5 ms·
I'm not sure I understand. Crypto won't protect you from malware by itself, it just creates a chain of custody. App store apps are not secure because they're si
by simias 6y ago
I'm not sure I understand. Crypto won't protect you from malware by itself, it just creates a chain of custody. App store apps are not secure because they're signed, they're secure because they're signed by Apple.
For the librem it's just like a desktop computer, don't install software from untrusted sources, keep your stuff updated and you should be fine.
- swiley 6y agoMeh, signing by Apple really doesn't mean more than Apple looked (visually) at a running instance of the app and said "eh it doesn't look like it's breaking the rules." They don't do any instrumentation and often the developers themselves don't even understand what all the binary dylibs they're including do.
- simias 6y agoI don't own an Apple device myself but don't they have a pretty good track record when it comes to the security of their apps? Plus all the guidelines they've been enforcing lately when it comes to user tracking etc... At any rate my general point still stands I think, it doesn't really matter whether librem apps are signed or not, what matters is where you put your trust. I'm sure some package managers (first party or otherwise) will be able to provide a curated experience if the platform is successful, like what linux distros offer.
- sneak 6y agoBeing able to outsource the decision about what is or isn't an "untrusted source" to a security expert is valuable. Platforms that only run signed code permit that.
- fsflover 6y ago> Platforms that only run signed code permit that. Like GNU/Linux repositories?
- sneak 6y agoNo, those only distribute signed code. If unsigned code makes its way on to your system outside of those repositories, your GNU/Linux system will happily execute it, unsandboxed save for outdated POSIX uid/gid permissions.
- fsflover 6y agoExcept restricting what a user can do with their system does not significantly improve security. It removes the freedom and powers walled gardens.
- andrepd 6y agoPlatforms that don't run only sign code also permit that.
- paxys 6y agoThe real reason iPhone apps are safe is because they run in a controlled sandbox with a very limited set of device APIs available to them. You could take away the app store and signing and things would mostly be the same.