux goes, I would also endorse Void or Gentoo (if plain Gentoo's too hard, Redcore is an easier option). Also know that under the hood, most Linux distributions are extremely similar. However, I generally dislike Linux because of its inconsistent code, documentation, and security practices. In those areas, OpenBSD really shines. But if you were to choose a *BSD, be aware that the code is updated less frequently. You won't have the latest meme features available, and there are around ~2 upgrades/year. With OpenBSD in particular (can't speak for the others), you may also experience semi-frequent crashes. The ideological consistency more than makes up for that IMO. TL;DR: want fast & loose? Use Linux. Otherwise, choose a *BSD.

>>16297 thank you very much! ill give it a look! are many bsd bases available to run windows managers like in linux? are windows managers a security risk? im not going to be doing explicitly illegal things on this system but some questionable stuff and most likely malware development but i wouldnt mind being aboe to do more than just running my own tools and super basic web browsing. if it is versitile enough i might not even use windows at all which is what im sort of hoping to do

>>16297 also i forgot to ask in main post but are debian or red hat or what sort of linux bases are prefered when considering security only?

>>16297 Daily reminder that OpenBSD's kernel still isn't tickless. H O B B Y // O S

>>16315 Not a security feature though

>>16298 A window manager is another program, and therefore increases attack surface. However, that isn't to say you shouldn't use a WM. I can't speak for "many bsd bases", but in the case of OpenBSD there is good X11 support. In fact, you can choose to install X during the initial installation process: which also installs cwm(1), fvwm(1) and twm(1). If you don't want to use a WM, that's also okay. Terminal multiplexers like tmux(1) and GNU screen(1) exist, and might even be installed by default. For example, OpenBSD comes with tmux(1). >>16299 IMO, Gentoo and its derivatives are the most securable. The ability to compile everything, apply USE flags, and choose your init system are the most notable features. Obviously these can be done with any operating system, but Gentoo greatly simplifies the process. To a different end, these can all be used to tweak for speed, memory usage, and so on.

>>16319 great response thank you! so yo clarify as far as linux goes there is no superior base? and i was sort of figuring what you said as far as WMs go and i appreciate the confirmation!

>>16319 i should clarify for everyone im more concerned about feds and other governement agencies edpecially with recent internet policy changes in my country and everything is supervised so im somewhat concerned as i build this new pc that there might be hidden trackers etc for law enforcers to monitor me thats why i ask about the safety of these specific components as ive seen that a lot of intel chips seem to have feddy 0 days and the sorts

>>16295 >sketchy soykaf on as well as normal daily activities generally you don't want these two mix on the same hardware or anywhere >>16298 >bsd if you go bsd, openbsd in particular seems to expect you to be attentive. for example the installer will wipe your hard drive by default, which is clearly prompted, but is not meant to be overlooked.

>>16335 thanks for the heads up!

>>16295 Im currently using macos and plan to use it in the future. Anything I should know about making it more secure?

>>16339 im currently using macos as well id highly recommend enabling firevault with a very secure password as well as maybe installing or making a deadswitch of sorts for physical access protection for online threats just make sure you enabel your firewall and close ports you dont need you can check and adjust this with littlesnitch 3 ive done a lot of other stuff too but i honestly forget all ive done since ive been using it for so long lol other than that run sketchy soykaf in a vm as always and if you are using tor making sure to leave the default window size

>>16335 >generally you don't want these two mix on the same hardware or anywhere this. security will compromise convenience and vice versa. even if you're fine with using a super hardened daily driver OS, and take precautions to avoid contamination with your regular data, the most important feature of any disk you plan to do "sketchy soykaf" on is the ability to physically hide it when it's not in use and get rid of it quickly if necessary. honestly, just having tails on a usb drive that you plug into your regular pc is probably fine. whatever you plan on doing can't be that bad if you're posting about it here.

>>16346 thats kinda what i had in mind thank you

I would say you are fine using a normal Linux distro with full disk encryption. If it's something you think your local authorities can be bother to monitor your online activity, buy a cheap used computer and use a security focused distro in a usb drive like Tails, to do such things. It's obvious but don't use your home internet connection, it's most likely what it's going to get you caught. People are buying drugs in snapchat and sharing pedo pictures in facebook, you have to be doing something serious to become a target for the glowies.

>>16360 is proton ok? or should i opt for an offshore outside the 14 eyes vps that i turn into a vpn or proxy? or should i *legally* obtain access to some random persons pc and reverse proxy all my connections through their home network with netcat or something similar

>>16361 >VPN Are you retarded?

