3 ms·
It's not at all the same. Linux doesn't have SIP, or Gatekeeper, or XProtect, but you know it doesn't have any of those features. The developers know it doesn
by highwaylights 4y ago
It's not at all the same.
Linux doesn't have SIP, or Gatekeeper, or XProtect, but you know it doesn't have any of those features. The developers know it doesn't have any of those features, so the absence of those features are part of the attack surface that the vendor (in this case the Linux OSS community) is aware of in the threat model.
If you have SIP disabled, no-one is trying to solve any problems that this causes for you. Anyone writing malware to target a SIP-disabled system knows Apple isn't trying to patch those issues because having SIP disabled is not a valid system state they're trying to protect. There won't be patches for you, and given that it's closed source, it's not like you can fix it yourself.
- vbezhenar 4y agoSIP does not solve any problems. SIP only breaks some programs, that's the whole reason of its existence. I don't think that running malware on your computer is a good idea. Just don't do it.
- tmoravec 4y ago> I don't think that running malware on your computer is a good idea. Just don't do it. I don't think that having vulnerabilities on your computer is a good idea. Just don't do it. /s > SIP does not solve any problems. Of course it does. We might disagree with the tradeoffs it's making, it might not be worth it at all, it might be a wrong approach from the start. But saying it does not solve any problems is disingenuous at best.
- highwaylights 4y agoI don't think dying from cancer is a good idea. Just don't do it. SIP absolutely solves a specific problem. It prevents rogue software from writing to protected areas. Whether that matters to you is your business, but to suggest no-one else should want to prevent any old homebrew package or DMG installing a keylogger is a bit silly.