3 ms·
I could go ahead and say diable internet unless you dont want to be particularly safe. I mean there are CPU level zero days. But on a serious note, how would on
by anaganisk 6y ago
I could go ahead and say diable internet unless you dont want to be particularly safe.
I mean there are CPU level zero days.
But on a serious note, how would one protect oneself from Apps other than browser and talk to internet?
I mean we can't ask regular users to learn and turn off stuff.
- lcall 6y agoI realize I am late in replying. What I do, while using OpenBSD, is limit which users access which apps, dividing my activities by user according to risk level and which apps a given user uses and sites that user browses to (some user accounts I use regularly do not use a browser). Also obsd has pledge and unveil built in, which are kernel API calls they put in apps which limit which syscalls and directories an app can access. Those combined give me some increase of confidence. (Edit: On Debian I could do this with multiple simultaneous X sessions, moving data between them via a shared text file. On obsd, one could use SSH and some scripts, so they can share a desktop if/when desired.) Maybe there is a maturity and effort level continuum, where we can help people along as appropriate, per their desires, interest, and situation.
- lcall 6y agoI forgot to mention: some of this can be done on Linux also, but another nice thing about openbsd is its ~ "only 2 remote holes in the default install", since ~ 1996. I've had to learn some things to use it effectively, but everything has tradeoffs.