>>16364 Not the anon you asked, but I'm interested myself. Is a VPN bad? I would suspect so, because you're basically routing all you network packages through a specified point, which can always be raised, searched and analysed by auths. Or am I seeing this from the wrong side?

>>16364 are you retarded?

>>16365 that would be why a vpn would be bad thats why im asking if i should route my sketchy soykaf through someone elses home network

>>16367 I'm probably reaching to the sky here, but maybe you could use a raspi or something like that, and set it up In a public library. It would take more effort to track you back, and it's easier than setting up a botnet for that purpose, at least I think so.

>>16365 The tricky question is whether the vpn is pwned or owned by data sellers. A correctly setup vpn has no logs and with many people connecting its essentially a mystery meat point hiding input and output relation. Meaning they can tell you connect to it but not what outgoing traffic was yours. Now its not entirely that simple - traffic patterns for example can demask you but there is a theoretical benefit in it. ignoring the identification issue the secondary reason to use vpn is geoip shenanigans. Websites hide things based on your country location.

>>16374 Okay, so you connect to a honeypot and spend exactly 69 minutes downloading illegal material (cp, stealing pwned database, etc) at specific time. Guess what, you're the only one who has been receiving heavy traffic from this VPN for exactly 69 minutes. Now your "anonymity" is basically "I hope they don't monitor this VPN provider and can't query ISP logs without requesting them per person and the provider doesn't log everything."

>>16367 look into what tor is please.

>>16375 Thank you for explaining exactly why mixnets are better.

>>16368 i was really strongly considering this or at a local school but getting power and ethernet cables right beside each other kinda hard plus the networks in my area are heavily monitored and theres a lot of censorship

>>16376 but for daily activity plus kinda sketchy soykaf id rather route everything or most things through a vpn and well other stuff through tor

>>16374 >>16375 im fairly certain proton vpn is safe especially the free servers because so many people use it and i dont plan on downloading mass ammounts of cp/large files all the time maybe once a blue moon or would something like a courvix vpn be better because everyone using a courvix nfo is only using it for illegal soykaf

>>16375 >>16377 Can't you just be a tor relay to prevent time-correlation attacks? Not sure if it's possible with VPNs

>>16319 >Gentoo and its derivatives are the most securable Maybe so, but securable isn't the same as secure, it means you have to do it yourself. For example, Red Hat and derivatives have an enabled-by-default firewall that blocks a lot of inbound stuff. No doubt you could install that same firewall in Gentoo, but first you have to know it exists and then how to configure it. And if you've used CentOS you're probably not going to install it because it breaks a bunch of services and you have to manually unblock them with arcane commands. It's a pain in the ass but I'll bet it does prevent some attacks. Same goes for SELinux and probably a bunch of other stuff I've never heard of that is enabled-by-default.

>>16390 how about artix? have any good guides on how to secure a base install of artix?

windows 10. A hardened windows 10 is miles betthen then linux standard. Arch + WM (i3, bspwm) OR lxfce is good alternative, I'll play devils advocate and argue bleeding edge literally provides an edge. As you get more patches frequently.

>>16380 vpn is just a way to change locations. A VPN is a literal tunnel. Some tunnels you can tell the diggers put a lot of effort, set up a road toll and all. This just means qhen someone bigger then them asks for the log of being passing through, they give it. The soykaftier tunnels are full of high way robbers, and waiting on the other side is some person sifting through your trail. proxychaining is better or tor. Tor is hit or miss. Outside of this, build a botnet or go to some public wifi spot. Plant a a cheap relay device thats you built, that wipes after session clossures or any tampering.

>>16520 >A hardened windows 10 is miles betthen then linux standard. The security improvements over standard Linux systems with Windows 10 is very marginal; a single well-made piece of malware could wipe your system. A proper secure system would need

>>16523 if you can harden windows 10 you can avoid malware. The biggest thing outside of this is evil maide attacks or other attacks via boot loading. I have hardened a debian system, our audits still contained 11 medium level system issues which exsist within the kernel and other necessary applications either being a part of the gui or some other necessity.

use Qubes OS, it's the most schizo approved OS ever. and don't hate systemd for meme reasons, it's actually pretty good

>>16689 systemd is dogshit not using it qub os is the compartmentalized one right? seperate ids depending what vm your using and such? not practical in my case

Pick any one operating system an become very familiar with it to solve your daily tasks no matter what sheeple from the internets current opinion is. Distribution hopping is for those who are to lazy to learn about kernel and userland and infinitely keep searching for the next best complete package.