3 ms·
Modern Linux desktop is extremely insecure and lack of any kind of isolation so any process that have access to X can do anything no matter what security measur
by SXX 10y ago
Modern Linux desktop is extremely insecure and lack of any kind of isolation so any process that have access to X can do anything no matter what security measures you applied. With Wayland it's possible to isolate desktop applications, but there still unsolved problems like audio.
And with concepts like Qubes main flaw remain the user just like with network privacy in TOR / I2P. There is very few people around who can actually follow draconian rules systems like that enforce. And once you start to use one app insecurely you lose all advantages really.
It's just hard to let's say use different browsers for different things and from time to time you'll use wrong one. Then problem is that most of applications around isn't really designed to be used in separate VMs and things like file management get messy. So at some point you'll just give up trying to keep it secure.
So I think actually secure OS is very far in future.