6 ms·

With (at least currently) the worst security model of them all. Yay!

• walkingolof 11y ago
  Care to elaborate ?
  • rhinoceraptor 11y ago
    I think he's referring to X? X is a terrible system. For instance, the "screen lock" on X11 desktops is just a full screen window that captures focus.
  • vpkaihla 11y ago
    Both OS X and modern Windows desktops have process sandboxing that is actually used. Perhaps Linux will catch up, but it's not looking very good right now. Linux desktop security is grounded on the notion that you'll be running only programs that are written by your friends.
    • dmytrish 11y ago
      SELinux has means to handle desktop security, but yes, it is rather PITA. Could you tell more about OS X process sandboxing?
      • pjmlp 11y ago
        I assume he means App Sandboxing https://developer.apple.com/app-sandboxing/ https://developer.apple.com/app-sandboxing/
        • vpkaihla 11y ago
          Yes, thank you.
  • chei0aiV 11y ago
    Two major things: X11, although at least Xorg doesn't run as root in modern distros any more. Wayland is the replacement but isn't there yet. Linus hates security people and refuses patches that improve security within the Linux kernel. http://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/ http://www.washingtonpost.com/sf/business/2015/11/05/net-of-...
• tyho 11y ago
  Not really, at least Linux has formal-ish model of how processes are supposed to interact. The Windows security model starts badly plus about 10 000 special cases that aren't documented where you will trip various heuristics only there in the first place because Windows does not have a good security model to begin with. All this to enable people do download shareware from the internet, run it and have it probably not own the users PC.