7 ms·

Unsubstantiated? For years Android has been improving its security and app isolation. AOSP by default is effectively more secure than any Linux distro on a lap

Unsubstantiated? For years Android has been improving its security and app isolation. AOSP by default is effectively more secure than any Linux distro on a laptop by default for a couple of reasons one being that on android every app runs as its own UID. On Linux that's only sometimes the case for daemons, and almost never the case for user programs.

pjmlp 5y ago
Then native code is frowned upon other than some specific use cases mostly game related, seccomp and LinuxSE are enabled, Project Treble drivers run in userspace with Android IPC, eBPF modules instead of drivers, IPC is now required for file system access outside sandbox,...
goodpoint 5y ago
> AOSP by default is effectively more secure than any Linux distro Sandboxing does not protect you from all the binary blobs, closed source components and all the telemetries and other forms of surveillance built in. Not to mention all the homecalling done by applications.
- 0xdeadb00f 5y ago
  Home calling by applications is literally an issue with the application - an application on Linux can just as easily call home.
  - goodpoint 5y ago
    An application on Linux is very unlikely to do so, especially if shipped in a security/privacy focused distribution. OTOH Android apps are a minefield, making it extremely difficult to protect user data. Also Android itself leaks data or sends telemetries in many places.
- kaba0 5y ago
  Privacy!=security. It’s not that hard to understand. The pinephone has zero security (as well as most linux distros) - eg. you pick it up at the wrong moment and it fails to put the lock screen on, a single rouge program can do whatever it wants with user privilege only because the old user-root distinction is meaningless, since every valuable thing is stored as the given user, etc. Android does proper sandboxing, MAC-based security, etc. The two are night and day.
  - goodpoint 5y ago
    > Privacy!=security. It’s not that hard to understand The very basics of security are Confidentiality, Integrity, Availability. Privacy breaching is a breach of Confidentiality. Please spare us from the FUD and the patronizing tone.
    - kaba0 5y ago
      There are multiple definitions of security, but they are always dependent on a threat model. Facebook measuring how much time you spend on a given post and building a profile of you based on that on their servers is not at all the same level of privacy concern as third parties having access to your location. Also, linux phones give no way to defend against the former either way, and the latter is not a problem on android or ios phones. Nonetheless, I apologize for the patronizing tone.
hulitu 5y ago
If by "allow this app to access all your data" you mean security, then yes, android is more secure. When an OS downloads and installs code without me having any control of it i call it RCE.

pjmlp 5y ago

Then native code is frowned upon other than some specific use cases mostly game related, seccomp and LinuxSE are enabled, Project Treble drivers run in userspace with Android IPC, eBPF modules instead of drivers, IPC is now required for file system access outside sandbox,...

goodpoint 5y ago

> AOSP by default is effectively more secure than any Linux distro Sandboxing does not protect you from all the binary blobs, closed source components and all the telemetries and other forms of surveillance built in. Not to mention all the homecalling done by applications.

0xdeadb00f 5y ago
Home calling by applications is literally an issue with the application - an application on Linux can just as easily call home.
- goodpoint 5y ago
  An application on Linux is very unlikely to do so, especially if shipped in a security/privacy focused distribution. OTOH Android apps are a minefield, making it extremely difficult to protect user data. Also Android itself leaks data or sends telemetries in many places.
kaba0 5y ago
Privacy!=security. It’s not that hard to understand. The pinephone has zero security (as well as most linux distros) - eg. you pick it up at the wrong moment and it fails to put the lock screen on, a single rouge program can do whatever it wants with user privilege only because the old user-root distinction is meaningless, since every valuable thing is stored as the given user, etc. Android does proper sandboxing, MAC-based security, etc. The two are night and day.
- goodpoint 5y ago
  > Privacy!=security. It’s not that hard to understand The very basics of security are Confidentiality, Integrity, Availability. Privacy breaching is a breach of Confidentiality. Please spare us from the FUD and the patronizing tone.
  - kaba0 5y ago
    There are multiple definitions of security, but they are always dependent on a threat model. Facebook measuring how much time you spend on a given post and building a profile of you based on that on their servers is not at all the same level of privacy concern as third parties having access to your location. Also, linux phones give no way to defend against the former either way, and the latter is not a problem on android or ios phones. Nonetheless, I apologize for the patronizing tone.

hulitu 5y ago

If by "allow this app to access all your data" you mean security, then yes, android is more secure. When an OS downloads and installs code without me having any control of it i call it RCE.