Snap and AI in one post. Is this ragebait?

I would think that a CA certificate may be hardcoded? Only way it to block it. Faking it maybe with rooting. And then you can gut it also

There are blocklists for that also. https://github.com/hagezi/dns-blocklists#bypass

I don’t think so. But this one should help: https://github.com/hagezi/dns-blocklists#native

If the Smart TV uses and hardcoded http DNS server, that must be blocked directly, sure. But that scenario is very unlikely.

I can only recommend everybody that has the option for it to run adguard home as a DNS server.

It if you already have a PiHole that can do the same trick. Adguard has support for all DNS protocols and forces itself into windows and android via DoH and DoQuick.

A friend of mine maintains a list of blocklist here: https://github.com/ppfeufer/adguard-filter-list

Who would have thought that package repo concepts with automatic fetch during build could be a security risk?

Static linking makes this worse.

Granted, static linking for web apps is great and far better then the alternatives.

But now we deliver static linked desktop and system packages. The security nightmares just began (looking at you canonical)

Not really, no. Flat packs still need the host GPU, kernel driver and more.

I sometimes build software and opensource is easy for Linux. "Just compile once for fedora 40,41,42 and 4 Ubuntu versions, look how to build for Debian because the compiler there is 8 years old and then do that for very major update. Forever

Valve does not recommend that anymore.

And for good reasons:

Nearly all Linux native games I have from steam do not work any more. Glibc changes. Xorg gone. Other stuff. You would need to maintain and adopt constantly.

Having a product that advertises native Linux support on the storefront but requires Ubuntu 20.04 is nothing we or valve could want

Proton offers a stable surface, and decouples the dependencies