291
submitted 3 days ago* (last edited 3 days ago) by [email protected] to c/[email protected]

I've run a small business for over 10 yeas. I use linux. I'm grateful to the community and I use FOSS where possible.

I have had some issues over the years, but have always been able to get around them (except CAD in 2013), but recently I've had issues with my government (UK). First they introduced 'making tax digital' and told me for years that I would have to buy windows only software (there was no legal option on linux until a few weeks before the deadline (https://www.comsci.co.uk/100PcVatFreeBridge saved the day). The UK Government didn't create a free solution or any route to that as they don't want the source to be open for making tax digital so accounting software companies have made a killing!

This week my internet banking stopped allowing payments, it no longer works in firefox (I'm guessing). On the telephone they asked me 'what search engine I was using'^+^ and advised to use google.

What is the best UK business bank to use if you use linux to run a small business? Do I have to use Chrom(e)ium? Does anyone else use linux for business admin? Is anyone (Freesoftware foundation, etc) thinking about the creeping legislative changes that make it literally illegal to use FOSS and linux?

I wanna be an ally, but its so tiring.

^+^ browser ≠ search engine. Yes, I'm pedantic, at least I didn't confuse them by saying 'quant' or 'duck duck go', OK!?

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 34 points 3 days ago

I'm also based in the UK. I don't run a business but have occasionally encountered problems trying to use Librewolf on the web, especially with Noscript on.

I tried to use Qubes to separate my activities into VMs but I found it difficult. So I did my own, less extreme, approach using KVM.

I created a virtual machine which only has Chrome on it. This is what I use for accessing my bank, Paypal and doing online shopping.

I have a second machine I use for Whatsapp and email and finally a third with Librewolf for general web browsing.

Each uses the same VPN service but different servers.

I only use Freetube and Retroarch on my main machine.

This is on a very beefy Thinkpad I essentially use as a desktop in my office. I use a smaller machine downstairs with VNC on it as a remote when I'm sat on my sofa.

[-] [email protected] 8 points 3 days ago
[-] [email protected] 12 points 3 days ago

This sounds ridiculous. So much work and overhead just to usea web browser?

[-] [email protected] 21 points 3 days ago

It's not just browsing discussed there. Re-read that again with cybersecurity in mind... online banking shouldn't be done whilst you're sharing a browser with tiktok (as an example)

Yep, there's private / incognito modes, but they just drop all the local session data, they're not any more secure.

[-] [email protected] 6 points 3 days ago

online banking shouldn't be done whilst you're sharing a browser with tiktok (as an example)

Why? Be specific because unless something has gone horribly wrong sites can't access data from other sites or tabs unless they're cooperating. In which case they do so with session data.

And you could simply have a separate Firefox profile rather than spinning up an entire virtual machine.

[-] [email protected] 5 points 3 days ago

Neat, Mozilla’s VPN supports setting servers on a per-container basis.

Though gotta watch for DNS leaks apparently.

[-] [email protected] 1 points 2 days ago

XSS springs to mind.

And spinning up a VM (or container) is not that hard nowadays.

[-] [email protected] 1 points 2 days ago

This does absolutely nothing to defend against XSS.

This is the problem with paranoia-based security. You create needless overhead thinking you're "more secure," but you're not. Not in any way that really matters, at least.

[-] [email protected] 1 points 2 days ago

So if i spin up a container to run just that browser for just that site i do nothing against XSS? Interesting.

[-] [email protected] 1 points 2 days ago

I can't tell if you're being facetious or not...

XSS is an attack within a site. For example - if I were to embed JavaScript in this post, and your lemmy website didn't properly sanitize it, then it would be executed by your browser. This would let me run code on lemmy with your credentials. I could then rewrite posts, delete your account, maybe send your data to another site where I could capture your session or credentials.

It has nothing to do with any other tabs and it would be limited to lemmy and the page that executed the script. I couldn't have that script read data from your bank on another tab, for example.

[-] [email protected] 1 points 2 days ago

And you could simply have a separate Firefox profile rather than spinning up an entire virtual machine.

This is what I do. Even though there is nothing wrong with the Qubes approach, I think it's overkill unless you are hiding from nation-state attackers.

[-] [email protected] 5 points 3 days ago* (last edited 3 days ago)

This is what Firefox containers are for. Put the predatory sites in a container so they can't see out of it.

[-] [email protected] 2 points 2 days ago

They can't "see out" of their own tab either. Websites can only access data in the browser that they create.

[-] [email protected] 1 points 2 days ago

Sure they can, with cookies or tracking pixels for example.

[-] [email protected] 0 points 1 day ago

What? No. Just... No. My god - the misunderstanding around cookies is ridiculous. I blame the EU - they put a 'warning label' on them an now eveyone thinks they're just evil.

Firstly - Cookies are only allowed to be read/written by the site you requested from. If they could read all cookies that would be a MASSIVE security problem and the internet would be fundamentally unusable for business.

Secondly - This has nothing to do with tabs. Nothing. ... Nothing.

Thirdly - There are "third party" cookies which happen when a site coordinates with a third party for things like advertising and allows them to track hits when their ads are displayed. This requires both sites to cooperate. But also see "firstly" as it won't allow that third party access to, say, your authentication information.

Lastly - This still has nothing to do with tabs.

[-] [email protected] 2 points 1 day ago

This requires both sites to cooperate. But also see “firstly” as it won’t allow that third party access to, say, your authentication information.

Nobody here said it would let them see your authentication details, so I'm not sure why you're so vigorously fighting that straw man. Third-party cookies absolutely let them know which other sites you've visited. That's their main purpose.

[-] [email protected] 1 points 1 day ago* (last edited 1 day ago)

Nobody here said it would let them see your authentication details, so I’m not sure why you’re so vigorously fighting that straw man.

Your session ID is stored in a cookie. That is what a website uses to know that you're logged in. With a XSS attack one can steal your session and use the site as though they were you. So yes - it is "authentication details".

Nobody here mentioned it because nobody here seems to know what they're talking about...

Third-party cookies absolutely let them know which other sites you’ve visited. That’s their main purpose.

And they are not stopped by using a separate VM with a web browser. So....

load more comments (18 replies)
load more comments (18 replies)
load more comments (18 replies)
this post was submitted on 04 Jul 2024
291 points (98.0% liked)

Linux

45589 readers
665 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS