4 ms·
> Unless you can validate the worthiness and authenticity of an update That's the job of traditional Linux distros. > or sandbox it sufficiently That does no
by goodpoint 3y ago
> Unless you can validate the worthiness and authenticity of an update
That's the job of traditional Linux distros.
> or sandbox it sufficiently
That does nothing when it comes to E2EE.
- chromakode 3y ago> That's the job of traditional Linux distros. I share this view, but I also think it's very difficult to verify such validation is happening. I don't think most end users would want a distro stable enough to meet a high review bar. > That does nothing when it comes to E2EE Not all components need access to the keys or user data. Reducing attack surface reduces the amount that needs to be validated.