3 ms·

I guarantee you, you will fall for a clever phish. You can't outsmart a good spearphish. You are wrong when you think stupidity is the vuln, the vuln is basic h

I guarantee you, you will fall for a clever phish. You can't outsmart a good spearphish. You are wrong when you think stupidity is the vuln, the vuln is basic human psychology. But even if you're right, it's not like Linux desktop is made only for people like you right? It wouldn't be "some people are dumb" it would be "almost all people are dumb" even if being dumb was the issue.

pdonis 7y ago
> I guarantee you, you will fall for a clever phish. You can guarantee no such thing. Not getting caught by phishing just isn't that hard. It requires a little self-discipline, yes. So do most worthwhile things. > It wouldn't be "some people are dumb" it would be "almost all people are dumb" even if being dumb was the issue. That's still not an OS issue. No amount of clever programming will help if people are that determined to do something dumb.
- staticassertion 7y ago
  You ever run a pip install? Maybe an apt-get install?
  - pdonis 7y ago
    > You ever run a pip install? On my regular desktop, not of anything that wasn't Python code I had written myself. In development containers, yes, sometimes I've installed third-party Python programs to test them (and of course in Python it's easy to read the source code since what you install is the source code), but that's isolated from my regular desktop. > Maybe an apt-get install? Never of anything that wasn't from my distro's signed package repository.
- danieldk 7y ago
  That's still not an OS issue. No amount of clever programming will help if people are that determined to do something dumb. And yet, a malicious iOS cannot typically take over the OS, other applications, or exfiltrate data from other applications. Sure, someone's bank account can be fished. But systems like iOS show that it is possible to protect users against a large numbers of attacks. One of the goals of an OS is to provide meaningful isolation boundaries. This is why we have a separation between ring 0 and 3, isolation of process address spaces, a separation between UID 0 and UID > 0. There is no reason why we should not introduce new forms of isolation invented after the 70ies.
  - pdonis 7y ago
    > a malicious iOS cannot typically take over the OS, other applications, or exfiltrate data from other applications Neither can a malicious Linux application.
    - danieldk 7y ago
      This is nonsense. A malicious Linux application can exfiltrate all the data in your home directory. Taking over the OS is not hard either, just run a keystroke logger or put a rogue sudo in the user's path. Of course, this does not apply if the application is properly sandboxed, which is sadly not the default on Linux yet.

pdonis 7y ago

> I guarantee you, you will fall for a clever phish. You can guarantee no such thing. Not getting caught by phishing just isn't that hard. It requires a little self-discipline, yes. So do most worthwhile things. > It wouldn't be "some people are dumb" it would be "almost all people are dumb" even if being dumb was the issue. That's still not an OS issue. No amount of clever programming will help if people are that determined to do something dumb.

staticassertion 7y ago
You ever run a pip install? Maybe an apt-get install?
- pdonis 7y ago
  > You ever run a pip install? On my regular desktop, not of anything that wasn't Python code I had written myself. In development containers, yes, sometimes I've installed third-party Python programs to test them (and of course in Python it's easy to read the source code since what you install is the source code), but that's isolated from my regular desktop. > Maybe an apt-get install? Never of anything that wasn't from my distro's signed package repository.
danieldk 7y ago
That's still not an OS issue. No amount of clever programming will help if people are that determined to do something dumb. And yet, a malicious iOS cannot typically take over the OS, other applications, or exfiltrate data from other applications. Sure, someone's bank account can be fished. But systems like iOS show that it is possible to protect users against a large numbers of attacks. One of the goals of an OS is to provide meaningful isolation boundaries. This is why we have a separation between ring 0 and 3, isolation of process address spaces, a separation between UID 0 and UID > 0. There is no reason why we should not introduce new forms of isolation invented after the 70ies.
- pdonis 7y ago
  > a malicious iOS cannot typically take over the OS, other applications, or exfiltrate data from other applications Neither can a malicious Linux application.
  - danieldk 7y ago
    This is nonsense. A malicious Linux application can exfiltrate all the data in your home directory. Taking over the OS is not hard either, just run a keystroke logger or put a rogue sudo in the user's path. Of course, this does not apply if the application is properly sandboxed, which is sadly not the default on Linux yet.