2 ms·

Putting aside the fact that simply being open source does not ensure anyone actually audits the source (in fact, most open source is largely unaudited by anyone

Putting aside the fact that simply being open source does not ensure anyone actually audits the source (in fact, most open source is largely unaudited by anyone but the developers themselves), of course limiting yourself to using only a tiny amount of software can make you more safe. But that is not really a reasonable solution to anything. Going down that route, you might as well not use a phone or a computer at all, and be perfectly protected. People WANT to use software, and the software they want to use will never be available as pure, audited FLOSS. Instead, we need to have ways to let user use software from less trusted sources while still working hard to protect them from it. Apple does this. They put in tons of effort to give you a way to run untrusted software while retaining some amount of trust that it can't go too far in endangering you. I find it massively frustrating that these FLOSS projects will not do the same. They will just not even try to protect you.

fsflover 6y ago
> Putting aside the fact that simply being open source does not ensure anyone actually audits the source There is no guarantee, but try to find Android-style malware in F-Droid or in GNU/Linux repositories. > of course limiting yourself to using only a tiny amount of software can make you more safe. But that is not really a reasonable solution to anything. This is not the goal here. The goal is switch to FLOSS wherever possible and expand FLOSS alternatives. It starts from a small number of apps, but currently F-Droid has most of what you need already. So I don't see this a a problem, except for very specific needs (or if you are into Facebook and co). > I find it massively frustrating that these FLOSS projects will not do the same. They will just not even try to protect you. First of all, anbox is already a thing, and it can definitely sandbox your apps. Second, GNU/Linux phones are just at the beginning and they are already far ahead of the first Apple or Android phones. Expect a revolution there...
- user-the-name 6y ago
  > There is no guarantee, but try to find Android-style malware in F-Droid or in GNU/Linux repositories. The by far biggest reason you won't find it is nobody uses it, so there is no incentive to try. These operations require large audiences to be worth trying. > Expect a revolution there... I don't. Because, once again, nobody is even acknowledging what the real problem is. People are patting themselves on the back for doing things that do not really matter, while leaving the barn door wide open for attacks that only do not happen because they are not worth it. I'm not seeing any sign of this changing.

fsflover 6y ago

> Putting aside the fact that simply being open source does not ensure anyone actually audits the source There is no guarantee, but try to find Android-style malware in F-Droid or in GNU/Linux repositories. > of course limiting yourself to using only a tiny amount of software can make you more safe. But that is not really a reasonable solution to anything. This is not the goal here. The goal is switch to FLOSS wherever possible and expand FLOSS alternatives. It starts from a small number of apps, but currently F-Droid has most of what you need already. So I don't see this a a problem, except for very specific needs (or if you are into Facebook and co). > I find it massively frustrating that these FLOSS projects will not do the same. They will just not even try to protect you. First of all, anbox is already a thing, and it can definitely sandbox your apps. Second, GNU/Linux phones are just at the beginning and they are already far ahead of the first Apple or Android phones. Expect a revolution there...

user-the-name 6y ago
> There is no guarantee, but try to find Android-style malware in F-Droid or in GNU/Linux repositories. The by far biggest reason you won't find it is nobody uses it, so there is no incentive to try. These operations require large audiences to be worth trying. > Expect a revolution there... I don't. Because, once again, nobody is even acknowledging what the real problem is. People are patting themselves on the back for doing things that do not really matter, while leaving the barn door wide open for attacks that only do not happen because they are not worth it. I'm not seeing any sign of this changing.