4 ms·
The only remotely sane points are about UX and the fact these GNU/Linux systems allow users to do stupid things if they want to. Running software from your dis
by lvass 5y ago
The only remotely sane points are about UX and the fact these GNU/Linux systems allow users to do stupid things if they want to.
Running software from your distro's repos? That's safe, I mean, how could you use a system and not trust the people who make it? The only alternative here is writing your own OS (analyzing everything is much harder than that).
Running something else? Firejail is really simple to use. Sometimes flatpak or docker can get you covered (just don't assume it's safe by default). You can always use SELinux if you have to.
You can't prove linux-libre is less safe than a slightly more recent non-libre, and it'd be surprising if that were the case.
Not having kill switches isn't better than having them.
The rest either have been considered acceptable in the safety-paranoid Linux community for years or are absurd. Claiming something like DMA is possible from the isolated modem is a VERY strong claim presented with zero evidence.
- kaba0 5y ago> Running software from your distro's repos? An important distinction to make: open-source software has a high chance of not being malicious. It doesn’t make them safe, especially with the overwhelming majority of them being C all the way down. A single bug (of which they are not absent at all) can introduce security implications depending on their usecase. Eg a firefox bug can easily make your device running untrusted code without any other remaining defense on your device. So open-source is orthogonal to security.