3 ms·
I really think the linux desktop world is making a huge mistake by not worrying about stuff like this. We really, really to figure out secure booting and sandb
by resoluteteeth 11y ago
I really think the linux desktop world is making a huge mistake by not worrying about stuff like this.
We really, really to figure out secure booting and sandboxed applications in a way that leaves the user in control. Desktop linux has been fairly safe because it's not an important target and because most users get most of their software through distributions.
However, I don't think in 2016 we should just take it for granted that one malicious program should be able to effortlessly own the user agent and probably the entire system (on a computer with one user who uses "sudo").
The problem is that these technologies have been associated, especially in android/ios, with restricting what the user can do. However, this does not need to be the case.
Until recently, most people's data on their computer wasn't too valuable, but malware has gotten more sophisticated at targeting things like bank information. If we wait for linux desktop security to become a serious issue, it will be too late.
The worst thing is that we already have things like SELinux and AppArmor, but they aren't being used. The insecurity of X is no joke, either. We may getting close to a point where we have no choice but to throw out X just to get security, even if the other reasons for switching aren't that compelling.