3 ms·

I completely agree with that comment you linked, Purism is either deliberately selling snake oil or are completely clueless. Here's another example of this wit

by Elyra 4y ago

I completely agree with that comment you linked, Purism is either deliberately selling snake oil or are completely clueless. Here's another example of this with them bashing Android/iOS security: > One of the problems with the security measures implemented in Android and iOS is that they restrict the user as much, if not more, than they restrict an attacker. [1] When Android actually has pretty decent sandboxing [2] which I've never felt restricted me as a user, and can actually protect you from malware, unlike their recommendation which is just security theater without a sandbox when it comes to malware. Unless you don't plan on ever installing any apps and personally audit every update yourself (since it's unlikely someone else will audit every single one thoroughly enough), malware and malicious third parties are a much greater threat than Google who is actually pretty transparent about what data they collect and handle it securely and responsibly. [1] https://puri.sm/posts/snitching-on-phones-that-snitch-on-you/ https://puri.sm/posts/snitching-on-phones-that-snitch-on-you... [2] https://source.android.com/security/app-sandbox https://source.android.com/security/app-sandbox

yjftsjthsd-h 4y ago
> When Android actually has pretty decent sandboxing [2] which I've never felt restricted me as a user, and can actually protect you from malware, unlike their recommendation which is just security theater without a sandbox when it comes to malware. Congrats on not hitting it, I guess? Android is absolutely painful if you try to do anything interesting, and it's becoming annoying even for trivial stuff - it was annoying but understandable when they started killing API surface for tasker and termux to use, it was annoying but understandable when they almost broke termux outright, but it moved beyond being understandable when they restricted file access so much that a third-party app can't move files between directories without the OS prompting you to allow the "delete".
- Elyra 4y ago
  > restricted file access so much that a third-party app can't move files between directories without the OS prompting you to allow the "delete" What use case do you have where you have an app that you want to be able to move files but you don't trust it with the "delete" permission?
  - yjftsjthsd-h 4y ago
    I do trust it. The OS, however, "helpfully" insists on "protecting" me and prompts every single time with no way to save the permission.
    - Elyra 4y ago
      Which app and Android version is it? I've never had that issue where it prompts me every time without letting me save the permission, although if I recall requesting one time access is different than requesting permanent access for some permissions that an app has to declare, so maybe the app never declared the latter. (I admit, this is sort of silly)
      - yjftsjthsd-h 4y ago
        This is https://f-droid.org/en/packages/com.simplemobiletools.gallery.pro/ https://f-droid.org/en/packages/com.simplemobiletools.galler... on Android 11 (LineageOS 18.1). And yes, it may be a localized bug, but it's a localized bug that wouldn't occur on a nice normal GNU/Linux desktop without all of this, bringing us back to me agreeing with >> One of the problems with the security measures implemented in Android and iOS is that they restrict the user as much, if not more, than they restrict an attacker.
        Elyra 4y ago
        In order to argue that, you have to list your goals, what you want to do with your phone, and the goals of an attacker. On Android, other than a few minor inconveniences, I can still achieve everything I want to with my phone, where an attacker will have a difficult time achieving their goal, of presumably stealing some data from another app. This is compared to PureOS where you may have free reign, but so would an attacker if you install their app on your device. If you used QubesOS I'd argue that restricts the user a similar amount as Android does, not to mention missing out on a number of mobile friendly apps.
        4y ago

by Elyra 4y ago

yjftsjthsd-h 4y ago

> When Android actually has pretty decent sandboxing [2] which I've never felt restricted me as a user, and can actually protect you from malware, unlike their recommendation which is just security theater without a sandbox when it comes to malware. Congrats on not hitting it, I guess? Android is absolutely painful if you try to do anything interesting, and it's becoming annoying even for trivial stuff - it was annoying but understandable when they started killing API surface for tasker and termux to use, it was annoying but understandable when they almost broke termux outright, but it moved beyond being understandable when they restricted file access so much that a third-party app can't move files between directories without the OS prompting you to allow the "delete".

Elyra 4y ago
> restricted file access so much that a third-party app can't move files between directories without the OS prompting you to allow the "delete" What use case do you have where you have an app that you want to be able to move files but you don't trust it with the "delete" permission?
- yjftsjthsd-h 4y ago
  I do trust it. The OS, however, "helpfully" insists on "protecting" me and prompts every single time with no way to save the permission.
  - Elyra 4y ago
    Which app and Android version is it? I've never had that issue where it prompts me every time without letting me save the permission, although if I recall requesting one time access is different than requesting permanent access for some permissions that an app has to declare, so maybe the app never declared the latter. (I admit, this is sort of silly)
    - yjftsjthsd-h 4y ago
      This is https://f-droid.org/en/packages/com.simplemobiletools.gallery.pro/ https://f-droid.org/en/packages/com.simplemobiletools.galler... on Android 11 (LineageOS 18.1). And yes, it may be a localized bug, but it's a localized bug that wouldn't occur on a nice normal GNU/Linux desktop without all of this, bringing us back to me agreeing with >> One of the problems with the security measures implemented in Android and iOS is that they restrict the user as much, if not more, than they restrict an attacker.
      - Elyra 4y ago
        In order to argue that, you have to list your goals, what you want to do with your phone, and the goals of an attacker. On Android, other than a few minor inconveniences, I can still achieve everything I want to with my phone, where an attacker will have a difficult time achieving their goal, of presumably stealing some data from another app. This is compared to PureOS where you may have free reign, but so would an attacker if you install their app on your device. If you used QubesOS I'd argue that restricts the user a similar amount as Android does, not to mention missing out on a number of mobile friendly apps.
        4y ago